$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230362e302f32342d3234203d3e2039383038.roa File: 3232332e3232332e3230362e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: w+3JBmL10CZU6c7kYqLVOzBf9bEOuEuMC+3enoeK4tA= Subject key identifier: 14:9E:F9:84:87:A1:6B:FF:87:B0:6A:31:E5:5C:4F:5C:9B:73:03:14 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 2D7436EA771605AC84CA8E02C243AF8550D52ADB Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230362e302f32342d3234203d3e2039383038.roa Signing time: Mon 13 Apr 2026 07:01:30 +0000 ROA not before: Mon 13 Apr 2026 06:56:30 +0000 ROA not after: Mon 12 Apr 2027 07:01:30 +0000 asID: 9808 IP address blocks: 223.223.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:74:36:ea:77:16:05:ac:84:ca:8e:02:c2:43:af:85:50:d5:2a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 06:56:30 2026 GMT Not After : Apr 12 07:01:30 2027 GMT Subject: CN=149EF98487A16BFF87B06A31E55C4F5C9B730314 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2a:93:c9:1d:f8:09:07:dc:44:6c:86:77:a7: 3c:f5:50:f3:93:1d:fd:43:10:cf:a7:6c:ba:70:a8: 92:0c:e3:e5:08:c6:de:76:3a:55:36:cb:dc:81:fa: 31:0e:68:1e:16:d8:67:b7:7c:87:eb:4f:6b:41:9a: fe:78:a5:e6:9b:4f:f6:dd:a1:f7:01:36:ce:53:e7: 70:da:17:2f:27:54:73:7c:bb:b0:7e:79:cb:f5:b3: ba:12:3b:08:91:07:48:95:af:0b:89:9e:26:d2:0f: 83:b4:fa:62:c9:59:b5:77:23:e1:a6:d6:12:f7:4f: 07:6b:ba:bd:37:f8:1a:2b:7a:ee:41:7f:bd:2c:69: 6e:47:5b:39:b4:4b:d0:1e:4a:b4:f3:ff:50:e5:e6: 3d:c6:70:7f:6a:29:0e:ca:6f:ff:5e:fa:39:6b:12: 7e:3b:22:72:84:65:30:39:49:dd:6d:61:bf:00:be: 4c:33:49:88:f4:00:e6:b8:6f:48:40:8e:61:48:fe: ca:69:f4:67:8b:b6:be:9c:87:f4:b6:05:77:e1:a9: cc:9a:75:df:76:16:84:7e:e5:e8:a7:4a:c2:2a:09: 95:01:ed:e2:85:28:90:78:a7:16:dc:83:2d:78:7b: 7a:4c:91:c8:33:48:57:4e:4e:2f:d6:5d:4d:bb:15: 02:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:9E:F9:84:87:A1:6B:FF:87:B0:6A:31:E5:5C:4F:5C:9B:73:03:14 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230362e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.223.206.0/24 Signature Algorithm: sha256WithRSAEncryption af:a6:9f:eb:23:45:4b:ba:c1:7b:83:07:b7:1a:4d:42:ab:da: 3f:a3:a9:df:49:8f:b5:e3:a8:07:63:43:53:08:20:e9:91:8e: a4:3e:d7:22:f5:ad:1b:13:18:a7:3a:ce:53:e4:f8:d1:d3:45: 12:d8:b0:9b:bd:e7:3a:3b:12:86:d0:c0:be:d1:b2:68:d8:6f: 62:e8:f1:f7:2e:b5:f3:a3:6c:59:cf:5d:48:ba:9e:7c:0f:2b: 83:10:9f:55:6a:66:cc:de:e0:d9:51:5b:74:39:3e:99:e8:13: 38:0e:e2:4b:82:4c:81:a6:3b:2a:10:f5:d2:d4:07:d9:49:12: 87:e2:40:4f:b1:23:83:97:f3:ed:a3:9a:a4:1e:ed:7e:8f:53: 71:96:27:0f:39:10:2c:88:cb:79:c2:9b:13:1a:4e:7c:00:3f: 39:d7:38:c8:db:5f:fd:24:3d:74:0f:40:c8:13:5e:83:24:88: a4:0f:b7:ef:22:b4:4b:6d:18:b1:ac:97:b7:f3:7e:a6:41:0c: 39:b0:11:5e:2b:87:58:c9:9b:5d:a8:6e:a7:70:83:56:18:c6: 64:78:39:ca:0e:e9:f2:f9:81:f5:d0:93:32:f6:7b:aa:68:ef: 04:ce:84:16:ed:79:f2:d8:13:05:1f:36:49:53:e4:5f:b0:eb: 22:0b:4f:16 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULXQ26ncWBayEyo4CwkOvhVDVKtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNjU2MzBaFw0yNzA0MTIwNzAxMzBaMDMxMTAvBgNV BAMTKDE0OUVGOTg0ODdBMTZCRkY4N0IwNkEzMUU1NUM0RjVDOUI3MzAzMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KpPJHfgJB9xEbIZ3pzz1UPOT Hf1DEM+nbLpwqJIM4+UIxt52OlU2y9yB+jEOaB4W2Ge3fIfrT2tBmv54peabT/bd ofcBNs5T53DaFy8nVHN8u7B+ecv1s7oSOwiRB0iVrwuJnibSD4O0+mLJWbV3I+Gm 1hL3Twdrur03+Boreu5Bf70saW5HWzm0S9AeSrTz/1Dl5j3GcH9qKQ7Kb/9e+jlr En47InKEZTA5Sd1tYb8AvkwzSYj0AOa4b0hAjmFI/spp9GeLtr6ch/S2BXfhqcya dd92FoR+5einSsIqCZUB7eKFKJB4pxbcgy14e3pMkcgzSFdOTi/WXU27FQIJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUFJ75hIeha/+HsGox5VxPXJtzAxQwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk2MzIxNTM3Nzk4OTYzNS8wLzMyMzIzMzJlMzIz MjMzMmUzMjMwMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN/fzjANBgkqhkiG9w0BAQsFAAOCAQEAr6af6yNFS7rBe4MHtxpNQqva P6Op30mPteOoB2NDUwgg6ZGOpD7XIvWtGxMYpzrOU+T40dNFEtiwm73nOjsShtDA vtGyaNhvYujx9y6186NsWc9dSLqefA8rgxCfVWpmzN7g2VFbdDk+megTOA7iS4JM gaY7KhD10tQH2UkSh+JAT7Ejg5fz7aOapB7tfo9TcZYnDzkQLIjLecKbExpOfAA/ Odc4yNtf/SQ9dA9AyBNegySIpA+37yK0S20YsayXt/N+pkEMObARXiuHWMmbXahu p3CDVhjGZHg5yg7p8vmB9dCTMvZ7qmjvBM6EFu158tgTBR82SVPkX7DrIgtPFg== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:38 2026 by rpki-client