$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e302e302f32342d3234203d3e2034383437.roa File: 3232332e3230322e302e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: pR0zTh2uSb7Gv/d+NRjB6KukBbq7BbyzBDt8MRpzHTI= Subject key identifier: 86:D8:A4:16:B8:24:90:EA:67:35:D3:4A:39:DD:F2:FA:E2:0C:84:C2 Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Certificate serial: 475413169BFA011CC2974BE88F22C9450D0E8532 Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e302e302f32342d3234203d3e2034383437.roa Signing time: Tue 19 May 2026 05:36:38 +0000 ROA not before: Tue 19 May 2026 05:31:38 +0000 ROA not after: Tue 18 May 2027 05:36:38 +0000 asID: 4847 IP address blocks: 223.202.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:54:13:16:9b:fa:01:1c:c2:97:4b:e8:8f:22:c9:45:0d:0e:85:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Validity Not Before: May 19 05:31:38 2026 GMT Not After : May 18 05:36:38 2027 GMT Subject: CN=86D8A416B82490EA6735D34A39DDF2FAE20C84C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f0:8e:75:49:62:29:0e:bd:00:3f:1f:d4:a9: 0f:41:27:d1:57:7d:40:94:d8:38:64:41:0c:a9:0d: b1:ee:33:2e:8e:a7:99:95:b5:11:6b:02:83:fc:c6: 28:72:2a:8d:7d:15:7b:7b:43:6e:c3:6e:a4:34:ad: 64:4f:2d:14:73:b4:db:b0:5b:13:db:ce:8e:32:c5: 8f:de:3d:d5:bf:e1:1f:2c:da:b9:df:4f:12:4d:43: a3:29:47:d6:45:44:0c:2c:e7:82:df:88:fc:7c:5f: a6:4a:60:89:1b:80:01:0e:eb:e0:b8:06:dc:37:3e: 2f:4f:fe:aa:9a:92:7a:22:d7:ea:32:d0:96:9f:40: 55:6b:60:a9:a2:42:d8:39:46:d5:5c:80:45:7f:06: 31:be:d5:05:b9:bf:82:af:ae:24:03:97:c4:87:6d: 95:69:51:b8:99:47:0b:5b:7b:ca:a0:ed:11:06:01: 87:8b:4d:e2:d0:22:3a:45:2c:13:08:54:64:3a:e2: 09:c7:46:93:55:af:28:03:b1:fb:d0:57:cc:eb:27: 95:61:48:f9:e2:1f:fd:46:ea:a7:1b:7a:d9:53:38: f5:a9:d2:e9:19:c9:dd:39:b8:a3:fe:fc:0c:1a:3d: 03:95:43:62:45:00:12:7a:00:c9:8e:c0:a8:ef:3c: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D8:A4:16:B8:24:90:EA:67:35:D3:4A:39:DD:F2:FA:E2:0C:84:C2 X509v3 Authority Key Identifier: keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230322e302e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.202.0.0/24 Signature Algorithm: sha256WithRSAEncryption a2:29:1a:fe:44:81:be:19:78:66:a9:11:71:42:a3:22:40:02: 60:48:fe:0f:1e:90:8e:e6:56:cc:0b:83:1e:ba:c4:d4:e9:2e: ca:aa:c8:f9:5b:e6:75:f8:f0:41:22:d9:b2:79:3e:b5:0d:bb: 95:3d:70:fe:f5:e6:d2:c4:5d:b2:bc:23:51:97:ab:c1:64:16: ed:ed:c7:f6:e5:6f:ce:7a:f3:c1:37:61:32:58:15:a1:f6:e7: 54:58:83:e6:76:0a:bd:5b:90:4f:dd:a3:29:c6:02:6e:13:9b: 63:d8:c0:c5:77:33:90:46:e9:9c:1c:d2:64:e3:01:83:09:c1: 0e:e9:93:38:bb:ad:27:bd:14:88:b9:5a:b1:10:a1:f5:c4:0f: ce:72:50:52:a0:e9:82:2c:6d:49:e2:45:44:ca:b7:74:bc:66: a0:0d:d1:ae:7c:64:c3:71:be:8c:19:66:9b:cf:1a:95:6f:36: 54:7c:32:70:b3:52:96:f5:9f:bb:47:8b:c2:1b:99:6f:d4:b2: c9:00:1e:84:7e:4a:d7:f6:1f:75:ab:0f:bf:55:74:a2:e4:80: 9f:ef:28:48:6b:92:e9:e6:14:94:77:43:b2:1d:89:7d:9e:3c: 87:4c:af:f6:70:6a:c5:26:16:66:36:a4:2d:75:e6:b5:0d:f1: 70:65:d1:78 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUR1QTFpv6ARzCl0vojyLJRQ0OhTIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC NUYxOTU1MTAeFw0yNjA1MTkwNTMxMzhaFw0yNzA1MTgwNTM2MzhaMDMxMTAvBgNV BAMTKDg2RDhBNDE2QjgyNDkwRUE2NzM1RDM0QTM5RERGMkZBRTIwQzg0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8I51SWIpDr0APx/UqQ9BJ9FX fUCU2DhkQQypDbHuMy6Op5mVtRFrAoP8xihyKo19FXt7Q27DbqQ0rWRPLRRztNuw WxPbzo4yxY/ePdW/4R8s2rnfTxJNQ6MpR9ZFRAws54LfiPx8X6ZKYIkbgAEO6+C4 Btw3Pi9P/qqaknoi1+oy0JafQFVrYKmiQtg5RtVcgEV/BjG+1QW5v4KvriQDl8SH bZVpUbiZRwtbe8qg7REGAYeLTeLQIjpFLBMIVGQ64gnHRpNVrygDsfvQV8zrJ5Vh SPniH/1G6qcbetlTOPWp0ukZyd05uKP+/AwaPQOVQ2JFABJ6AMmOwKjvPFcPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUhtikFrgkkOpnNdNKOd3y+uIMhMIwHwYDVR0j BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDU1Mzk2MDQxODUwODgxLzAvMzIzMjMzMmUzMjMw MzIyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADfygAwDQYJKoZIhvcNAQELBQADggEBAKIpGv5Egb4ZeGapEXFCoyJAAmBI/g8e kI7mVswLgx66xNTpLsqqyPlb5nX48EEi2bJ5PrUNu5U9cP715tLEXbK8I1GXq8Fk Fu3tx/blb85688E3YTJYFaH251RYg+Z2Cr1bkE/doynGAm4Tm2PYwMV3M5BG6Zwc 0mTjAYMJwQ7pkzi7rSe9FIi5WrEQofXED85yUFKg6YIsbUniRUTKt3S8ZqAN0a58 ZMNxvowZZpvPGpVvNlR8MnCzUpb1n7tHi8IbmW/UsskAHoR+Stf2H3WrD79VdKLk gJ/vKEhrkunmFJR3Q7IdiX2ePIdMr/ZwasUmFmY2pC115rUN8XBl0Xg= -----END CERTIFICATE-----Generated at Fri May 29 22:57:02 2026 by rpki-client