$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e39362e302f32342d3234203d3e2034383038.roa File: 3232332e3230332e39362e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: sV8nbdG5SeobwOPaDj2ceChGIDC4wx65hD+7bXlgxmY= Subject key identifier: 71:0F:CA:18:38:F4:AE:09:AC:75:01:55:B9:88:70:C2:96:4E:E5:7F Certificate issuer: /CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Certificate serial: 35C55B853015E8B3FA998A04CE01214FC1F58E5A Authority key identifier: 78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e39362e302f32342d3234203d3e2034383038.roa Signing time: Tue 19 May 2026 02:29:58 +0000 ROA not before: Tue 19 May 2026 02:24:58 +0000 ROA not after: Tue 18 May 2027 02:29:58 +0000 asID: 4808 IP address blocks: 223.203.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c5:5b:85:30:15:e8:b3:fa:99:8a:04:ce:01:21:4f:c1:f5:8e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=781D62BD536F03A2F82FAC3F719DE5B3B5F19551 Validity Not Before: May 19 02:24:58 2026 GMT Not After : May 18 02:29:58 2027 GMT Subject: CN=710FCA1838F4AE09AC750155B98870C2964EE57F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:b6:0e:85:7a:91:9a:0e:f4:01:1c:b4:f3:4b: 5d:0d:0d:61:66:a8:ae:18:79:ae:1e:54:21:29:e5: dc:30:9f:06:ff:39:b1:7c:cc:96:e4:1e:42:c7:7c: 5c:d5:44:65:df:56:4a:f2:13:a0:c1:87:ce:50:d3: de:fe:af:89:1e:61:e1:dd:7c:58:46:58:a2:ab:6e: 61:5b:1b:00:8f:af:ec:66:08:3b:bd:72:9b:ab:a5: c9:92:6d:9e:39:51:44:22:6c:b6:71:9b:df:0d:3f: b8:3d:83:48:7e:6a:30:45:13:58:95:4b:de:1e:11: 87:8f:ae:a3:15:74:93:6e:9b:84:48:56:86:07:1c: d3:42:7e:55:60:6f:34:cc:cc:d4:f2:ed:ae:21:3b: 6e:92:2e:2e:f4:77:df:e1:72:44:54:fe:06:a0:2a: 29:40:27:db:75:21:d5:ea:b5:da:8a:af:6f:70:88: 4c:29:28:89:b2:9c:a5:14:c2:91:19:69:d1:9b:07: 9d:e3:b0:b8:8d:71:02:92:86:ac:d2:45:e0:de:4c: 22:ba:1b:0d:36:49:6e:11:30:f9:f0:80:88:b1:c9: 34:bf:ee:ca:db:b6:0f:dc:82:da:d9:4c:1d:c0:ee: 82:91:c8:55:86:53:1e:c2:f1:61:cb:33:5b:4c:c0: 40:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:0F:CA:18:38:F4:AE:09:AC:75:01:55:B9:88:70:C2:96:4E:E5:7F X509v3 Authority Key Identifier: keyid:78:1D:62:BD:53:6F:03:A2:F8:2F:AC:3F:71:9D:E5:B3:B5:F1:95:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/781D62BD536F03A2F82FAC3F719DE5B3B5F19551.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097055396041850881/0/3232332e3230332e39362e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.203.96.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:87:fa:39:64:38:7c:bb:db:b6:dd:f2:0a:cf:d0:08:ad:ce: 30:86:e9:e3:4e:48:b2:03:0e:c1:b8:5e:36:df:65:88:9a:cd: a4:40:8e:1a:1d:c7:01:2e:a0:be:8c:ad:3d:00:23:80:c8:ec: 91:d4:0f:34:f8:7e:00:c2:e1:fd:6e:e4:0c:82:ae:d0:13:aa: 10:a6:ff:15:43:b1:de:60:b0:b9:05:6b:b8:e4:16:c4:c9:45: 12:93:49:6f:42:b4:21:4a:f6:e0:f9:b6:dd:dd:b2:6e:32:67: 11:40:53:d2:db:c2:1a:60:27:48:70:dc:d8:1f:26:15:fe:2a: be:17:65:ab:7f:19:1d:d3:9c:dc:f3:34:05:36:7f:2a:19:42: 7d:50:60:de:ae:f6:97:d6:76:ff:89:b7:bf:e7:80:90:71:e6: 1f:24:3f:cf:7e:ca:a8:60:e2:43:56:f4:e7:a2:4f:c9:88:b4: 46:aa:3c:50:45:cd:39:ad:00:03:ab:ed:f0:76:8a:5f:a8:d7: f4:93:e8:cf:36:75:8a:8c:23:ad:6f:a4:2e:2e:7d:d2:82:6b: 06:80:fd:a6:1c:97:63:60:37:8c:d3:1b:d0:30:08:bf:3e:b2: 5b:ff:70:40:f2:95:8e:e7:e3:60:cd:b2:7b:55:03:69:d3:4c: 6a:92:93:31 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUNcVbhTAV6LP6mYoEzgEhT8H1jlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNC NUYxOTU1MTAeFw0yNjA1MTkwMjI0NThaFw0yNzA1MTgwMjI5NThaMDMxMTAvBgNV BAMTKDcxMEZDQTE4MzhGNEFFMDlBQzc1MDE1NUI5ODg3MEMyOTY0RUU1N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDstg6FepGaDvQBHLTzS10NDWFm qK4Yea4eVCEp5dwwnwb/ObF8zJbkHkLHfFzVRGXfVkryE6DBh85Q097+r4keYeHd fFhGWKKrbmFbGwCPr+xmCDu9cpurpcmSbZ45UUQibLZxm98NP7g9g0h+ajBFE1iV S94eEYePrqMVdJNum4RIVoYHHNNCflVgbzTMzNTy7a4hO26SLi70d9/hckRU/gag KilAJ9t1IdXqtdqKr29wiEwpKImynKUUwpEZadGbB53jsLiNcQKShqzSReDeTCK6 Gw02SW4RMPnwgIixyTS/7srbtg/cgtrZTB3A7oKRyFWGUx7C8WHLM1tMwECHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUcQ/KGDj0rgmsdQFVuYhwwpZO5X8wHwYDVR0j BBgwFoAUeB1ivVNvA6L4L6w/cZ3ls7XxlVEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA1NTM5NjA0MTg1MDg4MS8wLzc4MUQ2MkJENTM2RjAzQTJGODJGQUMzRjcxOURF NUIzQjVGMTk1NTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzgxRDYyQkQ1MzZGMDNBMkY4MkZBQzNGNzE5REU1QjNCNUYxOTU1MS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDU1Mzk2MDQxODUwODgxLzAvMzIzMjMzMmUzMjMw MzMyZTM5MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAN/LYDANBgkqhkiG9w0BAQsFAAOCAQEAC4f6OWQ4fLvbtt3yCs/QCK3OMIbp 405IsgMOwbheNt9liJrNpECOGh3HAS6gvoytPQAjgMjskdQPNPh+AMLh/W7kDIKu 0BOqEKb/FUOx3mCwuQVruOQWxMlFEpNJb0K0IUr24Pm23d2ybjJnEUBT0tvCGmAn SHDc2B8mFf4qvhdlq38ZHdOc3PM0BTZ/KhlCfVBg3q72l9Z2/4m3v+eAkHHmHyQ/ z37KqGDiQ1b056JPyYi0Rqo8UEXNOa0AA6vt8HaKX6jX9JPozzZ1iowjrW+kLi59 0oJrBoD9phyXY2A3jNMb0DAIvz6yW/9wQPKVjufjYM2ye1UDadNMapKTMQ== -----END CERTIFICATE-----Generated at Fri May 29 22:56:15 2026 by rpki-client