$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3230322e3132332e3132302e302f32322d3232203d3e2039383038.roa File: 3230322e3132332e3132302e302f32322d3232203d3e2039383038.roa (raw, json) Hash identifier: 1TUHWOvjetepPmX7Bs8zce6hkE02EYsYEgORafCuF7c= Subject key identifier: 6D:BE:9C:D7:B4:5B:D2:DE:D4:4B:50:B7:8D:EE:BD:8E:F8:FC:72:E6 Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB Certificate serial: 28B74CE56C89A05253F593B2ADC906ECB82CACB1 Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3230322e3132332e3132302e302f32322d3232203d3e2039383038.roa Signing time: Mon 20 Apr 2026 06:13:41 +0000 ROA not before: Mon 20 Apr 2026 06:08:41 +0000 ROA not after: Mon 19 Apr 2027 06:13:41 +0000 asID: 9808 IP address blocks: 202.123.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b7:4c:e5:6c:89:a0:52:53:f5:93:b2:ad:c9:06:ec:b8:2c:ac:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB Validity Not Before: Apr 20 06:08:41 2026 GMT Not After : Apr 19 06:13:41 2027 GMT Subject: CN=6DBE9CD7B45BD2DED44B50B78DEEBD8EF8FC72E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:46:b9:e0:68:ef:bf:13:74:75:91:c8:85:ab: 31:6e:03:5c:86:d6:07:e7:17:0f:f4:df:44:de:78: 72:c9:15:e5:10:b9:70:8d:22:30:bd:f8:d8:78:11: 8f:0d:8a:7c:5a:9e:41:ed:95:29:f2:d6:b2:55:df: 1f:9b:9b:f7:ce:6a:57:cc:92:2d:7b:f9:b6:6b:6c: a9:a0:f6:8d:65:7b:aa:06:b9:5b:db:31:6b:af:a1: d6:de:32:ed:00:11:4e:55:8d:e4:5e:0d:53:cb:54: ed:e8:1d:f5:e5:0b:b9:dd:85:d9:37:4b:e5:fe:a0: a1:f9:bc:ec:a3:68:03:8a:6d:ef:73:e1:85:76:8c: a8:cb:ab:39:e9:e2:59:aa:0b:ef:5b:ba:5f:eb:49: e4:79:60:50:f6:49:50:6f:00:0c:44:e7:ea:4d:c9: aa:7c:39:76:83:c5:f0:bb:7d:14:1e:83:ef:68:7a: 7a:0d:3e:50:cb:6e:1c:09:da:03:76:75:16:72:dd: 23:97:a2:e4:e3:a3:4b:04:ea:e9:09:f6:11:2e:41: 53:1d:c6:67:ed:19:2f:ea:eb:c1:d7:a7:5c:25:d1: 84:3b:7f:0e:4f:f0:a2:86:04:b5:de:c6:d5:fb:4a: ae:83:94:0a:0c:3f:63:8d:a0:92:d5:bb:7e:d9:9f: cb:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:BE:9C:D7:B4:5B:D2:DE:D4:4B:50:B7:8D:EE:BD:8E:F8:FC:72:E6 X509v3 Authority Key Identifier: keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/3230322e3132332e3132302e302f32322d3232203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.123.120.0/22 Signature Algorithm: sha256WithRSAEncryption 62:96:79:e0:18:85:fc:85:04:62:8c:66:db:d8:e4:af:98:aa: 35:bb:34:fc:dd:59:76:da:fe:99:bc:30:5e:21:dc:88:03:5c: 2c:b3:44:c6:ae:36:53:99:07:4f:ac:5e:58:36:7a:00:6d:a3: ee:07:88:48:58:65:3b:a3:4c:79:58:dd:c1:24:50:91:3e:8b: 4d:a3:7e:ce:ff:e7:d8:b7:8d:c6:01:84:82:6e:19:ba:e2:14: 25:74:4d:f8:1e:c1:0d:94:a1:d9:11:5e:18:e9:84:cb:10:ac: 0e:df:61:72:3a:4a:2b:66:17:09:b2:67:e6:6f:6d:7b:e6:39: e3:0c:8a:4a:ad:ae:bf:a1:ea:44:3c:f8:4a:84:71:5b:8f:f6: b2:77:bf:18:15:9c:8b:a5:c3:8f:58:03:65:ea:86:47:f2:ce: 6f:c4:a5:06:18:3d:28:02:87:cc:48:a7:22:8a:61:bb:bd:12: 38:c7:4f:dd:6d:91:9c:10:82:e3:13:5d:2e:96:e7:55:97:b4: 20:ca:1a:47:c4:10:cd:6b:a4:8f:3c:68:bc:11:18:db:a7:49: 99:9e:00:73:f7:4a:1e:5c:3f:01:0b:99:38:e9:3b:4f:f7:78: d4:60:b4:23:74:64:62:0d:5c:f0:5b:79:1f:24:9f:f3:b7:7c: ee:66:35:28 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKLdM5WyJoFJT9ZOyrckG7LgsrLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG NEM0QzZEQjAeFw0yNjA0MjAwNjA4NDFaFw0yNzA0MTkwNjEzNDFaMDMxMTAvBgNV BAMTKDZEQkU5Q0Q3QjQ1QkQyREVENDRCNTBCNzhERUVCRDhFRjhGQzcyRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDRrngaO+/E3R1kciFqzFuA1yG 1gfnFw/030TeeHLJFeUQuXCNIjC9+Nh4EY8NinxankHtlSny1rJV3x+bm/fOalfM ki17+bZrbKmg9o1le6oGuVvbMWuvodbeMu0AEU5VjeReDVPLVO3oHfXlC7ndhdk3 S+X+oKH5vOyjaAOKbe9z4YV2jKjLqznp4lmqC+9bul/rSeR5YFD2SVBvAAxE5+pN yap8OXaDxfC7fRQeg+9oenoNPlDLbhwJ2gN2dRZy3SOXouTjo0sE6ukJ9hEuQVMd xmftGS/q68HXp1wl0YQ7fw5P8KKGBLXextX7Sq6DlAoMP2ONoJLVu37Zn8vRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUbb6c17Rb0t7US1C3je69jvj8cuYwHwYDVR0j BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4 MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5ODQ4OTI0NTU1MjYwNzIzNS8wLzMyMzAzMjJlMzEz MjMzMmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAsp7eDANBgkqhkiG9w0BAQsFAAOCAQEAYpZ54BiF/IUEYoxm29jkr5iq Nbs0/N1Zdtr+mbwwXiHciANcLLNExq42U5kHT6xeWDZ6AG2j7geISFhlO6NMeVjd wSRQkT6LTaN+zv/n2LeNxgGEgm4ZuuIUJXRN+B7BDZSh2RFeGOmEyxCsDt9hcjpK K2YXCbJn5m9te+Y54wyKSq2uv6HqRDz4SoRxW4/2sne/GBWci6XDj1gDZeqGR/LO b8SlBhg9KAKHzEinIophu70SOMdP3W2RnBCC4xNdLpbnVZe0IMoaR8QQzWukjzxo vBEY26dJmZ4Ac/dKHlw/AQuZOOk7T/d41GC0I3RkYg1c8Ft5HySf87d87mY1KA== -----END CERTIFICATE-----Generated at Wed May 13 14:25:17 2026 by rpki-client