$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa File: 3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa (raw, json) Hash identifier: G61Vnl3NFhiopHNvt8syVAgPV6nOy+o1jchqfaqLE9k= Subject key identifier: 50:4C:44:31:7F:9F:30:54:3D:69:A1:EC:B8:A8:6E:88:7F:5F:85:57 Certificate issuer: /CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Certificate serial: 2569E406432F11C483BACB424534170B36951003 Authority key identifier: B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa Signing time: Fri 24 Apr 2026 09:50:37 +0000 ROA not before: Fri 24 Apr 2026 09:45:37 +0000 ROA not after: Fri 23 Apr 2027 09:50:37 +0000 asID: 23842 IP address blocks: 203.175.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:69:e4:06:43:2f:11:c4:83:ba:cb:42:45:34:17:0b:36:95:10:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B0D124A7DA71F1C7466EB9E0710E74680E5D3172 Validity Not Before: Apr 24 09:45:37 2026 GMT Not After : Apr 23 09:50:37 2027 GMT Subject: CN=504C44317F9F30543D69A1ECB8A86E887F5F8557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fe:76:03:e1:5b:c8:49:c8:db:de:0f:36:f6: 8a:8a:52:37:83:e5:10:16:ca:04:66:42:83:3a:e7: c3:ea:5f:ec:9c:14:de:7a:27:9f:42:25:28:52:8f: c6:88:9a:cd:25:08:27:13:bf:d0:d3:42:a2:86:b3: 21:93:df:5b:51:20:69:bd:86:ac:62:b2:18:24:4f: 7a:1e:f0:4c:3e:88:0a:1b:e1:72:c8:71:17:ca:a2: 0e:69:9a:fe:36:65:ab:7b:73:11:65:88:e2:08:dd: 76:d5:10:21:d8:8c:57:41:31:4d:6b:af:2c:21:75: 1d:53:03:ad:d7:89:a3:15:95:94:4f:93:3a:36:4a: 43:f8:55:58:5e:b2:a8:35:92:e6:20:40:a1:05:59: 46:4b:0c:3a:e2:94:48:b5:9c:bc:c2:b8:47:08:a1: 52:ca:0f:3b:4c:6d:bd:ee:1d:84:a5:1b:56:84:cf: f7:35:e0:64:26:3b:17:94:b8:75:f0:32:7e:21:2d: 94:eb:fb:de:bd:af:f4:96:17:eb:5d:f1:f8:16:cc: 60:38:41:24:47:be:65:cb:eb:b2:30:0b:b4:92:5b: 40:43:df:44:b4:16:fa:98:64:b7:33:63:4b:79:d2: a5:da:48:00:c8:93:59:6d:49:bd:4e:87:7c:a9:27: 29:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:4C:44:31:7F:9F:30:54:3D:69:A1:EC:B8:A8:6E:88:7F:5F:85:57 X509v3 Authority Key Identifier: keyid:B0:D1:24:A7:DA:71:F1:C7:46:6E:B9:E0:71:0E:74:68:0E:5D:31:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B0D124A7DA71F1C7466EB9E0710E74680E5D3172.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099989409597489153/0/3230332e3137352e3133322e302f32342d3234203d3e203233383432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.175.132.0/24 Signature Algorithm: sha256WithRSAEncryption 91:0b:89:74:12:37:93:62:54:73:75:94:b6:ba:18:ef:cd:3c: 05:44:49:c2:bd:d8:9c:e8:fe:fc:e2:71:ff:04:f9:99:7e:46: 2e:29:05:38:bb:64:a9:d9:d3:76:f1:69:27:a4:32:3f:ff:a6: 86:ed:25:cc:72:fd:d7:91:18:3c:21:3b:e6:61:ee:d9:43:be: df:65:bc:02:8e:78:32:bf:52:99:18:49:e8:f2:c4:39:1a:ec: 58:5c:bb:1a:e3:87:99:99:48:1a:97:e7:ae:c4:5c:05:60:98: 29:09:31:ea:65:d0:c9:0b:4f:bf:68:19:09:25:59:51:91:9a: dd:38:f9:c9:da:53:0d:5b:28:51:68:7b:28:57:92:06:c6:3d: 10:18:47:d2:b9:11:2d:0e:4d:fb:92:4f:a5:47:8a:34:81:31: 65:a7:5e:99:82:85:db:be:c9:64:59:cf:52:60:ba:3a:18:74: 8e:db:c7:71:6f:16:ee:bf:7f:60:d8:90:a3:0d:b2:93:c9:50: 35:03:32:88:91:77:a4:bf:73:89:cf:fa:61:42:9c:cd:2d:52: 64:5f:e2:03:94:59:54:63:bc:9f:a4:8d:b3:ff:00:e1:49:c7: c9:e3:5b:ec:44:db:41:12:02:47:80:0f:ef:3e:50:ec:92:9d: 22:6d:be:cf -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJWnkBkMvEcSDustCRTQXCzaVEAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0Njgw RTVEMzE3MjAeFw0yNjA0MjQwOTQ1MzdaFw0yNzA0MjMwOTUwMzdaMDMxMTAvBgNV BAMTKDUwNEM0NDMxN0Y5RjMwNTQzRDY5QTFFQ0I4QTg2RTg4N0Y1Rjg1NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ/nYD4VvIScjb3g829oqKUjeD 5RAWygRmQoM658PqX+ycFN56J59CJShSj8aIms0lCCcTv9DTQqKGsyGT31tRIGm9 hqxishgkT3oe8Ew+iAob4XLIcRfKog5pmv42Zat7cxFliOII3XbVECHYjFdBMU1r rywhdR1TA63XiaMVlZRPkzo2SkP4VVhesqg1kuYgQKEFWUZLDDrilEi1nLzCuEcI oVLKDztMbb3uHYSlG1aEz/c14GQmOxeUuHXwMn4hLZTr+969r/SWF+td8fgWzGA4 QSRHvmXL67IwC7SSW0BD30S0FvqYZLczY0t50qXaSADIk1ltSb1Oh3ypJymVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUUExEMX+fMFQ9aaHsuKhuiH9fhVcwHwYDVR0j BBgwFoAUsNEkp9px8cdGbrngcQ50aA5dMXIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTk4OTQwOTU5NzQ4OTE1My8wL0IwRDEyNEE3REE3MUYxQzc0NjZFQjlFMDcxMEU3 NDY4MEU1RDMxNzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjBEMTI0QTdEQTcxRjFDNzQ2NkVCOUUwNzEwRTc0NjgwRTVEMzE3Mi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTk5ODk0MDk1OTc0ODkxNTMvMC8zMjMwMzMyZTMx MzczNTJlMzEzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM4MzQzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMuvhDANBgkqhkiG9w0BAQsFAAOCAQEAkQuJdBI3k2JUc3WUtroY 7808BURJwr3YnOj+/OJx/wT5mX5GLikFOLtkqdnTdvFpJ6QyP/+mhu0lzHL915EY PCE75mHu2UO+32W8Ao54Mr9SmRhJ6PLEORrsWFy7GuOHmZlIGpfnrsRcBWCYKQkx 6mXQyQtPv2gZCSVZUZGa3Tj5ydpTDVsoUWh7KFeSBsY9EBhH0rkRLQ5N+5JPpUeK NIExZademYKF277JZFnPUmC6Ohh0jtvHcW8W7r9/YNiQow2yk8lQNQMyiJF3pL9z ic/6YUKczS1SZF/iA5RZVGO8n6SNs/8A4UnHyeNb7ETbQRICR4AP7z5Q7JKdIm2+ zw== -----END CERTIFICATE-----Generated at Wed May 13 21:34:47 2026 by rpki-client