$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232302e302f32342d3234203d3e203234343237.roa File: 3230322e3137302e3232302e302f32342d3234203d3e203234343237.roa (raw, json) Hash identifier: HId4vrNLiK+ND0zQR5D2ItU9HGeVy1wXldT93pOdLOc= Subject key identifier: 71:8B:A3:13:AC:4C:FA:94:6E:50:9B:4A:50:88:90:45:0E:28:A1:CA Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 7F2F4FF1F2EC427007046712C009435861E9BBE3 Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232302e302f32342d3234203d3e203234343237.roa Signing time: Mon 20 Apr 2026 13:16:41 +0000 ROA not before: Mon 20 Apr 2026 13:11:41 +0000 ROA not after: Mon 19 Apr 2027 13:16:41 +0000 asID: 24427 IP address blocks: 202.170.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:2f:4f:f1:f2:ec:42:70:07:04:67:12:c0:09:43:58:61:e9:bb:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Apr 20 13:11:41 2026 GMT Not After : Apr 19 13:16:41 2027 GMT Subject: CN=718BA313AC4CFA946E509B4A508890450E28A1CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:26:c3:da:18:4d:14:0e:86:a9:4c:e4:9a:60: 5f:c2:f8:cc:a8:84:b3:1d:a2:50:0e:87:da:7e:ff: 2a:e6:5f:ee:a0:10:3c:1e:fe:56:a0:97:86:da:a2: c4:ef:4f:37:d2:5f:dc:88:58:5b:c1:4f:23:6d:17: 4f:67:b3:61:8f:12:e9:03:a8:6f:9e:46:e2:04:27: 14:1e:09:ac:b2:5f:1a:cb:1f:d8:69:c5:91:db:4e: e4:66:39:dc:9f:55:f8:a7:3b:13:5d:4e:12:5c:b8: aa:2a:5c:5a:7a:77:44:6d:71:16:a2:e0:e1:39:b2: 45:a3:3e:08:91:aa:b4:3a:a1:53:fc:f0:49:f8:40: 07:52:76:98:f8:03:f2:a2:c6:be:5c:d1:64:ba:0f: db:93:66:44:7d:b9:f8:73:7b:fc:66:d3:10:53:22: 05:79:c5:76:2e:da:73:d5:60:ff:3f:76:cd:91:b4: a4:0a:69:6b:8b:5b:4e:fe:2a:3a:a0:c3:b5:92:75: ff:50:fe:6d:c3:42:51:34:98:d6:fd:d7:76:6d:01: 60:ea:5e:62:e1:ae:bb:c8:79:27:eb:3e:62:65:92: e9:59:d9:0c:ac:d5:55:74:f9:ae:37:a0:47:6f:e1: c9:d3:2f:56:f3:14:8a:ee:fa:41:73:9d:b6:f2:8a: e5:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8B:A3:13:AC:4C:FA:94:6E:50:9B:4A:50:88:90:45:0E:28:A1:CA X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232302e302f32342d3234203d3e203234343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.170.220.0/24 Signature Algorithm: sha256WithRSAEncryption 05:c2:40:44:59:0a:91:09:1d:d5:66:f6:c0:72:2b:d6:c2:d7: 5b:1f:5e:ce:d7:9b:8f:b8:9f:ab:9c:73:d3:23:92:ce:29:5d: 3f:c2:5f:73:f4:5d:16:50:53:4f:b7:b0:a0:0f:a0:d2:24:e9: 21:05:c9:b5:cb:20:63:ac:76:1c:b3:c5:a6:12:8d:13:00:58: 45:6f:ae:29:0f:28:75:f7:ee:2b:54:b4:d5:38:3b:56:53:2d: 01:24:92:3a:e2:f4:8c:70:ba:69:ec:89:41:2b:33:db:00:28: 7a:af:1e:bb:22:4c:81:85:b7:ad:6a:3e:85:6f:64:b8:bc:87: 1a:9e:ef:c8:03:5b:70:95:26:bb:16:12:bc:4d:1c:58:f0:eb: bc:48:b4:59:f1:28:19:fd:56:8d:6d:8d:a2:fb:c7:4f:b9:99: e5:b4:c6:cf:3c:19:6c:5b:86:e1:8e:a3:f0:97:dd:5a:e6:dc: bd:ed:56:cf:b6:be:9d:44:6d:52:15:dc:0c:45:20:6d:9f:b9: c9:7f:61:13:d5:91:1f:32:58:f9:e2:d5:be:77:77:2d:7c:1e: 5e:0f:0e:c6:84:9f:68:27:04:78:43:77:02:74:f4:67:c0:2d: c6:cb:93:94:fa:94:b3:3e:dc:41:4b:aa:c0:6f:15:d1:e7:41: e0:05:3f:ee -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfy9P8fLsQnAHBGcSwAlDWGHpu+MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjA0MjAxMzExNDFaFw0yNzA0MTkxMzE2NDFaMDMxMTAvBgNV BAMTKDcxOEJBMzEzQUM0Q0ZBOTQ2RTUwOUI0QTUwODg5MDQ1MEUyOEExQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzJsPaGE0UDoapTOSaYF/C+Myo hLMdolAOh9p+/yrmX+6gEDwe/lagl4baosTvTzfSX9yIWFvBTyNtF09ns2GPEukD qG+eRuIEJxQeCayyXxrLH9hpxZHbTuRmOdyfVfinOxNdThJcuKoqXFp6d0RtcRai 4OE5skWjPgiRqrQ6oVP88En4QAdSdpj4A/Kixr5c0WS6D9uTZkR9ufhze/xm0xBT IgV5xXYu2nPVYP8/ds2RtKQKaWuLW07+Kjqgw7WSdf9Q/m3DQlE0mNb913ZtAWDq XmLhrrvIeSfrPmJlkulZ2Qys1VV0+a43oEdv4cnTL1bzFIru+kFznbbyiuX7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUcYujE6xM+pRuUJtKUIiQRQ4oocowHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx MzczMDJlMzIzMjMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDM0MzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqq3DANBgkqhkiG9w0BAQsFAAOCAQEABcJARFkKkQkd1Wb2wHIr 1sLXWx9eztebj7ifq5xz0yOSzildP8Jfc/RdFlBTT7ewoA+g0iTpIQXJtcsgY6x2 HLPFphKNEwBYRW+uKQ8odffuK1S01Tg7VlMtASSSOuL0jHC6aeyJQSsz2wAoeq8e uyJMgYW3rWo+hW9kuLyHGp7vyANbcJUmuxYSvE0cWPDrvEi0WfEoGf1WjW2NovvH T7mZ5bTGzzwZbFuG4Y6j8JfdWubcve1Wz7a+nURtUhXcDEUgbZ+5yX9hE9WRHzJY +eLVvnd3LXweXg8OxoSfaCcEeEN3AnT0Z8AtxsuTlPqUsz7cQUuqwG8V0edB4AU/ 7g== -----END CERTIFICATE-----Generated at Wed May 13 20:20:30 2026 by rpki-client