$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3131302e3137322e3233322e302f32312d3231203d3e2030.roa File: 3131302e3137322e3233322e302f32312d3231203d3e2030.roa (raw, json) Hash identifier: u5IzgjxOsryVW3JdG8EHZIdGmTAxBJCkGwpoKpCvuaw= Subject key identifier: 8F:17:3B:21:0F:96:C0:8D:D6:81:F2:CF:07:51:67:EF:EE:45:18:F0 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 3A0B797EC339AC188D1597A4DA07D7D8DCED13FF Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3131302e3137322e3233322e302f32312d3231203d3e2030.roa Signing time: Thu 16 Apr 2026 05:55:33 +0000 ROA not before: Thu 16 Apr 2026 05:50:33 +0000 ROA not after: Thu 15 Apr 2027 05:55:33 +0000 asID: 0 IP address blocks: 110.172.232.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 07:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:0b:79:7e:c3:39:ac:18:8d:15:97:a4:da:07:d7:d8:dc:ed:13:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Apr 16 05:50:33 2026 GMT Not After : Apr 15 05:55:33 2027 GMT Subject: CN=8F173B210F96C08DD681F2CF075167EFEE4518F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:cd:b6:ca:71:91:70:38:34:24:e5:6f:db:80: d2:8d:73:0e:44:1d:f8:c1:a9:4e:b1:c8:60:b1:8d: e3:3e:a6:f1:9a:86:cc:8e:9f:a3:b1:a9:92:77:1e: e7:23:f8:fd:0f:dd:af:c7:de:04:42:8a:06:3a:3a: dd:5e:34:df:92:88:3c:0a:a2:be:05:08:ff:b9:fb: cf:d3:ce:5d:3a:05:31:db:f6:81:17:47:94:77:18: 5e:fd:b8:f4:12:d2:db:72:2c:25:d0:10:1c:c3:5d: 98:9c:2e:9f:ad:5b:c9:5a:d1:b6:6b:52:e2:7a:af: 98:27:ae:ac:cc:f2:37:d6:05:1b:c7:c0:23:42:2a: 0b:f0:eb:e1:a7:49:a1:36:8b:7a:b3:79:9c:15:bd: 0c:ff:cb:a3:95:c5:d1:dd:7d:bb:d7:1d:e4:de:2e: 76:6d:18:c6:cf:92:64:b6:51:9b:e3:5a:14:fb:f3: da:d0:a4:b5:63:f9:7b:46:56:dd:96:5c:3c:d3:8c: 95:4b:73:36:27:79:27:24:67:66:a6:5a:63:be:89: 4f:9e:de:c2:c1:d6:a0:59:ac:6b:7e:81:0f:80:db: f5:8b:e7:36:64:41:ba:44:ab:15:32:e6:64:0e:c6: d7:16:82:8d:7e:d9:4e:f6:39:22:19:b5:5e:0b:20: 60:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:17:3B:21:0F:96:C0:8D:D6:81:F2:CF:07:51:67:EF:EE:45:18:F0 X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/3131302e3137322e3233322e302f32312d3231203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 110.172.232.0/21 Signature Algorithm: sha256WithRSAEncryption 21:73:5e:ca:b8:8d:04:65:47:88:b1:ae:88:73:71:57:ee:19: 84:a2:f9:9f:4d:7c:e9:0f:fc:22:f1:b6:70:0b:04:69:6d:b9: 70:2b:86:b0:9a:84:eb:56:e3:64:56:37:2a:fc:65:16:16:cd: 1f:71:78:8f:62:f6:60:c0:35:68:a4:f3:f4:9e:cc:48:ec:d2: 49:ce:53:e1:74:18:64:7b:e3:fc:18:cc:0e:27:33:c6:1d:ac: 9c:b0:d6:74:57:a6:38:30:2a:be:be:27:33:80:b0:c1:c9:41: 2b:5e:4e:6a:1b:ff:6d:64:33:da:62:08:36:b2:85:1c:82:8e: 6f:6d:28:04:61:06:f9:9d:70:c6:8f:4f:c3:f5:72:e1:1f:85: 27:e5:bd:49:4a:d8:27:2c:64:0f:ee:bb:07:92:e3:bb:e3:79: 28:38:7a:bc:64:61:30:f8:60:f9:09:ca:74:71:95:a2:53:b6: 0b:61:b5:73:5d:1c:57:b2:8a:39:32:41:f0:f5:80:6a:57:2f: 0c:fa:68:cf:b3:62:c0:1a:7a:61:36:a4:d8:19:92:4b:57:8a: de:91:c9:cf:2f:29:d0:e4:0e:57:79:79:c7:3c:0c:95:0f:d2: 33:5d:c9:c3:62:a9:6a:94:c8:a0:64:56:cd:e3:d0:2f:2c:88: 3b:a6:04:e3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUOgt5fsM5rBiNFZek2gfX2NztE/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA0MTYwNTUwMzNaFw0yNzA0MTUwNTU1MzNaMDMxMTAvBgNV BAMTKDhGMTczQjIxMEY5NkMwOERENjgxRjJDRjA3NTE2N0VGRUU0NTE4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4zbbKcZFwODQk5W/bgNKNcw5E HfjBqU6xyGCxjeM+pvGahsyOn6OxqZJ3Hucj+P0P3a/H3gRCigY6Ot1eNN+SiDwK or4FCP+5+8/Tzl06BTHb9oEXR5R3GF79uPQS0ttyLCXQEBzDXZicLp+tW8la0bZr UuJ6r5gnrqzM8jfWBRvHwCNCKgvw6+GnSaE2i3qzeZwVvQz/y6OVxdHdfbvXHeTe LnZtGMbPkmS2UZvjWhT789rQpLVj+XtGVt2WXDzTjJVLczYneSckZ2amWmO+iU+e 3sLB1qBZrGt+gQ+A2/WL5zZkQbpEqxUy5mQOxtcWgo1+2U72OSIZtV4LIGD5AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUjxc7IQ+WwI3WgfLPB1Fn7+5FGPAwHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDM2MTI0MDM3MDU0NDY2LzAvMzEzMTMwMmUzMTM3 MzIyZTMyMzMzMjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD bqzoMA0GCSqGSIb3DQEBCwUAA4IBAQAhc17KuI0EZUeIsa6Ic3FX7hmEovmfTXzp D/wi8bZwCwRpbblwK4awmoTrVuNkVjcq/GUWFs0fcXiPYvZgwDVopPP0nsxI7NJJ zlPhdBhke+P8GMwOJzPGHaycsNZ0V6Y4MCq+viczgLDByUErXk5qG/9tZDPaYgg2 soUcgo5vbSgEYQb5nXDGj0/D9XLhH4Un5b1JStgnLGQP7rsHkuO743koOHq8ZGEw +GD5Ccp0cZWiU7YLYbVzXRxXsoo5MkHw9YBqVy8M+mjPs2LAGnphNqTYGZJLV4re kcnPLynQ5A5XeXnHPAyVD9IzXcnDYqlqlMigZFbN49AvLIg7pgTj -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:08 2026 by rpki-client