$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa File: 3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa (raw, json) Hash identifier: Cph0YLpkDG2fLuVzSekkhP+HJ5DeU37Z2LF9M608YDg= Subject key identifier: 5E:36:88:D0:C7:BB:54:13:6B:A5:E6:91:14:7B:00:B9:8E:34:64:E5 Certificate issuer: /CN=9B87DFEBDCCDA813116988D4421B088404578168 Certificate serial: 2944C2FEFAE1EC8F89C49D282252ACD2F3C41B05 Authority key identifier: 9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa Signing time: Fri 24 Apr 2026 02:42:01 +0000 ROA not before: Fri 24 Apr 2026 02:37:01 +0000 ROA not after: Fri 23 Apr 2027 02:42:01 +0000 asID: 134774 IP address blocks: 220.231.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:44:c2:fe:fa:e1:ec:8f:89:c4:9d:28:22:52:ac:d2:f3:c4:1b:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B87DFEBDCCDA813116988D4421B088404578168 Validity Not Before: Apr 24 02:37:01 2026 GMT Not After : Apr 23 02:42:01 2027 GMT Subject: CN=5E3688D0C7BB54136BA5E691147B00B98E3464E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cb:09:1c:c4:2e:46:f3:c6:f6:25:36:ed:7d: f0:28:f2:b5:c2:67:6a:b9:41:ca:14:30:2c:66:fc: 85:ba:30:11:56:75:03:aa:f9:ad:25:59:d6:62:39: 4a:61:74:a4:d4:f6:a2:12:1e:21:cb:63:7f:66:6b: d7:e5:c2:f8:14:f6:af:32:45:12:3b:4a:8b:68:a3: f7:27:7a:78:05:2f:67:44:b4:90:9b:42:61:35:e4: e4:71:d0:e9:b6:b3:dd:54:8a:6d:2a:83:f7:dc:8d: c4:98:0e:d3:d2:82:6c:22:01:09:66:42:d7:d9:b3: 4e:10:f0:cf:df:ba:fb:be:f1:5c:c8:04:20:f1:d3: 8f:9f:79:da:e4:87:79:f2:30:55:04:fc:96:7b:d5: 86:79:cc:28:2b:64:9a:4a:42:a9:42:0e:18:c6:44: 86:7a:cb:02:48:41:9c:fa:a1:5b:b2:74:b2:d3:a2: 44:59:73:a7:bc:3d:ba:af:46:21:dc:b3:fa:59:3f: 00:8b:d9:66:43:f3:d5:11:d1:38:6e:cc:af:b4:f2: 79:dd:5e:33:67:24:3f:c7:7a:2f:d8:f7:db:ed:d1: 06:e0:35:a8:96:5d:83:ed:61:92:22:62:b1:62:b4: 91:88:d9:a0:cc:c1:9c:2e:f0:a0:d8:0f:83:16:b0: 10:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:36:88:D0:C7:BB:54:13:6B:A5:E6:91:14:7B:00:B9:8E:34:64:E5 X509v3 Authority Key Identifier: keyid:9B:87:DF:EB:DC:CD:A8:13:11:69:88:D4:42:1B:08:84:04:57:81:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/9B87DFEBDCCDA813116988D4421B088404578168.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B87DFEBDCCDA813116988D4421B088404578168.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714749953/0/3232302e3233312e3132382e302f31382d3138203d3e20313334373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 220.231.128.0/18 Signature Algorithm: sha256WithRSAEncryption 88:3a:95:d0:bb:df:14:5d:d7:24:27:37:5c:35:bc:ef:db:66: 0c:9f:f8:a2:b3:f3:29:7b:12:ab:96:11:eb:99:03:4b:3b:de: 95:c2:09:8f:db:76:d5:bc:91:68:71:45:48:dc:1e:9a:f7:7a: 24:fe:fa:15:e6:0b:39:9e:e7:76:c9:65:a9:2c:c2:78:57:b4: 0b:c9:6b:1b:7b:5b:a7:ea:73:c6:ec:79:06:54:10:b7:2c:91: 06:da:d8:57:10:90:10:a5:ba:9c:5c:83:2f:5d:88:1e:80:d6: 50:b0:bd:5f:b4:4c:33:6d:71:dc:b2:ea:a3:7a:0b:58:b8:4a: 32:8a:c5:85:71:5e:89:80:49:49:fb:d5:fd:e3:7e:e9:8c:b2: cd:e5:a2:97:41:c4:e1:09:03:77:35:e6:09:72:d5:63:d1:bb: 1d:37:45:5a:25:ba:f0:b0:d2:ad:74:c7:ff:86:88:cb:d4:ca: da:b2:c6:1b:0d:a7:c0:8c:4d:5c:0e:84:bb:c0:73:13:ad:f6: c4:82:d0:26:2f:f4:52:37:82:b3:5c:5b:da:74:bf:9c:e3:5d: a1:b0:45:dd:13:da:de:69:b4:9b:c2:d9:44:2a:66:e5:d9:af: 02:ac:2b:6a:78:58:5d:13:4a:b5:c2:50:fd:f1:24:dd:a8:41: 93:a8:ee:9c -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUKUTC/vrh7I+JxJ0oIlKs0vPEGwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQw NDU3ODE2ODAeFw0yNjA0MjQwMjM3MDFaFw0yNzA0MjMwMjQyMDFaMDMxMTAvBgNV BAMTKDVFMzY4OEQwQzdCQjU0MTM2QkE1RTY5MTE0N0IwMEI5OEUzNDY0RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPywkcxC5G88b2JTbtffAo8rXC Z2q5QcoUMCxm/IW6MBFWdQOq+a0lWdZiOUphdKTU9qISHiHLY39ma9flwvgU9q8y RRI7Sotoo/cnengFL2dEtJCbQmE15ORx0Om2s91Uim0qg/fcjcSYDtPSgmwiAQlm QtfZs04Q8M/fuvu+8VzIBCDx04+fedrkh3nyMFUE/JZ71YZ5zCgrZJpKQqlCDhjG RIZ6ywJIQZz6oVuydLLTokRZc6e8PbqvRiHcs/pZPwCL2WZD89UR0ThuzK+08nnd XjNnJD/Hei/Y99vt0QbgNaiWXYPtYZIiYrFitJGI2aDMwZwu8KDYD4MWsBAXAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUXjaI0Me7VBNrpeaRFHsAuY40ZOUwHwYDVR0j BBgwFoAUm4ff69zNqBMRaYjUQhsIhARXgWgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDc0OTk1My8wLzlCODdERkVCRENDREE4MTMxMTY5ODhENDQyMUIw ODg0MDQ1NzgxNjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI4N0RGRUJEQ0NEQTgxMzExNjk4OEQ0NDIxQjA4ODQwNDU3ODE2OC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NzQ5OTUzLzAvMzIzMjMwMmUz MjMzMzEyZTMxMzIzODJlMzAyZjMxMzgyZDMxMzgyMDNkM2UyMDMxMzMzNDM3Mzcz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBtzngDANBgkqhkiG9w0BAQsFAAOCAQEAiDqV0LvfFF3XJCc3 XDW879tmDJ/4orPzKXsSq5YR65kDSzvelcIJj9t21byRaHFFSNwemvd6JP76FeYL OZ7ndsllqSzCeFe0C8lrG3tbp+pzxux5BlQQtyyRBtrYVxCQEKW6nFyDL12IHoDW ULC9X7RMM21x3LLqo3oLWLhKMorFhXFeiYBJSfvV/eN+6YyyzeWil0HE4QkDdzXm CXLVY9G7HTdFWiW68LDSrXTH/4aIy9TK2rLGGw2nwIxNXA6Eu8BzE632xILQJi/0 UjeCs1xb2nS/nONdobBF3RPa3mm0m8LZRCpm5dmvAqwranhYXRNKtcJQ/fEk3ahB k6junA== -----END CERTIFICATE-----Generated at Wed May 13 18:37:09 2026 by rpki-client