$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230322e302f32332d3233203d3e2039383038.roa File: 3232332e3232332e3230322e302f32332d3233203d3e2039383038.roa (raw, json) Hash identifier: v8ERbVU/76kcs95yQnLPwsVU3suCwLS+HFPH2NLADJU= Subject key identifier: 51:8E:33:60:C0:C7:34:35:B0:96:63:10:D0:06:68:47:8A:73:E6:FA Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 08121BE789804DA6C2D28C372B8EB0EF09A2D732 Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230322e302f32332d3233203d3e2039383038.roa Signing time: Mon 13 Apr 2026 06:59:35 +0000 ROA not before: Mon 13 Apr 2026 06:54:35 +0000 ROA not after: Mon 12 Apr 2027 06:59:35 +0000 asID: 9808 IP address blocks: 223.223.202.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:12:1b:e7:89:80:4d:a6:c2:d2:8c:37:2b:8e:b0:ef:09:a2:d7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 06:54:35 2026 GMT Not After : Apr 12 06:59:35 2027 GMT Subject: CN=518E3360C0C73435B0966310D00668478A73E6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:88:5d:de:79:5e:97:45:34:ed:71:56:cc:09: 7b:84:96:ea:fa:65:d2:19:51:47:6c:35:03:a6:f2: 4e:3b:48:4a:1a:3e:c4:0f:0f:87:2d:2c:ff:8b:4b: 72:a8:90:67:40:90:4c:63:49:dd:cf:d8:6c:81:fd: 3a:4e:4d:a5:28:e8:89:53:0a:d9:ca:b1:27:67:41: 9d:0d:4d:10:d1:b1:0b:e2:b6:71:b0:5c:bf:90:11: f0:e2:08:54:46:5e:8e:22:eb:d0:17:8d:31:49:5a: 5f:bf:16:8f:15:45:e2:bc:ca:30:f2:a7:09:9c:de: 78:72:ff:21:8c:b3:0b:79:6d:3a:77:3f:7f:21:f3: dc:12:ea:d9:e8:bd:67:a3:34:a9:b0:50:5b:fd:ff: f6:7d:ce:2e:43:58:52:cf:9b:00:2a:4d:de:60:b4: 8f:83:82:d4:41:fa:87:e9:ae:e5:4c:8b:75:69:f4: 3e:d4:bc:41:7a:c7:93:fa:dc:cc:d5:f6:e6:fe:ee: 98:d8:62:44:67:30:35:f6:9f:8d:a0:ed:c8:a1:11: 9e:68:52:9b:3d:b5:df:4a:23:4d:23:af:b6:ac:3a: 64:c0:19:59:50:8c:43:6c:90:1a:36:28:ba:ee:da: af:86:99:4b:c8:01:eb:9c:26:86:6e:ce:6f:df:7d: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:8E:33:60:C0:C7:34:35:B0:96:63:10:D0:06:68:47:8A:73:E6:FA X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230322e302f32332d3233203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.223.202.0/23 Signature Algorithm: sha256WithRSAEncryption 18:07:8e:83:23:3d:66:97:ed:5a:f4:02:65:40:a7:72:e8:17: a7:40:59:68:40:a9:63:03:c7:9f:2b:26:7f:44:a4:23:ab:27: 89:b3:75:e6:ac:33:3f:e4:70:dc:f3:e0:ba:2b:2b:bb:7c:54: 46:cf:4a:de:59:47:f1:02:c0:7d:54:9f:63:94:21:0f:a5:ae: 02:40:7f:f5:4a:c4:b7:7f:09:12:6d:02:82:cb:67:cb:7c:59: 2f:96:c8:95:17:1e:31:87:3e:51:84:03:5e:cd:de:e0:46:f3: 80:c5:48:fb:f7:ff:1e:5c:dc:37:89:57:1f:e8:d1:a3:2c:a4: b0:f0:de:92:75:36:43:d9:a0:6e:39:ec:93:6b:5e:2e:1f:43: 57:ad:29:70:b4:cb:fe:0c:b4:83:3d:7b:fb:17:34:45:cb:6c: d3:2e:0d:6d:e0:6e:b1:b5:a0:13:f5:a5:58:65:5c:a4:27:d5: 88:57:bc:a5:62:ff:56:68:0b:6b:8d:5c:29:b3:e3:cf:d3:54: c3:92:8b:a0:0a:e6:03:f3:c9:4c:31:12:55:e5:97:fc:67:9f: b4:3f:70:ed:24:ae:67:fd:33:1e:00:3e:d7:40:77:fc:5e:fe: 7b:79:63:e6:14:5f:69:8a:aa:60:39:38:44:b4:19:39:a0:2e: 1e:20:a2:cd -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCBIb54mATabC0ow3K46w7wmi1zIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNjU0MzVaFw0yNzA0MTIwNjU5MzVaMDMxMTAvBgNV BAMTKDUxOEUzMzYwQzBDNzM0MzVCMDk2NjMxMEQwMDY2ODQ3OEE3M0U2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiF3eeV6XRTTtcVbMCXuElur6 ZdIZUUdsNQOm8k47SEoaPsQPD4ctLP+LS3KokGdAkExjSd3P2GyB/TpOTaUo6IlT CtnKsSdnQZ0NTRDRsQvitnGwXL+QEfDiCFRGXo4i69AXjTFJWl+/Fo8VReK8yjDy pwmc3nhy/yGMswt5bTp3P38h89wS6tnovWejNKmwUFv9//Z9zi5DWFLPmwAqTd5g tI+DgtRB+ofpruVMi3Vp9D7UvEF6x5P63MzV9ub+7pjYYkRnMDX2n42g7cihEZ5o Ups9td9KI00jr7asOmTAGVlQjENskBo2KLru2q+GmUvIAeucJoZuzm/ffZxXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUUY4zYMDHNDWwlmMQ0AZoR4pz5vowHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk2MzIxNTM3Nzk4OTYzNS8wLzMyMzIzMzJlMzIz MjMzMmUzMjMwMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAd/fyjANBgkqhkiG9w0BAQsFAAOCAQEAGAeOgyM9ZpftWvQCZUCncugX p0BZaECpYwPHnysmf0SkI6snibN15qwzP+Rw3PPguisru3xURs9K3llH8QLAfVSf Y5QhD6WuAkB/9UrEt38JEm0Cgstny3xZL5bIlRceMYc+UYQDXs3e4EbzgMVI+/f/ HlzcN4lXH+jRoyyksPDeknU2Q9mgbjnsk2teLh9DV60pcLTL/gy0gz17+xc0Rcts 0y4NbeBusbWgE/WlWGVcpCfViFe8pWL/VmgLa41cKbPjz9NUw5KLoArmA/PJTDES VeWX/GeftD9w7SSuZ/0zHgA+10B3/F7+e3lj5hRfaYqqYDk4RLQZOaAuHiCizQ== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:38 2026 by rpki-client