$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3139322e302f32322d3232203d3e2039383038.roa File: 3232332e3232332e3139322e302f32322d3232203d3e2039383038.roa (raw, json) Hash identifier: ja2OSO0IT67gHVcR3VxrJrFnwp4rzGjOQtX7rp5mSKY= Subject key identifier: 02:47:62:0F:6C:B7:20:CA:D6:FC:C4:92:FB:61:60:E6:55:CD:74:E1 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 553FA62C1B6439FD63372CA120A6D9DD6D468CD9 Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3139322e302f32322d3232203d3e2039383038.roa Signing time: Mon 13 Apr 2026 06:59:34 +0000 ROA not before: Mon 13 Apr 2026 06:54:34 +0000 ROA not after: Mon 12 Apr 2027 06:59:34 +0000 asID: 9808 IP address blocks: 223.223.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:3f:a6:2c:1b:64:39:fd:63:37:2c:a1:20:a6:d9:dd:6d:46:8c:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 06:54:34 2026 GMT Not After : Apr 12 06:59:34 2027 GMT Subject: CN=0247620F6CB720CAD6FCC492FB6160E655CD74E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:19:ae:37:67:11:38:5a:e1:2d:29:76:d4: 48:43:e9:69:0d:3f:fc:2e:c0:b7:99:ff:1c:d9:18: 2a:e2:ba:f8:22:48:59:87:ab:7c:f8:d1:d5:25:3c: f5:45:eb:a7:05:b3:c9:a7:57:7d:2a:e0:99:27:49: 25:f2:6d:52:d9:8e:86:5e:c9:74:4c:42:e5:ec:7c: e8:30:7c:8e:b1:3c:e3:0e:5a:ca:41:31:1a:fe:93: 76:aa:bf:d6:71:51:04:43:7f:78:19:f3:1b:1f:0d: d3:be:1c:28:2c:db:40:fe:de:6f:35:ba:41:39:4c: 64:28:3f:7e:5f:3a:00:81:c9:3e:7a:62:c8:21:8d: a3:0c:12:54:70:3c:39:56:71:c1:de:62:87:f1:af: aa:6f:c1:46:78:14:f6:7d:cb:c4:c8:96:cf:2e:8e: ef:72:34:de:fc:21:35:9f:a7:5e:6d:7a:40:af:ed: 5a:9c:ab:86:a6:16:ad:03:cd:02:af:22:d4:30:be: ad:71:64:77:b4:03:7e:25:3c:d2:b5:a1:c8:bb:23: e1:6f:93:90:f6:9a:04:c8:66:81:74:fd:8c:70:68: a7:7b:bc:20:a8:a5:58:37:71:51:5c:98:83:bc:01: 24:a7:a5:d9:8d:ee:6b:78:04:7e:01:02:d0:56:dc: f3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:47:62:0F:6C:B7:20:CA:D6:FC:C4:92:FB:61:60:E6:55:CD:74:E1 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3139322e302f32322d3232203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.223.192.0/22 Signature Algorithm: sha256WithRSAEncryption 17:13:ae:db:d0:6c:dc:5d:d6:6e:90:72:ff:59:5d:42:bd:4c: 18:71:d8:31:93:d3:6c:dc:9a:2f:c1:8c:0e:b6:ae:68:d8:38: 80:06:b7:af:d9:03:14:1b:85:a5:46:bf:07:b5:88:9b:e1:4f: c8:8e:51:1c:bc:e1:1e:89:6e:25:c6:83:96:4b:9e:f6:19:c3: e6:78:f2:2d:f0:5e:6a:49:66:74:81:8e:15:c2:e9:0e:33:00: 51:88:0c:5a:b3:09:25:01:f5:60:c6:d0:d1:4c:44:08:e0:30: 4a:2e:4c:07:f4:47:42:e8:35:aa:35:2b:7b:c2:ce:bc:08:a2: 39:a0:5f:d9:7a:1d:11:05:8b:59:d4:fb:02:1b:11:03:e3:a8: e9:59:b3:45:06:7d:e7:f3:48:6f:ef:ee:e8:34:b3:14:ea:45: 9b:67:dc:23:0d:25:96:cb:f1:99:18:14:bb:42:3f:b9:34:8f: 62:60:0f:e9:94:12:7a:4c:1f:8f:6b:ee:12:d6:3b:72:f8:42: 9b:95:e8:b3:ef:9b:a8:90:a8:3c:59:f0:81:2f:a6:c6:d7:70: c9:ed:74:a5:5a:6d:24:17:a7:61:41:3e:9f:07:a1:ab:84:a9: 5c:e7:8a:50:96:07:8f:97:5f:89:a6:dd:03:99:95:4a:09:57: 9f:5e:ab:04 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVT+mLBtkOf1jNyyhIKbZ3W1GjNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNjU0MzRaFw0yNzA0MTIwNjU5MzRaMDMxMTAvBgNV BAMTKDAyNDc2MjBGNkNCNzIwQ0FENkZDQzQ5MkZCNjE2MEU2NTVDRDc0RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YRmuN2cROFrhLSl21EhD6WkN P/wuwLeZ/xzZGCriuvgiSFmHq3z40dUlPPVF66cFs8mnV30q4JknSSXybVLZjoZe yXRMQuXsfOgwfI6xPOMOWspBMRr+k3aqv9ZxUQRDf3gZ8xsfDdO+HCgs20D+3m81 ukE5TGQoP35fOgCByT56YsghjaMMElRwPDlWccHeYofxr6pvwUZ4FPZ9y8TIls8u ju9yNN78ITWfp15tekCv7Vqcq4amFq0DzQKvItQwvq1xZHe0A34lPNK1oci7I+Fv k5D2mgTIZoF0/YxwaKd7vCCopVg3cVFcmIO8ASSnpdmN7mt4BH4BAtBW3PNfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUAkdiD2y3IMrW/MSS+2Fg5lXNdOEwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk2MzIxNTM3Nzk4OTYzNS8wLzMyMzIzMzJlMzIz MjMzMmUzMTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAt/fwDANBgkqhkiG9w0BAQsFAAOCAQEAFxOu29Bs3F3WbpBy/1ldQr1M GHHYMZPTbNyaL8GMDrauaNg4gAa3r9kDFBuFpUa/B7WIm+FPyI5RHLzhHoluJcaD lkue9hnD5njyLfBeaklmdIGOFcLpDjMAUYgMWrMJJQH1YMbQ0UxECOAwSi5MB/RH Qug1qjUre8LOvAiiOaBf2XodEQWLWdT7AhsRA+Oo6VmzRQZ95/NIb+/u6DSzFOpF m2fcIw0llsvxmRgUu0I/uTSPYmAP6ZQSekwfj2vuEtY7cvhCm5Xos++bqJCoPFnw gS+mxtdwye10pVptJBenYUE+nwehq4SpXOeKUJYHj5dfiabdA5mVSglXn16rBA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:38 2026 by rpki-client