$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa File: 3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa (raw, json) Hash identifier: RU2xtjw/Txm3GYZrp74VxjkWhliptSYkSQCNosJydnE= Subject key identifier: 78:AD:8E:2E:FF:04:6C:E8:13:C6:21:3A:DB:A4:FF:E6:0C:88:3B:99 Certificate issuer: /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Certificate serial: 7A118FD3D4D75A22142E71DCD7500C0566294188 Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa Signing time: Fri 24 Apr 2026 09:50:36 +0000 ROA not before: Fri 24 Apr 2026 09:45:36 +0000 ROA not after: Fri 23 Apr 2027 09:50:36 +0000 asID: 23842 IP address blocks: 203.175.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:11:8f:d3:d4:d7:5a:22:14:2e:71:dc:d7:50:0c:05:66:29:41:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Validity Not Before: Apr 24 09:45:36 2026 GMT Not After : Apr 23 09:50:36 2027 GMT Subject: CN=78AD8E2EFF046CE813C6213ADBA4FFE60C883B99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:fe:7a:83:56:35:6a:7e:55:67:ce:cf:7c: dd:e3:17:0b:7c:05:36:5d:99:77:46:b5:2d:68:ba: 76:30:da:ae:a9:be:78:36:84:ad:0b:8c:dd:b6:2d: 25:b9:40:10:69:0e:09:99:33:97:8f:8e:b4:7b:51: ac:d5:72:81:30:2a:c2:20:c1:26:22:64:fa:23:f1: ee:c7:fd:22:f5:99:4b:1a:be:2f:cc:be:04:b6:82: ec:39:a8:f8:8e:b8:88:64:74:dc:3f:66:c1:b3:70: 54:5e:6d:b0:30:ef:25:d1:bc:d0:4f:1e:1a:62:42: e0:90:bc:86:8c:2e:27:87:96:4b:63:77:90:47:2a: f6:4f:b6:f4:7f:30:6d:8d:d5:aa:d4:e5:7b:de:13: dc:15:0f:de:58:5b:73:8e:96:f8:6e:81:e5:d6:d6: a1:f1:bf:37:67:a0:93:ef:29:c5:fc:48:00:c4:e1: 19:02:78:13:b5:31:95:15:3a:69:9b:0c:25:00:f1: cd:4f:6d:f1:a2:91:ff:ed:39:65:81:6a:89:e0:67: b3:32:70:0e:e7:73:b0:34:56:4e:43:e6:70:dd:37: 74:91:5a:cf:a0:c4:d5:41:90:db:b1:ab:e5:57:a6: 55:2e:6c:c6:49:6e:a1:03:d3:20:04:9c:48:75:b8: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:AD:8E:2E:FF:04:6C:E8:13:C6:21:3A:DB:A4:FF:E6:0C:88:3B:99 X509v3 Authority Key Identifier: keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3132392e302f32342d3234203d3e203233383432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.129.0/24 Signature Algorithm: sha256WithRSAEncryption 80:28:ae:11:0e:8b:92:e9:4d:0d:b2:c7:79:dc:e7:3c:8c:9a: 70:81:ae:6b:f8:e0:00:bb:dc:4e:86:78:ac:34:74:91:83:5a: 64:55:1b:af:1e:e6:67:ad:4d:ff:7a:0e:d2:a9:88:58:a6:13: c2:2c:be:68:bd:55:6a:fd:08:52:b3:78:a0:8d:52:99:21:83: ae:ad:3b:b5:a9:8b:fe:27:ee:a3:a4:6e:58:4b:bf:7c:52:5a: 82:ec:90:96:c1:66:57:1d:57:f0:08:f6:ae:4d:3a:32:c8:0b: d3:0a:6c:8f:22:08:c4:f1:ca:33:3b:61:d7:a8:fc:aa:09:c9: 0e:f7:a9:f7:4a:66:e5:35:36:a4:f1:a1:5a:ca:ef:c2:cd:d8: 87:79:44:69:f4:e1:e9:f4:69:8f:f1:5a:08:56:a5:b4:71:ad: 27:0e:df:e0:1e:ac:77:43:0e:3e:f6:65:82:f6:8d:bb:67:5c: 4d:27:d0:3d:4b:f7:ce:68:f8:af:54:7a:1a:b9:16:e9:b3:16: 72:4a:73:da:f4:c3:d5:57:95:e8:e0:5a:cd:ff:65:24:9c:01: c9:fe:b8:aa:dd:c9:38:b1:14:8a:ba:08:da:51:c0:27:bf:90: 11:1a:07:db:2f:72:a4:8e:8c:6a:0e:d7:58:66:13:98:77:11: 82:53:65:f4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUehGP09TXWiIULnHc11AMBWYpQYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0Njgw RTVEMzE3MjAeFw0yNjA0MjQwOTQ1MzZaFw0yNzA0MjMwOTUwMzZaMDMxMTAvBgNV BAMTKDc4QUQ4RTJFRkYwNDZDRTgxM0M2MjEzQURCQTRGRkU2MEM4ODNCOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjwf56g1Y1an5VZ87PfN3jFwt8 BTZdmXdGtS1ounYw2q6pvng2hK0LjN22LSW5QBBpDgmZM5ePjrR7UazVcoEwKsIg wSYiZPoj8e7H/SL1mUsavi/MvgS2guw5qPiOuIhkdNw/ZsGzcFRebbAw7yXRvNBP HhpiQuCQvIaMLieHlktjd5BHKvZPtvR/MG2N1arU5XveE9wVD95YW3OOlvhugeXW 1qHxvzdnoJPvKcX8SADE4RkCeBO1MZUVOmmbDCUA8c1PbfGikf/tOWWBaongZ7My cA7nc7A0Vk5D5nDdN3SRWs+gxNVBkNuxq+VXplUubMZJbqED0yAEnEh1uIF3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUeK2OLv8EbOgTxiE626T/5gyIO5kwHwYDVR0j BBgwFoAUsNEkp9px8cdGbrngcQ50aA5dMXIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk4OTQwOTU5NzQ4OTE1My8wL0IwRDEyNEE3REE3MUYxQzc0NjZFQjlFMDcxMEU3 NDY4MEU1RDMxNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0NjgwRTVEMzE3Mi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTk5ODk0MDk1OTc0ODkxNTMvMC8zMjMwMzMyZTMx MzczNTJlMzEzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMuvgTANBgkqhkiG9w0BAQsFAAOCAQEAgCiuEQ6LkulNDbLHedzn PIyacIGua/jgALvcToZ4rDR0kYNaZFUbrx7mZ61N/3oO0qmIWKYTwiy+aL1Vav0I UrN4oI1SmSGDrq07tamL/ifuo6RuWEu/fFJaguyQlsFmVx1X8Aj2rk06MsgL0wps jyIIxPHKMzth16j8qgnJDvep90pm5TU2pPGhWsrvws3Yh3lEafTh6fRpj/FaCFal tHGtJw7f4B6sd0MOPvZlgvaNu2dcTSfQPUv3zmj4r1R6GrkW6bMWckpz2vTD1VeV 6OBazf9lJJwByf64qt3JOLEUiroI2lHAJ7+QERoH2y9ypI6Mag7XWGYTmHcRglNl 9A== -----END CERTIFICATE-----Generated at Wed May 13 21:34:47 2026 by rpki-client