$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3232342e302f32312d3231203d3e2034383337.roa File: 3230322e39312e3232342e302f32312d3231203d3e2034383337.roa (raw, json) Hash identifier: N2b5cUhww8rOn3wOwOuZHsJB9P53zX7cQfx7Y1gfs3I= Subject key identifier: 52:6D:EB:95:25:F9:05:DC:32:B1:BC:07:F2:F7:28:C3:8B:E7:1C:D9 Certificate issuer: /CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Certificate serial: 259F0D29C2EC582CC217E957EB3EBE03F3170DA3 Authority key identifier: EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3232342e302f32312d3231203d3e2034383337.roa Signing time: Wed 27 May 2026 09:09:14 +0000 ROA not before: Wed 27 May 2026 09:04:14 +0000 ROA not after: Wed 26 May 2027 09:09:14 +0000 asID: 4837 IP address blocks: 202.91.224.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9f:0d:29:c2:ec:58:2c:c2:17:e9:57:eb:3e:be:03:f3:17:0d:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3 Validity Not Before: May 27 09:04:14 2026 GMT Not After : May 26 09:09:14 2027 GMT Subject: CN=526DEB9525F905DC32B1BC07F2F728C38BE71CD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:98:df:86:b8:57:5e:21:7e:d0:50:fd:b6:5c: b2:66:03:f1:5c:0c:29:c4:9f:a4:1f:8c:a0:cb:1c: 43:0f:84:2d:f1:27:4b:fb:aa:a6:59:77:11:83:df: 24:c7:10:4e:8e:20:e5:34:38:49:c1:3a:48:69:e3: ac:ab:ff:5e:7c:e7:db:96:6f:a8:06:c8:90:a4:07: 74:b7:9d:b0:54:46:a0:8d:19:6a:ce:99:f5:63:30: 48:8b:d0:3a:8d:27:cd:30:14:17:67:80:db:03:71: 73:de:83:92:59:9f:d8:99:77:d8:8f:78:47:c0:44: 71:fc:ff:72:69:15:40:65:ac:0f:fa:6f:7e:46:00: f0:88:cd:2e:0c:84:24:87:c2:1e:a0:3f:79:23:34: ac:1e:b3:b2:4d:a2:61:01:ef:a7:36:bd:e9:92:1d: e8:61:08:37:2d:4f:20:3d:8b:78:83:2b:bb:27:cc: 0e:5c:30:1d:88:aa:1a:bd:9b:5e:0d:cf:13:d5:72: a9:df:30:6e:64:cd:f0:1c:17:96:0a:ed:ab:30:74: 7b:e6:54:9e:39:11:52:62:dd:02:6c:01:fb:a9:ef: 85:cb:bb:5d:e0:ac:2e:40:46:06:a4:5b:01:5f:6d: ff:f3:94:28:1f:7d:6a:db:4f:43:4d:10:21:da:97: 1f:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:6D:EB:95:25:F9:05:DC:32:B1:BC:07:F2:F7:28:C3:8B:E7:1C:D9 X509v3 Authority Key Identifier: keyid:EC:6F:B1:42:5B:2E:CD:89:6A:81:D7:A4:E1:CA:BB:D8:EE:58:BB:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC6FB1425B2ECD896A81D7A4E1CABBD8EE58BBD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096626934726524930/0/3230322e39312e3232342e302f32312d3231203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.91.224.0/21 Signature Algorithm: sha256WithRSAEncryption 17:50:2f:07:fd:7c:12:8c:8e:17:c9:d8:eb:eb:3c:1b:b6:d0: 27:47:c7:c7:35:db:6c:2b:0f:61:81:29:aa:08:bd:94:4d:29: b3:bb:ed:e9:4e:bc:ac:38:c1:36:72:63:94:a3:1a:60:73:15: d8:bd:e4:d5:e3:d1:8d:99:e6:37:13:8f:0a:f9:5e:13:15:12: df:52:a6:dd:cd:4e:c3:6c:cb:22:63:ac:ef:ec:ac:71:94:f3: ab:be:cd:ee:1c:b2:6e:d3:00:ee:b3:c4:06:75:6d:ce:6e:cf: 7a:00:9e:dc:4b:f6:53:24:1b:eb:16:09:a9:44:7a:66:d0:60: 73:9c:b1:25:62:26:10:3a:b3:88:20:0d:2a:49:6d:99:1d:cf: 21:04:4f:32:fb:7d:d6:2e:d3:72:c0:63:b5:8c:46:67:e7:2c: 86:91:55:b8:a7:49:21:4c:aa:bd:9b:42:9b:4f:72:b0:ae:cc: a9:7f:29:63:81:c2:ac:8d:5e:ed:64:33:75:61:a8:37:97:74: ff:0f:7a:b7:6b:91:2b:e7:13:26:cb:a8:3b:40:ce:3a:5f:15: 1a:c0:cf:5b:6c:a5:f6:40:a1:80:d6:8b:a5:61:0a:ef:24:24: ce:18:af:ad:03:19:9b:60:de:bb:64:77:c9:b3:dd:1f:42:61: d0:06:b1:b3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUJZ8NKcLsWCzCF+lX6z6+A/MXDaMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhF RTU4QkJEMzAeFw0yNjA1MjcwOTA0MTRaFw0yNzA1MjYwOTA5MTRaMDMxMTAvBgNV BAMTKDUyNkRFQjk1MjVGOTA1REMzMkIxQkMwN0YyRjcyOEMzOEJFNzFDRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgmN+GuFdeIX7QUP22XLJmA/Fc DCnEn6QfjKDLHEMPhC3xJ0v7qqZZdxGD3yTHEE6OIOU0OEnBOkhp46yr/15859uW b6gGyJCkB3S3nbBURqCNGWrOmfVjMEiL0DqNJ80wFBdngNsDcXPeg5JZn9iZd9iP eEfARHH8/3JpFUBlrA/6b35GAPCIzS4MhCSHwh6gP3kjNKwes7JNomEB76c2vemS HehhCDctTyA9i3iDK7snzA5cMB2Iqhq9m14NzxPVcqnfMG5kzfAcF5YK7aswdHvm VJ45EVJi3QJsAfup74XLu13grC5ARgakWwFfbf/zlCgffWrbT0NNECHalx81AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUUm3rlSX5BdwysbwH8vcow4vnHNkwHwYDVR0j BBgwFoAU7G+xQlsuzYlqgdek4cq72O5Yu9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYyNjkzNDcyNjUyNDkzMC8wL0VDNkZCMTQyNUIyRUNEODk2QTgxRDdBNEUxQ0FC QkQ4RUU1OEJCRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM2RkIxNDI1QjJFQ0Q4OTZBODFEN0E0RTFDQUJCRDhFRTU4QkJEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NjI2OTM0NzI2NTI0OTMwLzAvMzIzMDMyMmUzOTMx MmUzMjMyMzQyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA8pb4DANBgkqhkiG9w0BAQsFAAOCAQEAF1AvB/18EoyOF8nY6+s8G7bQJ0fH xzXbbCsPYYEpqgi9lE0ps7vt6U68rDjBNnJjlKMaYHMV2L3k1ePRjZnmNxOPCvle ExUS31Km3c1Ow2zLImOs7+yscZTzq77N7hyybtMA7rPEBnVtzm7PegCe3Ev2UyQb 6xYJqUR6ZtBgc5yxJWImEDqziCANKkltmR3PIQRPMvt91i7TcsBjtYxGZ+cshpFV uKdJIUyqvZtCm09ysK7MqX8pY4HCrI1e7WQzdWGoN5d0/w96t2uRK+cTJsuoO0DO Ol8VGsDPW2yl9kChgNaLpWEK7yQkzhivrQMZm2Deu2R3ybPdH0Jh0Aaxsw== -----END CERTIFICATE-----Generated at Fri May 29 23:50:47 2026 by rpki-client