$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa File: 3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa (raw, json) Hash identifier: 155iifkZEs6RHAaqhrEQCAQN53twEduDtnNVPAqFrTI= Subject key identifier: 47:D2:38:52:55:C8:C9:73:D9:0D:6F:53:B7:02:11:EB:3E:0D:DE:FF Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 297F990EED6AB3EA94534538FCA3C5D52AD769E2 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa Signing time: Tue 12 May 2026 01:56:23 +0000 ROA not before: Tue 12 May 2026 01:51:23 +0000 ROA not after: Tue 11 May 2027 01:56:23 +0000 asID: 4611 IP address blocks: 202.123.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:7f:99:0e:ed:6a:b3:ea:94:53:45:38:fc:a3:c5:d5:2a:d7:69:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 12 01:51:23 2026 GMT Not After : May 11 01:56:23 2027 GMT Subject: CN=47D2385255C8C973D90D6F53B70211EB3E0DDEFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:0f:2f:1b:cd:84:89:b0:f5:34:2e:c8:a3: 5d:23:4f:2a:09:b7:23:68:a0:0b:3d:12:1a:85:3e: 8c:a0:4f:4e:25:47:48:4e:ad:b8:97:68:51:14:f0: 3f:13:ea:c7:f6:4e:8d:6b:17:e7:0f:ef:90:e9:cc: a1:e6:e2:1c:2f:f1:a5:30:c3:13:ca:d7:99:2a:4f: 8d:ad:67:23:3b:ca:40:c4:67:45:d5:e0:8b:cf:60: 54:7a:7b:04:50:a6:88:4e:95:9a:8d:81:b4:0a:d8: dc:0b:89:de:55:ef:a7:ba:79:63:5d:7c:37:10:4b: 2c:18:80:30:ab:11:a6:d0:66:0d:8a:65:82:9f:55: 24:29:5e:1f:a7:02:2d:c6:33:b6:7b:b4:6d:ac:73: 7e:73:d7:e0:f9:da:2d:40:26:a3:6e:9f:8d:70:be: f7:2d:49:f8:0a:f4:df:44:c2:c5:1b:c5:45:12:d4: 08:30:85:a9:52:58:64:07:70:7d:64:78:aa:c7:1d: f6:4f:eb:e8:71:bb:94:9b:45:47:6d:1e:78:cc:1c: 3a:3e:ab:d7:9e:ef:c4:83:76:0e:4e:19:02:9c:b9: 89:24:6b:c6:81:25:e3:4a:73:53:3f:35:13:22:f3: 0c:87:b8:c7:bb:4e:db:b7:16:bc:f5:73:bf:ea:22: 62:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D2:38:52:55:C8:C9:73:D9:0D:6F:53:B7:02:11:EB:3E:0D:DE:FF X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230322e3132332e3131302e302f32342d3234203d3e2034363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.123.110.0/24 Signature Algorithm: sha256WithRSAEncryption 8b:67:96:25:61:9a:40:e1:79:72:3b:5c:e6:3b:14:cd:32:09: 14:51:60:7d:a3:c6:d2:21:ad:80:c5:7c:33:c6:6d:c0:01:e1: 3d:23:06:cd:df:3b:a9:9a:e0:36:18:e4:58:87:bb:8f:3e:c1: 90:d4:35:b5:c4:52:b8:ce:6b:d9:b8:1d:69:47:92:a5:92:1d: 0d:71:76:26:98:64:d2:00:f8:4f:2f:c4:2b:db:b3:79:aa:05: 2b:9f:85:b7:a3:40:e8:51:ae:3a:64:3f:50:c0:e7:6f:a2:4f: ce:f4:66:41:7c:8d:c6:af:6d:f2:b2:6a:ed:43:a4:46:f9:9e: 81:6f:7b:88:06:ee:9f:eb:0c:74:dc:b5:e8:11:46:27:dd:a2: 93:d8:27:2d:e4:20:ec:ca:72:b5:73:00:47:a3:55:b1:d4:f8: c9:4a:a8:7e:67:d8:c0:d2:ee:cd:b8:85:f7:2a:dc:e7:49:aa: 09:d1:c8:b8:5a:45:b8:4f:c1:37:09:6e:ae:61:21:12:22:bd: 05:61:02:5b:a2:00:80:b4:60:45:73:2f:fd:9d:f8:0b:08:3b: dd:7f:1f:b1:92:ea:6e:64:a8:ff:2d:e6:0d:3f:e7:fb:f8:12: 7c:63:a7:37:5c:c5:4e:72:b2:be:12:c4:b5:d3:b4:53:e3:16: f5:29:63:7c -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKX+ZDu1qs+qUU0U4/KPF1SrXaeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MTIwMTUxMjNaFw0yNzA1MTEwMTU2MjNaMDMxMTAvBgNV BAMTKDQ3RDIzODUyNTVDOEM5NzNEOTBENkY1M0I3MDIxMUVCM0UwRERFRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Ag8vG82EibD1NC7Io10jTyoJ tyNooAs9EhqFPoygT04lR0hOrbiXaFEU8D8T6sf2To1rF+cP75DpzKHm4hwv8aUw wxPK15kqT42tZyM7ykDEZ0XV4IvPYFR6ewRQpohOlZqNgbQK2NwLid5V76e6eWNd fDcQSywYgDCrEabQZg2KZYKfVSQpXh+nAi3GM7Z7tG2sc35z1+D52i1AJqNun41w vvctSfgK9N9EwsUbxUUS1AgwhalSWGQHcH1keKrHHfZP6+hxu5SbRUdtHnjMHDo+ q9ee78SDdg5OGQKcuYkka8aBJeNKc1M/NRMi8wyHuMe7Ttu3Frz1c7/qImKbAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUR9I4UlXIyXPZDW9TtwIR6z4N3v8wHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwNjM5ODM4ODE4NzgyNDE0Ny8wLzMyMzAzMjJlMzEz MjMzMmUzMTMxMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM2MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMp7bjANBgkqhkiG9w0BAQsFAAOCAQEAi2eWJWGaQOF5cjtc5jsUzTIJ FFFgfaPG0iGtgMV8M8ZtwAHhPSMGzd87qZrgNhjkWIe7jz7BkNQ1tcRSuM5r2bgd aUeSpZIdDXF2Jphk0gD4Ty/EK9uzeaoFK5+Ft6NA6FGuOmQ/UMDnb6JPzvRmQXyN xq9t8rJq7UOkRvmegW97iAbun+sMdNy16BFGJ92ik9gnLeQg7MpytXMAR6NVsdT4 yUqofmfYwNLuzbiF9yrc50mqCdHIuFpFuE/BNwlurmEhEiK9BWECW6IAgLRgRXMv /Z34Cwg73X8fsZLqbmSo/y3mDT/n+/gSfGOnN1zFTnKyvhLEtdO0U+MW9SljfA== -----END CERTIFICATE-----Generated at Wed May 13 21:32:11 2026 by rpki-client