$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097161405301260290/0/3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa File: 3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa (raw, json) Hash identifier: xubi9W0fDO/ruvLyfjo/nAIpEUwXGp+xWOgUYC+FPJc= Subject key identifier: 77:64:A0:72:CC:74:C8:E2:14:2A:11:62:A0:D3:81:DD:88:90:B9:84 Certificate issuer: /CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Certificate serial: 2BA968679327B871C302E87E068480DDF391DB60 Authority key identifier: 86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa Signing time: Thu 16 Apr 2026 14:09:57 +0000 ROA not before: Thu 16 Apr 2026 14:04:57 +0000 ROA not after: Thu 15 Apr 2027 14:09:57 +0000 asID: 56000 IP address blocks: 223.255.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:a9:68:67:93:27:b8:71:c3:02:e8:7e:06:84:80:dd:f3:91:db:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86543D1F2F4A32A976AD0690E9A23AA2D621AC7D Validity Not Before: Apr 16 14:04:57 2026 GMT Not After : Apr 15 14:09:57 2027 GMT Subject: CN=7764A072CC74C8E2142A1162A0D381DD8890B984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:50:1f:66:58:2c:5b:f3:bb:1d:e3:5c:c2:3e: b5:20:82:14:e8:c0:88:8e:bc:7d:02:21:98:8a:2a: 82:2c:b6:b5:32:62:5f:bc:cf:a8:22:7c:93:31:f6: 92:43:eb:40:f0:95:06:30:a8:e3:34:04:e1:a4:65: 30:7d:b3:3d:63:71:99:0d:7e:51:86:8a:a4:46:d3: 56:2d:2e:91:b2:6b:03:34:3d:e8:5f:36:7c:d6:33: f6:04:f4:25:88:ed:3c:66:26:12:41:16:9c:18:e7: 6a:e3:6c:93:76:df:23:4a:e9:c7:9f:db:eb:0a:c1: f8:5d:fe:97:ce:6a:75:51:c2:fe:bc:70:48:b5:d6: 62:3d:50:ea:ed:7b:85:99:09:c5:70:16:6c:56:10: 7e:0d:fb:c0:45:12:fd:91:aa:de:b5:e7:c9:7e:54: 56:a6:ca:5c:a2:9d:87:f4:57:ab:59:37:b1:85:74: 7c:c0:e3:7d:ac:3d:aa:d8:8a:b1:10:c7:54:86:19: 1c:ba:c0:8f:8f:ad:62:33:4e:68:d2:0a:98:9f:aa: 1d:12:57:6a:50:1b:c4:67:4e:0a:69:37:f8:d7:8b: 3a:67:be:fa:0e:04:e6:16:c2:b5:2c:3b:1a:ce:c4: 0e:1a:60:0b:fd:a4:1c:d2:4a:cd:d8:45:4f:81:6c: ef:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:64:A0:72:CC:74:C8:E2:14:2A:11:62:A0:D3:81:DD:88:90:B9:84 X509v3 Authority Key Identifier: keyid:86:54:3D:1F:2F:4A:32:A9:76:AD:06:90:E9:A2:3A:A2:D6:21:AC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/86543D1F2F4A32A976AD0690E9A23AA2D621AC7D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097161405301260290/0/3232332e3235352e3233382e302f32342d3234203d3e203536303030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.255.238.0/24 Signature Algorithm: sha256WithRSAEncryption 96:50:d8:85:20:bc:a9:5a:4b:21:94:69:d6:84:15:da:7b:e3: d6:bc:d4:8a:4e:4a:a8:52:70:85:66:cd:91:ea:c7:f5:34:77: 96:3a:0d:76:37:f6:61:9d:56:a9:1f:a6:85:01:af:a7:54:cd: e9:1d:a1:9f:1b:55:ed:54:c5:40:b3:13:ba:27:a4:e3:1d:c5: e9:87:67:1e:f4:6e:53:b5:57:e1:26:c5:20:5d:e4:96:7a:29: 1d:92:68:95:85:4c:b3:01:2d:16:90:8f:cc:24:66:ef:62:16: 67:ef:9c:05:bf:0c:29:a0:b5:3c:af:93:10:53:66:f7:bc:80: 13:92:18:15:aa:40:7b:a2:e3:4e:f5:84:be:c7:23:15:fa:af: 77:0f:d4:94:ab:d2:13:db:eb:dc:60:84:a6:9b:5b:3a:c3:19: b7:b0:a0:46:e7:48:f1:4d:c5:2c:8b:57:78:49:15:37:13:fa: 6c:8c:67:92:f4:8f:05:a2:35:61:85:48:28:36:91:36:e9:9a: 2f:81:56:c1:ae:89:78:1e:a1:5d:ef:e8:f3:61:7b:ae:1c:22: 2c:18:1c:6c:ed:9b:04:5b:57:1e:ef:21:de:ea:d3:3c:8d:8a: a0:f6:90:3e:f1:a0:79:c2:69:b6:64:d1:d2:0b:c7:11:fb:49: 88:a5:85:08 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUK6loZ5MnuHHDAuh+BoSA3fOR22AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJE NjIxQUM3RDAeFw0yNjA0MTYxNDA0NTdaFw0yNzA0MTUxNDA5NTdaMDMxMTAvBgNV BAMTKDc3NjRBMDcyQ0M3NEM4RTIxNDJBMTE2MkEwRDM4MUREODg5MEI5ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPUB9mWCxb87sd41zCPrUgghTo wIiOvH0CIZiKKoIstrUyYl+8z6gifJMx9pJD60DwlQYwqOM0BOGkZTB9sz1jcZkN flGGiqRG01YtLpGyawM0PehfNnzWM/YE9CWI7TxmJhJBFpwY52rjbJN23yNK6cef 2+sKwfhd/pfOanVRwv68cEi11mI9UOrte4WZCcVwFmxWEH4N+8BFEv2Rqt6158l+ VFamylyinYf0V6tZN7GFdHzA432sParYirEQx1SGGRy6wI+PrWIzTmjSCpifqh0S V2pQG8RnTgppN/jXizpnvvoOBOYWwrUsOxrOxA4aYAv9pBzSSs3YRU+BbO/TAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUd2Sgcsx0yOIUKhFioNOB3YiQuYQwHwYDVR0j BBgwFoAUhlQ9Hy9KMql2rQaQ6aI6otYhrH0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzE2MTQwNTMwMTI2MDI5MC8wLzg2NTQzRDFGMkY0QTMyQTk3NkFEMDY5MEU5QTIz QUEyRDYyMUFDN0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODY1NDNEMUYyRjRBMzJBOTc2QUQwNjkwRTlBMjNBQTJENjIxQUM3RC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTcxNjE0MDUzMDEyNjAyOTAvMC8zMjMyMzMyZTMy MzUzNTJlMzIzMzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAN//7jANBgkqhkiG9w0BAQsFAAOCAQEAllDYhSC8qVpLIZRp1oQV 2nvj1rzUik5KqFJwhWbNkerH9TR3ljoNdjf2YZ1WqR+mhQGvp1TN6R2hnxtV7VTF QLMTuiek4x3F6YdnHvRuU7VX4SbFIF3klnopHZJolYVMswEtFpCPzCRm72IWZ++c Bb8MKaC1PK+TEFNm97yAE5IYFapAe6LjTvWEvscjFfqvdw/UlKvSE9vr3GCEpptb OsMZt7CgRudI8U3FLItXeEkVNxP6bIxnkvSPBaI1YYVIKDaRNumaL4FWwa6JeB6h Xe/o82F7rhwiLBgcbO2bBFtXHu8h3urTPI2KoPaQPvGgecJptmTR0gvHEftJiKWF CA== -----END CERTIFICATE-----Generated at Sat Apr 18 01:20:54 2026 by rpki-client