$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e2034383038.roa File: 3230322e38352e3230382e302f32302d3332203d3e2034383038.roa (raw, json) Hash identifier: Y+7zx8Au9w2V9j3JhfhwBhKgmOsTMfqYZ7xxB0F4nFI= Subject key identifier: A0:78:79:BD:87:08:5E:B0:32:12:2C:6B:E0:B2:25:73:14:88:52:18 Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Certificate serial: 0B672F247F2A762D5A8656D5DDEBFEC1D7EBBF87 Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e2034383038.roa Signing time: Tue 28 Apr 2026 06:49:12 +0000 ROA not before: Tue 28 Apr 2026 06:44:12 +0000 ROA not after: Tue 27 Apr 2027 06:49:12 +0000 asID: 4808 IP address blocks: 202.85.208.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:67:2f:24:7f:2a:76:2d:5a:86:56:d5:dd:eb:fe:c1:d7:eb:bf:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Validity Not Before: Apr 28 06:44:12 2026 GMT Not After : Apr 27 06:49:12 2027 GMT Subject: CN=A07879BD87085EB032122C6BE0B2257314885218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1d:77:f6:9c:b9:4a:28:32:52:77:12:3b:6e: ee:03:fe:3f:b1:1d:2b:1d:ac:39:fc:6a:93:dc:ca: 0a:ef:0b:5e:04:3a:b7:f3:a9:85:bd:5e:8b:e6:e0: 98:6b:91:a3:5b:d6:06:4e:f6:5d:bb:88:ec:2d:02: c6:92:a6:3f:c5:cb:ba:fc:1f:b4:08:29:5b:0a:08: 87:b8:c3:65:0a:85:3b:d7:4c:f1:ec:dd:c9:b1:f9: 93:87:d3:66:89:58:27:87:8b:b9:ae:43:cd:b5:45: 30:44:ee:62:b6:f3:55:00:33:06:63:93:e0:fe:4c: b2:21:cd:cf:91:ee:00:2a:df:bc:e3:5a:c9:90:a2: a8:47:a0:86:88:5b:c2:9c:b4:00:fb:03:d0:7a:a6: 0f:ca:8e:a4:97:92:83:28:05:16:27:4d:a4:b0:64: e9:02:bc:6b:9c:1d:3f:85:66:2d:9e:c4:83:ff:2a: cc:0a:9f:e7:5b:2a:1d:15:1e:f1:db:2b:ee:ee:d5: 61:bf:b7:c4:2b:06:b5:c9:f1:e1:0f:2b:71:82:78: 6f:8c:e9:db:21:fd:32:fa:4b:38:03:c3:60:ff:85: f9:14:12:ed:65:93:a3:d2:78:cb:97:0f:1b:85:e6: 94:ad:4b:aa:65:57:b3:68:65:38:6d:56:4e:93:e6: 88:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:78:79:BD:87:08:5E:B0:32:12:2C:6B:E0:B2:25:73:14:88:52:18 X509v3 Authority Key Identifier: keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3230322e38352e3230382e302f32302d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.85.208.0/20 Signature Algorithm: sha256WithRSAEncryption 77:79:ae:47:0b:ba:a0:89:e0:7a:b4:d5:f3:8e:cb:05:b3:b0: 1e:a8:49:89:9d:86:64:43:3b:ca:d0:a9:4d:ed:dc:1a:9a:07: 85:0b:17:6f:7a:89:48:81:cc:9f:64:5e:98:7c:ea:a0:7c:34: 18:a8:a8:67:48:80:6e:49:2c:7a:f6:75:74:db:70:6e:dc:49: 6d:22:33:ca:de:97:5c:ac:53:f8:2d:47:a8:c6:69:5e:62:0b: d4:64:9a:3c:31:a4:7f:ca:e3:31:97:40:ec:0b:e2:dc:43:aa: 8d:78:e5:df:3b:df:20:90:83:90:99:13:0d:87:3b:9f:55:d9: 02:04:2c:20:25:c9:52:1e:23:6d:5a:29:5e:ef:c8:c3:c3:28: e6:fd:53:07:c0:c4:6e:12:0b:9f:d7:e2:01:af:e2:2b:42:dd: 39:42:da:f6:db:63:16:b1:21:0d:9f:ea:f0:98:63:08:4c:2f: 78:b3:1d:b4:0f:ca:bb:1e:b8:2c:ce:5c:22:1e:96:e7:28:c0: 1e:b2:d4:5d:f7:8c:a6:28:f5:d5:e6:55:b2:be:47:18:ed:78: a2:1a:72:4b:18:f2:76:70:b3:a9:8b:96:aa:4c:3f:8b:b6:9d: 4a:0c:21:0f:f7:ed:0b:4d:6b:50:c0:e9:b6:37:20:1e:98:06: b6:c1:cc:1a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUC2cvJH8qdi1ahlbV3ev+wdfrv4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBB NjFDRTA2MTAeFw0yNjA0MjgwNjQ0MTJaFw0yNzA0MjcwNjQ5MTJaMDMxMTAvBgNV BAMTKEEwNzg3OUJEODcwODVFQjAzMjEyMkM2QkUwQjIyNTczMTQ4ODUyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHXf2nLlKKDJSdxI7bu4D/j+x HSsdrDn8apPcygrvC14EOrfzqYW9Xovm4JhrkaNb1gZO9l27iOwtAsaSpj/Fy7r8 H7QIKVsKCIe4w2UKhTvXTPHs3cmx+ZOH02aJWCeHi7muQ821RTBE7mK281UAMwZj k+D+TLIhzc+R7gAq37zjWsmQoqhHoIaIW8KctAD7A9B6pg/KjqSXkoMoBRYnTaSw ZOkCvGucHT+FZi2exIP/KswKn+dbKh0VHvHbK+7u1WG/t8QrBrXJ8eEPK3GCeG+M 6dsh/TL6SzgDw2D/hfkUEu1lk6PSeMuXDxuF5pStS6plV7NoZThtVk6T5ogpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUoHh5vYcIXrAyEixr4LIlcxSIUhgwHwYDVR0j BBgwFoAUM0uT929byqogMOW92M7yIKYc4GEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTM5NDIwNzEzOTk1NDY5My8wLzMzNEI5M0Y3NkY1QkNBQUEyMDMwRTVCREQ4Q0VG MjIwQTYxQ0UwNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBBNjFDRTA2MS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAxMzk0MjA3MTM5OTU0NjkzLzAvMzIzMDMyMmUzODM1 MmUzMjMwMzgyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBMpV0DANBgkqhkiG9w0BAQsFAAOCAQEAd3muRwu6oIngerTV847LBbOwHqhJ iZ2GZEM7ytCpTe3cGpoHhQsXb3qJSIHMn2RemHzqoHw0GKioZ0iAbkksevZ1dNtw btxJbSIzyt6XXKxT+C1HqMZpXmIL1GSaPDGkf8rjMZdA7Avi3EOqjXjl3zvfIJCD kJkTDYc7n1XZAgQsICXJUh4jbVopXu/Iw8Mo5v1TB8DEbhILn9fiAa/iK0LdOULa 9ttjFrEhDZ/q8JhjCEwveLMdtA/Kux64LM5cIh6W5yjAHrLUXfeMpij11eZVsr5H GO14ohpySxjydnCzqYuWqkw/i7adSgwhD/ftC01rUMDptjcgHpgGtsHMGg== -----END CERTIFICATE-----Generated at Wed May 13 14:31:39 2026 by rpki-client