$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa File: 3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa (raw, json) Hash identifier: lBCGwmuKofwgcufx94VrX8pzt30gxmwgJFLQKbe8WeA= Subject key identifier: D0:8B:40:7E:FD:D7:4A:49:6E:CE:AF:83:59:99:10:09:36:60:02:E0 Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Certificate serial: 302209248B3F2C5EC160A161037E00BB5D2F4B34 Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa Signing time: Tue 26 May 2026 08:57:12 +0000 ROA not before: Tue 26 May 2026 08:52:12 +0000 ROA not after: Tue 25 May 2027 08:57:12 +0000 asID: 151251 IP address blocks: 203.100.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:22:09:24:8b:3f:2c:5e:c1:60:a1:61:03:7e:00:bb:5d:2f:4b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Validity Not Before: May 26 08:52:12 2026 GMT Not After : May 25 08:57:12 2027 GMT Subject: CN=D08B407EFDD74A496ECEAF8359991009366002E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:3e:7e:04:a8:a5:f0:98:f2:d1:f7:82:58:ce: 65:d4:b8:ca:c4:6b:46:1e:86:39:92:78:b9:78:16: 05:79:7a:02:b3:2b:a0:de:d5:6a:e1:45:1c:5d:7e: b1:2b:74:ae:5b:e7:d2:bd:7c:39:f8:5b:98:34:ba: 7b:08:09:18:74:0b:73:36:3a:89:14:52:bc:8c:0b: 17:a4:a9:7f:df:51:36:2c:b3:50:08:5d:8e:11:88: 8c:73:5b:38:d2:26:c4:37:7f:17:74:51:f5:2a:f8: f2:6f:44:3b:9a:ac:ed:7d:90:61:0b:58:f5:25:65: a7:5c:eb:3b:f8:6b:85:c1:75:b7:1d:91:63:de:77: b7:65:28:43:bc:86:44:f3:61:6e:6e:1b:a0:16:ea: e4:7c:59:7b:ef:fc:00:3b:72:a9:d5:d9:6a:05:6e: 32:dd:72:95:6f:19:76:91:0a:de:f5:3b:60:d2:30: 6a:91:49:c7:7f:09:ad:c2:8a:b9:60:51:e2:5b:21: d2:70:6e:eb:9c:12:32:46:12:8c:b3:60:d7:8c:aa: 2a:80:97:a6:db:42:7e:a6:02:c6:39:01:32:c6:15: b7:50:93:da:45:43:b9:0c:eb:ca:24:c6:4a:6c:11: 57:01:6f:32:ed:29:f0:b2:aa:fc:50:b7:4b:73:e0: 41:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:8B:40:7E:FD:D7:4A:49:6E:CE:AF:83:59:99:10:09:36:60:02:E0 X509v3 Authority Key Identifier: keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3130302e36302e302f32342d3234203d3e20313531323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.100.60.0/24 Signature Algorithm: sha256WithRSAEncryption 63:8a:d0:75:e6:95:4b:c9:fe:0e:88:72:53:0b:fb:d0:e2:bf: b0:f6:dc:f5:7b:91:44:39:eb:5c:09:84:30:e7:d1:9c:2a:25: 62:0c:d8:21:8e:ea:d5:fb:db:cb:b5:4c:cb:b0:4b:0b:90:3d: a2:4d:a2:27:25:5b:f1:d1:62:0c:41:c8:f2:a1:b8:17:81:8f: de:d8:ef:53:53:e3:83:6e:23:08:cb:f9:08:81:f5:16:91:2c: c0:d9:79:90:bb:07:42:a1:cd:65:86:44:eb:d7:80:26:6f:87: 64:fc:50:d8:17:7e:3c:f3:a6:15:aa:6d:6a:19:6e:b6:6b:96: 49:f3:97:ec:17:7a:34:61:c2:17:58:cd:0d:a9:09:56:d3:37: ec:bd:cc:da:5b:4a:52:f8:aa:ec:01:25:d4:9d:d7:18:47:c9: 6b:29:8e:93:69:92:64:7f:08:eb:05:a8:48:05:ac:36:6a:bd: 52:f4:91:da:f1:63:4a:0b:cb:b6:74:d1:7d:e7:1b:ea:c1:8f: f0:52:70:83:79:43:56:74:8c:b1:48:c8:fc:c1:16:a2:62:52: 54:a2:83:4d:45:77:56:84:13:b5:90:20:04:7d:d0:a6:62:69: 9e:5a:d6:a3:39:31:9e:1f:c0:b1:0e:ab:7e:ed:df:18:d1:97: 23:e6:0e:51 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMCIJJIs/LF7BYKFhA34Au10vSzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4 RDM3QzUxRTAeFw0yNjA1MjYwODUyMTJaFw0yNzA1MjUwODU3MTJaMDMxMTAvBgNV BAMTKEQwOEI0MDdFRkRENzRBNDk2RUNFQUY4MzU5OTkxMDA5MzY2MDAyRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzPn4EqKXwmPLR94JYzmXUuMrE a0YehjmSeLl4FgV5egKzK6De1WrhRRxdfrErdK5b59K9fDn4W5g0unsICRh0C3M2 OokUUryMCxekqX/fUTYss1AIXY4RiIxzWzjSJsQ3fxd0UfUq+PJvRDuarO19kGEL WPUlZadc6zv4a4XBdbcdkWPed7dlKEO8hkTzYW5uG6AW6uR8WXvv/AA7cqnV2WoF bjLdcpVvGXaRCt71O2DSMGqRScd/Ca3CirlgUeJbIdJwbuucEjJGEoyzYNeMqiqA l6bbQn6mAsY5ATLGFbdQk9pFQ7kM68okxkpsEVcBbzLtKfCyqvxQt0tz4EG/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU0ItAfv3XSkluzq+DWZkQCTZgAuAwHwYDVR0j BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5 M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMC8zMjMwMzMyZTMx MzAzMDJlMzYzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzUzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMtkPDANBgkqhkiG9w0BAQsFAAOCAQEAY4rQdeaVS8n+DohyUwv7 0OK/sPbc9XuRRDnrXAmEMOfRnColYgzYIY7q1fvby7VMy7BLC5A9ok2iJyVb8dFi DEHI8qG4F4GP3tjvU1Pjg24jCMv5CIH1FpEswNl5kLsHQqHNZYZE69eAJm+HZPxQ 2Bd+PPOmFaptahlutmuWSfOX7Bd6NGHCF1jNDakJVtM37L3M2ltKUviq7AEl1J3X GEfJaymOk2mSZH8I6wWoSAWsNmq9UvSR2vFjSgvLtnTRfecb6sGP8FJwg3lDVnSM sUjI/MEWomJSVKKDTUV3VoQTtZAgBH3QpmJpnlrWozkxnh/AsQ6rfu3fGNGXI+YO UQ== -----END CERTIFICATE-----Generated at Fri May 29 23:54:33 2026 by rpki-client