$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31362e302f32312d3332203d3e20313339313830.roa File: 3230322e3138392e31362e302f32312d3332203d3e20313339313830.roa (raw, json) Hash identifier: jFFOu2GymZSamSuOlfYZVuAiDMzu4oBxvqc01/5LkEg= Subject key identifier: EE:4D:2D:33:4A:3E:A3:3D:E7:59:B5:FB:97:81:82:33:CB:2F:D1:F7 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 711592C8626868AD5FBBB539BBE9DA9E935E07BA Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31362e302f32312d3332203d3e20313339313830.roa Signing time: Mon 01 Jun 2026 19:31:14 +0000 ROA not before: Mon 01 Jun 2026 19:26:14 +0000 ROA not after: Mon 31 May 2027 19:31:14 +0000 asID: 139180 IP address blocks: 202.189.16.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 08:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:15:92:c8:62:68:68:ad:5f:bb:b5:39:bb:e9:da:9e:93:5e:07:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jun 1 19:26:14 2026 GMT Not After : May 31 19:31:14 2027 GMT Subject: CN=EE4D2D334A3EA33DE759B5FB97818233CB2FD1F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:6b:f2:ec:98:55:f3:05:85:8e:c5:af:a4:da: 62:19:08:e7:b3:6e:47:14:76:20:d5:e2:33:53:26: 8b:2d:dc:91:51:74:4e:56:eb:4c:97:20:10:d8:e7: dd:bc:61:cd:4e:e8:b6:d3:a7:de:91:96:d0:f3:9d: 99:53:30:10:b4:41:89:e6:9a:b1:79:d3:d8:e0:90: c1:14:4d:d7:37:a7:c2:25:d9:9c:8c:6b:ec:4a:f8: fc:2c:b9:1a:e8:dc:f8:1a:ae:96:85:39:e7:4c:5c: c7:ea:c2:12:c3:1c:57:84:4b:8b:f3:f7:32:30:a1: 51:f9:91:49:4a:21:f3:27:15:4d:60:64:05:ac:9a: 11:84:1c:36:77:54:5d:20:d3:39:66:0f:1e:d5:b3: d3:84:0a:b4:34:f3:89:18:10:2b:c1:09:a3:40:14: 1b:f1:69:78:2b:80:0e:2d:10:6c:9f:2d:7e:a2:ba: 81:d2:f5:20:ec:d2:c7:37:8f:49:eb:c6:4b:40:c8: ec:23:5e:e9:ed:5e:b1:4e:98:4e:88:16:39:9b:b1: e9:24:48:9b:71:6c:cc:c7:76:fb:da:a3:73:fd:ae: bf:96:33:da:e3:80:04:ad:48:75:ea:4c:9f:af:c9: 2d:4b:b1:bb:9f:d7:2f:b3:f3:1c:e7:7d:a3:7d:c5: ff:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4D:2D:33:4A:3E:A3:3D:E7:59:B5:FB:97:81:82:33:CB:2F:D1:F7 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e31362e302f32312d3332203d3e20313339313830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.16.0/21 Signature Algorithm: sha256WithRSAEncryption a7:1f:be:9e:e6:63:f5:49:54:0c:4e:a3:50:de:4c:48:53:f5: 3b:a5:c2:11:0f:ee:94:da:c0:92:e0:d0:01:89:68:17:a5:7f: c6:65:b6:5f:5a:94:6a:f6:fa:89:77:32:46:94:ad:f1:8f:d5: 7f:ea:98:6c:cb:f9:c6:f5:05:9f:25:19:b6:50:e9:ed:0a:41: 6c:89:b7:83:10:2f:2c:6c:58:54:88:9f:ee:c9:0a:36:51:d6: 23:c3:88:6f:91:38:ee:6a:88:00:a6:78:12:54:69:4a:bd:f6: b6:64:c9:e5:d1:55:91:b0:bc:b4:dd:c7:59:ae:f4:46:f2:08: 5a:6e:94:cc:e1:a7:2e:75:b2:db:7f:5d:9f:c8:e9:ad:62:50: 77:c0:a4:8a:4d:53:ce:60:33:d5:6f:57:85:04:c8:cf:6a:62: 62:33:7d:72:f9:87:1d:81:79:7b:29:12:e9:e7:44:fd:d4:27: 84:58:54:7e:05:b1:b5:84:1f:ce:40:5e:d5:a0:57:cb:20:64: 91:89:08:14:e2:ca:6b:ee:35:fb:6c:41:59:e9:7c:95:51:81: 48:55:ef:28:b4:d0:35:5c:20:44:4c:49:5f:03:79:a2:80:50: 06:25:4f:60:8c:16:a7:5b:7e:d0:62:da:7a:3f:f8:de:05:4c: 06:b0:32:a4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcRWSyGJoaK1fu7U5u+nanpNeB7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjA2MDExOTI2MTRaFw0yNzA1MzExOTMxMTRaMDMxMTAvBgNV BAMTKEVFNEQyRDMzNEEzRUEzM0RFNzU5QjVGQjk3ODE4MjMzQ0IyRkQxRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCha/LsmFXzBYWOxa+k2mIZCOez bkcUdiDV4jNTJost3JFRdE5W60yXIBDY5928Yc1O6LbTp96RltDznZlTMBC0QYnm mrF509jgkMEUTdc3p8Il2ZyMa+xK+PwsuRro3PgarpaFOedMXMfqwhLDHFeES4vz 9zIwoVH5kUlKIfMnFU1gZAWsmhGEHDZ3VF0g0zlmDx7Vs9OECrQ084kYECvBCaNA FBvxaXgrgA4tEGyfLX6iuoHS9SDs0sc3j0nrxktAyOwjXuntXrFOmE6IFjmbsekk SJtxbMzHdvvao3P9rr+WM9rjgAStSHXqTJ+vyS1Lsbuf1y+z8xznfaN9xf//AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU7k0tM0o+oz3nWbX7l4GCM8sv0fcwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzEzNjJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMxMzMzOTMxMzgzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA8q9EDANBgkqhkiG9w0BAQsFAAOCAQEApx++nuZj9UlUDE6jUN5M SFP1O6XCEQ/ulNrAkuDQAYloF6V/xmW2X1qUavb6iXcyRpSt8Y/Vf+qYbMv5xvUF nyUZtlDp7QpBbIm3gxAvLGxYVIif7skKNlHWI8OIb5E47mqIAKZ4ElRpSr32tmTJ 5dFVkbC8tN3HWa70RvIIWm6UzOGnLnWy239dn8jprWJQd8Ckik1TzmAz1W9XhQTI z2piYjN9cvmHHYF5eykS6edE/dQnhFhUfgWxtYQfzkBe1aBXyyBkkYkIFOLKa+41 +2xBWel8lVGBSFXvKLTQNVwgRExJXwN5ooBQBiVPYIwWp1t+0GLaej/43gVMBrAy pA== -----END CERTIFICATE-----Generated at Sun Jun 14 12:38:44 2026 by rpki-client