$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3232332e342e302e302f31342d3234203d3e203435313032.roa File: 3232332e342e302e302f31342d3234203d3e203435313032.roa (raw, json) Hash identifier: PkudfMT7U04HYfBfTPJpW5aL2viVp3XI/Sbv85kog8s= Subject key identifier: CE:38:D0:25:55:62:0A:83:4C:F9:F6:75:B0:37:2E:F1:21:E7:95:1C Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 5528BE3E1248E662FCB3C571E7887A2B4A7AB780 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3232332e342e302e302f31342d3234203d3e203435313032.roa Signing time: Mon 11 May 2026 15:04:00 +0000 ROA not before: Mon 11 May 2026 14:59:00 +0000 ROA not after: Mon 10 May 2027 15:04:00 +0000 asID: 45102 IP address blocks: 223.4.0.0/14 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:28:be:3e:12:48:e6:62:fc:b3:c5:71:e7:88:7a:2b:4a:7a:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: May 11 14:59:00 2026 GMT Not After : May 10 15:04:00 2027 GMT Subject: CN=CE38D02555620A834CF9F675B0372EF121E7951C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a3:c1:2a:08:66:ca:4b:c9:1f:21:4f:ce:9b: fe:70:52:04:12:11:b2:d3:12:11:f5:0d:71:3a:65: d6:34:09:fd:c6:87:6c:c7:df:e8:22:1b:a2:9b:bf: c8:fa:97:8d:4e:fa:b3:46:5c:d9:28:0e:40:7f:e2: 07:50:c1:23:2d:49:aa:3c:cf:92:e8:eb:09:12:16: fc:cb:42:ac:03:c9:76:c5:c5:37:6f:7f:2b:cf:61: 1b:dc:66:0a:3d:f1:ff:8d:46:4a:7f:92:a7:7f:6b: a0:09:ad:f1:08:ef:4d:d7:4e:82:17:69:0a:d4:87: 9a:02:a3:b2:11:f4:22:95:62:e3:57:c1:40:f8:3e: 00:79:5d:af:64:e8:93:47:38:5e:c0:8b:7c:43:aa: 90:b1:a4:c8:94:3f:3e:d4:9f:3c:41:f6:25:04:4d: c9:86:3a:63:08:5d:d3:b8:fa:12:6e:ef:2a:75:64: 33:65:12:ac:b3:16:6e:46:c7:6f:d5:b7:44:54:d3: 07:46:b2:42:9f:38:f4:f5:c9:13:18:64:e1:8f:88: 00:84:8f:bb:cc:1d:12:15:5b:94:65:10:ba:fe:1e: 2f:73:17:6d:81:a5:b8:0b:5a:35:cc:1c:f9:cc:08: 46:8b:81:5f:3c:f6:c9:8f:06:2b:53:c9:4e:ba:72: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:38:D0:25:55:62:0A:83:4C:F9:F6:75:B0:37:2E:F1:21:E7:95:1C X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3232332e342e302e302f31342d3234203d3e203435313032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.4.0.0/14 Signature Algorithm: sha256WithRSAEncryption 55:23:60:31:15:aa:cf:d7:7a:36:33:99:e4:20:f4:50:e0:5a: 92:25:62:33:ca:c2:2e:ad:a3:c7:25:83:53:4e:4d:c5:08:39: 98:d6:cd:07:4f:60:6f:b9:ef:4f:96:68:20:d4:1d:69:d0:1d: d5:6e:35:92:44:dc:e2:e7:7d:54:63:32:52:51:cd:ac:6d:3a: b0:27:e6:2e:47:cd:09:0a:af:9a:96:35:31:d9:3a:d4:e2:7e: cc:bf:9e:8d:d6:af:23:95:3d:76:0c:81:8d:64:70:8e:6e:87: d2:d1:bc:9c:1c:06:9b:56:7c:91:cc:da:ff:80:a9:0d:f7:2e: ee:02:04:f5:15:e6:8e:ac:b7:b0:68:72:34:9a:a3:9a:38:60: a1:2e:16:37:c8:e7:a1:37:31:cd:20:a2:4c:87:a1:65:cc:cb: 58:34:3f:bf:6c:01:c8:03:34:53:f4:02:b6:a3:3c:75:ef:90: 1f:5a:92:be:e7:65:a8:bc:09:93:8c:e9:c3:ff:20:a6:3b:63: 33:a6:f6:f0:a1:9a:46:a6:df:17:a3:66:dc:9b:27:57:be:e5: ee:77:a4:48:5b:b9:00:c0:d6:33:26:fb:e0:eb:ca:ca:84:f0: 7e:69:d3:0c:7a:51:ac:cc:95:fe:59:6b:3f:89:83:c7:1a:46: 2a:cc:ff:2e -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUVSi+PhJI5mL8s8Vx54h6K0p6t4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA1MTExNDU5MDBaFw0yNzA1MTAxNTA0MDBaMDMxMTAvBgNV BAMTKENFMzhEMDI1NTU2MjBBODM0Q0Y5RjY3NUIwMzcyRUYxMjFFNzk1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYo8EqCGbKS8kfIU/Om/5wUgQS EbLTEhH1DXE6ZdY0Cf3Gh2zH3+giG6Kbv8j6l41O+rNGXNkoDkB/4gdQwSMtSao8 z5Lo6wkSFvzLQqwDyXbFxTdvfyvPYRvcZgo98f+NRkp/kqd/a6AJrfEI703XToIX aQrUh5oCo7IR9CKVYuNXwUD4PgB5Xa9k6JNHOF7Ai3xDqpCxpMiUPz7UnzxB9iUE TcmGOmMIXdO4+hJu7yp1ZDNlEqyzFm5Gx2/Vt0RU0wdGskKfOPT1yRMYZOGPiACE j7vMHRIVW5RlELr+Hi9zF22BpbgLWjXMHPnMCEaLgV889smPBitTyU66cm0NAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUzjjQJVViCoNM+fZ1sDcu8SHnlRwwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzIzMjMzMmUzNDJl MzAyZTMwMmYzMTM0MmQzMjM0MjAzZDNlMjAzNDM1MzEzMDMyLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC 3wQwDQYJKoZIhvcNAQELBQADggEBAFUjYDEVqs/XejYzmeQg9FDgWpIlYjPKwi6t o8clg1NOTcUIOZjWzQdPYG+570+WaCDUHWnQHdVuNZJE3OLnfVRjMlJRzaxtOrAn 5i5HzQkKr5qWNTHZOtTifsy/no3WryOVPXYMgY1kcI5uh9LRvJwcBptWfJHM2v+A qQ33Lu4CBPUV5o6st7BocjSao5o4YKEuFjfI56E3Mc0gokyHoWXMy1g0P79sAcgD NFP0ArajPHXvkB9akr7nZai8CZOM6cP/IKY7YzOm9vChmkam3xejZtybJ1e+5e53 pEhbuQDA1jMm++DrysqE8H5p0wx6UazMlf5Zaz+Jg8caRirM/y4= -----END CERTIFICATE-----Generated at Wed May 13 06:19:23 2026 by rpki-client