$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/3231302e322e342e302f32342d3234203d3e203234313531.roa File: 3231302e322e342e302f32342d3234203d3e203234313531.roa (raw, json) Hash identifier: 4yARnFQIDMpI8ucHC89vUcViaXqG+ksWmochWxcUi2c= Subject key identifier: 43:A8:72:FF:FF:95:07:2B:92:AD:14:3F:C8:4D:1C:FF:9F:4D:21:26 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 3ECC6C22934A094F6D5D356023F6596527D2A9B3 Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/3231302e322e342e302f32342d3234203d3e203234313531.roa Signing time: Tue 19 May 2026 06:33:16 +0000 ROA not before: Tue 19 May 2026 06:28:16 +0000 ROA not after: Tue 18 May 2027 06:33:16 +0000 asID: 24151 IP address blocks: 210.2.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:cc:6c:22:93:4a:09:4f:6d:5d:35:60:23:f6:59:65:27:d2:a9:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: May 19 06:28:16 2026 GMT Not After : May 18 06:33:16 2027 GMT Subject: CN=43A872FFFF95072B92AD143FC84D1CFF9F4D2126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:90:16:08:68:a1:4b:a0:f5:c5:de:98:a4:62: 35:03:52:23:90:f3:a1:f0:20:4d:74:24:eb:5c:9a: 24:12:d0:3b:10:14:6a:0e:6c:40:e4:2f:a6:31:7c: 48:ed:e7:86:07:3b:a0:31:54:c3:88:90:6b:d6:14: b1:e7:3d:99:fa:0e:4a:31:0f:52:de:fe:3d:bd:cb: 6d:85:be:b8:74:35:7f:ef:2a:a0:b9:97:82:76:dd: 20:a6:60:41:6d:08:c4:3d:6e:24:8a:f3:27:fc:5b: 1b:89:98:7a:2a:0a:89:5f:68:e8:63:45:5c:99:10: 01:0d:6c:af:30:47:03:f9:b4:dd:de:4a:88:ff:2c: 2c:eb:cb:e8:2b:c6:57:1f:34:b5:eb:08:4a:7d:94: fb:46:64:8b:dd:db:bc:51:0f:ad:b6:c5:11:a5:ab: a3:01:08:9d:13:5b:a8:8f:7c:e2:78:58:c6:83:fb: 7b:6d:10:71:bf:98:6e:a3:be:9f:40:ec:87:4c:ff: 6e:66:c3:96:46:20:7d:72:33:7e:7f:e4:df:87:b2: 30:6f:53:3f:b9:63:44:44:59:8b:60:eb:b6:b8:80: c3:e0:ca:b7:55:7e:07:38:82:31:65:21:7e:8a:66: 84:0c:cf:6b:fa:a8:d0:93:67:4f:4a:df:08:2f:a6: b1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:A8:72:FF:FF:95:07:2B:92:AD:14:3F:C8:4D:1C:FF:9F:4D:21:26 X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/3231302e322e342e302f32342d3234203d3e203234313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.2.4.0/24 Signature Algorithm: sha256WithRSAEncryption 20:f9:90:66:6c:1c:96:6a:d0:ef:b1:3d:36:a4:82:83:56:90: 92:c2:2c:42:48:72:9f:b2:13:fb:59:5e:fc:5d:cf:20:a1:5e: cb:27:59:c6:d7:f6:9a:76:3d:09:f7:ac:43:e6:63:58:43:95: db:81:bc:cc:7e:6e:a9:d8:bd:c1:f9:a4:1b:9b:c7:dc:17:b0: d1:97:4b:dd:81:ef:71:9f:4a:b0:81:b7:da:47:0f:f4:2d:ff: d7:a3:f9:97:95:ce:a7:3d:a2:4c:b7:69:f2:76:24:1a:e3:6b: 39:a8:da:9f:d0:1d:34:d3:6f:53:3f:2a:34:c7:65:ca:3c:d7: 97:ca:2f:4f:f8:db:c1:b8:d5:7d:05:23:fc:ff:cc:8d:a9:dc: 4d:5b:f7:db:bb:0c:85:ba:e5:3b:0e:aa:fc:02:2d:45:8e:9b: 15:e1:ec:8a:be:e3:8f:0c:52:7f:5b:c0:89:5b:31:d2:5f:b5: fb:3d:b3:0e:72:ad:0a:6a:fb:c7:ea:6f:a6:16:08:c5:72:33: e8:b0:01:c3:a1:66:6c:69:0d:40:9b:7d:97:46:f7:e1:65:e5: f3:4b:96:6b:32:ad:02:59:32:33:14:e6:27:f4:78:d8:b0:1c: c6:fa:2f:a6:58:23:ee:c2:81:e1:42:ba:ff:34:92:07:01:ef: 2f:31:b9:52 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUPsxsIpNKCU9tXTVgI/ZZZSfSqbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjA1MTkwNjI4MTZaFw0yNzA1MTgwNjMzMTZaMDMxMTAvBgNV BAMTKDQzQTg3MkZGRkY5NTA3MkI5MkFEMTQzRkM4NEQxQ0ZGOUY0RDIxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxkBYIaKFLoPXF3pikYjUDUiOQ 86HwIE10JOtcmiQS0DsQFGoObEDkL6YxfEjt54YHO6AxVMOIkGvWFLHnPZn6Dkox D1Le/j29y22Fvrh0NX/vKqC5l4J23SCmYEFtCMQ9biSK8yf8WxuJmHoqColfaOhj RVyZEAENbK8wRwP5tN3eSoj/LCzry+grxlcfNLXrCEp9lPtGZIvd27xRD622xRGl q6MBCJ0TW6iPfOJ4WMaD+3ttEHG/mG6jvp9A7IdM/25mw5ZGIH1yM35/5N+HsjBv Uz+5Y0REWYtg67a4gMPgyrdVfgc4gjFlIX6KZoQMz2v6qNCTZ09K3wgvprGVAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUQ6hy//+VByuSrRQ/yE0c/59NISYwHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5MDA0Nzk2NDUyNDA1MjY3LzAvMzIzMTMwMmUzMjJl MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM0MzEzNTMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 0gIEMA0GCSqGSIb3DQEBCwUAA4IBAQAg+ZBmbByWatDvsT02pIKDVpCSwixCSHKf shP7WV78Xc8goV7LJ1nG1/aadj0J96xD5mNYQ5XbgbzMfm6p2L3B+aQbm8fcF7DR l0vdge9xn0qwgbfaRw/0Lf/Xo/mXlc6nPaJMt2nydiQa42s5qNqf0B00029TPyo0 x2XKPNeXyi9P+NvBuNV9BSP8/8yNqdxNW/fbuwyFuuU7Dqr8Ai1FjpsV4eyKvuOP DFJ/W8CJWzHSX7X7PbMOcq0KavvH6m+mFgjFcjPosAHDoWZsaQ1Am32XRvfhZeXz S5ZrMq0CWTIzFOYn9HjYsBzG+i+mWCPuwoHhQrr/NJIHAe8vMblS -----END CERTIFICATE-----Generated at Fri May 29 22:56:33 2026 by rpki-client