$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa File: 3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa (raw, json) Hash identifier: 1kfkm2sdUAQgga34hsBItgn0pFjwybcFlz8POZ49zRc= Subject key identifier: 7B:41:1A:2D:1A:3A:AE:E9:F2:46:3F:F1:7C:24:F9:29:95:D3:7E:7C Certificate issuer: /CN=0491F42A3990BD60D32248583741F141AC61F0EE Certificate serial: 1476296D7FFAD544455B8D52D77BCD76393331D4 Authority key identifier: 04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa Signing time: Thu 16 Apr 2026 02:26:40 +0000 ROA not before: Thu 16 Apr 2026 02:21:40 +0000 ROA not after: Thu 15 Apr 2027 02:26:40 +0000 asID: 9809 IP address blocks: 219.235.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:76:29:6d:7f:fa:d5:44:45:5b:8d:52:d7:7b:cd:76:39:33:31:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0491F42A3990BD60D32248583741F141AC61F0EE Validity Not Before: Apr 16 02:21:40 2026 GMT Not After : Apr 15 02:26:40 2027 GMT Subject: CN=7B411A2D1A3AAEE9F2463FF17C24F92995D37E7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:28:84:a8:65:16:d9:32:1d:b8:91:ae:67:fb: 63:23:6a:bd:41:42:c8:d6:6d:ab:ef:3e:6b:10:63: 5e:43:d3:16:27:3c:ae:35:5a:40:14:4c:fb:57:44: 0e:78:32:26:b1:0b:06:bd:18:59:82:f9:70:5d:5c: 68:e0:01:9c:de:a4:81:79:30:59:4c:34:f8:00:0f: ac:ec:be:27:23:78:b1:24:c0:31:89:13:c4:cc:f6: 5c:1d:ba:ac:44:4c:9b:6e:9a:87:0a:5e:cf:9b:d4: 01:b9:55:6d:c9:76:3d:5d:f6:3b:63:c3:1c:cf:91: 95:b4:be:07:e2:c0:aa:b8:36:16:12:d0:ce:eb:0e: 8a:03:92:68:ed:0e:3d:ae:c7:66:25:27:da:c7:b7: ed:27:41:07:c9:80:47:de:84:18:82:5f:b2:7f:94: 79:7f:72:9b:f7:6f:a1:f6:72:8c:65:fc:34:47:d4: 80:ee:de:c9:4a:65:69:8c:a2:2e:74:0d:90:02:cd: 24:a5:41:e6:5d:53:37:98:4b:91:77:97:2b:c6:5a: cb:17:d0:cb:fa:cf:f0:ac:ef:c4:ff:f7:85:27:d8: 1f:d0:88:d2:47:c3:2f:ff:22:8b:ea:26:ec:59:dd: 4f:85:16:60:6a:ef:c6:d1:f2:e3:c1:1d:bb:93:cd: 7e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:41:1A:2D:1A:3A:AE:E9:F2:46:3F:F1:7C:24:F9:29:95:D3:7E:7C X509v3 Authority Key Identifier: keyid:04:91:F4:2A:39:90:BD:60:D3:22:48:58:37:41:F1:41:AC:61:F0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/0491F42A3990BD60D32248583741F141AC61F0EE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0491F42A3990BD60D32248583741F141AC61F0EE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096979629178093570/0/3231392e3233352e3232342e302f31392d3234203d3e2039383039.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.235.224.0/19 Signature Algorithm: sha256WithRSAEncryption 9b:02:a4:c9:29:97:18:be:dc:be:0f:57:11:18:e3:ab:6b:49: 48:0b:5d:19:51:c0:1f:a8:d5:f3:87:7e:a3:31:95:41:4d:6e: 94:4b:27:fe:11:de:3d:55:b7:b5:1f:c8:5a:f4:7c:6b:3f:b7: 91:7c:b8:c0:b0:0e:fd:56:8e:91:9f:79:36:52:5d:68:10:0d: f6:34:24:7e:dd:85:3c:24:2b:8a:62:53:bd:56:fe:77:39:6d: d9:2d:d0:25:70:29:e8:5f:2b:c1:4b:94:9e:13:e9:fc:86:cb: c1:bd:eb:03:25:0b:41:cf:c8:6d:3e:7f:ad:1c:4f:e6:09:c8: f5:32:17:35:c9:cc:1b:7a:de:43:a9:b0:fc:2b:31:7a:97:d4: 92:2e:ae:4b:91:5d:94:b1:69:61:34:61:a2:d2:23:83:8b:fe: 92:68:ce:4b:de:d8:14:22:cd:6e:40:43:bc:53:67:4d:d1:3f: 68:b0:6c:f7:e5:8e:0e:20:08:89:ed:40:cb:54:01:e7:89:eb: 99:6e:d7:30:ff:12:23:4d:9a:dc:83:f4:df:74:33:49:e0:89: c7:9a:84:a9:3c:ec:aa:fd:9d:7a:1a:9c:5e:ea:e5:b8:a7:46: 28:f8:73:34:3f:07:7c:f0:d1:3d:79:da:be:2e:64:b0:b9:eb: 23:36:33:4c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFHYpbX/61URFW41S13vNdjkzMdQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFB QzYxRjBFRTAeFw0yNjA0MTYwMjIxNDBaFw0yNzA0MTUwMjI2NDBaMDMxMTAvBgNV BAMTKDdCNDExQTJEMUEzQUFFRTlGMjQ2M0ZGMTdDMjRGOTI5OTVEMzdFN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjKISoZRbZMh24ka5n+2Mjar1B QsjWbavvPmsQY15D0xYnPK41WkAUTPtXRA54MiaxCwa9GFmC+XBdXGjgAZzepIF5 MFlMNPgAD6zsvicjeLEkwDGJE8TM9lwduqxETJtumocKXs+b1AG5VW3Jdj1d9jtj wxzPkZW0vgfiwKq4NhYS0M7rDooDkmjtDj2ux2YlJ9rHt+0nQQfJgEfehBiCX7J/ lHl/cpv3b6H2coxl/DRH1IDu3slKZWmMoi50DZACzSSlQeZdUzeYS5F3lyvGWssX 0Mv6z/Cs78T/94Un2B/QiNJHwy//IovqJuxZ3U+FFmBq78bR8uPBHbuTzX4PAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUe0EaLRo6runyRj/xfCT5KZXTfnwwHwYDVR0j BBgwFoAUBJH0KjmQvWDTIkhYN0HxQaxh8O4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk3OTYyOTE3ODA5MzU3MC8wLzA0OTFGNDJBMzk5MEJENjBEMzIyNDg1ODM3NDFG MTQxQUM2MUYwRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDQ5MUY0MkEzOTkwQkQ2MEQzMjI0ODU4Mzc0MUYxNDFBQzYxRjBFRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5Njk3OTYyOTE3ODA5MzU3MC8wLzMyMzEzOTJlMzIz MzM1MmUzMjMyMzQyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzOTM4MzAzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBdvr4DANBgkqhkiG9w0BAQsFAAOCAQEAmwKkySmXGL7cvg9XERjjq2tJ SAtdGVHAH6jV84d+ozGVQU1ulEsn/hHePVW3tR/IWvR8az+3kXy4wLAO/VaOkZ95 NlJdaBAN9jQkft2FPCQrimJTvVb+dzlt2S3QJXAp6F8rwUuUnhPp/IbLwb3rAyUL Qc/IbT5/rRxP5gnI9TIXNcnMG3reQ6mw/CsxepfUki6uS5FdlLFpYTRhotIjg4v+ kmjOS97YFCLNbkBDvFNnTdE/aLBs9+WODiAIie1Ay1QB54nrmW7XMP8SI02a3IP0 33QzSeCJx5qEqTzsqv2dehqcXurluKdGKPhzND8HfPDRPXnavi5ksLnrIzYzTA== -----END CERTIFICATE-----Generated at Sat Apr 18 05:29:13 2026 by rpki-client