$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3230332e3230392e3232342e302f31392d3234203d3e203337393633.roa File: 3230332e3230392e3232342e302f31392d3234203d3e203337393633.roa (raw, json) Hash identifier: NFziTk6S3pYvp6vnAmcz2xPZZtFK0ZCAJd4JgrivxjM= Subject key identifier: BD:F1:07:60:F4:76:76:6E:FD:68:C8:B7:48:C2:F7:6E:A3:EE:66:92 Certificate issuer: /CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD Certificate serial: 6FE5B6FE865E0D3C002E6B9573BCC2326007D836 Authority key identifier: C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3230332e3230392e3232342e302f31392d3234203d3e203337393633.roa Signing time: Fri 27 Mar 2026 16:14:13 +0000 ROA not before: Fri 27 Mar 2026 16:09:13 +0000 ROA not after: Fri 26 Mar 2027 16:14:13 +0000 asID: 37963 IP address blocks: 203.209.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 08:19:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:e5:b6:fe:86:5e:0d:3c:00:2e:6b:95:73:bc:c2:32:60:07:d8:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C82667C2BCBB537DEB7A3E415577B2690521D5DD Validity Not Before: Mar 27 16:09:13 2026 GMT Not After : Mar 26 16:14:13 2027 GMT Subject: CN=BDF10760F476766EFD68C8B748C2F76EA3EE6692 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a4:79:fb:a9:43:2e:0e:32:4b:b3:fd:ee:c4: b6:8c:c5:7a:0e:90:8c:ab:9f:8b:6f:be:09:d3:63: de:37:bf:e8:f3:7d:29:7a:e8:58:f9:36:cb:e4:0d: 93:ae:7a:d8:e1:36:57:67:d3:83:8d:86:84:dc:f9: 35:01:c9:14:13:a9:2b:b5:a1:50:f5:7e:55:e3:9c: 0e:2c:74:49:65:9d:4e:b4:9c:16:d2:81:91:fe:d5: 95:be:82:6d:19:13:62:8a:48:37:94:93:29:18:56: 32:83:7a:0a:10:57:be:8f:5d:57:e3:13:d9:fb:8c: 48:06:cc:48:a7:7d:57:4e:5c:55:26:5a:e0:4a:de: 27:fd:ea:5f:ca:fa:b7:72:50:f9:ca:72:73:5c:ce: c5:7c:dd:2a:f8:2a:9a:f4:42:81:ad:c4:d4:5a:cb: 83:ac:fe:4c:9a:7d:34:9b:98:71:9e:43:14:b6:3e: b7:a4:e1:47:d6:0b:65:cf:94:3a:d0:1a:0c:cd:c4: 11:f8:1a:db:00:dc:46:2d:1f:3f:0e:fb:1d:9f:4f: 4a:fa:45:d4:86:19:5f:fa:e1:ff:b4:87:5f:fd:78: 96:d2:fd:bb:5b:bd:6f:42:4c:75:2e:77:87:82:57: 41:f2:72:33:d3:21:04:d4:7f:5e:d2:f4:9b:9b:ce: 1d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:F1:07:60:F4:76:76:6E:FD:68:C8:B7:48:C2:F7:6E:A3:EE:66:92 X509v3 Authority Key Identifier: keyid:C8:26:67:C2:BC:BB:53:7D:EB:7A:3E:41:55:77:B2:69:05:21:D5:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/C82667C2BCBB537DEB7A3E415577B2690521D5DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C82667C2BCBB537DEB7A3E415577B2690521D5DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129459715/0/3230332e3230392e3232342e302f31392d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.209.224.0/19 Signature Algorithm: sha256WithRSAEncryption 22:9d:37:23:97:00:da:43:3e:e0:54:c0:a1:70:3e:11:78:11: 6a:17:28:c3:b1:47:cc:82:34:6c:46:5b:10:16:25:e3:1c:f9: 3b:65:24:80:7b:df:6a:e7:ca:26:11:af:aa:11:b4:e6:bc:f7: 94:93:a2:30:15:3c:75:c9:e3:5d:80:97:e4:a7:26:7f:8b:2f: 69:63:5c:fb:7e:f9:ba:09:27:84:9f:25:d4:a8:2a:d9:e4:4b: 3b:9e:1b:e3:95:ab:7e:f7:71:34:86:58:dd:01:95:0f:35:d1: 09:19:1f:9e:37:bc:29:99:84:64:67:2c:e1:4c:1d:6d:60:e1: 66:a6:7d:7c:f9:5f:57:32:08:dc:cb:71:a0:69:92:42:00:05: c3:43:3d:d2:09:be:d7:f7:ff:17:4f:cb:cd:63:60:3f:ca:fd: f5:aa:95:a6:aa:32:a9:93:84:22:3b:cf:97:2d:1b:52:24:bc: ba:dd:c4:22:6e:84:ea:94:2c:2e:b1:39:b3:8f:70:d1:9c:af: 52:8d:bb:ab:5f:1a:fd:4a:81:d7:30:4c:53:df:8c:70:35:4c: 0e:91:b4:52:87:3e:2a:0b:cd:f5:c0:50:ee:8d:c4:40:ff:80: 91:fc:1d:04:92:ba:e9:21:5e:68:cc:84:9e:69:09:ae:1d:5c: bd:9a:a9:30 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUb+W2/oZeDTwALmuVc7zCMmAH2DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkw NTIxRDVERDAeFw0yNjAzMjcxNjA5MTNaFw0yNzAzMjYxNjE0MTNaMDMxMTAvBgNV BAMTKEJERjEwNzYwRjQ3Njc2NkVGRDY4QzhCNzQ4QzJGNzZFQTNFRTY2OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbpHn7qUMuDjJLs/3uxLaMxXoO kIyrn4tvvgnTY943v+jzfSl66Fj5NsvkDZOuetjhNldn04ONhoTc+TUByRQTqSu1 oVD1flXjnA4sdEllnU60nBbSgZH+1ZW+gm0ZE2KKSDeUkykYVjKDegoQV76PXVfj E9n7jEgGzEinfVdOXFUmWuBK3if96l/K+rdyUPnKcnNczsV83Sr4Kpr0QoGtxNRa y4Os/kyafTSbmHGeQxS2Prek4UfWC2XPlDrQGgzNxBH4GtsA3EYtHz8O+x2fT0r6 RdSGGV/64f+0h1/9eJbS/btbvW9CTHUud4eCV0HycjPTIQTUf17S9Jubzh2LAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUvfEHYPR2dm79aMi3SML3bqPuZpIwHwYDVR0j BBgwFoAUyCZnwry7U33rej5BVXeyaQUh1d0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTQ1OTcxNS8wL0M4MjY2N0MyQkNCQjUzN0RFQjdBM0U0MTU1NzdC MjY5MDUyMUQ1REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzgyNjY3QzJCQ0JCNTM3REVCN0EzRTQxNTU3N0IyNjkwNTIxRDVERC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk0NTk3MTUvMC8zMjMwMzMyZTMy MzAzOTJlMzIzMjM0MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBcvR4DANBgkqhkiG9w0BAQsFAAOCAQEAIp03I5cA2kM+4FTAoXA+ EXgRahcow7FHzII0bEZbEBYl4xz5O2UkgHvfaufKJhGvqhG05rz3lJOiMBU8dcnj XYCX5Kcmf4svaWNc+375ugknhJ8l1Kgq2eRLO54b45WrfvdxNIZY3QGVDzXRCRkf nje8KZmEZGcs4UwdbWDhZqZ9fPlfVzII3MtxoGmSQgAFw0M90gm+1/f/F0/LzWNg P8r99aqVpqoyqZOEIjvPly0bUiS8ut3EIm6E6pQsLrE5s49w0ZyvUo27q18a/UqB 1zBMU9+McDVMDpG0Uoc+KgvN9cBQ7o3EQP+AkfwdBJK66SFeaMyEnmkJrh1cvZqp MA== -----END CERTIFICATE-----Generated at Fri Apr 17 23:54:56 2026 by rpki-client