$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/312e322e342e302f32342d3234203d3e203234343036.roa File: 312e322e342e302f32342d3234203d3e203234343036.roa (raw, json) Hash identifier: KD/NrLapMHgxn13A+QpsSLP1PaMms/ejw9WH8KFaBPw= Subject key identifier: D6:FE:E1:62:96:DC:28:53:81:79:96:96:9B:8B:50:8B:63:34:0D:3A Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 4A68CEFDA5B43C93C5561AB80CDDA551099E0A8D Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/312e322e342e302f32342d3234203d3e203234343036.roa Signing time: Thu 06 Aug 2026 08:29:12 +0000 ROA not before: Thu 06 Aug 2026 08:24:12 +0000 ROA not after: Thu 05 Aug 2027 08:29:12 +0000 asID: 24406 IP address blocks: 1.2.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 15:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:68:ce:fd:a5:b4:3c:93:c5:56:1a:b8:0c:dd:a5:51:09:9e:0a:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: Aug 6 08:24:12 2026 GMT Not After : Aug 5 08:29:12 2027 GMT Subject: CN=D6FEE16296DC2853817996969B8B508B63340D3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:df:b0:0f:65:aa:1d:a2:95:52:67:8a:90:40: 70:e4:11:f6:f2:23:90:57:c6:71:fb:87:67:02:88: ce:3e:68:2f:a9:02:63:ba:47:f7:2d:87:f1:97:80: 05:0b:c6:3b:4a:1d:6c:59:1d:83:43:fd:7f:ac:a5: 73:33:5e:8d:4e:f1:75:02:4b:76:f8:71:2e:17:07: 87:6b:1c:c7:e3:ba:24:4e:4a:41:fe:69:74:8f:50: e5:d7:d7:8f:56:8e:12:4f:fe:e1:14:3b:f8:d2:6b: d2:a5:0a:8f:6a:4c:f6:b4:dc:c4:77:93:be:ed:3d: da:f7:59:88:79:43:ea:76:0e:f7:d6:79:ee:18:3f: 8f:1c:66:c6:12:bb:7c:1d:d0:29:b4:e0:75:9d:1f: 4e:cf:b6:a4:b6:02:ac:32:85:2f:b7:94:97:8b:bd: 36:0a:16:82:95:35:b4:ce:e4:cc:8f:b5:ed:cb:bd: 69:48:6d:d5:22:46:c1:66:26:e4:99:a2:a1:5b:ea: 2a:89:83:b7:25:54:f0:45:32:8a:5b:bd:80:f5:3e: 85:af:30:88:b1:71:20:19:4b:b8:22:9c:63:cb:5c: 33:e4:af:f2:7e:77:06:43:0b:a3:53:4f:38:9a:8e: a8:46:4b:0b:87:8a:d3:7c:3f:76:67:bd:54:09:c9: a2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FE:E1:62:96:DC:28:53:81:79:96:96:9B:8B:50:8B:63:34:0D:3A X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/312e322e342e302f32342d3234203d3e203234343036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 1.2.4.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:ef:33:a3:97:21:06:ae:b5:15:99:6b:0f:49:c8:c6:95:0b: 84:a3:56:cd:6d:ea:65:4f:37:07:58:20:24:3b:30:28:b5:7c: 32:6b:64:b3:ee:dd:ec:73:96:ef:7e:60:be:9b:29:02:4a:c5: 68:6d:13:5e:f2:3f:49:cd:f2:c1:bc:f8:e1:9d:a6:a6:25:35: f6:5d:d9:e2:c8:76:83:f4:8a:a2:90:bf:c6:f9:7f:09:56:eb: d1:07:19:fa:d3:67:9e:4a:12:42:fb:77:d0:fa:09:16:aa:8c: 94:13:65:a9:22:74:98:7e:eb:d7:ea:36:76:18:50:ac:8d:9d: 2d:51:56:c8:86:c3:37:54:ef:df:d7:2b:16:13:be:6a:5a:74: 5e:6c:bc:7e:06:b6:b7:68:3b:0e:61:64:47:40:6e:73:4e:92: b8:b7:af:75:ee:dc:78:77:dd:c5:aa:9b:a4:5c:7b:4c:b9:fc: 7a:c7:f8:13:17:0e:86:47:54:96:a4:f2:01:07:94:c6:53:fa: 1e:1a:19:f9:ca:14:6b:8c:4b:5c:a5:de:5a:93:61:5f:09:15: d7:96:65:eb:db:87:21:2a:45:07:8f:54:ab:7a:88:ff:94:1b: 3b:d0:be:7e:0c:03:c5:c8:f2:03:53:0e:ca:8b:51:cd:62:17: 7f:01:54:7b -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUSmjO/aW0PJPFVhq4DN2lUQmeCo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjA4MDYwODI0MTJaFw0yNzA4MDUwODI5MTJaMDMxMTAvBgNV BAMTKEQ2RkVFMTYyOTZEQzI4NTM4MTc5OTY5NjlCOEI1MDhCNjMzNDBEM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX37APZaodopVSZ4qQQHDkEfby I5BXxnH7h2cCiM4+aC+pAmO6R/cth/GXgAULxjtKHWxZHYND/X+spXMzXo1O8XUC S3b4cS4XB4drHMfjuiROSkH+aXSPUOXX149WjhJP/uEUO/jSa9KlCo9qTPa03MR3 k77tPdr3WYh5Q+p2DvfWee4YP48cZsYSu3wd0Cm04HWdH07PtqS2AqwyhS+3lJeL vTYKFoKVNbTO5MyPte3LvWlIbdUiRsFmJuSZoqFb6iqJg7clVPBFMopbvYD1PoWv MIixcSAZS7ginGPLXDPkr/J+dwZDC6NTTziajqhGSwuHitN8P3ZnvVQJyaLNAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQU1v7hYpbcKFOBeZaWm4tQi2M0DTowHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MDA0Nzk2NDUyNDA1MjY3LzAvMzEyZTMyMmUzNDJl MzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzQzNDMwMzYucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAABAgQw DQYJKoZIhvcNAQELBQADggEBACzvM6OXIQautRWZaw9JyMaVC4SjVs1t6mVPNwdY ICQ7MCi1fDJrZLPu3exzlu9+YL6bKQJKxWhtE17yP0nN8sG8+OGdpqYlNfZd2eLI doP0iqKQv8b5fwlW69EHGfrTZ55KEkL7d9D6CRaqjJQTZakidJh+69fqNnYYUKyN nS1RVsiGwzdU79/XKxYTvmpadF5svH4GtrdoOw5hZEdAbnNOkri3r3Xu3Hh33cWq m6Rce0y5/HrH+BMXDoZHVJak8gEHlMZT+h4aGfnKFGuMS1yl3lqTYV8JFdeWZevb hyEqRQePVKt6iP+UGzvQvn4MA8XI8gNTDsqLUc1iF38BVHs= -----END CERTIFICATE-----Generated at Sat Aug 29 07:05:14 2026 by rpki-client