$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230372e302f32342d3234203d3e2034383437.roa File: 3232332e3232332e3230372e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: BG8ta86N0VATFwrUsi2OFD1FuwsVkXLPyTiFauWOKOA= Subject key identifier: BA:3D:A3:4F:18:C4:03:CA:B6:15:57:2E:90:E7:2E:3D:2A:19:CB:E8 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 739F60EAC6249D6CEAA203D3959FD0A1C77D07F6 Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230372e302f32342d3234203d3e2034383437.roa Signing time: Mon 13 Apr 2026 07:01:30 +0000 ROA not before: Mon 13 Apr 2026 06:56:30 +0000 ROA not after: Mon 12 Apr 2027 07:01:30 +0000 asID: 4847 IP address blocks: 223.223.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9f:60:ea:c6:24:9d:6c:ea:a2:03:d3:95:9f:d0:a1:c7:7d:07:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 06:56:30 2026 GMT Not After : Apr 12 07:01:30 2027 GMT Subject: CN=BA3DA34F18C403CAB615572E90E72E3D2A19CBE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:55:20:b7:68:46:09:d5:2d:1b:23:aa:52:9e: 89:e4:43:d5:a4:c5:bf:01:d4:44:56:aa:4a:7e:fd: 36:9b:6a:31:c9:48:23:57:f9:0f:13:ae:c3:21:8e: c7:8c:ae:76:1c:2e:b8:1b:39:76:87:b0:4d:80:d7: 4c:56:c2:a8:77:86:aa:10:78:41:7c:85:c4:98:9a: 46:c6:ed:07:41:bc:20:0a:a4:57:f0:81:5e:59:77: 70:26:e6:bf:3a:48:40:40:8e:0b:20:8d:6e:52:2e: b1:34:44:95:d2:54:d1:4c:69:8e:97:4d:cf:80:7c: 27:d5:2f:ae:45:c5:11:43:22:b9:b3:81:f1:7f:3e: a3:c7:3a:80:a2:51:85:91:64:c1:d8:08:f8:8f:28: 0c:91:07:d5:e0:a7:b8:08:2e:96:fd:05:6b:d3:6b: ce:27:66:1f:99:e6:92:a3:64:93:0a:a5:f3:85:3e: bb:e5:5b:d5:32:69:b0:c6:f2:7c:f9:37:9b:a9:1f: cd:89:7b:0c:7a:b9:0b:38:2c:2f:13:2d:c3:e8:1d: 5a:8c:45:0c:fa:78:48:8e:b6:51:a7:7e:70:31:d1: 88:ac:f5:09:63:e4:92:60:82:c2:05:f9:d4:6c:e4: 10:24:e7:98:94:c4:07:c0:a3:46:e5:45:e8:b2:06: 9e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:3D:A3:4F:18:C4:03:CA:B6:15:57:2E:90:E7:2E:3D:2A:19:CB:E8 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3232332e3232332e3230372e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.223.207.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:07:4d:65:c8:0f:37:08:c3:43:ec:dd:dc:0b:03:8e:67:0d: 84:d0:db:76:49:46:21:a2:f3:bc:f3:73:bf:a7:d0:1d:4e:30: 87:12:0a:b0:d2:69:95:0f:3f:cc:f9:95:80:6e:8e:e4:55:69: 74:d1:e8:35:d4:e3:83:1a:5e:51:5f:1a:a5:cd:64:36:a3:f3: 8a:df:72:8e:7b:79:36:1b:f4:ff:c6:04:f3:e5:5b:f8:3a:2b: 72:26:0c:9c:38:35:3a:94:b1:20:33:27:6a:af:74:54:ca:59: a2:33:c8:3b:0d:d2:ef:44:24:83:6c:23:6f:f6:6a:a4:bf:50: 48:f4:c5:92:0f:3d:7c:94:70:99:3a:80:c2:18:58:e6:bb:cc: e2:5f:31:8d:fe:4a:39:d4:d4:7e:0e:0c:30:f5:a2:4d:de:fa: 3a:92:3b:c3:33:05:ed:e3:39:06:31:5c:11:02:a5:86:0f:a4: 30:a6:5a:59:7b:f4:64:73:64:bc:10:c4:5f:91:88:98:e1:48: fe:d4:e9:05:27:52:58:3e:53:60:01:34:ae:08:c7:0f:c3:4e: d9:26:8c:1f:fc:9d:da:37:0c:aa:20:88:be:e4:3c:19:a0:98: 90:1b:eb:f4:b3:97:2a:4a:dc:bb:e1:31:e2:b2:4d:ee:c3:97: b7:46:ab:1b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUc59g6sYknWzqogPTlZ/Qocd9B/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNjU2MzBaFw0yNzA0MTIwNzAxMzBaMDMxMTAvBgNV BAMTKEJBM0RBMzRGMThDNDAzQ0FCNjE1NTcyRTkwRTcyRTNEMkExOUNCRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjVSC3aEYJ1S0bI6pSnonkQ9Wk xb8B1ERWqkp+/TabajHJSCNX+Q8TrsMhjseMrnYcLrgbOXaHsE2A10xWwqh3hqoQ eEF8hcSYmkbG7QdBvCAKpFfwgV5Zd3Am5r86SEBAjgsgjW5SLrE0RJXSVNFMaY6X Tc+AfCfVL65FxRFDIrmzgfF/PqPHOoCiUYWRZMHYCPiPKAyRB9Xgp7gILpb9BWvT a84nZh+Z5pKjZJMKpfOFPrvlW9UyabDG8nz5N5upH82Jewx6uQs4LC8TLcPoHVqM RQz6eEiOtlGnfnAx0Yis9Qlj5JJggsIF+dRs5BAk55iUxAfAo0blReiyBp4VAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUuj2jTxjEA8q2FVcukOcuPSoZy+gwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk2MzIxNTM3Nzk4OTYzNS8wLzMyMzIzMzJlMzIz MjMzMmUzMjMwMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAN/fzzANBgkqhkiG9w0BAQsFAAOCAQEATQdNZcgPNwjDQ+zd3AsDjmcN hNDbdklGIaLzvPNzv6fQHU4whxIKsNJplQ8/zPmVgG6O5FVpdNHoNdTjgxpeUV8a pc1kNqPzit9yjnt5Nhv0/8YE8+Vb+DorciYMnDg1OpSxIDMnaq90VMpZojPIOw3S 70Qkg2wjb/ZqpL9QSPTFkg89fJRwmTqAwhhY5rvM4l8xjf5KOdTUfg4MMPWiTd76 OpI7wzMF7eM5BjFcEQKlhg+kMKZaWXv0ZHNkvBDEX5GImOFI/tTpBSdSWD5TYAE0 rgjHD8NO2SaMH/yd2jcMqiCIvuQ8GaCYkBvr9LOXKkrcu+Ex4rJN7sOXt0arGw== -----END CERTIFICATE-----Generated at Mon Apr 13 17:47:50 2026 by rpki-client