$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3230322e3137332e3232342e302f32302d3230203d3e20313334373732.roa File: 3230322e3137332e3232342e302f32302d3230203d3e20313334373732.roa (raw, json) Hash identifier: +HQdAY6OPuC4EvMXwkZga2V4knchRNrYgwJjJOmU2Z4= Subject key identifier: 63:D5:80:72:4E:3C:64:63:F6:06:F6:0A:00:9D:BF:41:8A:C4:9C:C7 Certificate issuer: /CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF Certificate serial: 368D02A7B2387980B8A3DB65736BD1BFD6D1C79D Authority key identifier: 36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3230322e3137332e3232342e302f32302d3230203d3e20313334373732.roa Signing time: Tue 28 Apr 2026 01:05:10 +0000 ROA not before: Tue 28 Apr 2026 01:00:10 +0000 ROA not after: Tue 27 Apr 2027 01:05:10 +0000 asID: 134772 IP address blocks: 202.173.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:50:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:8d:02:a7:b2:38:79:80:b8:a3:db:65:73:6b:d1:bf:d6:d1:c7:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=363FDE3F30761CEFB41D458915BBBC8D91B434CF Validity Not Before: Apr 28 01:00:10 2026 GMT Not After : Apr 27 01:05:10 2027 GMT Subject: CN=63D580724E3C6463F606F60A009DBF418AC49CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a8:bf:7a:51:18:33:82:12:a3:bc:1f:1b:a3: f4:46:40:96:5f:ae:2f:4e:b4:f9:a6:45:2d:4c:96: e3:4c:e9:c1:98:ed:e6:fb:5a:50:24:07:9c:a0:34: 0e:22:38:9b:c8:a2:7b:76:45:fe:f0:b7:ea:59:d7: 79:70:50:01:9c:48:4a:1a:a4:1d:d7:32:a7:e4:da: 6d:a2:66:e9:25:65:58:76:f9:51:5c:10:87:5c:df: 5c:45:ff:a6:03:fa:d5:ee:b8:f2:65:a0:44:df:d1: 7a:af:e9:a7:96:d8:47:c1:d7:c6:34:05:74:9f:fd: f5:74:41:60:25:6d:d5:e6:93:9c:ca:e9:21:02:d4: ec:e9:6f:1f:00:96:91:dc:42:46:52:5d:25:76:21: d6:d3:5b:40:23:c6:12:10:1d:e3:7c:38:ba:3b:7d: b6:f5:74:83:11:1c:43:9d:9a:40:57:0f:74:10:d7: 14:ce:82:63:8e:1b:fd:7a:3b:ee:a5:04:ab:5d:86: 00:de:b0:5b:fa:ea:a5:38:f2:50:d7:73:0a:b0:b5: 41:76:b5:2e:07:99:50:63:a3:dd:9a:ef:2a:c5:8a: 97:0f:ae:5e:33:c3:37:19:dc:c5:78:01:0a:59:04: 78:01:53:21:01:9a:ee:7d:04:2b:bc:d6:1c:6c:dd: 97:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D5:80:72:4E:3C:64:63:F6:06:F6:0A:00:9D:BF:41:8A:C4:9C:C7 X509v3 Authority Key Identifier: keyid:36:3F:DE:3F:30:76:1C:EF:B4:1D:45:89:15:BB:BC:8D:91:B4:34:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/363FDE3F30761CEFB41D458915BBBC8D91B434CF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/363FDE3F30761CEFB41D458915BBBC8D91B434CF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100942521481035778/0/3230322e3137332e3232342e302f32302d3230203d3e20313334373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.173.224.0/20 Signature Algorithm: sha256WithRSAEncryption 88:35:c2:c3:fd:c1:bc:bd:5b:1d:30:bd:14:5b:ee:36:92:e8: c5:d9:ac:91:8f:81:7f:7d:6c:e8:b7:18:66:a6:73:66:bb:d4: 18:58:98:ce:a2:ae:60:11:5b:0f:07:fb:6a:b2:26:4c:4f:2e: fb:23:da:ee:a9:13:b1:c1:f4:85:bd:7b:c1:13:8b:eb:24:a1: e7:8d:11:b9:05:0a:c9:e6:d0:ef:9d:87:79:f6:ff:6b:24:85: 15:fd:8a:ad:9e:17:08:3e:ec:cc:e4:b3:29:d3:47:0b:43:02: 80:7b:14:3b:9c:3a:1d:72:64:0e:65:e2:df:1d:4e:ba:90:f3: e6:8b:d5:80:ba:5e:d2:5e:b8:00:41:22:ae:05:d8:d9:9e:2e: f8:42:41:51:20:a7:1a:f5:fc:fc:e1:54:fb:3d:d6:dc:fb:b4: 5e:3b:f2:f8:e9:4b:7b:d3:4e:9c:2f:94:d4:3f:9c:83:59:b5: 10:2b:9f:61:cf:e5:1e:94:be:5d:6b:a0:b3:b1:3f:2d:c7:ec: bf:ee:2f:c6:d1:2e:69:92:ac:f7:41:97:9e:e9:49:60:ac:87: 89:a9:58:a3:ef:7f:7f:f1:d8:3f:19:a9:21:8d:ea:e4:97:b0: 6a:cc:83:4b:0d:ba:a6:ed:97:a9:66:83:ea:e9:f6:6e:2a:d9: 81:26:55:6e -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUNo0Cp7I4eYC4o9tlc2vRv9bRx50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5 MUI0MzRDRjAeFw0yNjA0MjgwMTAwMTBaFw0yNzA0MjcwMTA1MTBaMDMxMTAvBgNV BAMTKDYzRDU4MDcyNEUzQzY0NjNGNjA2RjYwQTAwOURCRjQxOEFDNDlDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrqL96URgzghKjvB8bo/RGQJZf ri9OtPmmRS1MluNM6cGY7eb7WlAkB5ygNA4iOJvIont2Rf7wt+pZ13lwUAGcSEoa pB3XMqfk2m2iZuklZVh2+VFcEIdc31xF/6YD+tXuuPJloETf0Xqv6aeW2EfB18Y0 BXSf/fV0QWAlbdXmk5zK6SEC1Ozpbx8AlpHcQkZSXSV2IdbTW0AjxhIQHeN8OLo7 fbb1dIMRHEOdmkBXD3QQ1xTOgmOOG/16O+6lBKtdhgDesFv66qU48lDXcwqwtUF2 tS4HmVBjo92a7yrFipcPrl4zwzcZ3MV4AQpZBHgBUyEBmu59BCu81hxs3Ze/AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUY9WAck48ZGP2BvYKAJ2/QYrEnMcwHwYDVR0j BBgwFoAUNj/ePzB2HO+0HUWJFbu8jZG0NM8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk0MjUyMTQ4MTAzNTc3OC8wLzM2M0ZERTNGMzA3NjFDRUZCNDFENDU4OTE1QkJC QzhEOTFCNDM0Q0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzYzRkRFM0YzMDc2MUNFRkI0MUQ0NTg5MTVCQkJDOEQ5MUI0MzRDRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTAwOTQyNTIxNDgxMDM1Nzc4LzAvMzIzMDMyMmUz MTM3MzMyZTMyMzIzNDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzNDM3Mzcz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBMqt4DANBgkqhkiG9w0BAQsFAAOCAQEAiDXCw/3BvL1bHTC9 FFvuNpLoxdmskY+Bf31s6LcYZqZzZrvUGFiYzqKuYBFbDwf7arImTE8u+yPa7qkT scH0hb17wROL6ySh540RuQUKyebQ752Hefb/aySFFf2KrZ4XCD7szOSzKdNHC0MC gHsUO5w6HXJkDmXi3x1OupDz5ovVgLpe0l64AEEirgXY2Z4u+EJBUSCnGvX8/OFU +z3W3Pu0Xjvy+OlLe9NOnC+U1D+cg1m1ECufYc/lHpS+XWugs7E/Lcfsv+4vxtEu aZKs90GXnulJYKyHialYo+9/f/HYPxmpIY3q5JewasyDSw26pu2XqWaD6un2birZ gSZVbg== -----END CERTIFICATE-----Generated at Wed May 13 11:49:55 2026 by rpki-client