$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35382e302f32342d3234203d3e2034383038.roa File: 3231382e3234342e35382e302f32342d3234203d3e2034383038.roa (raw, json) Hash identifier: GENkVC5v7/pFJ6EtoRSLQrn/CeP5GXuE8sKz1Tp6wWs= Subject key identifier: FB:2C:94:9E:41:45:CB:D7:29:5F:A7:A7:C1:CF:26:B8:B9:CF:DF:6E Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Certificate serial: 377DDDF6CEFBD845EA0D9868AAD51C2F93B53F5C Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35382e302f32342d3234203d3e2034383038.roa Signing time: Mon 08 Jun 2026 10:13:53 +0000 ROA not before: Mon 08 Jun 2026 10:08:53 +0000 ROA not after: Mon 07 Jun 2027 10:13:53 +0000 asID: 4808 IP address blocks: 218.244.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:7d:dd:f6:ce:fb:d8:45:ea:0d:98:68:aa:d5:1c:2f:93:b5:3f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Validity Not Before: Jun 8 10:08:53 2026 GMT Not After : Jun 7 10:13:53 2027 GMT Subject: CN=FB2C949E4145CBD7295FA7A7C1CF26B8B9CFDF6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:76:0e:73:84:71:79:e6:c7:32:7b:69:d9:c3: 7e:6d:da:6e:b3:ae:35:5c:bb:06:cc:12:0d:64:b8: 3d:c8:90:73:08:db:16:99:7b:c5:d3:9c:a3:77:23: 44:61:6c:7e:78:ac:35:19:cf:5d:67:08:a1:b0:54: 8d:14:2a:96:86:dc:a3:24:a2:97:5c:b5:ed:f8:4b: 24:5f:06:b6:1b:02:f8:7a:b6:4f:36:b0:e0:83:f4: 46:9b:e0:85:d4:6f:d0:fe:d1:f1:fb:30:ef:b7:55: b2:82:3c:88:ed:3f:78:e5:33:18:44:d9:f6:81:05: 24:1e:fd:29:61:08:50:97:b8:6f:d8:a4:f7:2c:fe: 3e:fd:d6:77:c5:06:b4:d2:d1:8c:cc:c6:85:ac:25: 67:0a:5e:e4:c4:32:19:97:c5:05:3d:56:70:b7:a7: a0:02:17:a3:9d:b4:a2:31:3c:aa:03:d7:8a:83:b2: c5:5f:9d:ba:71:5d:01:3f:a8:3e:0f:d6:13:d4:15: f7:a1:9a:4d:42:7d:ed:d4:21:42:04:ec:53:b2:49: 2b:c0:0d:aa:00:ef:6f:01:6c:2e:7d:10:28:2e:50: 4f:c3:ee:27:10:6d:c9:6c:4b:88:b8:79:7e:76:5a: 4c:15:92:0a:97:ae:a9:6a:9b:ad:4e:a3:ab:18:dc: 4c:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2C:94:9E:41:45:CB:D7:29:5F:A7:A7:C1:CF:26:B8:B9:CF:DF:6E X509v3 Authority Key Identifier: keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35382e302f32342d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.244.58.0/24 Signature Algorithm: sha256WithRSAEncryption 23:6c:fb:cf:47:ab:c4:55:31:d8:8d:46:b6:3a:de:d2:55:54: 09:f5:56:b1:9d:2f:be:01:3e:01:55:5f:ad:d1:03:5f:2b:d5: 52:27:32:61:c3:d4:58:a9:61:ab:e7:c3:01:e8:44:6f:8b:48: 20:0e:b2:36:ca:ff:00:e5:cd:27:8a:ef:c2:95:d1:52:92:7b: 76:b6:d4:be:1e:e3:39:e4:d2:07:4b:95:6b:e6:c2:ab:77:4d: 73:6f:cb:1c:16:68:63:fd:e5:31:6a:9a:bc:c2:68:f6:43:94: fa:66:81:32:ba:ed:ec:79:80:06:3e:dd:41:52:2b:22:9d:e1: 44:1a:93:a5:06:ba:04:f0:99:f3:7c:44:79:c9:59:a8:00:f9: a7:91:7e:45:15:db:0f:21:b3:dd:c7:b3:ff:9a:af:74:3c:61: 3e:2f:19:6d:76:63:cb:66:a5:a0:27:b5:8b:69:fe:04:ea:70: 1b:1f:80:f1:a9:83:21:09:6e:91:6b:6f:1b:e6:34:2f:86:f1: 05:3e:49:d3:3c:f2:b0:bb:36:9e:6b:db:77:eb:94:b5:d8:fd: 1f:18:4a:28:df:73:94:dd:3d:38:8e:1b:c8:49:47:c7:d1:8f: 5b:2e:16:77:9e:03:92:e5:9a:d9:f2:9a:3b:33:52:c5:ee:c3: 36:23:60:0a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUN33d9s772EXqDZhoqtUcL5O1P1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5 RjkzRjZGODAeFw0yNjA2MDgxMDA4NTNaFw0yNzA2MDcxMDEzNTNaMDMxMTAvBgNV BAMTKEZCMkM5NDlFNDE0NUNCRDcyOTVGQTdBN0MxQ0YyNkI4QjlDRkRGNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdg5zhHF55scye2nZw35t2m6z rjVcuwbMEg1kuD3IkHMI2xaZe8XTnKN3I0RhbH54rDUZz11nCKGwVI0UKpaG3KMk opdcte34SyRfBrYbAvh6tk82sOCD9Eab4IXUb9D+0fH7MO+3VbKCPIjtP3jlMxhE 2faBBSQe/SlhCFCXuG/YpPcs/j791nfFBrTS0YzMxoWsJWcKXuTEMhmXxQU9VnC3 p6ACF6OdtKIxPKoD14qDssVfnbpxXQE/qD4P1hPUFfehmk1Cfe3UIUIE7FOySSvA DaoA728BbC59ECguUE/D7icQbclsS4i4eX52WkwVkgqXrqlqm61Oo6sY3EwJAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU+yyUnkFFy9cpX6enwc8muLnP324wHwYDVR0j BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzIzMTM4MmUzMjM0 MzQyZTM1MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANr0OjANBgkqhkiG9w0BAQsFAAOCAQEAI2z7z0erxFUx2I1Gtjre0lVUCfVW sZ0vvgE+AVVfrdEDXyvVUicyYcPUWKlhq+fDAehEb4tIIA6yNsr/AOXNJ4rvwpXR UpJ7drbUvh7jOeTSB0uVa+bCq3dNc2/LHBZoY/3lMWqavMJo9kOU+maBMrrt7HmA Bj7dQVIrIp3hRBqTpQa6BPCZ83xEeclZqAD5p5F+RRXbDyGz3cez/5qvdDxhPi8Z bXZjy2aloCe1i2n+BOpwGx+A8amDIQlukWtvG+Y0L4bxBT5J0zzysLs2nmvbd+uU tdj9HxhKKN9zlN09OI4byElHx9GPWy4Wd54DkuWa2fKaOzNSxe7DNiNgCg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:13 2026 by rpki-client