$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3231382e3234342e3132382e302f31392d3234203d3e203337393633.roa File: 3231382e3234342e3132382e302f31392d3234203d3e203337393633.roa (raw, json) Hash identifier: iyBkW1fLx32WzjJy8ihcbOC8GoVMn0HY64Rilhb95zY= Subject key identifier: F0:19:D8:D0:DD:6B:41:8D:03:57:33:8F:67:6D:69:D5:4C:99:FA:CC Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 624872AD462383A27C38D75E558F6B37724460AA Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3231382e3234342e3132382e302f31392d3234203d3e203337393633.roa Signing time: Mon 13 Apr 2026 08:17:25 +0000 ROA not before: Mon 13 Apr 2026 08:12:25 +0000 ROA not after: Mon 12 Apr 2027 08:17:25 +0000 asID: 37963 IP address blocks: 218.244.128.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:48:72:ad:46:23:83:a2:7c:38:d7:5e:55:8f:6b:37:72:44:60:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 13 08:12:25 2026 GMT Not After : Apr 12 08:17:25 2027 GMT Subject: CN=F019D8D0DD6B418D0357338F676D69D54C99FACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:9b:06:2b:d1:2c:f0:9f:96:83:a0:2b:1b: a9:5c:d3:93:45:69:a8:f4:89:2a:2e:95:f3:12:86: b7:9a:1a:61:75:f3:c0:02:14:82:67:51:61:de:ce: ab:4d:d5:3f:5d:b0:00:0b:8e:c4:87:fd:37:8a:d1: 87:c0:ff:2c:1f:2a:63:10:a8:e0:4c:39:6d:ad:24: ce:84:c6:77:71:cf:5a:dd:e6:55:6f:09:2d:4f:13: 97:96:14:73:17:39:4a:b6:5c:a8:a0:db:03:87:bc: 61:26:2b:80:5f:45:47:14:55:7d:81:46:dd:d0:75: c7:97:2c:c0:27:9b:cc:2b:8d:07:82:c7:7b:f9:09: 0d:2a:cc:e1:db:d3:a5:11:93:cf:8e:a6:91:3f:10: 59:4b:3e:ac:5e:80:20:47:96:2c:8c:b2:79:ad:4b: 37:fc:da:18:13:d1:6c:60:29:38:aa:d6:7d:7b:d0: ca:88:d2:f7:3c:aa:78:61:ea:24:f3:f3:a4:ea:34: 49:c5:8b:e3:09:ca:7b:1a:5a:33:9b:10:f8:85:28: 72:b3:bb:b9:e3:6b:5a:31:42:31:ea:b8:dd:6f:19: 75:c9:b8:54:bc:ab:f5:13:d1:6a:9d:0c:87:da:a2: f2:0b:c3:96:f6:2a:0b:ee:8c:3d:28:8b:06:11:1c: 7a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:19:D8:D0:DD:6B:41:8D:03:57:33:8F:67:6D:69:D5:4C:99:FA:CC X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3231382e3234342e3132382e302f31392d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.244.128.0/19 Signature Algorithm: sha256WithRSAEncryption 9d:dd:a4:64:5a:62:4b:84:fa:e6:da:30:5e:fa:0a:ca:f4:64: 9c:45:15:23:b6:b9:ad:4e:7e:bc:c8:a3:df:cf:55:71:c0:29: 53:30:cb:f1:49:6c:f8:7c:4b:fa:35:c9:c2:d3:12:d4:4a:4b: 56:07:23:3e:b3:0e:7f:79:e2:e3:d3:27:c0:a6:67:41:48:c8: 4f:b1:9d:69:cd:a9:9d:47:75:6b:5e:3d:39:79:c3:49:2f:3d: eb:38:83:fa:70:ab:53:4f:c0:c7:57:04:cd:61:6a:7b:84:f7: 46:d5:e5:05:8d:9e:8f:cd:18:9b:8f:35:5b:e2:fe:cf:8d:29: 59:23:a8:a7:ca:d1:d1:42:6d:bc:fa:34:32:1c:32:8b:47:47: e0:00:cf:2e:51:52:9f:d8:79:24:de:5f:d1:e2:92:9b:d8:81: be:e2:5a:38:41:f6:79:11:b8:d0:ab:7b:0a:77:a6:dd:81:2e: 29:c5:7d:de:50:57:dc:32:8c:5e:1f:b8:e6:2d:de:fb:81:5b: ca:7b:c0:13:6d:ab:34:15:d0:7c:af:3a:19:c4:3d:66:24:c1: fa:83:b9:9b:4b:5c:f4:5b:c7:84:57:0e:4f:9a:b4:61:a3:e4: d1:bf:7c:64:b8:2b:26:17:12:51:e5:2d:69:a5:2c:ea:3b:d0: 0d:02:fe:b4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYkhyrUYjg6J8ONdeVY9rN3JEYKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MTMwODEyMjVaFw0yNzA0MTIwODE3MjVaMDMxMTAvBgNV BAMTKEYwMTlEOEQwREQ2QjQxOEQwMzU3MzM4RjY3NkQ2OUQ1NEM5OUZBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY25sGK9Es8J+Wg6ArG6lc05NF aaj0iSoulfMShreaGmF188ACFIJnUWHezqtN1T9dsAALjsSH/TeK0YfA/ywfKmMQ qOBMOW2tJM6Exndxz1rd5lVvCS1PE5eWFHMXOUq2XKig2wOHvGEmK4BfRUcUVX2B Rt3QdceXLMAnm8wrjQeCx3v5CQ0qzOHb06URk8+OppE/EFlLPqxegCBHliyMsnmt Szf82hgT0WxgKTiq1n170MqI0vc8qnhh6iTz86TqNEnFi+MJynsaWjObEPiFKHKz u7nja1oxQjHquN1vGXXJuFS8q/UT0WqdDIfaovILw5b2KgvujD0oiwYRHHr7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU8BnY0N1rQY0DVzOPZ21p1UyZ+swwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMC8zMjMxMzgyZTMy MzQzNDJlMzEzMjM4MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBdr0gDANBgkqhkiG9w0BAQsFAAOCAQEAnd2kZFpiS4T65towXvoK yvRknEUVI7a5rU5+vMij389VccApUzDL8Uls+HxL+jXJwtMS1EpLVgcjPrMOf3ni 49MnwKZnQUjIT7Gdac2pnUd1a149OXnDSS896ziD+nCrU0/Ax1cEzWFqe4T3RtXl BY2ej80Ym481W+L+z40pWSOop8rR0UJtvPo0Mhwyi0dH4ADPLlFSn9h5JN5f0eKS m9iBvuJaOEH2eRG40Kt7Cnem3YEuKcV93lBX3DKMXh+45i3e+4FbynvAE22rNBXQ fK86GcQ9ZiTB+oO5m0tc9FvHhFcOT5q0YaPk0b98ZLgrJhcSUeUtaaUs6jvQDQL+ tA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:54:46 2026 by rpki-client