$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e322e302f32342d3234203d3e2034363131.roa File: 3230332e3139322e322e302f32342d3234203d3e2034363131.roa (raw, json) Hash identifier: 5kRdUKU+ZXXchqJyoqf+wUpdIG1fnufxQH0iQlauhG0= Subject key identifier: 74:20:7A:C7:78:D0:E5:51:11:A0:2B:18:27:74:29:88:17:AB:EB:B4 Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 1256E69E71667B024BE7B7E9163301CEDAB6CE55 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e322e302f32342d3234203d3e2034363131.roa Signing time: Tue 12 May 2026 01:56:22 +0000 ROA not before: Tue 12 May 2026 01:51:22 +0000 ROA not after: Tue 11 May 2027 01:56:22 +0000 asID: 4611 IP address blocks: 203.192.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:56:e6:9e:71:66:7b:02:4b:e7:b7:e9:16:33:01:ce:da:b6:ce:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 12 01:51:22 2026 GMT Not After : May 11 01:56:22 2027 GMT Subject: CN=74207AC778D0E55111A02B182774298817ABEBB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:57:fa:d7:50:47:48:fb:49:a0:09:02:c6:6f: cd:17:8e:f1:1b:9f:cc:3d:e3:01:5a:f1:e7:ac:9f: d3:91:fa:77:66:05:2a:67:ed:72:f9:c3:2e:02:ea: 34:7d:e6:42:23:9b:e0:9b:0a:bf:87:10:43:9e:a1: eb:ca:ef:94:33:a4:f6:88:32:06:85:ad:90:69:e1: e3:f1:f7:d3:06:20:62:1b:25:e5:81:1d:93:ec:75: 4a:72:cb:20:46:09:94:0c:dd:b9:33:c4:84:ec:3c: ef:7d:58:b4:7d:6c:3b:f1:73:7d:fb:c1:52:06:83: 4f:4b:1f:a1:03:8d:83:84:fd:38:14:1a:6e:10:4e: 71:48:82:5a:81:a4:c9:31:67:cb:e5:d0:77:81:c2: f0:28:d5:3e:33:92:8e:4b:0c:02:b7:6a:db:7d:c6: a6:14:1d:84:44:6f:80:c6:f7:a9:e2:af:1e:1a:96: af:4e:5d:ee:a5:8c:89:8f:99:1f:69:73:88:24:0b: cc:d8:73:ef:e7:0e:78:47:f9:e1:33:76:1d:42:ea: 9e:03:7e:7e:dc:dc:52:c1:23:64:a9:0e:32:97:7d: 82:5a:7b:60:7a:ee:41:7a:1d:42:70:f3:85:4b:93: 38:03:c0:4e:94:81:ec:f8:38:54:e5:95:a0:8c:79: 3c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:20:7A:C7:78:D0:E5:51:11:A0:2B:18:27:74:29:88:17:AB:EB:B4 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e322e302f32342d3234203d3e2034363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.192.2.0/24 Signature Algorithm: sha256WithRSAEncryption a1:70:b5:d6:8f:a4:c0:ec:90:f0:92:48:26:aa:ad:e4:6c:2c: 60:23:d8:4a:89:e6:93:54:40:e8:50:0e:2b:15:fc:60:1f:31: 86:92:86:5d:f6:7a:26:94:aa:ba:28:ea:f7:5d:b8:b8:1e:ed: 41:7d:94:4b:df:f2:8a:b7:f2:d2:b3:18:24:10:c1:16:7d:83: 0d:5e:95:2f:35:bd:04:8d:52:92:22:89:a0:a7:17:87:53:c0: 8c:62:c7:2b:59:60:05:f9:70:5c:75:74:23:ca:85:ba:ee:69: 52:70:2d:14:26:d2:99:35:d7:c0:d1:4b:fe:bc:1c:50:a7:8f: e4:f1:3e:dc:11:22:ba:80:7d:c4:20:38:e3:1c:ee:32:18:cc: 1a:f0:18:52:35:44:92:21:6c:65:6c:e4:4b:b2:c1:e2:27:11: 3b:db:42:08:18:47:4a:6f:8e:a2:2a:56:8b:3e:38:ca:66:6a: a8:4a:f3:f4:7e:1f:a1:d4:13:b1:48:93:74:91:a4:da:dc:d0: 18:49:82:3c:21:18:13:c0:be:4e:87:9a:fd:b2:ba:3d:e0:92: ff:46:2a:1d:57:a3:be:76:15:2b:4b:53:6a:7b:60:7e:a8:4e: cb:e2:82:69:0d:b5:2c:7a:9c:5a:d7:9f:98:14:1a:aa:13:38: 9b:1e:f1:e0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUElbmnnFmewJL57fpFjMBztq2zlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MTIwMTUxMjJaFw0yNzA1MTEwMTU2MjJaMDMxMTAvBgNV BAMTKDc0MjA3QUM3NzhEMEU1NTExMUEwMkIxODI3NzQyOTg4MTdBQkVCQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNV/rXUEdI+0mgCQLGb80XjvEb n8w94wFa8eesn9OR+ndmBSpn7XL5wy4C6jR95kIjm+CbCr+HEEOeoevK75QzpPaI MgaFrZBp4ePx99MGIGIbJeWBHZPsdUpyyyBGCZQM3bkzxITsPO99WLR9bDvxc337 wVIGg09LH6EDjYOE/TgUGm4QTnFIglqBpMkxZ8vl0HeBwvAo1T4zko5LDAK3att9 xqYUHYREb4DG96nirx4alq9OXe6ljImPmR9pc4gkC8zYc+/nDnhH+eEzdh1C6p4D fn7c3FLBI2SpDjKXfYJae2B67kF6HUJw84VLkzgDwE6Ugez4OFTllaCMeTxvAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUdCB6x3jQ5VERoCsYJ3QpiBer67QwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2Mzk4Mzg4MTg3ODI0MTQ3LzAvMzIzMDMzMmUzMTM5 MzIyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLwAIwDQYJKoZIhvcNAQELBQADggEBAKFwtdaPpMDskPCSSCaqreRsLGAj2EqJ 5pNUQOhQDisV/GAfMYaShl32eiaUqroo6vdduLge7UF9lEvf8oq38tKzGCQQwRZ9 gw1elS81vQSNUpIiiaCnF4dTwIxixytZYAX5cFx1dCPKhbruaVJwLRQm0pk118DR S/68HFCnj+TxPtwRIrqAfcQgOOMc7jIYzBrwGFI1RJIhbGVs5EuyweInETvbQggY R0pvjqIqVos+OMpmaqhK8/R+H6HUE7FIk3SRpNrc0BhJgjwhGBPAvk6Hmv2yuj3g kv9GKh1Xo752FStLU2p7YH6oTsvigmkNtSx6nFrXn5gUGqoTOJse8eA= -----END CERTIFICATE-----Generated at Wed May 13 21:31:35 2026 by rpki-client