$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231392e302f32342d3234203d3e203234343237.roa File: 3230322e3137302e3231392e302f32342d3234203d3e203234343237.roa (raw, json) Hash identifier: 2XKwc+tclrWbdl8kq+8mfw+izHBOIwST00sm/13O4fc= Subject key identifier: 34:A4:2F:63:40:64:77:06:B0:41:26:F5:63:CD:41:A7:B6:BD:A5:59 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 025108060E5205ACE6C84232F873340EED6BAD3E Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231392e302f32342d3234203d3e203234343237.roa Signing time: Mon 20 Apr 2026 13:16:41 +0000 ROA not before: Mon 20 Apr 2026 13:11:41 +0000 ROA not after: Mon 19 Apr 2027 13:16:41 +0000 asID: 24427 IP address blocks: 202.170.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:51:08:06:0e:52:05:ac:e6:c8:42:32:f8:73:34:0e:ed:6b:ad:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Apr 20 13:11:41 2026 GMT Not After : Apr 19 13:16:41 2027 GMT Subject: CN=34A42F6340647706B04126F563CD41A7B6BDA559 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:b0:37:d7:25:a4:84:3e:e7:85:69:1b:2a:92: eb:84:17:a4:00:67:bf:e1:9b:31:3d:f8:c3:85:14: 4f:d1:91:03:6e:30:85:71:a7:6d:e9:1b:5e:73:28: 5f:72:27:14:fe:42:fd:83:09:e1:f0:f2:a6:a7:33: f3:a8:0d:1a:57:55:f1:0b:63:0f:18:15:be:77:cf: b0:f9:54:97:b3:15:19:47:39:51:ff:26:d5:1b:88: 77:53:21:c3:91:46:c9:62:8e:46:c6:2a:e4:4a:bf: 1b:08:01:60:d9:11:f0:0c:9b:14:b3:50:62:da:5c: 52:88:7e:a9:ea:23:fd:d9:0a:50:2d:c9:68:ea:a5: 90:42:55:19:33:65:46:eb:9b:cd:dd:ad:ab:6f:2a: 88:72:fa:a2:4b:9a:1e:03:fb:9e:8e:44:9f:59:28: fe:9a:b1:be:c6:a7:55:3b:f6:a7:75:ea:54:ea:a7: ba:61:b8:27:0b:85:fa:2b:6c:c6:fa:af:fa:9b:7b: 7a:5f:da:6f:ee:f4:5e:d0:a1:ab:5e:a1:7d:23:26: 04:e8:e8:c4:66:b7:9e:85:89:3a:25:9f:9e:45:07: 67:ed:bb:cb:2d:93:3c:ca:1c:ef:9f:a7:85:bf:4d: 5d:bc:9f:b2:43:bf:06:e7:44:e8:69:d8:b6:d6:c6: 05:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:A4:2F:63:40:64:77:06:B0:41:26:F5:63:CD:41:A7:B6:BD:A5:59 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3231392e302f32342d3234203d3e203234343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.170.219.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:1a:c3:44:d8:42:98:b7:c7:36:b8:4f:fd:f8:8e:36:0c:e0: 3e:5d:c9:d2:12:5e:31:62:d8:d5:67:4d:4b:19:0f:33:51:ca: 72:f9:04:3e:76:ac:3a:24:75:37:f4:f0:00:1b:cc:ae:94:a7: 4f:a2:48:d9:16:d0:7e:76:3b:71:41:f0:f9:ca:f7:86:88:12: 32:40:c6:e5:d6:da:03:8e:60:fa:07:3b:14:a1:14:80:3f:85: 88:f3:65:ab:e7:f7:81:35:a0:83:1a:da:bd:94:4b:61:d6:86: 86:51:59:26:df:12:16:b5:69:86:97:8e:a9:31:1e:6e:2a:56: 7a:57:9f:3a:04:c5:ab:f3:83:68:5e:fb:0c:bb:9c:99:90:77: 78:92:d8:29:19:0f:b4:69:69:eb:5f:8d:0a:91:1b:5c:17:3a: c7:7c:a8:43:f5:cd:44:1c:3b:76:18:63:02:1f:0b:cf:05:59: d6:55:d5:c8:eb:b7:f8:0b:00:87:ae:78:03:b6:4e:f0:05:4a: 21:cb:3d:d0:21:91:d0:9b:b6:51:8c:57:9e:7c:89:f4:cf:b4: 4e:f2:d2:fd:ff:28:88:6a:a5:db:48:4f:e7:53:bd:19:0c:e8: a2:16:57:82:67:de:0a:cb:bc:04:1e:d7:76:ac:80:2e:a0:73: 8e:38:c2:9b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUAlEIBg5SBazmyEIy+HM0Du1rrT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjA0MjAxMzExNDFaFw0yNzA0MTkxMzE2NDFaMDMxMTAvBgNV BAMTKDM0QTQyRjYzNDA2NDc3MDZCMDQxMjZGNTYzQ0Q0MUE3QjZCREE1NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDisDfXJaSEPueFaRsqkuuEF6QA Z7/hmzE9+MOFFE/RkQNuMIVxp23pG15zKF9yJxT+Qv2DCeHw8qanM/OoDRpXVfEL Yw8YFb53z7D5VJezFRlHOVH/JtUbiHdTIcORRslijkbGKuRKvxsIAWDZEfAMmxSz UGLaXFKIfqnqI/3ZClAtyWjqpZBCVRkzZUbrm83dratvKohy+qJLmh4D+56ORJ9Z KP6asb7Gp1U79qd16lTqp7phuCcLhforbMb6r/qbe3pf2m/u9F7QoateoX0jJgTo 6MRmt56FiToln55FB2ftu8stkzzKHO+fp4W/TV28n7JDvwbnROhp2LbWxgUbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUNKQvY0BkdwawQSb1Y81Bp7a9pVkwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx MzczMDJlMzIzMTM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDM0MzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqq2zANBgkqhkiG9w0BAQsFAAOCAQEAXRrDRNhCmLfHNrhP/fiO NgzgPl3J0hJeMWLY1WdNSxkPM1HKcvkEPnasOiR1N/TwABvMrpSnT6JI2RbQfnY7 cUHw+cr3hogSMkDG5dbaA45g+gc7FKEUgD+FiPNlq+f3gTWggxravZRLYdaGhlFZ Jt8SFrVphpeOqTEebipWelefOgTFq/ODaF77DLucmZB3eJLYKRkPtGlp61+NCpEb XBc6x3yoQ/XNRBw7dhhjAh8LzwVZ1lXVyOu3+AsAh654A7ZO8AVKIcs90CGR0Ju2 UYxXnnyJ9M+0TvLS/f8oiGql20hP51O9GQzoohZXgmfeCsu8BB7XdqyALqBzjjjC mw== -----END CERTIFICATE-----Generated at Wed May 13 20:20:30 2026 by rpki-client