$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31362e302f32342d3234203d3e203233373731.roa File: 3230322e3135302e31362e302f32342d3234203d3e203233373731.roa (raw, json) Hash identifier: 4nSDIdrKoirhy4/lofcC8XojyhLo+RKbXmB8JjLmvg8= Subject key identifier: E4:A8:AE:7A:C8:1D:8B:98:EE:86:86:65:B5:15:D4:BF:F7:B2:C3:8C Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 6FE055E5BD4471A768C748C4C65F8C42767E13D1 Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31362e302f32342d3234203d3e203233373731.roa Signing time: Mon 20 Apr 2026 02:22:46 +0000 ROA not before: Mon 20 Apr 2026 02:17:46 +0000 ROA not after: Mon 19 Apr 2027 02:22:46 +0000 asID: 23771 IP address blocks: 202.150.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e0:55:e5:bd:44:71:a7:68:c7:48:c4:c6:5f:8c:42:76:7e:13:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Apr 20 02:17:46 2026 GMT Not After : Apr 19 02:22:46 2027 GMT Subject: CN=E4A8AE7AC81D8B98EE868665B515D4BFF7B2C38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:91:ca:d1:ca:b4:ab:e7:b3:a3:90:c1:d6: c4:a1:7c:17:3b:4c:1d:25:65:c1:fd:f5:6e:10:54: c2:38:85:7d:a5:c5:a2:e7:c8:ac:73:dc:6d:94:b8: 67:69:40:a3:9f:fc:a8:b0:cb:63:ca:df:a8:00:10: d7:46:af:db:ef:ca:de:83:1a:ea:c3:a5:df:a2:d7: 84:a0:07:2a:36:02:b9:31:7e:53:a1:eb:da:59:bd: 69:59:97:97:f7:1d:7b:8a:de:bc:43:be:9f:a1:0a: c3:27:2a:76:19:79:8f:7d:5d:36:79:1e:37:e2:d0: 44:9e:80:c4:91:13:88:eb:02:84:9a:06:9a:96:63: 2d:2f:f8:97:b1:18:d3:ba:df:b7:33:ac:2a:b2:60: ef:d9:60:b7:2d:7e:f0:7f:11:05:96:fd:ec:2e:4c: 81:5b:a4:29:e4:b6:09:27:76:5c:ff:57:54:9e:87: f8:92:6f:d7:10:59:87:5e:1f:cd:2e:f9:41:1c:57: e3:c1:f6:8d:ad:96:c5:9d:1d:ce:89:9f:38:6c:30: b7:1c:96:85:fa:36:1e:03:9a:9e:d9:58:4e:90:ed: b6:a8:65:7c:dc:4d:f3:b5:62:5d:61:33:90:c1:fe: 0d:87:00:69:c3:f7:cd:28:33:cc:04:47:ac:7b:63: f5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:A8:AE:7A:C8:1D:8B:98:EE:86:86:65:B5:15:D4:BF:F7:B2:C3:8C X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31362e302f32342d3234203d3e203233373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.150.16.0/24 Signature Algorithm: sha256WithRSAEncryption 48:b3:8a:c6:50:0a:cc:b3:f3:33:10:66:6d:c1:73:51:ed:c4: 75:87:49:ca:ec:a9:31:4b:36:29:f8:af:db:d0:83:2e:72:6f: 55:ab:0d:b9:2f:7d:00:ea:42:c4:36:a0:e0:aa:20:79:72:7a: 3a:a1:22:86:a7:5f:94:46:45:84:ff:ea:b4:28:1a:01:46:5e: 97:03:8c:c2:25:be:47:f6:82:86:2b:fb:c8:bf:33:91:82:9e: 82:8d:fc:ba:fa:55:3a:3a:a6:96:67:27:89:f2:df:59:17:2e: 04:f7:02:4f:9b:d0:22:19:50:88:b2:5c:2f:0c:69:ad:17:1f: 56:82:12:7a:ac:50:43:4f:e5:b9:7b:70:77:00:9d:e2:0f:cd: 69:33:17:24:3e:6e:34:b5:e2:5c:ad:f4:e5:70:4f:9c:3d:3e: cc:eb:b1:5d:6a:c9:ef:ba:a7:da:81:85:30:18:9b:aa:6e:cf: 77:c7:66:39:19:0e:9d:9a:1c:11:c2:51:8a:a2:3b:bb:79:f1: fe:d0:5f:d0:8f:12:39:2d:aa:6a:3e:e2:ec:62:f1:cf:30:49: 74:90:b7:21:53:ed:8c:5c:17:3e:a7:31:aa:0c:fa:93:0d:9a: 79:f7:07:b0:cd:88:93:8c:c6:3e:71:4f:c2:63:eb:22:fa:d2: 36:b1:2d:e7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUb+BV5b1Ecadox0jExl+MQnZ+E9EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjA0MjAwMjE3NDZaFw0yNzA0MTkwMjIyNDZaMDMxMTAvBgNV BAMTKEU0QThBRTdBQzgxRDhCOThFRTg2ODY2NUI1MTVENEJGRjdCMkMzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDf5HK0cq0q+ezo5DB1sShfBc7 TB0lZcH99W4QVMI4hX2lxaLnyKxz3G2UuGdpQKOf/Kiwy2PK36gAENdGr9vvyt6D GurDpd+i14SgByo2ArkxflOh69pZvWlZl5f3HXuK3rxDvp+hCsMnKnYZeY99XTZ5 Hjfi0ESegMSRE4jrAoSaBpqWYy0v+JexGNO637czrCqyYO/ZYLctfvB/EQWW/ewu TIFbpCnktgkndlz/V1Seh/iSb9cQWYdeH80u+UEcV+PB9o2tlsWdHc6JnzhsMLcc loX6Nh4Dmp7ZWE6Q7baoZXzcTfO1Yl1hM5DB/g2HAGnD980oM8wER6x7Y/UBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU5Kiuesgdi5juhoZltRXUv/eyw4wwHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjA0ODM4Ni8wLzMyMzAzMjJlMzEz NTMwMmUzMTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzczMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMqWEDANBgkqhkiG9w0BAQsFAAOCAQEASLOKxlAKzLPzMxBmbcFzUe3E dYdJyuypMUs2Kfiv29CDLnJvVasNuS99AOpCxDag4KogeXJ6OqEihqdflEZFhP/q tCgaAUZelwOMwiW+R/aChiv7yL8zkYKego38uvpVOjqmlmcnifLfWRcuBPcCT5vQ IhlQiLJcLwxprRcfVoISeqxQQ0/luXtwdwCd4g/NaTMXJD5uNLXiXK305XBPnD0+ zOuxXWrJ77qn2oGFMBibqm7Pd8dmORkOnZocEcJRiqI7u3nx/tBf0I8SOS2qaj7i 7GLxzzBJdJC3IVPtjFwXPqcxqgz6kw2aefcHsM2Ik4zGPnFPwmPrIvrSNrEt5w== -----END CERTIFICATE-----Generated at Wed May 13 19:53:44 2026 by rpki-client