$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232312e302f32342d3234203d3e203234343237.roa File: 3230322e3137302e3232312e302f32342d3234203d3e203234343237.roa (raw, json) Hash identifier: eLf51BLu0K8JOwlH6IFc5jAcFpHJFCctgrNJUcADl74= Subject key identifier: EF:26:D4:BB:41:40:30:61:13:08:24:11:F6:C9:DD:07:12:97:B8:B5 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 42C507CCE2A8B55A210B2D908FA8CEC8B5E68CFB Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232312e302f32342d3234203d3e203234343237.roa Signing time: Mon 20 Apr 2026 13:16:42 +0000 ROA not before: Mon 20 Apr 2026 13:11:42 +0000 ROA not after: Mon 19 Apr 2027 13:16:42 +0000 asID: 24427 IP address blocks: 202.170.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c5:07:cc:e2:a8:b5:5a:21:0b:2d:90:8f:a8:ce:c8:b5:e6:8c:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Apr 20 13:11:42 2026 GMT Not After : Apr 19 13:16:42 2027 GMT Subject: CN=EF26D4BB4140306113082411F6C9DD071297B8B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:f5:60:c3:55:b1:b3:0d:17:8e:59:ae:ce: ef:51:1c:9f:74:d0:c8:d3:90:b1:73:41:21:96:d7: 40:31:d5:60:f9:6d:46:b5:d1:27:96:24:a5:de:b6: 12:2b:ec:b4:a7:77:16:0e:98:e4:88:18:dc:f6:20: 8a:e7:d6:9b:e3:4c:51:ff:ba:a0:73:30:80:59:5e: 4e:e6:49:5b:eb:20:36:2d:0c:ab:9e:7f:79:34:85: c8:45:f7:3e:cf:1a:df:bd:5d:fa:9d:a2:8e:09:30: ba:de:49:10:7e:91:29:20:3a:35:45:71:a8:a0:90: 07:8f:3f:f6:d3:ac:e6:65:62:e0:ba:48:63:94:ca: e8:d5:1e:88:fe:bd:71:7f:9c:c2:f2:89:de:f8:a4: 0b:45:b6:1e:8a:ce:c4:d7:38:53:33:b2:d7:e3:3f: 8d:f9:bf:d2:58:e3:9c:eb:cc:35:df:db:41:15:06: 7b:35:64:36:cd:af:f4:4a:e5:3a:3c:62:70:9a:15: 89:30:1d:70:af:c8:9b:b4:32:8d:6f:4b:37:4d:f1: 73:ec:21:ba:ae:b8:d1:89:b4:5a:a7:cf:11:59:60: 42:83:96:82:7b:d6:df:45:a0:a1:4a:9d:93:a4:fb: 46:ea:35:70:7b:7b:54:24:0a:ae:d4:f8:e4:57:50: b4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:26:D4:BB:41:40:30:61:13:08:24:11:F6:C9:DD:07:12:97:B8:B5 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232312e302f32342d3234203d3e203234343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.170.221.0/24 Signature Algorithm: sha256WithRSAEncryption 18:b3:1b:7d:ec:0f:0b:8a:d5:22:4a:72:63:e1:6b:0f:b2:9e: 63:55:ac:88:d3:ff:db:39:4e:61:d2:e1:d3:11:4a:ea:f7:79: a1:40:29:d0:ff:d1:5c:51:2a:6d:80:ca:6d:a5:66:cb:d5:ed: 4c:bf:24:19:c7:1a:a5:6b:2b:e9:ae:3b:fc:cf:9f:28:ab:d9: 8f:9a:4c:9b:f5:d3:4e:35:4b:43:c7:12:82:7d:b5:5d:15:62: 34:66:8b:0b:ab:7e:56:57:1a:96:a5:0b:1c:8c:35:88:44:f9: 00:e7:2c:6e:83:06:6c:5a:4a:85:c9:7d:ad:d2:35:68:a2:b6: 23:a8:d6:d4:f2:9d:a9:3b:87:79:24:94:5c:18:36:ff:14:33: 42:9e:1c:25:64:0b:7a:95:7e:e9:aa:d0:6f:6c:17:45:d1:b7: 59:1e:8e:5d:50:b1:23:d7:33:ef:03:05:c3:fa:d4:10:ac:f5: 7f:4b:f0:54:70:3c:65:af:24:0d:8f:77:64:30:67:2f:e5:aa: e3:14:fb:be:3f:01:7c:bd:b6:56:1c:6b:68:91:22:bf:a8:ff: 07:fe:fb:5b:2b:e6:3c:87:b9:6b:a0:ad:5c:b7:3b:31:6a:fa: a0:bb:a2:64:33:a7:c4:16:bd:37:5c:7b:8e:b8:05:43:c8:90: 71:f1:aa:6c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQsUHzOKotVohCy2Qj6jOyLXmjPswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjA0MjAxMzExNDJaFw0yNzA0MTkxMzE2NDJaMDMxMTAvBgNV BAMTKEVGMjZENEJCNDE0MDMwNjExMzA4MjQxMUY2QzlERDA3MTI5N0I4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOj/Vgw1Wxsw0Xjlmuzu9RHJ90 0MjTkLFzQSGW10Ax1WD5bUa10SeWJKXethIr7LSndxYOmOSIGNz2IIrn1pvjTFH/ uqBzMIBZXk7mSVvrIDYtDKuef3k0hchF9z7PGt+9Xfqdoo4JMLreSRB+kSkgOjVF caigkAePP/bTrOZlYuC6SGOUyujVHoj+vXF/nMLyid74pAtFth6KzsTXOFMzstfj P435v9JY45zrzDXf20EVBns1ZDbNr/RK5To8YnCaFYkwHXCvyJu0Mo1vSzdN8XPs IbquuNGJtFqnzxFZYEKDloJ71t9FoKFKnZOk+0bqNXB7e1QkCq7U+ORXULQlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU7ybUu0FAMGETCCQR9sndBxKXuLUwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx MzczMDJlMzIzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDM0MzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqq3TANBgkqhkiG9w0BAQsFAAOCAQEAGLMbfewPC4rVIkpyY+Fr D7KeY1WsiNP/2zlOYdLh0xFK6vd5oUAp0P/RXFEqbYDKbaVmy9XtTL8kGccapWsr 6a47/M+fKKvZj5pMm/XTTjVLQ8cSgn21XRViNGaLC6t+VlcalqULHIw1iET5AOcs boMGbFpKhcl9rdI1aKK2I6jW1PKdqTuHeSSUXBg2/xQzQp4cJWQLepV+6arQb2wX RdG3WR6OXVCxI9cz7wMFw/rUEKz1f0vwVHA8Za8kDY93ZDBnL+Wq4xT7vj8BfL22 VhxraJEiv6j/B/77WyvmPIe5a6CtXLc7MWr6oLuiZDOnxBa9N1x7jrgFQ8iQcfGq bA== -----END CERTIFICATE-----Generated at Wed May 13 20:20:30 2026 by rpki-client