$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3230322e36392e362e302f32342d3234203d3e20313334373030.roa File: 3230322e36392e362e302f32342d3234203d3e20313334373030.roa (raw, json) Hash identifier: CYP2YPEp8Kc9YlJ9Nuiwh9AIGy11PgG48aHgzQAQudM= Subject key identifier: AF:7E:47:5D:11:28:3D:77:B9:1D:66:61:F3:CC:29:D4:BA:6A:C0:96 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 533F1298EAC7C4237C084C134A168DCD28EE53CE Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3230322e36392e362e302f32342d3234203d3e20313334373030.roa Signing time: Mon 27 Apr 2026 10:24:23 +0000 ROA not before: Mon 27 Apr 2026 10:19:23 +0000 ROA not after: Mon 26 Apr 2027 10:24:23 +0000 asID: 134700 IP address blocks: 202.69.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:3f:12:98:ea:c7:c4:23:7c:08:4c:13:4a:16:8d:cd:28:ee:53:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Apr 27 10:19:23 2026 GMT Not After : Apr 26 10:24:23 2027 GMT Subject: CN=AF7E475D11283D77B91D6661F3CC29D4BA6AC096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ba:4d:ec:d5:c7:6d:47:01:6e:eb:72:e8:d2: 7c:95:06:14:29:36:9e:10:86:c7:ee:b8:c3:2e:b6: 3e:25:91:d6:a0:64:d5:30:4d:42:7b:f7:ad:cb:d3: 77:c0:e7:f4:9c:fe:51:95:c7:e7:5a:a3:28:32:21: 35:7d:59:43:fc:20:70:ca:8e:2c:eb:b9:78:0d:a1: f9:ee:b1:ab:0b:64:80:99:e9:4f:d3:17:bd:c8:d0: c9:7a:71:35:4d:ff:46:f9:20:2c:33:c0:b8:04:b9: 0d:a3:8f:56:7a:fe:f8:8c:eb:46:85:62:27:64:34: 08:60:82:a8:6f:c4:5d:de:d6:39:4e:4c:ec:53:45: a9:dd:a5:49:92:80:08:a9:23:f0:73:eb:7f:a1:ac: c6:54:32:43:0e:84:ea:1a:47:c7:66:08:c9:f9:42: 34:3f:e9:48:9a:cf:e0:58:08:b6:a7:40:56:30:70: 78:0a:9a:33:86:2f:1c:27:ed:d0:1b:ed:91:b4:6a: 51:c6:93:76:d5:78:78:33:e7:22:9f:ef:c4:81:fb: 9a:e5:57:fb:eb:35:59:33:3a:fb:03:2c:e5:92:f5: 5a:a7:7e:7c:21:2a:f4:91:bd:f8:19:d5:16:43:f6: 4e:ad:dd:ab:d8:cc:8a:d8:c5:76:7d:fa:fd:7c:33: b2:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:7E:47:5D:11:28:3D:77:B9:1D:66:61:F3:CC:29:D4:BA:6A:C0:96 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3230322e36392e362e302f32342d3234203d3e20313334373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.69.6.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:53:07:5d:b0:85:65:22:02:76:20:6a:94:23:e3:ee:1c:24: 03:0f:45:1b:d2:36:c2:7e:9b:82:dd:79:de:99:ad:0a:7e:97: 39:c7:1e:59:c7:96:6c:5d:3b:f2:15:09:6c:88:1d:6b:5b:6b: 77:db:19:d3:18:28:b9:25:f4:fc:ff:24:66:bd:38:3a:12:d3: 3a:56:dc:b3:e4:ea:50:ae:1e:f9:70:ed:7e:2e:cb:42:b1:ed: 25:bf:7c:c6:68:59:16:1d:af:f5:77:a2:77:c3:a3:42:0a:e8: 59:7c:a2:b1:d5:42:95:5b:67:ff:f9:68:d8:da:af:e3:f0:9a: 70:8a:f0:8a:fb:07:1f:75:6f:2a:54:e3:1f:95:aa:6a:32:5e: 64:7f:1e:ec:c5:cf:41:1b:9e:7d:16:5e:bf:97:92:00:46:6a: e7:c1:a6:33:71:ba:a7:53:b6:85:e5:de:94:57:0a:e6:75:78: 8d:f5:86:af:0d:97:79:b0:b0:4b:9d:82:79:a6:3d:8c:d8:0f: 67:58:c2:65:38:8b:79:fe:99:3d:f6:28:eb:f1:0c:a1:dc:06: 01:d2:8f:7f:e2:1b:c5:27:c8:a2:5d:6f:6c:c3:a9:69:cb:4c: ca:d4:28:44:5e:3e:4e:71:2d:12:3a:ad:69:59:4f:91:6d:bb: 46:7e:2a:d4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUz8SmOrHxCN8CEwTShaNzSjuU84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjA0MjcxMDE5MjNaFw0yNzA0MjYxMDI0MjNaMDMxMTAvBgNV BAMTKEFGN0U0NzVEMTEyODNENzdCOTFENjY2MUYzQ0MyOUQ0QkE2QUMwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIuk3s1cdtRwFu63Lo0nyVBhQp Np4QhsfuuMMutj4lkdagZNUwTUJ7963L03fA5/Sc/lGVx+daoygyITV9WUP8IHDK jizruXgNofnusasLZICZ6U/TF73I0Ml6cTVN/0b5ICwzwLgEuQ2jj1Z6/viM60aF YidkNAhggqhvxF3e1jlOTOxTRandpUmSgAipI/Bz63+hrMZUMkMOhOoaR8dmCMn5 QjQ/6Uiaz+BYCLanQFYwcHgKmjOGLxwn7dAb7ZG0alHGk3bVeHgz5yKf78SB+5rl V/vrNVkzOvsDLOWS9VqnfnwhKvSRvfgZ1RZD9k6t3avYzIrYxXZ9+v18M7L9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUr35HXREoPXe5HWZh88wp1LpqwJYwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTkwNzg3LzAvMzIzMDMyMmUzNjM5 MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzAzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMpFBjANBgkqhkiG9w0BAQsFAAOCAQEAnlMHXbCFZSICdiBqlCPj7hwkAw9F G9I2wn6bgt153pmtCn6XOcceWceWbF078hUJbIgda1trd9sZ0xgouSX0/P8kZr04 OhLTOlbcs+TqUK4e+XDtfi7LQrHtJb98xmhZFh2v9Xeid8OjQgroWXyisdVClVtn //lo2Nqv4/CacIrwivsHH3VvKlTjH5WqajJeZH8e7MXPQRuefRZev5eSAEZq58Gm M3G6p1O2heXelFcK5nV4jfWGrw2XebCwS52CeaY9jNgPZ1jCZTiLef6ZPfYo6/EM odwGAdKPf+IbxSfIol1vbMOpactMytQoRF4+TnEtEjqtaVlPkW27Rn4q1A== -----END CERTIFICATE-----Generated at Wed May 13 17:25:10 2026 by rpki-client