$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3139312e322e302f32342d3234203d3e20313531323531.roa File: 3230332e3139312e322e302f32342d3234203d3e20313531323531.roa (raw, json) Hash identifier: e6+G3ic+FYJSXMDF4S5renCxEofbarg+TsDpBpy5bJM= Subject key identifier: 24:31:21:D9:34:80:60:26:78:05:AD:39:A6:CA:AC:D6:06:BE:73:E0 Certificate issuer: /CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Certificate serial: 6703DBFE0A71DE0A0581E724F1145A9A4E3F34B1 Authority key identifier: 13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3139312e322e302f32342d3234203d3e20313531323531.roa Signing time: Tue 26 May 2026 08:57:12 +0000 ROA not before: Tue 26 May 2026 08:52:12 +0000 ROA not after: Tue 25 May 2027 08:57:12 +0000 asID: 151251 IP address blocks: 203.191.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:03:db:fe:0a:71:de:0a:05:81:e7:24:f1:14:5a:9a:4e:3f:34:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E Validity Not Before: May 26 08:52:12 2026 GMT Not After : May 25 08:57:12 2027 GMT Subject: CN=243121D9348060267805AD39A6CAACD606BE73E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:03:53:94:dc:81:5a:86:56:89:aa:cd:a6:59: d9:32:25:c2:7a:67:9b:73:2f:90:f2:37:89:fa:78: 2a:75:3e:ee:9e:79:e7:b2:08:18:5e:4d:b3:4a:77: 78:5c:41:5c:0c:da:3f:be:65:ff:9f:70:74:09:3e: 42:44:91:90:df:cb:a9:69:d2:79:a6:8a:b6:0d:bd: 10:b2:d1:0a:4c:0a:0a:4b:16:af:05:66:f0:f1:61: ee:a6:71:d3:b9:fe:27:48:cc:30:6e:5b:8c:91:bc: e7:5a:15:a8:61:75:7a:8b:51:ff:e5:46:52:6a:9e: 01:c7:a8:a2:56:27:21:44:24:9a:35:87:64:61:e7: c4:d7:cc:37:b9:8e:e1:de:e9:6c:d4:78:f3:16:19: f6:26:ca:b4:45:86:c8:44:33:ea:67:7c:cc:c1:f7: d7:1d:64:4c:e8:91:da:b7:de:03:92:1f:8e:a0:fd: 12:b0:48:83:a0:46:74:8a:a2:9f:c3:a8:fb:ca:0e: 08:39:36:aa:1e:94:94:82:db:9a:0e:50:d8:3c:79: b2:99:20:a3:7c:88:27:20:b4:43:da:a1:08:a2:36: ca:35:39:c1:b1:8a:27:6b:08:f8:51:69:77:06:6b: 0d:c4:d8:aa:c0:4b:cf:bf:19:f1:32:23:1f:1f:79: 6a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:31:21:D9:34:80:60:26:78:05:AD:39:A6:CA:AC:D6:06:BE:73:E0 X509v3 Authority Key Identifier: keyid:13:4A:C3:67:4D:05:C4:DD:EB:3F:BE:E5:E9:6B:93:EA:8D:37:C5:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/134AC3674D05C4DDEB3FBEE5E96B93EA8D37C51E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129394179/0/3230332e3139312e322e302f32342d3234203d3e20313531323531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.191.2.0/24 Signature Algorithm: sha256WithRSAEncryption 56:2f:97:b5:3e:16:fc:fe:2c:f6:e7:96:b1:f2:15:31:94:d6: ea:25:d0:17:d3:68:da:2c:45:28:8b:21:77:12:f2:31:b7:a9: 7c:9b:b2:18:16:3a:35:ae:d2:e9:ab:19:77:d7:1a:ec:df:47: 11:7e:97:7f:e0:79:70:1c:90:ba:35:39:db:5e:4d:c2:fb:b5: 06:7a:e6:c0:de:61:05:51:00:c5:a8:66:03:29:03:9b:1d:63: a5:b4:06:97:46:9a:41:fa:ea:37:33:bf:6e:8c:8d:0a:39:b5: f4:5b:0c:a8:1b:19:dc:90:fa:45:75:fd:fc:35:b0:b0:df:72: e9:a7:d6:76:28:bb:e0:cd:1d:00:fc:70:27:cf:f4:bb:67:21: 40:5f:bc:62:27:07:d7:22:f2:40:70:a2:f4:7b:c6:9f:3d:3d: fe:10:48:e0:14:5d:2e:95:84:e3:e8:a3:f3:95:3e:99:1d:5b: 3a:ee:f1:75:25:6b:9d:9a:8a:57:e7:d1:de:f7:2b:49:6c:1c: 85:49:7b:2e:7e:ea:50:17:c6:ae:15:ee:ec:2a:c9:7a:a6:03: 23:f7:1e:fe:52:d1:82:5d:87:05:ec:65:a7:f4:bb:6a:67:2c: 31:aa:29:84:0d:ca:d9:b5:8f:7f:a6:77:73:ba:a6:1a:b1:1d: 17:c2:fb:99 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZwPb/gpx3goFgeck8RRamk4/NLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4 RDM3QzUxRTAeFw0yNjA1MjYwODUyMTJaFw0yNzA1MjUwODU3MTJaMDMxMTAvBgNV BAMTKDI0MzEyMUQ5MzQ4MDYwMjY3ODA1QUQzOUE2Q0FBQ0Q2MDZCRTczRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkA1OU3IFahlaJqs2mWdkyJcJ6 Z5tzL5DyN4n6eCp1Pu6eeeeyCBheTbNKd3hcQVwM2j++Zf+fcHQJPkJEkZDfy6lp 0nmmirYNvRCy0QpMCgpLFq8FZvDxYe6mcdO5/idIzDBuW4yRvOdaFahhdXqLUf/l RlJqngHHqKJWJyFEJJo1h2Rh58TXzDe5juHe6WzUePMWGfYmyrRFhshEM+pnfMzB 99cdZEzokdq33gOSH46g/RKwSIOgRnSKop/DqPvKDgg5NqoelJSC25oOUNg8ebKZ IKN8iCcgtEPaoQiiNso1OcGxiidrCPhRaXcGaw3E2KrAS8+/GfEyIx8feWqtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUJDEh2TSAYCZ4Ba05psqs1ga+c+AwHwYDVR0j BBgwFoAUE0rDZ00FxN3rP77l6WuT6o03xR4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTM5NDE3OS8wLzEzNEFDMzY3NEQwNUM0RERFQjNGQkVFNUU5NkI5 M0VBOEQzN0M1MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTM0QUMzNjc0RDA1QzREREVCM0ZCRUU1RTk2QjkzRUE4RDM3QzUxRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTM5NDE3OS8wLzMyMzAzMzJlMzEz OTMxMmUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzUzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMu/AjANBgkqhkiG9w0BAQsFAAOCAQEAVi+XtT4W/P4s9ueWsfIVMZTW 6iXQF9No2ixFKIshdxLyMbepfJuyGBY6Na7S6asZd9ca7N9HEX6Xf+B5cByQujU5 215Nwvu1BnrmwN5hBVEAxahmAykDmx1jpbQGl0aaQfrqNzO/boyNCjm19FsMqBsZ 3JD6RXX9/DWwsN9y6afWdii74M0dAPxwJ8/0u2chQF+8YicH1yLyQHCi9HvGnz09 /hBI4BRdLpWE4+ij85U+mR1bOu7xdSVrnZqKV+fR3vcrSWwchUl7Ln7qUBfGrhXu 7CrJeqYDI/ce/lLRgl2HBexlp/S7amcsMaophA3K2bWPf6Z3c7qmGrEdF8L7mQ== -----END CERTIFICATE-----Generated at Fri May 29 22:57:48 2026 by rpki-client