$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31322e302f32322d3332203d3e20313339313830.roa File: 3230322e3138392e31322e302f32322d3332203d3e20313339313830.roa (raw, json) Hash identifier: FduQawaUAB3AqyG2JKF3ZKIVzLgkEz7AQwgt1jdaeu8= Subject key identifier: 49:B3:AE:1F:E3:C8:84:AB:2C:53:8D:AA:6E:C5:5E:93:13:4A:5E:E9 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 33345599D0F675C7A719A96ABAC05148D15CE13E Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31322e302f32322d3332203d3e20313339313830.roa Signing time: Mon 20 Apr 2026 17:15:23 +0000 ROA not before: Mon 20 Apr 2026 17:10:23 +0000 ROA not after: Mon 19 Apr 2027 17:15:23 +0000 asID: 139180 IP address blocks: 202.189.12.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:34:55:99:d0:f6:75:c7:a7:19:a9:6a:ba:c0:51:48:d1:5c:e1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Apr 20 17:10:23 2026 GMT Not After : Apr 19 17:15:23 2027 GMT Subject: CN=49B3AE1FE3C884AB2C538DAA6EC55E93134A5EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:f9:1b:a6:cb:d7:e1:30:b0:78:f0:06:71:c8: c5:f1:92:cd:a0:5e:f8:22:5b:74:cd:06:92:a7:6d: 6e:5f:31:b0:2a:55:e7:ba:0d:1c:69:90:10:8d:03: 2d:4a:e6:ce:17:59:99:65:ef:ac:0c:e5:db:d6:e2: f9:0e:f9:31:dd:d9:84:5d:b0:ba:5b:04:45:e9:88: ad:40:65:3d:c3:80:c6:1e:cf:d4:01:7a:e1:3e:dc: 2e:56:88:a1:59:fe:55:6c:74:61:51:c0:24:4f:59: 5a:63:91:a4:a4:19:de:78:ee:66:66:a9:56:82:d6: 42:8f:06:0d:1f:a6:02:e6:ae:93:81:8c:4d:5e:77: fe:28:bd:0a:ed:11:23:58:eb:40:74:b5:a8:c1:65: 26:86:8f:44:35:95:9d:80:7d:99:5c:d9:01:fd:49: 14:1c:e2:72:f0:46:96:a2:12:11:dd:cf:d3:37:17: 61:72:46:90:26:10:a3:91:e1:66:50:98:74:dc:6d: a9:0b:f7:20:0a:76:73:53:34:3e:62:1e:d4:76:9e: 48:4b:cf:0b:06:94:c6:29:03:13:87:2f:cf:a4:01: 4c:68:be:0b:87:6c:e8:06:86:f4:2c:d4:b9:76:45: e8:bb:7c:0f:4a:a9:10:f5:bd:23:e4:68:5f:8e:45: 83:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:AE:1F:E3:C8:84:AB:2C:53:8D:AA:6E:C5:5E:93:13:4A:5E:E9 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31322e302f32322d3332203d3e20313339313830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.12.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:85:fa:e5:da:02:4d:0a:44:a4:9f:6c:eb:e3:d8:3b:de:a2: bf:a5:ef:d4:7c:1c:9a:53:de:d1:48:85:d4:31:0a:80:38:dc: cf:c2:e6:7b:cf:d3:33:6c:c1:26:ab:4c:8f:06:e3:79:c6:e8: 66:b3:fb:c7:c3:49:3e:75:32:25:b9:ba:13:28:b4:4f:6b:5d: a1:65:3e:d3:f7:4f:92:19:48:7a:3b:d7:b3:84:ff:9c:08:43: 70:e0:cf:e7:45:bd:0c:b9:bd:f1:0c:60:47:74:bb:7a:1d:fb: ff:87:13:00:a6:8b:0b:c9:5f:95:5a:f1:d4:56:07:8f:ee:a5: 50:e0:90:36:b8:f8:c8:45:9a:3b:79:47:1a:61:28:cd:26:fd: f6:dc:bf:48:a0:7a:de:e3:9c:64:60:8a:6f:ff:d4:f4:4b:0a: 6b:86:76:12:3b:c1:c8:94:8c:85:fb:a9:4c:aa:85:9d:55:a6: 37:a7:ed:f6:58:8c:e3:d1:c1:73:2b:92:2a:5a:2c:bb:91:ac: 96:ae:0a:85:e6:a4:51:24:cd:01:c0:e5:2c:af:2a:4d:30:9e: bd:fe:d3:61:95:7e:9e:c3:ee:f8:c0:f8:64:67:21:72:5f:67: 98:0c:34:10:94:ca:32:a7:52:4c:c9:78:d4:6e:76:53:71:7f: ab:86:22:37 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMzRVmdD2dcenGalqusBRSNFc4T4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjA0MjAxNzEwMjNaFw0yNzA0MTkxNzE1MjNaMDMxMTAvBgNV BAMTKDQ5QjNBRTFGRTNDODg0QUIyQzUzOERBQTZFQzU1RTkzMTM0QTVFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+Rumy9fhMLB48AZxyMXxks2g XvgiW3TNBpKnbW5fMbAqVee6DRxpkBCNAy1K5s4XWZll76wM5dvW4vkO+THd2YRd sLpbBEXpiK1AZT3DgMYez9QBeuE+3C5WiKFZ/lVsdGFRwCRPWVpjkaSkGd547mZm qVaC1kKPBg0fpgLmrpOBjE1ed/4ovQrtESNY60B0tajBZSaGj0Q1lZ2AfZlc2QH9 SRQc4nLwRpaiEhHdz9M3F2FyRpAmEKOR4WZQmHTcbakL9yAKdnNTND5iHtR2nkhL zwsGlMYpAxOHL8+kAUxovguHbOgGhvQs1Ll2Rei7fA9KqRD1vSPkaF+ORYNxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUSbOuH+PIhKssU42qbsVekxNKXukwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzEzMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzOTMxMzgzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAsq9DDANBgkqhkiG9w0BAQsFAAOCAQEAGoX65doCTQpEpJ9s6+PY O96iv6Xv1HwcmlPe0UiF1DEKgDjcz8Lme8/TM2zBJqtMjwbjecboZrP7x8NJPnUy Jbm6Eyi0T2tdoWU+0/dPkhlIejvXs4T/nAhDcODP50W9DLm98QxgR3S7eh37/4cT AKaLC8lflVrx1FYHj+6lUOCQNrj4yEWaO3lHGmEozSb99ty/SKB63uOcZGCKb//U 9EsKa4Z2EjvByJSMhfupTKqFnVWmN6ft9liM49HBcyuSKlosu5Gslq4KheakUSTN AcDlLK8qTTCevf7TYZV+nsPu+MD4ZGchcl9nmAw0EJTKMqdSTMl41G52U3F/q4Yi Nw== -----END CERTIFICATE-----Generated at Wed May 13 20:57:40 2026 by rpki-client