$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3230332e39352e3132382e302f32332d3234203d3e2034383038.roa File: 3230332e39352e3132382e302f32332d3234203d3e2034383038.roa (raw, json) Hash identifier: r5nYtZ1bV8qfqfApkLDYfOj428A/V96xIcnp5lpFiB0= Subject key identifier: CA:68:3A:79:4C:54:77:08:B1:10:E6:E5:16:6D:AC:35:69:62:E2:E4 Certificate issuer: /CN=3EC2D884A54E878D848EDE42517466153F747434 Certificate serial: 2544DD7D939A4E4D9313118535AE2B75ED6AB896 Authority key identifier: 3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3230332e39352e3132382e302f32332d3234203d3e2034383038.roa Signing time: Sat 18 Apr 2026 10:31:27 +0000 ROA not before: Sat 18 Apr 2026 10:26:27 +0000 ROA not after: Sat 17 Apr 2027 10:31:27 +0000 asID: 4808 IP address blocks: 203.95.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:44:dd:7d:93:9a:4e:4d:93:13:11:85:35:ae:2b:75:ed:6a:b8:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3EC2D884A54E878D848EDE42517466153F747434 Validity Not Before: Apr 18 10:26:27 2026 GMT Not After : Apr 17 10:31:27 2027 GMT Subject: CN=CA683A794C547708B110E6E5166DAC356962E2E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:8f:64:24:8f:e4:15:c0:31:42:23:04:81:26: bc:ef:28:01:a7:2a:af:9b:de:ed:3c:b9:cb:c4:e8: 4d:3d:5d:25:b6:db:b5:a4:38:a9:ce:1d:72:0a:e6: d3:22:52:d4:34:36:79:1a:f7:59:61:cf:3a:e8:d3: 22:4c:e1:ef:df:d5:ba:d6:2c:bb:e7:fe:5b:e5:43: d8:f7:b7:20:25:67:db:0c:0d:d9:ad:a0:82:9f:1f: 06:dd:6e:b4:7b:2e:f2:09:0a:bb:21:c5:97:fd:db: ae:88:b7:db:b1:3a:68:58:44:14:b9:4e:e3:65:5f: d7:d5:23:9b:68:4e:f7:0e:ab:e3:6f:2f:e3:0e:ff: 6a:cb:02:11:99:52:ec:a5:45:2f:e8:c9:6d:4e:ac: 6f:d1:f6:08:c8:c3:15:0f:40:05:d2:ee:1f:db:c1: 0c:6f:a7:9f:da:15:03:57:5d:34:12:c1:bb:58:e2: 4b:fd:42:28:da:7e:ee:7d:b3:7b:bf:04:b2:4a:b1: 1e:87:2f:f4:6a:49:ff:00:1d:ec:22:8a:b2:2d:33: b9:53:b6:9e:1b:03:13:ba:b9:af:5c:13:1f:49:2b: c0:67:46:8d:55:04:ac:51:d0:86:8d:30:86:b3:c6: df:c5:f5:7b:5b:80:fa:3b:b8:02:88:d7:3a:94:f2: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:68:3A:79:4C:54:77:08:B1:10:E6:E5:16:6D:AC:35:69:62:E2:E4 X509v3 Authority Key Identifier: keyid:3E:C2:D8:84:A5:4E:87:8D:84:8E:DE:42:51:74:66:15:3F:74:74:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3EC2D884A54E878D848EDE42517466153F747434.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3EC2D884A54E878D848EDE42517466153F747434.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723371786242/0/3230332e39352e3132382e302f32332d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.95.128.0/23 Signature Algorithm: sha256WithRSAEncryption 39:12:b0:2c:a9:b7:12:09:60:25:a5:25:f4:ee:a7:23:99:fe: a3:2b:e1:a5:e0:94:ea:ce:22:65:b9:6f:c8:3e:68:8a:44:1d: 7d:6a:c9:fd:a7:79:b9:f5:94:8c:1e:bc:9d:d2:8e:1d:05:cf: 31:d3:f3:81:67:37:e0:72:0b:db:99:00:d3:9a:79:f6:d5:8e: 73:01:13:2f:ba:43:16:b6:64:74:03:db:34:86:ba:c9:0d:f6: 7c:56:ac:a3:f4:3a:77:13:4b:62:2d:51:b8:cf:b6:e3:bc:75: 3f:48:9a:05:95:c6:82:cb:d2:26:a3:a9:22:67:7b:7f:df:12: 69:38:09:c8:e0:e3:1e:0d:e3:a0:bc:95:0f:ad:2f:d5:18:51: fe:9f:fd:9e:72:89:d5:3a:0e:aa:b0:0a:cc:3f:54:f0:1f:03: 97:bc:a8:30:df:98:0c:c4:f2:72:4e:e3:ac:4e:6c:f2:11:d5: 66:e4:75:43:06:e5:7a:10:67:77:e8:2c:54:c8:ea:85:e2:4e: f2:2f:91:b5:4b:c6:f0:57:18:9c:09:88:f8:e5:00:c2:08:7e: 01:78:86:c7:6c:b8:f2:54:c0:df:5c:50:84:ef:3a:9f:1c:db: 87:f0:78:70:4f:62:4b:89:49:df:34:f2:af:6c:8f:fd:05:d3: 7b:c3:82:8c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUJUTdfZOaTk2TExGFNa4rde1quJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUz Rjc0NzQzNDAeFw0yNjA0MTgxMDI2MjdaFw0yNzA0MTcxMDMxMjdaMDMxMTAvBgNV BAMTKENBNjgzQTc5NEM1NDc3MDhCMTEwRTZFNTE2NkRBQzM1Njk2MkUyRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaj2Qkj+QVwDFCIwSBJrzvKAGn Kq+b3u08ucvE6E09XSW227WkOKnOHXIK5tMiUtQ0Nnka91lhzzro0yJM4e/f1brW LLvn/lvlQ9j3tyAlZ9sMDdmtoIKfHwbdbrR7LvIJCrshxZf9266It9uxOmhYRBS5 TuNlX9fVI5toTvcOq+NvL+MO/2rLAhGZUuylRS/oyW1OrG/R9gjIwxUPQAXS7h/b wQxvp5/aFQNXXTQSwbtY4kv9Qijafu59s3u/BLJKsR6HL/RqSf8AHewiirItM7lT tp4bAxO6ua9cEx9JK8BnRo1VBKxR0IaNMIazxt/F9XtbgPo7uAKI1zqU8j1rAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUymg6eUxUdwixEOblFm2sNWli4uQwHwYDVR0j BBgwFoAUPsLYhKVOh42Ejt5CUXRmFT90dDQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MTc4NjI0Mi8wLzNFQzJEODg0QTU0RTg3OEQ4NDhFREU0MjUxNzQ2 NjE1M0Y3NDc0MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0VDMkQ4ODRBNTRFODc4RDg0OEVERTQyNTE3NDY2MTUzRjc0NzQzNC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcxNzg2MjQyLzAvMzIzMDMzMmUzOTM1 MmUzMTMyMzgyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEActfgDANBgkqhkiG9w0BAQsFAAOCAQEAORKwLKm3EglgJaUl9O6nI5n+oyvh peCU6s4iZblvyD5oikQdfWrJ/ad5ufWUjB68ndKOHQXPMdPzgWc34HIL25kA05p5 9tWOcwETL7pDFrZkdAPbNIa6yQ32fFaso/Q6dxNLYi1RuM+247x1P0iaBZXGgsvS JqOpImd7f98SaTgJyODjHg3joLyVD60v1RhR/p/9nnKJ1ToOqrAKzD9U8B8Dl7yo MN+YDMTyck7jrE5s8hHVZuR1QwblehBnd+gsVMjqheJO8i+RtUvG8FcYnAmI+OUA wgh+AXiGx2y48lTA31xQhO86nxzbh/B4cE9iS4lJ3zTyr2yP/QXTe8OCjA== -----END CERTIFICATE-----Generated at Mon Apr 27 11:15:43 2026 by rpki-client