$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31372e302f32342d3234203d3e203233373731.roa File: 3230322e3135302e31372e302f32342d3234203d3e203233373731.roa (raw, json) Hash identifier: 57U/AvSIL5L4DGLo2mYNp31Z2gNo8RToLZ7Vv1j0H7M= Subject key identifier: 70:D3:37:C1:18:DA:78:56:A3:05:46:26:EB:37:69:8E:38:6A:51:56 Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Certificate serial: 248A54921B9A226CEFE4AC552DF59E5965E3A55E Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31372e302f32342d3234203d3e203233373731.roa Signing time: Mon 20 Apr 2026 02:22:58 +0000 ROA not before: Mon 20 Apr 2026 02:17:58 +0000 ROA not after: Mon 19 Apr 2027 02:22:58 +0000 asID: 23771 IP address blocks: 202.150.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8a:54:92:1b:9a:22:6c:ef:e4:ac:55:2d:f5:9e:59:65:e3:a5:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C Validity Not Before: Apr 20 02:17:58 2026 GMT Not After : Apr 19 02:22:58 2027 GMT Subject: CN=70D337C118DA7856A3054626EB37698E386A5156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:de:39:60:7a:bb:61:01:46:4e:a5:90:7a:cb: 18:a1:b0:c7:31:71:95:ac:a5:58:09:6f:94:59:83: 99:7d:09:46:43:02:44:8c:1f:c4:61:2c:d6:a7:50: ba:f2:ab:3a:84:16:4e:3b:5b:ed:da:88:3e:de:04: 8e:4a:ed:ef:b6:5e:4a:2b:b5:76:c1:69:b7:74:81: ca:11:82:ec:f2:4b:09:39:63:99:b8:90:86:75:fd: 0b:f9:9e:3f:70:9e:3d:f9:de:19:45:4b:32:7a:c8: 94:a9:42:f6:ac:42:d4:24:65:cb:40:c9:82:1c:7b: 32:e5:c4:3d:41:83:3f:bf:4d:c1:22:ad:5f:24:a7: 75:be:c8:ca:e1:13:d0:2f:6f:02:8f:17:5d:36:a7: ae:92:e8:26:1b:d3:7b:45:a8:68:7f:af:56:26:6c: 98:ed:cc:63:08:34:f8:1b:9f:89:29:a0:b5:dc:6e: 6b:06:a8:f1:35:93:15:81:da:b3:97:3c:7e:9b:b4: dd:0c:15:cf:23:3f:05:3b:44:1c:ea:7c:85:12:19: 45:71:fc:15:c4:69:62:f2:5b:b1:0d:b2:9d:d6:7f: dc:5b:6d:33:a6:e6:2c:f8:73:ba:d7:9d:53:d0:c4: d0:30:e9:4e:8f:a3:54:a8:63:58:eb:37:df:97:74: b3:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D3:37:C1:18:DA:78:56:A3:05:46:26:EB:37:69:8E:38:6A:51:56 X509v3 Authority Key Identifier: keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31372e302f32342d3234203d3e203233373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.150.17.0/24 Signature Algorithm: sha256WithRSAEncryption 89:c5:16:3d:ca:dc:2f:fb:d3:f8:07:84:5a:bd:0f:3a:71:c9: e4:6e:78:a0:2f:ee:1b:f4:38:f8:ad:5f:a9:60:fc:bf:ed:58: da:f9:7d:05:e1:99:de:5f:b8:ef:4d:b9:f5:d6:b2:d7:fb:32: 10:e7:d8:56:02:9a:93:2f:2d:68:d5:1f:ef:42:50:45:ea:4c: 8c:d8:bb:60:5e:1b:be:7d:83:85:ad:6f:ae:2c:a8:63:9c:2a: dd:60:70:ef:1d:c7:27:4d:85:94:d6:af:73:94:c5:de:5c:32: 02:71:d6:dd:7d:bd:86:27:51:b5:d5:e4:a2:8b:7d:8a:00:c8: e0:44:01:d2:e4:cd:74:3d:43:fb:e5:36:95:84:50:88:da:7f: 9f:93:71:82:ff:49:4c:ab:9b:d7:03:ad:75:1b:db:e5:eb:65: 61:21:99:f3:f2:f2:6e:67:13:ba:6a:e9:33:cf:a5:57:b5:a3: 0f:4f:95:e6:77:a8:a7:47:45:7b:f7:50:7d:50:5b:77:c6:2f: cc:d9:dd:4e:89:75:f2:0e:bd:71:cd:58:9f:1f:67:69:8b:b5: 7a:57:01:00:15:c6:45:83:8f:55:d2:14:e8:d2:48:55:76:3a: 98:7f:a7:ac:95:ad:68:1c:df:bb:5c:f5:fa:99:87:5d:df:20: ee:14:7a:c0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJIpUkhuaImzv5KxVLfWeWWXjpV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5 QjFGNUIyQzAeFw0yNjA0MjAwMjE3NThaFw0yNzA0MTkwMjIyNThaMDMxMTAvBgNV BAMTKDcwRDMzN0MxMThEQTc4NTZBMzA1NDYyNkVCMzc2OThFMzg2QTUxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx3jlgerthAUZOpZB6yxihsMcx cZWspVgJb5RZg5l9CUZDAkSMH8RhLNanULryqzqEFk47W+3aiD7eBI5K7e+2Xkor tXbBabd0gcoRguzySwk5Y5m4kIZ1/Qv5nj9wnj353hlFSzJ6yJSpQvasQtQkZctA yYIcezLlxD1Bgz+/TcEirV8kp3W+yMrhE9AvbwKPF102p66S6CYb03tFqGh/r1Ym bJjtzGMINPgbn4kpoLXcbmsGqPE1kxWB2rOXPH6btN0MFc8jPwU7RBzqfIUSGUVx /BXEaWLyW7ENsp3Wf9xbbTOm5iz4c7rXnVPQxNAw6U6Po1SoY1jrN9+XdLN3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUcNM3wRjaeFajBUYm6zdpjjhqUVYwHwYDVR0j BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4 QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjA0ODM4Ni8wLzMyMzAzMjJlMzEz NTMwMmUzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzczMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMqWETANBgkqhkiG9w0BAQsFAAOCAQEAicUWPcrcL/vT+AeEWr0POnHJ 5G54oC/uG/Q4+K1fqWD8v+1Y2vl9BeGZ3l+470259day1/syEOfYVgKaky8taNUf 70JQRepMjNi7YF4bvn2Dha1vriyoY5wq3WBw7x3HJ02FlNavc5TF3lwyAnHW3X29 hidRtdXkoot9igDI4EQB0uTNdD1D++U2lYRQiNp/n5Nxgv9JTKub1wOtdRvb5etl YSGZ8/LybmcTumrpM8+lV7WjD0+V5neop0dFe/dQfVBbd8YvzNndTol18g69cc1Y nx9naYu1elcBABXGRYOPVdIU6NJIVXY6mH+nrJWtaBzfu1z1+pmHXd8g7hR6wA== -----END CERTIFICATE-----Generated at Wed May 13 19:53:45 2026 by rpki-client