$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32342e302f32312d3332203d3e20313337363930.roa File: 3230322e3138392e32342e302f32312d3332203d3e20313337363930.roa (raw, json) Hash identifier: JE4FuVtAV0HAMefV5DKOg6L5EZg6/4QeyQFV2c1/r/c= Subject key identifier: 9C:83:7F:B6:5F:D7:49:58:BE:EB:35:71:A6:2A:3F:FB:A0:D0:79:5E Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 21654C7584F4C3D9BCE462A31F1766275D5002B1 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32342e302f32312d3332203d3e20313337363930.roa Signing time: Mon 01 Jun 2026 16:34:18 +0000 ROA not before: Mon 01 Jun 2026 16:29:18 +0000 ROA not after: Mon 31 May 2027 16:34:18 +0000 asID: 137690 IP address blocks: 202.189.24.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:65:4c:75:84:f4:c3:d9:bc:e4:62:a3:1f:17:66:27:5d:50:02:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jun 1 16:29:18 2026 GMT Not After : May 31 16:34:18 2027 GMT Subject: CN=9C837FB65FD74958BEEB3571A62A3FFBA0D0795E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a5:75:27:e6:62:63:b4:99:99:32:a3:d1:73: 54:d4:5f:ce:09:8b:c3:f9:85:46:5e:75:29:c2:46: 11:67:c5:91:ab:68:59:bd:9b:5d:fa:ab:aa:65:d7: 76:f5:81:64:65:58:34:b3:2f:a4:60:22:d6:c9:9d: 39:23:eb:4e:2e:97:cb:47:02:c9:b1:a6:46:5c:f5: 31:ee:c5:19:9e:5a:82:8e:a0:e4:34:e1:49:6c:49: 6f:ff:93:fc:45:f8:40:a8:9f:8e:f9:d5:d5:1b:cb: 37:6a:2a:9b:98:35:20:12:7f:d5:d3:55:de:64:2d: f9:dc:fb:da:91:e6:9d:5a:c9:73:30:36:7b:8d:d4: 28:ff:e9:dc:10:10:6f:92:b5:57:92:ed:26:b0:1b: 8a:9a:ae:4f:24:82:3c:4c:0a:9d:2c:20:47:01:10: 21:49:b0:6b:34:ed:65:24:4f:00:da:d3:20:23:03: 2d:c3:52:5e:bb:8c:55:14:00:38:b1:42:ad:d1:ee: d0:38:39:53:43:64:af:5f:72:46:de:6d:1b:d6:95: b0:33:1d:8e:22:4f:af:b5:17:2e:e5:62:09:36:53: 87:8a:ea:64:f0:67:5a:85:4a:a7:2d:5f:db:93:28: 6c:5d:d9:b9:d8:2b:8e:00:de:28:f4:d6:c6:04:c6: a2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:83:7F:B6:5F:D7:49:58:BE:EB:35:71:A6:2A:3F:FB:A0:D0:79:5E X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e32342e302f32312d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.24.0/21 Signature Algorithm: sha256WithRSAEncryption b3:9d:b6:54:77:2f:cf:8a:cd:02:31:e6:59:8c:72:49:19:48: 8e:2f:8a:da:2f:08:23:78:9b:90:f5:03:bd:05:0d:7b:d9:13: 75:5b:b9:54:43:d9:5d:b8:ad:d5:ae:e9:76:eb:98:92:77:0d: 89:e8:7c:c2:1f:2a:a3:ab:2a:5a:80:21:10:a6:76:30:eb:cd: ed:a1:5b:4b:f3:dc:43:9f:a7:83:8c:7d:87:22:08:3e:cc:ff: 81:41:93:a0:d5:51:72:1e:0d:a4:c4:8b:35:33:09:1c:91:c5: c2:28:28:35:47:b2:e4:6c:99:72:c9:e5:44:dd:b5:ab:5c:5d: 37:b8:5e:c6:19:ae:d7:94:1e:e1:e5:e2:d2:23:58:48:5e:5b: 51:9d:f0:b0:8d:fd:86:bc:7e:d3:a6:ba:9b:2f:db:7f:29:52: 4a:1e:ad:3a:db:eb:6a:f4:e3:22:e0:79:10:d0:25:7f:25:2b: 7a:b0:e1:03:1a:57:ee:f6:6c:6c:a9:24:d5:11:4d:b4:a6:25: 66:78:f1:d1:cb:88:6d:af:c6:78:4c:65:25:74:f9:ce:ee:2d: df:d5:68:3a:0e:5f:69:00:b2:20:50:e3:ff:2c:89:8c:73:0c: 5f:53:9e:a2:7e:f7:4a:05:68:42:ea:60:62:64:02:1d:92:35: df:17:6e:e6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIWVMdYT0w9m85GKjHxdmJ11QArEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjA2MDExNjI5MThaFw0yNzA1MzExNjM0MThaMDMxMTAvBgNV BAMTKDlDODM3RkI2NUZENzQ5NThCRUVCMzU3MUE2MkEzRkZCQTBEMDc5NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrpXUn5mJjtJmZMqPRc1TUX84J i8P5hUZedSnCRhFnxZGraFm9m136q6pl13b1gWRlWDSzL6RgItbJnTkj604ul8tH AsmxpkZc9THuxRmeWoKOoOQ04UlsSW//k/xF+ECon4751dUbyzdqKpuYNSASf9XT Vd5kLfnc+9qR5p1ayXMwNnuN1Cj/6dwQEG+StVeS7SawG4qark8kgjxMCp0sIEcB ECFJsGs07WUkTwDa0yAjAy3DUl67jFUUADixQq3R7tA4OVNDZK9fckbebRvWlbAz HY4iT6+1Fy7lYgk2U4eK6mTwZ1qFSqctX9uTKGxd2bnYK44A3ij01sYExqIBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUnIN/tl/XSVi+6zVxpio/+6DQeV4wHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzIzNDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA8q9GDANBgkqhkiG9w0BAQsFAAOCAQEAs522VHcvz4rNAjHmWYxy SRlIji+K2i8II3ibkPUDvQUNe9kTdVu5VEPZXbit1a7pduuYkncNieh8wh8qo6sq WoAhEKZ2MOvN7aFbS/PcQ5+ng4x9hyIIPsz/gUGToNVRch4NpMSLNTMJHJHFwigo NUey5GyZcsnlRN21q1xdN7hexhmu15Qe4eXi0iNYSF5bUZ3wsI39hrx+06a6my/b fylSSh6tOtvravTjIuB5ENAlfyUrerDhAxpX7vZsbKkk1RFNtKYlZnjx0cuIba/G eExlJXT5zu4t39VoOg5faQCyIFDj/yyJjHMMX1Oeon73SgVoQupgYmQCHZI13xdu 5g== -----END CERTIFICATE-----Generated at Sun Jun 14 06:32:09 2026 by rpki-client