$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232322e302f32342d3234203d3e203234343237.roa File: 3230322e3137302e3232322e302f32342d3234203d3e203234343237.roa (raw, json) Hash identifier: pCqCdfeTBDZ1ufXIAdXFKHOH0guOfd8eNNLcRHIYyf8= Subject key identifier: FB:58:E1:8F:DA:9A:A0:9F:B7:ED:F9:D7:37:4D:6B:15:4E:87:6C:F7 Certificate issuer: /CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Certificate serial: 3E784CDB5D8235194222A2C646A634AFE3DFD939 Authority key identifier: 23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232322e302f32342d3234203d3e203234343237.roa Signing time: Mon 20 Apr 2026 13:16:41 +0000 ROA not before: Mon 20 Apr 2026 13:11:41 +0000 ROA not after: Mon 19 Apr 2027 13:16:41 +0000 asID: 24427 IP address blocks: 202.170.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:78:4c:db:5d:82:35:19:42:22:a2:c6:46:a6:34:af:e3:df:d9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2339921363F7003C3DEB47ED8534AFE1F482D8D5 Validity Not Before: Apr 20 13:11:41 2026 GMT Not After : Apr 19 13:16:41 2027 GMT Subject: CN=FB58E18FDA9AA09FB7EDF9D7374D6B154E876CF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:45:50:52:58:08:90:7e:0d:de:40:8c:4d:f2: 4f:98:d3:40:a8:17:75:19:fa:3c:b6:30:94:a9:02: 75:e3:58:31:f4:d2:6c:fb:23:c8:49:2b:a7:cf:ae: 82:fe:c7:05:6f:a7:36:9b:28:89:1f:b8:87:97:d6: 37:c5:89:d5:7b:f6:d5:20:c6:94:4a:d3:99:ed:1b: 9d:d8:7b:a6:57:40:81:95:00:dc:64:18:ac:5c:40: 17:d2:d6:b4:03:b7:74:2e:4a:17:0e:fb:e6:c4:86: c7:48:4d:7f:98:8d:0b:dc:c7:27:66:97:17:32:fa: ec:8d:13:99:ee:fb:3e:2e:fa:5e:d2:6d:aa:04:a7: 42:0a:a4:22:7b:f1:43:54:0d:96:cc:cc:6a:76:a9: ca:6f:e8:36:9b:43:96:b8:51:f7:d6:0c:2e:f7:8b: 56:78:79:d8:a2:6e:bb:58:3c:81:c0:65:34:91:fb: e0:44:50:d0:0a:02:4d:bd:a2:b5:ec:fe:6a:c9:3e: 0d:8c:c4:0a:11:7b:77:06:27:ab:5e:31:6c:51:66: 71:14:4c:5e:cf:8a:54:0c:b9:68:95:84:19:95:77: 15:e5:64:69:8f:d2:06:c4:dc:f5:cd:7b:7b:22:24: 99:4e:cd:79:88:3b:56:d2:45:76:37:79:22:c8:37: b8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:58:E1:8F:DA:9A:A0:9F:B7:ED:F9:D7:37:4D:6B:15:4E:87:6C:F7 X509v3 Authority Key Identifier: keyid:23:39:92:13:63:F7:00:3C:3D:EB:47:ED:85:34:AF:E1:F4:82:D8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/2339921363F7003C3DEB47ED8534AFE1F482D8D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2339921363F7003C3DEB47ED8534AFE1F482D8D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947275265/0/3230322e3137302e3232322e302f32342d3234203d3e203234343237.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.170.222.0/24 Signature Algorithm: sha256WithRSAEncryption a5:1a:89:78:6e:e2:f7:f9:1a:95:87:80:c0:31:ab:a0:21:24: ce:e1:58:dc:e3:bd:1d:13:07:71:2d:54:bc:67:cb:cb:59:04: 35:0f:8a:c6:f6:fc:79:62:53:5e:71:62:4d:ad:26:53:09:08: 39:d7:2d:8a:cb:58:c9:2f:a3:5f:8b:b3:01:f6:25:19:e1:0e: 0d:32:20:3e:e8:49:6e:7f:3a:1a:78:fb:33:82:1d:ca:4c:ec: 84:cf:21:79:9c:76:08:99:a8:cb:f6:51:ca:a8:ff:13:d8:05: 0e:2f:c6:b2:0d:54:5e:92:63:24:11:f9:5f:84:6d:cd:b2:44: ce:e5:01:76:79:0b:c4:86:a0:30:0b:75:a6:c5:be:0c:28:ed: b8:af:f5:03:90:dc:fc:a8:7e:2d:28:f1:e0:a7:21:5f:bf:36: d9:06:9b:6d:c9:89:b9:19:d9:71:91:fd:15:40:15:a6:f2:c9: ee:de:41:7d:16:9a:c7:27:bf:09:4a:12:cf:9a:8b:ec:91:91: a1:a8:ee:ae:8d:99:1b:30:c1:eb:d2:20:03:40:66:a1:7a:06: 1d:63:e5:0d:71:65:59:5e:9c:7b:a4:f4:4e:99:34:5d:5a:9d: 1b:c5:46:82:81:58:cc:f3:e8:50:6c:f0:31:96:37:03:3a:86: be:e9:1b:4b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPnhM212CNRlCIqLGRqY0r+Pf2TkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFG NDgyRDhENTAeFw0yNjA0MjAxMzExNDFaFw0yNzA0MTkxMzE2NDFaMDMxMTAvBgNV BAMTKEZCNThFMThGREE5QUEwOUZCN0VERjlENzM3NEQ2QjE1NEU4NzZDRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRVBSWAiQfg3eQIxN8k+Y00Co F3UZ+jy2MJSpAnXjWDH00mz7I8hJK6fProL+xwVvpzabKIkfuIeX1jfFidV79tUg xpRK05ntG53Ye6ZXQIGVANxkGKxcQBfS1rQDt3QuShcO++bEhsdITX+YjQvcxydm lxcy+uyNE5nu+z4u+l7SbaoEp0IKpCJ78UNUDZbMzGp2qcpv6DabQ5a4UffWDC73 i1Z4ediibrtYPIHAZTSR++BEUNAKAk29orXs/mrJPg2MxAoRe3cGJ6teMWxRZnEU TF7PilQMuWiVhBmVdxXlZGmP0gbE3PXNe3siJJlOzXmIO1bSRXY3eSLIN7jTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU+1jhj9qaoJ+37fnXN01rFU6HbPcwHwYDVR0j BBgwFoAUIzmSE2P3ADw960fthTSv4fSC2NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzI3NTI2NS8wLzIzMzk5MjEzNjNGNzAwM0MzREVCNDdFRDg1MzRB RkUxRjQ4MkQ4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjMzOTkyMTM2M0Y3MDAzQzNERUI0N0VEODUzNEFGRTFGNDgyRDhENS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDcyNzUyNjUvMC8zMjMwMzIyZTMx MzczMDJlMzIzMjMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDM0MzIzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMqq3jANBgkqhkiG9w0BAQsFAAOCAQEApRqJeG7i9/kalYeAwDGr oCEkzuFY3OO9HRMHcS1UvGfLy1kENQ+Kxvb8eWJTXnFiTa0mUwkIOdctistYyS+j X4uzAfYlGeEODTIgPuhJbn86Gnj7M4IdykzshM8heZx2CJmoy/ZRyqj/E9gFDi/G sg1UXpJjJBH5X4RtzbJEzuUBdnkLxIagMAt1psW+DCjtuK/1A5Dc/Kh+LSjx4Kch X7822QabbcmJuRnZcZH9FUAVpvLJ7t5BfRaaxye/CUoSz5qL7JGRoajuro2ZGzDB 69IgA0BmoXoGHWPlDXFlWV6ce6T0Tpk0XVqdG8VGgoFYzPPoUGzwMZY3AzqGvukb Sw== -----END CERTIFICATE-----Generated at Wed May 13 20:20:29 2026 by rpki-client