$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230352e302f32342d3234203d3e2039383038.roa File: 3232332e3232332e3230352e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: sM4w/Zb/8rshZVrbJKwMLxyqWi4gA+DKRCLlSH+TbVc= Subject key identifier: 45:EF:9F:EA:39:6A:8B:2B:95:9F:68:14:CC:67:41:FC:DC:69:46:47 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 2E19A6CB0FEE31871936A2CEDD27960DC3DD9300 Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230352e302f32342d3234203d3e2039383038.roa Signing time: Mon 13 Apr 2026 07:01:30 +0000 ROA not before: Mon 13 Apr 2026 06:56:30 +0000 ROA not after: Mon 12 Apr 2027 07:01:30 +0000 asID: 9808 IP address blocks: 223.223.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:19:a6:cb:0f:ee:31:87:19:36:a2:ce:dd:27:96:0d:c3:dd:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 06:56:30 2026 GMT Not After : Apr 12 07:01:30 2027 GMT Subject: CN=45EF9FEA396A8B2B959F6814CC6741FCDC694647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:74:f8:e2:16:94:09:99:f9:89:21:4f:01: dd:06:be:7b:f4:1b:c7:a3:c8:02:f2:bc:2f:24:01: 82:5d:67:da:46:87:51:3a:c9:7c:53:23:ab:3e:70: 24:d7:2c:cf:a8:5c:5c:0b:18:c4:ec:f0:07:f0:ba: f2:ed:06:4c:ef:0f:f3:eb:44:f2:fc:9f:47:35:0d: e8:82:73:ce:60:14:8a:0f:50:c2:34:60:20:20:31: ed:66:ee:f1:a1:b3:bf:db:3e:2b:c5:33:3b:4e:a5: eb:8f:b3:c3:79:83:b4:6e:f6:b0:0f:a6:f3:d7:c0: 5c:6d:17:f2:a4:48:e2:8e:ce:25:e4:38:a6:0b:4e: 60:93:45:06:6d:d9:48:f1:89:7b:ee:57:b3:08:db: 0e:48:1c:83:70:b3:50:d1:f3:97:37:21:a2:ce:72: de:f8:6e:ef:8e:71:1d:8f:e8:ee:f9:d7:5f:40:69: 1f:46:a0:b3:47:ee:d0:f1:49:7a:32:f0:a9:9d:42: 14:69:f1:d1:36:10:51:8a:27:de:b9:56:b5:3e:58: d0:b7:3e:2d:44:8a:d2:06:a7:93:94:65:ff:6f:1a: 0e:a6:f7:df:22:1f:b9:4e:3d:2a:fe:ba:fb:d9:21: 71:08:98:f3:5c:83:20:f0:e8:8a:75:cf:98:e8:f8: 05:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:EF:9F:EA:39:6A:8B:2B:95:9F:68:14:CC:67:41:FC:DC:69:46:47 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230352e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.223.205.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:a1:53:2a:56:77:7b:ae:50:08:0b:29:25:50:a9:f8:4a:08: 7b:9b:93:3a:8f:39:50:40:8d:32:2e:b0:6c:89:69:32:0b:17: 42:8f:63:29:6b:f9:22:2b:6c:27:5f:e2:84:c3:01:95:41:56: 79:b0:d4:f3:bf:07:7c:12:31:ad:bd:4d:8e:2c:4a:50:9b:24: 3b:37:c9:73:94:cc:bd:4c:3d:0e:fd:e7:ef:8e:1e:02:39:fd: 76:8c:15:ab:58:47:03:c4:04:13:f8:29:db:7c:02:6c:d6:57: 0b:20:90:d4:58:f7:76:28:7b:d0:83:70:d3:f3:ab:91:81:47: ca:44:48:96:b4:3c:e5:c7:73:74:40:a2:d5:01:84:60:91:e1: 6c:a4:09:24:ab:10:51:8b:0b:0d:23:8a:d2:dd:f6:55:6f:3d: 64:11:9a:18:b1:89:c8:33:04:bb:7f:11:4b:f2:94:23:63:57: fb:9d:ed:c2:7a:a1:d2:45:d6:34:8f:19:cc:3a:1c:8d:25:61: df:63:36:07:0f:64:70:da:e4:82:2d:1b:14:07:3d:ba:c2:22: fe:b6:a4:99:2e:30:b0:97:63:16:a7:52:d2:2d:44:97:45:25: e5:5a:49:ab:a6:50:63:cf:b7:80:d8:4e:0a:ef:a2:ac:4f:80: be:cd:0a:df -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULhmmyw/uMYcZNqLO3SeWDcPdkwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNjU2MzBaFw0yNzA0MTIwNzAxMzBaMDMxMTAvBgNV BAMTKDQ1RUY5RkVBMzk2QThCMkI5NTlGNjgxNENDNjc0MUZDREM2OTQ2NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUXT44haUCZn5iSFPAd0Gvnv0 G8ejyALyvC8kAYJdZ9pGh1E6yXxTI6s+cCTXLM+oXFwLGMTs8AfwuvLtBkzvD/Pr RPL8n0c1DeiCc85gFIoPUMI0YCAgMe1m7vGhs7/bPivFMztOpeuPs8N5g7Ru9rAP pvPXwFxtF/KkSOKOziXkOKYLTmCTRQZt2UjxiXvuV7MI2w5IHINws1DR85c3IaLO ct74bu+OcR2P6O75119AaR9GoLNH7tDxSXoy8KmdQhRp8dE2EFGKJ965VrU+WNC3 Pi1EitIGp5OUZf9vGg6m998iH7lOPSr+uvvZIXEImPNcgyDw6Ip1z5jo+AWtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQURe+f6jlqiyuVn2gUzGdB/NxpRkcwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk2MzIxNTM3Nzk4OTYzNS8wLzMyMzIzMzJlMzIz MjMzMmUzMjMwMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN/fzTANBgkqhkiG9w0BAQsFAAOCAQEATaFTKlZ3e65QCAspJVCp+EoI e5uTOo85UECNMi6wbIlpMgsXQo9jKWv5IitsJ1/ihMMBlUFWebDU878HfBIxrb1N jixKUJskOzfJc5TMvUw9Dv3n744eAjn9dowVq1hHA8QEE/gp23wCbNZXCyCQ1Fj3 dih70INw0/OrkYFHykRIlrQ85cdzdECi1QGEYJHhbKQJJKsQUYsLDSOK0t32VW89 ZBGaGLGJyDMEu38RS/KUI2NX+53twnqh0kXWNI8ZzDocjSVh32M2Bw9kcNrkgi0b FAc9usIi/rakmS4wsJdjFqdS0i1El0Ul5VpJq6ZQY8+3gNhOCu+irE+Avs0K3w== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:39 2026 by rpki-client