$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e382e302f32342d3234203d3e2034363131.roa File: 3230332e3139322e382e302f32342d3234203d3e2034363131.roa (raw, json) Hash identifier: ExwddNKPU24UIMMf46gIGo0/55R/RolIT8ID+4HvTfo= Subject key identifier: BF:69:64:12:7D:C1:6E:4D:86:D9:C3:4D:E2:E4:EB:38:D1:B1:E9:CB Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 10D3ED7115C309D68EB08E5B788FDA80FC04F178 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e382e302f32342d3234203d3e2034363131.roa Signing time: Tue 12 May 2026 01:56:23 +0000 ROA not before: Tue 12 May 2026 01:51:23 +0000 ROA not after: Tue 11 May 2027 01:56:23 +0000 asID: 4611 IP address blocks: 203.192.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d3:ed:71:15:c3:09:d6:8e:b0:8e:5b:78:8f:da:80:fc:04:f1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 12 01:51:23 2026 GMT Not After : May 11 01:56:23 2027 GMT Subject: CN=BF6964127DC16E4D86D9C34DE2E4EB38D1B1E9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:3b:b8:6d:8e:97:40:e0:e7:ac:12:fc:c6: e6:42:4a:69:71:72:d4:a1:db:6d:86:dc:9f:09:78: 56:28:96:09:5b:0d:32:f3:31:f3:6c:d9:37:ed:6f: 46:ff:5c:b3:4d:67:6d:18:44:63:f5:21:91:b4:74: b6:6e:7f:b8:e6:0f:c3:ad:26:a4:4c:21:12:37:42: 58:07:c0:b1:9e:c1:8e:e3:50:fc:0e:11:ad:75:9b: 2d:08:f2:cb:52:3f:1b:d6:46:c9:12:b0:ac:17:68: fd:9d:35:0d:11:c1:cb:95:44:42:d4:48:9a:f1:85: 7a:b4:d2:c5:a0:7a:ff:b4:fd:80:33:c5:50:34:1b: a5:3b:95:6d:34:e9:82:94:0b:c0:bc:89:2f:84:d8: 3a:18:e6:c8:c4:f0:32:ab:77:4a:40:39:c8:8a:88: d1:e8:b9:90:2f:3b:c7:da:2d:38:a4:4a:50:22:74: 1b:55:21:e2:e5:c3:ce:56:34:63:b4:fb:97:e9:f6: 05:13:01:80:68:2f:55:08:98:0f:9c:f1:c3:20:c8: 5e:95:e5:d5:20:b3:21:e9:f0:88:11:31:8c:75:29: 20:81:f5:aa:0c:d7:c2:c2:f3:62:d9:da:92:39:a5: 0c:b2:ad:3e:8e:55:a4:33:94:6f:eb:b3:a6:4f:21: 84:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:69:64:12:7D:C1:6E:4D:86:D9:C3:4D:E2:E4:EB:38:D1:B1:E9:CB X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3230332e3139322e382e302f32342d3234203d3e2034363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.192.8.0/24 Signature Algorithm: sha256WithRSAEncryption 04:4a:5b:38:53:d7:c8:ba:43:54:0e:b4:27:74:65:91:f0:15: cb:fe:c0:12:ca:ec:3d:5d:a6:54:02:b0:39:ce:87:9d:17:52: 97:92:62:49:5e:18:69:c3:86:4d:07:bd:61:aa:01:00:15:72: f8:84:0a:97:fe:3e:46:20:c0:fc:22:ca:84:5c:e3:da:1f:16: 62:74:eb:a3:45:a5:ce:7b:bf:3d:15:03:a0:5a:49:1b:84:ed: ee:a3:b9:b5:01:27:6e:a2:d3:53:6f:0c:95:34:80:9e:64:83: 2c:2c:c8:a4:65:32:85:b9:e3:f2:11:0f:1d:90:22:12:37:83: 1e:82:74:a8:72:83:0d:f0:37:79:84:90:9d:a8:ff:ce:be:84: dd:0a:71:94:8d:fa:41:bb:41:1d:12:5a:d1:02:cf:bb:8a:45: 10:d8:a6:0c:fb:63:3a:0e:0a:4d:d2:d5:45:51:97:7a:23:48: 69:20:01:30:9d:de:7a:7e:34:ac:20:f9:51:d4:df:82:97:7f: c4:51:d3:26:cc:3f:c4:d1:f4:2a:35:fd:62:3d:b3:8f:0c:56: 7a:35:9b:df:06:af:9f:31:51:c5:b8:8b:eb:e0:d5:46:3a:7f: c2:ec:56:0e:59:28:82:65:c2:fe:1c:b5:d2:a3:7e:57:c7:36: 32:47:cd:c0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUENPtcRXDCdaOsI5beI/agPwE8XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MTIwMTUxMjNaFw0yNzA1MTEwMTU2MjNaMDMxMTAvBgNV BAMTKEJGNjk2NDEyN0RDMTZFNEQ4NkQ5QzM0REUyRTRFQjM4RDFCMUU5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoOTu4bY6XQODnrBL8xuZCSmlx ctSh222G3J8JeFYolglbDTLzMfNs2Tftb0b/XLNNZ20YRGP1IZG0dLZuf7jmD8Ot JqRMIRI3QlgHwLGewY7jUPwOEa11my0I8stSPxvWRskSsKwXaP2dNQ0RwcuVRELU SJrxhXq00sWgev+0/YAzxVA0G6U7lW006YKUC8C8iS+E2DoY5sjE8DKrd0pAOciK iNHouZAvO8faLTikSlAidBtVIeLlw85WNGO0+5fp9gUTAYBoL1UImA+c8cMgyF6V 5dUgsyHp8IgRMYx1KSCB9aoM18LC82LZ2pI5pQyyrT6OVaQzlG/rs6ZPIYSPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUv2lkEn3Bbk2G2cNN4uTrONGx6cswHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2Mzk4Mzg4MTg3ODI0MTQ3LzAvMzIzMDMzMmUzMTM5 MzIyZTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADLwAgwDQYJKoZIhvcNAQELBQADggEBAARKWzhT18i6Q1QOtCd0ZZHwFcv+wBLK 7D1dplQCsDnOh50XUpeSYkleGGnDhk0HvWGqAQAVcviECpf+PkYgwPwiyoRc49of FmJ066NFpc57vz0VA6BaSRuE7e6jubUBJ26i01NvDJU0gJ5kgywsyKRlMoW54/IR Dx2QIhI3gx6CdKhygw3wN3mEkJ2o/86+hN0KcZSN+kG7QR0SWtECz7uKRRDYpgz7 YzoOCk3S1UVRl3ojSGkgATCd3np+NKwg+VHU34KXf8RR0ybMP8TR9Co1/WI9s48M Vno1m98Gr58xUcW4i+vg1UY6f8LsVg5ZKIJlwv4ctdKjflfHNjJHzcA= -----END CERTIFICATE-----Generated at Wed May 13 21:31:37 2026 by rpki-client