$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34302e302f32312d3332203d3e20313337363930.roa File: 3230322e3138392e34302e302f32312d3332203d3e20313337363930.roa (raw, json) Hash identifier: rX9v8Z0dk5MQw5UdhlD+kvoazUso3Jn/CJ8E8MPuHdE= Subject key identifier: 60:B9:F0:EC:D9:F3:86:4A:3B:D7:7E:FE:A9:D2:90:EC:18:8F:88:20 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 271574EF5F97FCCA48420108415354DA4A1E0214 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34302e302f32312d3332203d3e20313337363930.roa Signing time: Mon 01 Jun 2026 16:30:45 +0000 ROA not before: Mon 01 Jun 2026 16:25:45 +0000 ROA not after: Mon 31 May 2027 16:30:45 +0000 asID: 137690 IP address blocks: 202.189.40.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:15:74:ef:5f:97:fc:ca:48:42:01:08:41:53:54:da:4a:1e:02:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Jun 1 16:25:45 2026 GMT Not After : May 31 16:30:45 2027 GMT Subject: CN=60B9F0ECD9F3864A3BD77EFEA9D290EC188F8820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:1e:c1:64:c0:69:ac:28:f2:40:ba:cb:5e:f9: c1:4a:3f:a4:17:39:93:0f:bb:aa:fb:68:93:f2:87: 98:71:4f:54:71:79:9a:85:d0:ac:4b:ee:7b:fd:a5: 20:81:85:c0:0a:16:4b:45:92:11:05:6d:71:ce:4b: e5:63:ed:42:e8:c9:66:0d:d7:fb:5c:31:10:a9:b8: 77:3c:5c:8e:8d:bd:24:8a:c9:1d:79:62:fc:f1:f9: 92:60:9a:df:95:7f:dd:b2:ad:38:b9:21:a2:e1:ab: 45:e7:28:be:45:64:2e:c5:c0:c7:8d:5d:1e:1b:83: 45:9c:40:bf:44:96:cf:7d:7e:53:4f:7b:a2:20:4f: 2a:4e:fe:4e:72:17:54:d4:67:7c:dc:53:4b:a2:0e: 7e:f7:76:59:b1:71:37:97:75:20:18:82:aa:86:e1: 32:49:b1:6e:a7:ce:43:f8:aa:ca:16:47:2f:2d:03: 1d:7a:5a:ae:b2:30:6e:71:4c:f7:88:03:16:8a:f6: 81:4c:6a:ec:bd:a8:10:1a:7b:b0:6f:ff:25:bd:8a: 93:17:75:c8:c0:5f:c3:28:96:26:72:31:64:ed:64: 73:cf:43:e7:32:dd:35:d4:da:7a:0d:ff:10:2f:7d: 97:0e:8f:9c:9a:b0:a9:82:7c:7f:97:3f:0b:aa:02: a7:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B9:F0:EC:D9:F3:86:4A:3B:D7:7E:FE:A9:D2:90:EC:18:8F:88:20 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3230322e3138392e34302e302f32312d3332203d3e20313337363930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.189.40.0/21 Signature Algorithm: sha256WithRSAEncryption 47:2d:37:c3:31:de:62:fc:ed:c8:d2:5c:29:55:6d:75:15:f8: b6:da:49:c5:7c:e4:ef:f9:cd:ad:75:7b:9e:f6:44:90:f3:13: 11:42:95:4a:fd:bc:d9:2c:a7:6e:c0:9f:5b:b4:71:10:74:b9: 62:11:ee:e6:82:62:c3:63:7c:70:df:68:cc:4a:1a:de:2c:d9: 42:ac:17:6f:66:ff:13:e8:b3:f9:3f:75:6b:28:a2:56:92:81: e3:3f:2c:51:17:17:e8:e1:3b:3e:c9:80:97:94:46:59:21:7f: 3c:5d:0e:3a:92:d4:e7:6c:1b:1d:97:df:cd:ab:10:79:b1:d6: e9:7a:35:aa:19:e6:bb:f8:c5:51:bf:8f:3a:38:b6:55:52:32: 58:86:94:25:50:13:e0:cb:f8:d5:21:bb:44:72:68:54:9f:c3: 72:19:55:86:99:65:21:a5:80:99:6c:89:b4:c4:a7:08:b7:32: b9:63:0d:45:b9:f8:26:aa:03:24:20:90:1c:eb:b9:4d:59:43: c9:6b:ee:bb:e0:ac:2e:0d:8a:a9:b5:de:6d:d2:87:71:f5:84: 5b:6d:ad:54:4f:2d:79:6b:20:fc:22:fd:03:a1:e3:46:4a:1f: 61:df:29:2c:0f:b9:2a:66:bf:3e:fb:52:ff:26:08:19:5b:39: 4d:2b:fc:f9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJxV071+X/MpIQgEIQVNU2koeAhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjA2MDExNjI1NDVaFw0yNzA1MzExNjMwNDVaMDMxMTAvBgNV BAMTKDYwQjlGMEVDRDlGMzg2NEEzQkQ3N0VGRUE5RDI5MEVDMTg4Rjg4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHsFkwGmsKPJAuste+cFKP6QX OZMPu6r7aJPyh5hxT1RxeZqF0KxL7nv9pSCBhcAKFktFkhEFbXHOS+Vj7ULoyWYN 1/tcMRCpuHc8XI6NvSSKyR15Yvzx+ZJgmt+Vf92yrTi5IaLhq0XnKL5FZC7FwMeN XR4bg0WcQL9Els99flNPe6IgTypO/k5yF1TUZ3zcU0uiDn73dlmxcTeXdSAYgqqG 4TJJsW6nzkP4qsoWRy8tAx16Wq6yMG5xTPeIAxaK9oFMauy9qBAae7Bv/yW9ipMX dcjAX8MoliZyMWTtZHPPQ+cy3TXU2noN/xAvfZcOj5yasKmCfH+XPwuqAqc3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUYLnw7Nnzhko7137+qdKQ7BiPiCAwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMjMwMzIyZTMx MzgzOTJlMzQzMDJlMzAyZjMyMzEyZDMzMzIyMDNkM2UyMDMxMzMzNzM2MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA8q9KDANBgkqhkiG9w0BAQsFAAOCAQEARy03wzHeYvztyNJcKVVt dRX4ttpJxXzk7/nNrXV7nvZEkPMTEUKVSv282SynbsCfW7RxEHS5YhHu5oJiw2N8 cN9ozEoa3izZQqwXb2b/E+iz+T91ayiiVpKB4z8sURcX6OE7PsmAl5RGWSF/PF0O OpLU52wbHZffzasQebHW6Xo1qhnmu/jFUb+POji2VVIyWIaUJVAT4Mv41SG7RHJo VJ/DchlVhpllIaWAmWyJtMSnCLcyuWMNRbn4JqoDJCCQHOu5TVlDyWvuu+CsLg2K qbXebdKHcfWEW22tVE8teWsg/CL9A6HjRkofYd8pLA+5Kma/PvtS/yYIGVs5TSv8 +Q== -----END CERTIFICATE-----Generated at Sun Jun 14 04:12:27 2026 by rpki-client