$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa File: 3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa (raw, json) Hash identifier: 8fNA7/e7ezAblkvOUimvp93vFc/b3lK5w+sKMxA5ybc= Subject key identifier: 2C:50:05:F4:57:9C:DF:C2:46:D1:7B:1D:91:B7:65:33:6E:84:CF:FD Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Certificate serial: 32A611EB366611E78FAE059EFF32CE78772E5739 Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa Signing time: Tue 26 May 2026 08:57:12 +0000 ROA not before: Tue 26 May 2026 08:52:12 +0000 ROA not after: Tue 25 May 2027 08:57:12 +0000 asID: 151251 IP address blocks: 203.17.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a6:11:eb:36:66:11:e7:8f:ae:05:9e:ff:32:ce:78:77:2e:57:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Validity Not Before: May 26 08:52:12 2026 GMT Not After : May 25 08:57:12 2027 GMT Subject: CN=2C5005F4579CDFC246D17B1D91B765336E84CFFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ab:a8:8a:0c:ae:57:42:90:5f:62:87:2e:3a: a2:d3:d8:a1:96:ac:93:2b:7c:3e:b7:31:87:f7:91: 00:96:b0:92:c0:f9:3b:52:78:4e:61:5b:6e:b7:2b: 82:c5:50:9e:95:d1:9d:49:41:fc:36:25:6e:b9:c3: 36:43:ca:e0:84:7d:70:af:d8:56:4e:f0:44:cc:9b: be:12:60:76:84:2b:34:21:6b:cb:ea:9d:08:6a:c9: f4:1b:de:e8:be:85:53:56:b1:72:ff:79:6f:c4:37: 6f:da:82:e7:10:50:e3:76:f1:f3:48:44:a6:f2:ff: 50:6d:e8:50:e9:c3:a4:f8:51:a3:f1:c4:fe:e6:b0: e1:06:51:6c:55:24:c6:d7:9b:16:17:41:b5:2c:f2: 9c:06:90:c2:2c:0f:61:13:63:ed:3d:77:dd:1a:13: 79:4a:78:16:42:94:71:b6:1a:06:38:4a:9d:03:da: cc:0c:b5:f1:0d:1a:10:6f:e0:0c:e0:84:9d:43:c5: 62:43:45:55:1b:49:bc:fd:18:cd:6f:75:1d:59:e5: 3b:40:52:d4:01:1e:17:e0:1f:0d:b6:0c:d1:cb:f3: 65:7c:a0:e6:8b:39:b9:b3:50:a6:d9:7a:65:0d:33: 7c:c4:25:08:5f:81:69:25:80:a4:cb:f2:33:a6:bb: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:50:05:F4:57:9C:DF:C2:46:D1:7B:1D:91:B7:65:33:6E:84:CF:FD X509v3 Authority Key Identifier: keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e31372e3234392e302f32342d3234203d3e20313531323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.17.249.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:f2:3c:d1:81:63:b8:dc:0b:1b:0a:fd:3d:9d:c6:91:aa:f1: 5d:fd:15:db:0d:73:ef:36:f6:68:f1:26:77:bf:6d:40:c9:e3: 0b:c5:6b:2d:80:84:b8:b3:04:f3:67:07:6f:37:78:45:a6:b9: 63:f2:f5:de:dd:0c:11:ca:b4:f9:8d:c4:9a:d3:9a:b4:dc:22: f5:11:97:a6:76:f5:18:f7:87:f1:b7:8b:8b:c2:18:c3:15:c1: aa:f6:3f:97:90:d8:a1:4f:ea:a0:17:59:2b:f8:31:81:d1:10: 36:0b:e5:b8:95:9d:c5:e9:a5:09:e4:69:44:35:a6:af:bf:c6: 18:4e:7b:07:e6:1e:ef:63:96:47:a5:74:7a:ab:d1:21:6e:24: a4:f9:ba:c2:a7:17:c0:25:2d:51:bb:e1:cf:bd:92:ca:dc:bc: f6:ef:7e:d5:25:14:b3:22:4c:9b:89:be:72:dd:80:b2:bd:e7: bf:8c:ef:6d:8c:f8:48:3a:f3:87:3a:81:3f:69:5c:83:7a:5a: fa:e5:3c:d4:52:dd:1b:67:bf:86:3d:b8:db:4c:60:a4:81:23: 9e:9c:60:41:4f:e6:3f:01:6e:23:b3:f9:c4:37:d7:e0:22:96: d6:b8:cb:20:71:6a:27:86:3b:c4:b7:50:88:a4:89:d7:f2:61: b2:35:27:a0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMqYR6zZmEeePrgWe/zLOeHcuVzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4 RDM3QzUxRTAeFw0yNjA1MjYwODUyMTJaFw0yNzA1MjUwODU3MTJaMDMxMTAvBgNV BAMTKDJDNTAwNUY0NTc5Q0RGQzI0NkQxN0IxRDkxQjc2NTMzNkU4NENGRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNq6iKDK5XQpBfYocuOqLT2KGW rJMrfD63MYf3kQCWsJLA+TtSeE5hW263K4LFUJ6V0Z1JQfw2JW65wzZDyuCEfXCv 2FZO8ETMm74SYHaEKzQha8vqnQhqyfQb3ui+hVNWsXL/eW/EN2/agucQUON28fNI RKby/1Bt6FDpw6T4UaPxxP7msOEGUWxVJMbXmxYXQbUs8pwGkMIsD2ETY+09d90a E3lKeBZClHG2GgY4Sp0D2swMtfENGhBv4AzghJ1DxWJDRVUbSbz9GM1vdR1Z5TtA UtQBHhfgHw22DNHL82V8oOaLObmzUKbZemUNM3zEJQhfgWklgKTL8jOmu1rpAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQULFAF9Fec38JG0XsdkbdlM26Ez/0wHwYDVR0j BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5 M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjkzOTQxNzkvMC8zMjMwMzMyZTMx MzcyZTMyMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzUzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMsR+TANBgkqhkiG9w0BAQsFAAOCAQEAevI80YFjuNwLGwr9PZ3G karxXf0V2w1z7zb2aPEmd79tQMnjC8VrLYCEuLME82cHbzd4Raa5Y/L13t0MEcq0 +Y3EmtOatNwi9RGXpnb1GPeH8beLi8IYwxXBqvY/l5DYoU/qoBdZK/gxgdEQNgvl uJWdxemlCeRpRDWmr7/GGE57B+Ye72OWR6V0eqvRIW4kpPm6wqcXwCUtUbvhz72S yty89u9+1SUUsyJMm4m+ct2Asr3nv4zvbYz4SDrzhzqBP2lcg3pa+uU81FLdG2e/ hj2420xgpIEjnpxgQU/mPwFuI7P5xDfX4CKW1rjLIHFqJ4Y7xLdQiKSJ1/JhsjUn oA== -----END CERTIFICATE-----Generated at Fri May 29 23:59:14 2026 by rpki-client