$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/33392e39372e3230342e302f32322d3234203d3e203234343239.roa File: 33392e39372e3230342e302f32322d3234203d3e203234343239.roa (raw, json) Hash identifier: iny87YUEAB3fSJLMVeAJyfj8A+9xxg8FOPLYl2lCrRo= Subject key identifier: C5:36:AB:84:CB:30:DC:16:AF:3F:FF:79:90:A4:DC:5E:96:7C:4C:9E Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 764179F1BAB9F30D8BC6E2795F668E050D81CABC Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/33392e39372e3230342e302f32322d3234203d3e203234343239.roa Signing time: Tue 12 May 2026 09:07:34 +0000 ROA not before: Tue 12 May 2026 09:02:34 +0000 ROA not after: Tue 11 May 2027 09:07:34 +0000 asID: 24429 IP address blocks: 39.97.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:41:79:f1:ba:b9:f3:0d:8b:c6:e2:79:5f:66:8e:05:0d:81:ca:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: May 12 09:02:34 2026 GMT Not After : May 11 09:07:34 2027 GMT Subject: CN=C536AB84CB30DC16AF3FFF7990A4DC5E967C4C9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6e:72:f1:15:6e:65:5a:a6:f8:0d:24:4a:b2: 6c:fa:db:53:cc:ef:46:e2:09:eb:b8:33:3d:50:b8: 5a:e5:86:61:1f:75:36:ba:3c:14:6e:dd:d0:e0:e4: 74:df:90:ef:f7:ec:d6:11:26:1e:e6:86:85:c8:b8: 16:81:b4:b9:7c:db:b2:ea:27:02:ad:b6:db:2e:a2: 78:8e:21:a1:2c:77:89:5d:cd:b1:2d:db:7b:28:ed: 98:10:d9:5e:40:89:4c:6b:58:7d:fc:e2:1e:f1:46: 69:f4:da:be:24:d2:9c:e6:36:20:97:98:39:95:6a: 2c:5d:0f:ac:e0:1d:00:06:19:8a:9a:cf:3c:f7:10: 2e:08:4a:08:8b:17:bb:44:41:3b:28:8b:46:c3:39: 82:00:d1:06:05:91:3a:ef:27:78:47:23:77:98:58: cb:d9:55:b7:90:bd:49:62:35:41:e9:a2:71:75:37: a0:85:15:30:6a:04:e7:49:79:c3:2b:35:82:ad:5e: b5:0c:49:4d:c2:da:b3:c0:68:8b:38:65:b3:1f:d5: 60:7f:65:8e:58:4c:3c:12:35:68:ba:e0:ee:2f:92: 48:82:2e:4c:42:5f:db:dc:c8:c4:fd:3f:42:ef:12: af:4e:09:8d:e8:62:f5:c0:0d:04:8f:05:72:9d:65: 05:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:36:AB:84:CB:30:DC:16:AF:3F:FF:79:90:A4:DC:5E:96:7C:4C:9E X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/33392e39372e3230342e302f32322d3234203d3e203234343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 39.97.204.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:91:22:7e:c3:ba:41:80:35:29:4e:32:fa:60:fe:64:d4:72: 3a:ba:2b:06:f2:e3:15:5d:7e:b7:bd:8c:06:ec:fc:fd:fb:ca: 73:02:09:fc:a8:98:97:a8:6d:d3:2b:8a:b1:34:49:e4:40:58: 2a:2f:49:c9:a6:09:64:a8:7b:0e:fa:b0:b9:0f:d4:57:c5:1e: b1:5b:63:86:9d:2f:36:7f:62:12:a2:1c:d5:bc:8e:12:97:d0: 33:9d:c6:ec:30:51:db:25:a1:4e:96:f3:61:af:00:8f:2c:e3: e8:9e:de:0b:00:0d:1c:bf:88:f4:6b:e3:82:37:b0:b4:73:54: 40:a1:49:27:59:57:a1:b3:0b:59:0b:97:38:f9:2e:d9:00:e9: 91:cd:3e:12:f3:ad:99:09:03:04:ee:82:14:5a:6c:77:f0:cc: 0b:02:db:e1:48:bb:d5:86:9e:df:7c:61:f6:e9:b8:ed:e9:6f: d4:eb:d9:bc:88:2a:78:d7:ed:62:23:5d:80:f8:6e:26:6c:d8: eb:1b:60:27:00:94:82:31:a8:9a:3f:d9:f3:10:7e:99:5c:6f: 07:29:0d:b3:11:f9:b7:d8:09:48:38:3a:3e:c2:ad:eb:fa:ff: 2c:80:c7:ab:27:fd:1e:1a:cd:c4:49:b7:b1:76:c7:46:89:1b: 82:5c:4c:ac -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdkF58bq58w2LxuJ5X2aOBQ2ByrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA1MTIwOTAyMzRaFw0yNzA1MTEwOTA3MzRaMDMxMTAvBgNV BAMTKEM1MzZBQjg0Q0IzMERDMTZBRjNGRkY3OTkwQTREQzVFOTY3QzRDOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCybnLxFW5lWqb4DSRKsmz621PM 70biCeu4Mz1QuFrlhmEfdTa6PBRu3dDg5HTfkO/37NYRJh7mhoXIuBaBtLl827Lq JwKtttsuoniOIaEsd4ldzbEt23so7ZgQ2V5AiUxrWH384h7xRmn02r4k0pzmNiCX mDmVaixdD6zgHQAGGYqazzz3EC4ISgiLF7tEQTsoi0bDOYIA0QYFkTrvJ3hHI3eY WMvZVbeQvUliNUHponF1N6CFFTBqBOdJecMrNYKtXrUMSU3C2rPAaIs4ZbMf1WB/ ZY5YTDwSNWi64O4vkkiCLkxCX9vcyMT9P0LvEq9OCY3oYvXADQSPBXKdZQUlAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUxTarhMsw3BavP/95kKTcXpZ8TJ4wHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzMzOTJlMzkzNzJl MzIzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNDM0MzIzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAidhzDANBgkqhkiG9w0BAQsFAAOCAQEAPZEifsO6QYA1KU4y+mD+ZNRyOror BvLjFV1+t72MBuz8/fvKcwIJ/KiYl6ht0yuKsTRJ5EBYKi9JyaYJZKh7DvqwuQ/U V8UesVtjhp0vNn9iEqIc1byOEpfQM53G7DBR2yWhTpbzYa8Ajyzj6J7eCwANHL+I 9GvjgjewtHNUQKFJJ1lXobMLWQuXOPku2QDpkc0+EvOtmQkDBO6CFFpsd/DMCwLb 4Ui71Yae33xh9um47elv1OvZvIgqeNftYiNdgPhuJmzY6xtgJwCUgjGomj/Z8xB+ mVxvBykNsxH5t9gJSDg6PsKt6/r/LIDHqyf9HhrNxEm3sXbHRokbglxMrA== -----END CERTIFICATE-----Generated at Wed May 13 12:46:35 2026 by rpki-client