$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32322d3232203d3e203233363530.roa File: 32372e302e3230342e302f32322d3232203d3e203233363530.roa (raw, json) Hash identifier: sBmAoVfm8kE81yTw5+u0KE1EiqXy58q7aq+7I1OCX2I= Subject key identifier: BA:50:CE:22:78:3C:1E:95:E7:F8:1A:60:93:02:20:8A:05:D7:B6:01 Certificate issuer: /CN=9B22C19D842E45AA84439366694E4C828C309CEE Certificate serial: 31E69125368541AEE09A8A25BCE929F7D3F55C0A Authority key identifier: 9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32322d3232203d3e203233363530.roa Signing time: Tue 16 Jun 2026 02:04:29 +0000 ROA not before: Tue 16 Jun 2026 01:59:29 +0000 ROA not after: Tue 15 Jun 2027 02:04:29 +0000 asID: 23650 IP address blocks: 27.0.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e6:91:25:36:85:41:ae:e0:9a:8a:25:bc:e9:29:f7:d3:f5:5c:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B22C19D842E45AA84439366694E4C828C309CEE Validity Not Before: Jun 16 01:59:29 2026 GMT Not After : Jun 15 02:04:29 2027 GMT Subject: CN=BA50CE22783C1E95E7F81A609302208A05D7B601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:28:79:ed:85:00:db:17:a4:e6:9f:f8:0b:a1: d0:86:30:87:46:d8:99:c2:8b:91:b7:b9:57:cd:66: bb:f5:b7:c3:56:31:03:de:ea:14:65:99:73:a2:e9: 70:20:09:02:ce:40:e5:5f:22:18:d5:38:f5:8b:63: 52:3c:31:6e:cd:0a:b6:1a:cd:de:2a:3c:32:ca:af: 26:8b:9b:f3:7b:03:a0:1e:36:13:36:09:31:6f:b8: 93:79:5a:b6:cf:69:64:f8:85:5b:49:5b:65:68:e3: d4:2f:85:48:41:11:6d:a3:9f:9d:7a:4c:dd:48:98: 65:9d:90:e6:b0:cd:d2:83:7a:79:cd:e6:f4:d3:c4: 97:2d:b2:5f:0a:94:48:95:d3:39:f6:a0:f7:3f:b5: 79:99:e1:6d:76:96:09:b5:e7:8d:b8:2f:d3:a9:83: d0:a8:bc:26:5c:50:be:9a:a1:40:15:47:e7:12:d1: 68:82:ba:25:14:ba:ee:25:e6:c1:db:e9:69:f3:fb: 32:6e:28:89:86:0b:42:20:5d:e4:45:8f:9b:93:56: a2:d9:9e:75:0b:fa:23:41:76:4c:92:f2:99:29:ce: 67:0e:94:b1:8b:b7:5c:79:3f:19:e6:69:cc:ee:9b: aa:2d:99:1c:3b:86:fa:b1:fa:48:ab:0d:9f:ab:bc: 9b:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:50:CE:22:78:3C:1E:95:E7:F8:1A:60:93:02:20:8A:05:D7:B6:01 X509v3 Authority Key Identifier: keyid:9B:22:C1:9D:84:2E:45:AA:84:43:93:66:69:4E:4C:82:8C:30:9C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/9B22C19D842E45AA84439366694E4C828C309CEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B22C19D842E45AA84439366694E4C828C309CEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129721859/0/32372e302e3230342e302f32322d3232203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 27.0.204.0/22 Signature Algorithm: sha256WithRSAEncryption 38:43:ff:b4:0e:79:f5:b5:ee:37:ea:f6:7e:6c:3f:80:e6:7c: 63:0a:ed:ca:04:4f:e5:e6:7c:e9:8a:8d:0c:a8:40:5e:e4:2e: ab:9f:7c:cc:6c:e5:aa:d7:d0:3e:d5:26:d2:72:ef:1c:5d:cb: e2:ad:d2:2b:70:0c:60:5c:21:71:58:79:da:2f:e9:a0:3a:cf: 42:30:78:4c:97:6b:29:a7:11:cc:37:86:66:34:2d:a9:a3:a0: 9f:1a:60:93:50:8d:05:14:f2:29:fb:01:df:f3:c3:72:0f:18: 6f:02:b2:fb:e5:a8:2d:9c:38:1b:f5:78:8a:54:8d:85:11:8a: 12:40:49:6c:80:f8:eb:fb:08:82:0b:a8:18:02:5c:6c:3a:01: 3c:57:c3:2c:3c:94:44:ad:8e:ad:85:51:74:e3:a2:3f:d9:b2: 76:be:63:4f:d0:90:6b:69:eb:c6:3a:ee:5a:c8:2f:f2:00:39: 2c:80:dd:9a:23:4f:ec:a4:df:13:d8:75:ce:0a:a2:a2:3a:71: 36:0c:af:32:03:a5:75:41:28:ee:0c:74:9d:7c:85:a4:e2:32: 7a:29:23:01:7b:e0:f2:7e:4e:38:fd:15:2b:a5:64:3c:92:af: da:9d:65:69:36:ac:8b:2f:d4:51:b7:69:b2:9d:18:52:63:98: 7e:c6:24:f6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMeaRJTaFQa7gmoolvOkp99P1XAowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4 QzMwOUNFRTAeFw0yNjA2MTYwMTU5MjlaFw0yNzA2MTUwMjA0MjlaMDMxMTAvBgNV BAMTKEJBNTBDRTIyNzgzQzFFOTVFN0Y4MUE2MDkzMDIyMDhBMDVEN0I2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaKHnthQDbF6Tmn/gLodCGMIdG 2JnCi5G3uVfNZrv1t8NWMQPe6hRlmXOi6XAgCQLOQOVfIhjVOPWLY1I8MW7NCrYa zd4qPDLKryaLm/N7A6AeNhM2CTFvuJN5WrbPaWT4hVtJW2Vo49QvhUhBEW2jn516 TN1ImGWdkOawzdKDennN5vTTxJctsl8KlEiV0zn2oPc/tXmZ4W12lgm15424L9Op g9CovCZcUL6aoUAVR+cS0WiCuiUUuu4l5sHb6Wnz+zJuKImGC0IgXeRFj5uTVqLZ nnUL+iNBdkyS8pkpzmcOlLGLt1x5Pxnmaczum6otmRw7hvqx+kirDZ+rvJuzAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUulDOIng8HpXn+BpgkwIgigXXtgEwHwYDVR0j BBgwFoAUmyLBnYQuRaqEQ5NmaU5MgowwnO4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTcyMTg1OS8wLzlCMjJDMTlEODQyRTQ1QUE4NDQzOTM2NjY5NEU0 QzgyOEMzMDlDRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUIyMkMxOUQ4NDJFNDVBQTg0NDM5MzY2Njk0RTRDODI4QzMwOUNFRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NzIxODU5LzAvMzIzNzJlMzAyZTMy MzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzMzNjM1MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIbAMwwDQYJKoZIhvcNAQELBQADggEBADhD/7QOefW17jfq9n5sP4DmfGMK7coE T+XmfOmKjQyoQF7kLquffMxs5arX0D7VJtJy7xxdy+Kt0itwDGBcIXFYedov6aA6 z0IweEyXaymnEcw3hmY0LamjoJ8aYJNQjQUU8in7Ad/zw3IPGG8CsvvlqC2cOBv1 eIpUjYURihJASWyA+Ov7CIILqBgCXGw6ATxXwyw8lEStjq2FUXTjoj/Zsna+Y0/Q kGtp68Y67lrIL/IAOSyA3ZojT+yk3xPYdc4KoqI6cTYMrzIDpXVBKO4MdJ18haTi MnopIwF74PJ+Tjj9FSulZDySr9qdZWk2rIsv1FG3abKdGFJjmH7GJPY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:38:44 2026 by rpki-client