$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e332e302f32342d3234203d3e2034383038.roa File: 3232332e3230332e332e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: /e46RW5QyM7bjKR25oEdzwx+mVv9vX0wvTYXEQk7EN4= Subject key identifier: 22:74:55:71:95:34:FE:74:26:79:37:43:4A:39:BF:FC:6A:85:64:C2 Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Certificate serial: 2DABEA903C70AF323CDA340C5AB515B94B64BBB4 Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e332e302f32342d3234203d3e2034383038.roa Signing time: Tue 19 May 2026 02:29:57 +0000 ROA not before: Tue 19 May 2026 02:24:57 +0000 ROA not after: Tue 18 May 2027 02:29:57 +0000 asID: 4808 IP address blocks: 223.203.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:ab:ea:90:3c:70:af:32:3c:da:34:0c:5a:b5:15:b9:4b:64:bb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Validity Not Before: May 19 02:24:57 2026 GMT Not After : May 18 02:29:57 2027 GMT Subject: CN=227455719534FE74267937434A39BFFC6A8564C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ba:f9:0a:72:2f:0a:eb:70:a3:60:47:8a:b1: f9:6d:55:ba:ae:7e:f3:ae:8f:62:3e:3a:9b:0f:a8: a2:e0:a6:13:d0:75:d3:e7:91:1c:5e:91:30:c0:6b: 43:b5:83:47:2d:24:6d:3c:04:45:07:5e:4f:68:47: 7b:a6:b5:86:7f:07:83:55:26:a9:45:4b:1a:d9:10: 0c:05:89:66:e8:65:a9:4e:04:46:e5:25:06:cf:de: 14:fb:a0:d7:70:4b:ad:24:d0:89:c1:2a:f3:a6:9b: d6:79:2e:75:1f:3f:27:b9:b9:01:c7:85:38:e8:a4: 21:4b:e5:be:b1:db:e0:ca:ab:6d:d7:f5:c8:54:54: b1:93:d0:ad:e4:f1:16:49:d3:ca:62:13:24:4a:c0: 66:07:aa:55:10:75:a0:5b:fd:3b:10:d7:2e:8d:7d: 37:f8:99:ed:4c:f4:17:4c:bf:1b:8d:63:a1:65:7d: 31:17:a6:ee:81:b6:4b:10:9e:3a:36:a7:5e:e1:0a: 67:06:3e:69:5b:66:8d:1a:bf:cb:17:62:b3:f8:7f: 20:22:25:b4:a5:40:ef:ef:5a:6e:45:10:5e:4c:f4: 8f:80:99:ff:7e:cf:dc:d2:b4:3c:37:44:57:bc:ee: 36:6b:13:13:67:b1:4c:06:fc:ca:4b:91:e9:15:0f: 3e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:74:55:71:95:34:FE:74:26:79:37:43:4A:39:BF:FC:6A:85:64:C2 X509v3 Authority Key Identifier: keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e332e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.203.3.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:a8:78:0d:94:cf:41:91:95:e8:ef:3e:5d:6d:4d:23:66:45: 16:6f:5f:fe:38:2c:75:8d:a0:14:6c:e2:72:f3:de:a6:33:14: bc:2e:a8:77:77:18:86:fe:cf:d2:ad:83:ca:47:3a:30:1d:c0: b2:63:3b:14:ea:6e:30:8b:61:eb:6a:45:ca:55:8b:da:8b:68: 07:6d:d4:23:d8:9e:ce:e3:fc:63:7a:31:6a:6d:6a:93:30:a0: 51:df:cd:e4:aa:1a:22:38:fe:08:f1:75:a4:f0:a1:97:db:cc: 8c:31:02:dc:cd:68:68:06:0c:e6:13:96:69:3a:cb:35:72:52: 46:6e:27:a4:41:c3:d9:6f:e1:00:59:5b:07:2b:84:a9:20:1b: 05:0f:67:c6:79:4a:46:6a:39:6d:68:a2:70:9f:ba:3a:16:b7: 1f:73:5c:e7:9d:40:a6:ef:06:0f:ad:e2:80:e5:1e:aa:63:e0: 49:86:01:d0:8f:85:b5:77:34:71:56:dd:48:0a:ae:e7:3f:21: a8:73:79:67:52:f4:de:55:68:88:aa:19:d9:5d:32:44:d7:fb: 6b:f1:a4:48:76:9d:14:5c:5d:22:e6:50:85:69:11:3b:68:42: 95:e8:8e:6e:f1:5a:8a:82:76:4f:b2:4e:6b:0e:38:31:7f:2c: 21:e5:ff:9a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIULavqkDxwrzI82jQMWrUVuUtku7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC NUYxOTU1MTAeFw0yNjA1MTkwMjI0NTdaFw0yNzA1MTgwMjI5NTdaMDMxMTAvBgNV BAMTKDIyNzQ1NTcxOTUzNEZFNzQyNjc5Mzc0MzRBMzlCRkZDNkE4NTY0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXuvkKci8K63CjYEeKsfltVbqu fvOuj2I+OpsPqKLgphPQddPnkRxekTDAa0O1g0ctJG08BEUHXk9oR3umtYZ/B4NV JqlFSxrZEAwFiWboZalOBEblJQbP3hT7oNdwS60k0InBKvOmm9Z5LnUfPye5uQHH hTjopCFL5b6x2+DKq23X9chUVLGT0K3k8RZJ08piEyRKwGYHqlUQdaBb/TsQ1y6N fTf4me1M9BdMvxuNY6FlfTEXpu6BtksQnjo2p17hCmcGPmlbZo0av8sXYrP4fyAi JbSlQO/vWm5FEF5M9I+Amf9+z9zStDw3RFe87jZrExNnsUwG/MpLkekVDz7pAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUInRVcZU0/nQmeTdDSjm//GqFZMIwHwYDVR0j BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDU1Mzk2MDQxODUwODgxLzAvMzIzMjMzMmUzMjMw MzMyZTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADfywMwDQYJKoZIhvcNAQELBQADggEBAF2oeA2Uz0GRlejvPl1tTSNmRRZvX/44 LHWNoBRs4nLz3qYzFLwuqHd3GIb+z9Ktg8pHOjAdwLJjOxTqbjCLYetqRcpVi9qL aAdt1CPYns7j/GN6MWptapMwoFHfzeSqGiI4/gjxdaTwoZfbzIwxAtzNaGgGDOYT lmk6yzVyUkZuJ6RBw9lv4QBZWwcrhKkgGwUPZ8Z5SkZqOW1oonCfujoWtx9zXOed QKbvBg+t4oDlHqpj4EmGAdCPhbV3NHFW3UgKruc/IahzeWdS9N5VaIiqGdldMkTX +2vxpEh2nRRcXSLmUIVpETtoQpXojm7xWoqCdk+yTmsOODF/LCHl/5o= -----END CERTIFICATE-----Generated at Fri May 29 22:56:39 2026 by rpki-client