$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa File: 3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa (raw, json) Hash identifier: B8CJpw4Mvz8SY6JreF+MZ8mRXXEL39z/L2SgwDPy4ro= Subject key identifier: 5C:D2:3D:43:D1:46:F8:25:84:42:77:4B:5F:EA:35:5D:2B:CF:98:E0 Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Certificate serial: 480DB68262BFF4BF14229D38A9B268C079AFEAA3 Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa Signing time: Fri 29 May 2026 08:43:59 +0000 ROA not before: Fri 29 May 2026 08:38:59 +0000 ROA not after: Fri 28 May 2027 08:43:59 +0000 asID: 17781 IP address blocks: 202.123.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0d:b6:82:62:bf:f4:bf:14:22:9d:38:a9:b2:68:c0:79:af:ea:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Validity Not Before: May 29 08:38:59 2026 GMT Not After : May 28 08:43:59 2027 GMT Subject: CN=5CD23D43D146F8258442774B5FEA355D2BCF98E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:4d:35:86:6b:8f:08:92:b0:ce:66:ee:40: 61:63:f2:3f:a1:20:35:31:71:28:1e:52:e1:e6:d9: 07:b3:08:2c:7f:c4:32:a8:12:d7:18:24:09:4d:22: 94:50:98:cc:4a:7c:99:92:34:ad:d8:4a:52:93:a5: 79:87:60:e2:ee:91:ae:ce:27:14:6e:3a:73:3e:53: 08:f5:3b:79:54:f4:e9:17:36:04:25:cd:24:18:7f: 93:30:7e:10:2b:fb:28:06:c7:86:50:03:a9:42:51: ef:1b:f4:83:b1:46:fe:b4:20:43:7b:91:41:dc:01: c9:c3:a1:c0:3e:e0:08:3e:04:4a:02:51:67:43:3f: 1c:8e:3b:9a:41:8f:92:09:c5:78:c3:43:c7:b4:62: b1:c9:5e:6c:52:00:d8:07:9f:f8:94:eb:a1:07:70: 4a:0a:58:d5:b4:74:7c:31:f9:c3:e7:aa:45:ed:d1: a3:31:5c:13:69:4e:a8:ef:c6:24:9f:d8:fb:51:87: f6:74:6c:bd:d9:e8:e4:61:9c:2c:5d:ea:94:61:de: 57:37:a8:d1:d3:f1:82:ef:84:d9:46:16:1f:d1:d8: 56:81:1b:19:5d:6a:66:24:a0:09:ce:a7:e2:b6:90: 49:f7:4a:58:6f:e3:22:ab:5d:9f:d6:09:50:40:ff: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:D2:3D:43:D1:46:F8:25:84:42:77:4B:5F:EA:35:5D:2B:CF:98:E0 X509v3 Authority Key Identifier: keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3130362e302f32342d3234203d3e203137373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.123.106.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:cf:d5:74:75:9a:3d:a9:98:9d:0d:e4:b1:15:c9:4c:aa:0d: 01:14:3e:a5:1f:08:33:1b:4d:00:ac:c1:56:44:c5:55:9c:82: 34:2a:51:5e:55:4c:78:be:ce:a0:30:4d:61:94:7b:cc:c6:5e: a9:6a:13:d0:37:93:84:24:1f:cb:44:e6:a2:26:2d:68:8e:eb: 1b:79:1c:4d:2f:ea:1f:a2:d6:e2:f1:73:90:72:d0:42:c0:f0: d9:f1:c9:b5:d2:80:2d:0a:f6:4d:ca:1c:db:67:ee:6c:6d:f3: a5:a7:0f:b5:c6:0c:c9:68:d0:e9:37:56:b8:e5:b7:22:25:50: 19:0f:c0:ee:12:11:86:04:e6:78:17:27:4d:45:d8:32:b6:c3: 43:d1:d4:56:f0:e8:80:e9:ca:8b:a3:4a:a8:c1:4b:70:18:95: 93:ad:5e:e9:51:64:88:f4:65:2f:d8:d8:76:ce:04:0c:f2:98: 15:b9:5b:d2:09:78:d5:84:af:24:10:df:be:55:14:11:84:e4: bd:35:41:4b:52:36:6e:18:3c:83:66:69:66:e7:14:c7:c3:3b: 86:f2:c7:17:f4:ce:b6:d2:81:e6:35:bd:f4:c0:90:1b:f1:1c: 66:45:28:4f:bc:77:f8:3e:47:94:2e:28:c2:a5:5c:04:39:44: bb:38:6e:d2 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSA22gmK/9L8UIp04qbJowHmv6qMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2 OTgxNTIzRDAeFw0yNjA1MjkwODM4NTlaFw0yNzA1MjgwODQzNTlaMDMxMTAvBgNV BAMTKDVDRDIzRDQzRDE0NkY4MjU4NDQyNzc0QjVGRUEzNTVEMkJDRjk4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN1k01hmuPCJKwzmbuQGFj8j+h IDUxcSgeUuHm2QezCCx/xDKoEtcYJAlNIpRQmMxKfJmSNK3YSlKTpXmHYOLuka7O JxRuOnM+Uwj1O3lU9OkXNgQlzSQYf5MwfhAr+ygGx4ZQA6lCUe8b9IOxRv60IEN7 kUHcAcnDocA+4Ag+BEoCUWdDPxyOO5pBj5IJxXjDQ8e0YrHJXmxSANgHn/iU66EH cEoKWNW0dHwx+cPnqkXt0aMxXBNpTqjvxiSf2PtRh/Z0bL3Z6ORhnCxd6pRh3lc3 qNHT8YLvhNlGFh/R2FaBGxldamYkoAnOp+K2kEn3Slhv4yKrXZ/WCVBA//LZAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUXNI9Q9FG+CWEQndLX+o1XSvPmOAwHwYDVR0j BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTI2NTg2OTMzOTgyNjU4NzUvMC8zMjMwMzIyZTMx MzIzMzJlMzEzMDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMp7ajANBgkqhkiG9w0BAQsFAAOCAQEAC8/VdHWaPamYnQ3ksRXJ TKoNARQ+pR8IMxtNAKzBVkTFVZyCNCpRXlVMeL7OoDBNYZR7zMZeqWoT0DeThCQf y0TmoiYtaI7rG3kcTS/qH6LW4vFzkHLQQsDw2fHJtdKALQr2Tcoc22fubG3zpacP tcYMyWjQ6TdWuOW3IiVQGQ/A7hIRhgTmeBcnTUXYMrbDQ9HUVvDogOnKi6NKqMFL cBiVk61e6VFkiPRlL9jYds4EDPKYFblb0gl41YSvJBDfvlUUEYTkvTVBS1I2bhg8 g2ZpZucUx8M7hvLHF/TOttKB5jW99MCQG/EcZkUoT7x3+D5HlC4owqVcBDlEuzhu 0g== -----END CERTIFICATE-----Generated at Fri May 29 22:58:21 2026 by rpki-client