$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32342e302f32342d3234203d3e203233383438.roa File: 3230322e36392e32342e302f32342d3234203d3e203233383438.roa (raw, json) Hash identifier: 0WYlvA93Oe3Aknx4s4Fw8QGr8omugHetW9kZalkaOdQ= Subject key identifier: 40:21:3D:87:C6:07:66:A8:72:89:D9:17:4A:F1:FA:5C:D8:6A:42:15 Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D Certificate serial: 485064281AF89754E0EDDCDCD81FA117A78C0574 Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32342e302f32342d3234203d3e203233383438.roa Signing time: Thu 16 Apr 2026 09:07:32 +0000 ROA not before: Thu 16 Apr 2026 09:02:32 +0000 ROA not after: Thu 15 Apr 2027 09:07:32 +0000 asID: 23848 IP address blocks: 202.69.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:50:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:50:64:28:1a:f8:97:54:e0:ed:dc:dc:d8:1f:a1:17:a7:8c:05:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D Validity Not Before: Apr 16 09:02:32 2026 GMT Not After : Apr 15 09:07:32 2027 GMT Subject: CN=40213D87C60766A87289D9174AF1FA5CD86A4215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0e:43:b1:7a:e9:03:30:8e:89:bd:88:c1:41: 4b:14:cd:39:b9:65:5e:fe:0c:8b:73:96:e5:73:20: f0:cd:26:ae:67:39:f8:0a:7e:d2:e6:cf:b0:ff:d1: c2:97:76:73:5c:50:db:bc:62:51:23:d9:1a:07:97: ab:f6:be:2c:ea:90:4a:23:1c:e7:e8:d7:ae:a8:54: 45:bd:98:74:4f:70:59:a4:04:38:7a:90:bb:f2:95: 28:b7:5f:a4:f9:29:c4:8e:8e:26:22:1d:4d:25:e6: ad:7e:5e:8e:57:3c:fa:83:41:41:cb:b8:7a:d4:48: ae:81:8d:c0:64:77:a4:9b:80:76:45:aa:7a:a2:8d: 37:00:32:b6:16:40:61:29:b2:f7:eb:40:b0:69:e7: 9e:14:f7:4f:aa:45:a8:b9:87:25:d4:a2:92:89:0f: 71:0b:76:72:ed:1f:85:39:c9:5d:c5:78:84:83:c2: 4f:94:3d:f2:6c:30:a4:0d:58:c8:04:f0:3c:34:45: 70:40:f4:4a:02:a2:39:19:89:68:3a:ed:fa:90:e2: 7d:2b:0e:62:a2:10:00:3e:a6:1b:7e:5b:24:f1:ae: 10:56:5d:fa:d0:f6:14:90:a1:c1:af:60:ea:c2:95: c5:61:20:9c:f5:1a:c6:26:2d:ae:53:d4:64:42:3f: 53:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:21:3D:87:C6:07:66:A8:72:89:D9:17:4A:F1:FA:5C:D8:6A:42:15 X509v3 Authority Key Identifier: keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/3230322e36392e32342e302f32342d3234203d3e203233383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.69.24.0/24 Signature Algorithm: sha256WithRSAEncryption 86:43:04:96:de:76:0c:0f:b3:30:b4:c1:45:61:c2:f9:ff:7f: 84:8e:90:fb:45:eb:70:e8:27:67:67:57:04:91:ce:8c:61:e4: 23:8e:a3:3d:92:ff:b1:09:af:31:ca:01:0a:de:e3:a8:5b:6e: 70:fd:4e:92:ff:da:57:69:d9:5f:f1:1e:ca:6b:77:73:bf:1f: 8a:40:7d:08:9e:65:cd:27:19:99:18:04:e8:dd:23:c0:57:9e: c3:ad:b8:7e:c6:1b:e0:cf:ac:07:27:ad:7f:f8:31:5a:70:cc: 15:88:94:07:f3:16:11:46:b5:7a:e5:07:82:cc:06:6d:4b:18: 2f:e8:13:fa:ab:d2:07:3b:1b:90:9a:b4:1d:28:ce:80:d0:42: ac:a7:b6:d2:15:b5:94:c4:78:94:3e:51:b3:9b:6d:70:9e:96: 80:51:96:c2:67:d3:50:af:a6:4a:66:b3:33:1f:f4:40:65:32: 46:29:45:af:e3:4e:57:36:d6:0e:05:9a:0a:28:db:b6:53:d5: 23:b2:5a:b4:e1:9b:27:0e:1c:2a:de:b7:19:31:30:3f:85:ea: 85:dc:d1:fe:0e:c4:b9:08:47:50:9c:c1:69:d3:af:c3:c8:4d: 48:6e:1b:56:d8:a1:b0:8e:da:81:cf:77:f3:b3:00:df:56:54: 2f:a1:b9:97 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSFBkKBr4l1Tg7dzc2B+hF6eMBXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw RTI3MDQyRDAeFw0yNjA0MTYwOTAyMzJaFw0yNzA0MTUwOTA3MzJaMDMxMTAvBgNV BAMTKDQwMjEzRDg3QzYwNzY2QTg3Mjg5RDkxNzRBRjFGQTVDRDg2QTQyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwDkOxeukDMI6JvYjBQUsUzTm5 ZV7+DItzluVzIPDNJq5nOfgKftLmz7D/0cKXdnNcUNu8YlEj2RoHl6v2vizqkEoj HOfo166oVEW9mHRPcFmkBDh6kLvylSi3X6T5KcSOjiYiHU0l5q1+Xo5XPPqDQUHL uHrUSK6BjcBkd6SbgHZFqnqijTcAMrYWQGEpsvfrQLBp554U90+qRai5hyXUopKJ D3ELdnLtH4U5yV3FeISDwk+UPfJsMKQNWMgE8Dw0RXBA9EoCojkZiWg67fqQ4n0r DmKiEAA+pht+WyTxrhBWXfrQ9hSQocGvYOrClcVhIJz1GsYmLa5T1GRCP1NvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUQCE9h8YHZqhyidkXSvH6XNhqQhUwHwYDVR0j BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDgzNTMyMzU1ODI5NzYzLzAvMzIzMDMyMmUzNjM5 MmUzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMpFGDANBgkqhkiG9w0BAQsFAAOCAQEAhkMElt52DA+zMLTBRWHC+f9/hI6Q +0XrcOgnZ2dXBJHOjGHkI46jPZL/sQmvMcoBCt7jqFtucP1Okv/aV2nZX/Eeymt3 c78fikB9CJ5lzScZmRgE6N0jwFeew624fsYb4M+sByetf/gxWnDMFYiUB/MWEUa1 euUHgswGbUsYL+gT+qvSBzsbkJq0HSjOgNBCrKe20hW1lMR4lD5Rs5ttcJ6WgFGW wmfTUK+mSmazMx/0QGUyRilFr+NOVzbWDgWaCijbtlPVI7JatOGbJw4cKt63GTEw P4XqhdzR/g7EuQhHUJzBadOvw8hNSG4bVtihsI7agc9387MA31ZUL6G5lw== -----END CERTIFICATE-----Generated at Fri Apr 17 23:26:03 2026 by rpki-client