$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa File: 3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa (raw, json) Hash identifier: 6vWD4VyRB5bYBDWD26oF0cZv2VdLIlKVmTJZdVbRs5g= Subject key identifier: A6:F5:29:2A:87:FF:89:2C:87:6B:5B:48:E7:C9:6C:56:CD:BB:7C:E6 Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Certificate serial: 70D688B35D407A4182DBB70873ED7CA6241BB341 Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa Signing time: Fri 29 May 2026 08:43:59 +0000 ROA not before: Fri 29 May 2026 08:38:59 +0000 ROA not after: Fri 28 May 2027 08:43:59 +0000 asID: 17781 IP address blocks: 202.123.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:d6:88:b3:5d:40:7a:41:82:db:b7:08:73:ed:7c:a6:24:1b:b3:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Validity Not Before: May 29 08:38:59 2026 GMT Not After : May 28 08:43:59 2027 GMT Subject: CN=A6F5292A87FF892C876B5B48E7C96C56CDBB7CE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:9a:d4:7d:c8:85:c3:47:31:72:17:1b:9a: bd:92:3c:73:7f:90:31:bb:a7:da:94:98:08:4a:5f: 87:c8:a1:ef:ad:e8:5d:89:77:49:fd:aa:33:2e:78: 9d:a3:dc:e5:43:19:7e:75:65:5b:3f:b0:88:13:8b: 9b:4c:a6:fc:2b:99:da:af:8c:78:c8:53:72:97:84: 21:12:eb:80:5c:fc:ae:c7:77:2b:bc:30:f3:8e:cb: 1d:6c:06:ee:d9:a0:b8:77:b4:ce:ed:2f:dc:c0:40: c0:3f:49:28:e8:4b:80:99:7b:d1:1c:92:04:0d:06: 19:d4:97:85:c5:d4:32:3e:7e:89:74:8a:fe:ed:7f: 6e:8f:5e:25:51:3a:64:05:59:7d:ef:cf:5a:f4:a7: a7:f7:5a:12:9f:f9:f5:71:a0:55:f6:7d:c3:51:e2: d2:52:0a:59:2b:ac:15:93:73:2e:df:d1:eb:75:96: 08:8f:3b:7f:ab:fa:39:d4:64:75:c2:24:55:47:8a: 04:34:a7:15:b7:c3:83:98:2c:5f:ef:8b:a2:53:d8: 52:98:f5:df:f1:67:bb:63:76:e4:01:ad:2b:fb:59: f5:31:14:13:9f:9b:11:87:86:0a:dd:eb:8c:81:b7: a9:7c:00:60:41:75:d0:dc:ad:ff:ac:25:aa:05:3b: 65:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F5:29:2A:87:FF:89:2C:87:6B:5B:48:E7:C9:6C:56:CD:BB:7C:E6 X509v3 Authority Key Identifier: keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3130382e302f32342d3234203d3e203137373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.123.108.0/24 Signature Algorithm: sha256WithRSAEncryption c7:53:01:57:4c:ed:26:eb:87:88:81:33:31:3c:0a:c5:bf:36: 4f:b9:89:5c:2b:58:be:b0:e9:6b:cf:74:c1:00:0f:de:f1:a8: 33:ff:9e:6f:8f:49:6b:2c:6d:eb:51:75:25:4d:eb:35:64:03: 3f:af:d2:e2:ea:8b:ab:a5:b6:c7:d1:48:e1:83:36:dc:f5:a3: f2:4f:a0:86:05:bb:f9:33:ba:ad:64:0a:c0:a3:8b:97:95:ef: aa:04:41:e1:f7:d6:9d:2b:05:70:cd:78:9a:79:13:0f:2c:7d: d7:95:39:30:b0:5c:2f:f1:a2:8a:95:6e:6c:40:a5:0b:3c:68: 6d:f6:be:b2:33:1d:04:47:b5:ad:02:4b:79:20:34:ed:39:d9: 41:43:e3:d6:20:a2:c4:a8:18:09:4c:1a:f7:21:7b:fe:7c:dc: 26:b5:58:4e:a1:17:f9:36:9a:c6:a3:65:bd:69:4d:21:5a:5d: 71:90:23:64:b9:49:d4:9b:21:97:f9:c3:74:f1:72:d6:86:72: fb:9e:3d:2e:45:46:76:4c:7e:e5:01:c4:96:9c:0c:8a:c1:b2: 90:a3:1e:f1:f8:3e:0d:f4:a3:fb:0a:ce:dc:b5:08:0e:59:81: ed:05:07:a1:53:dd:8b:01:8b:ad:3d:c1:6b:aa:e7:6a:b8:0a: 83:7d:f2:8a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcNaIs11AekGC27cIc+18piQbs0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2 OTgxNTIzRDAeFw0yNjA1MjkwODM4NTlaFw0yNzA1MjgwODQzNTlaMDMxMTAvBgNV BAMTKEE2RjUyOTJBODdGRjg5MkM4NzZCNUI0OEU3Qzk2QzU2Q0RCQjdDRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eJrUfciFw0cxchcbmr2SPHN/ kDG7p9qUmAhKX4fIoe+t6F2Jd0n9qjMueJ2j3OVDGX51ZVs/sIgTi5tMpvwrmdqv jHjIU3KXhCES64Bc/K7Hdyu8MPOOyx1sBu7ZoLh3tM7tL9zAQMA/SSjoS4CZe9Ec kgQNBhnUl4XF1DI+fol0iv7tf26PXiVROmQFWX3vz1r0p6f3WhKf+fVxoFX2fcNR 4tJSClkrrBWTcy7f0et1lgiPO3+r+jnUZHXCJFVHigQ0pxW3w4OYLF/vi6JT2FKY 9d/xZ7tjduQBrSv7WfUxFBOfmxGHhgrd64yBt6l8AGBBddDcrf+sJaoFO2WxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUpvUpKof/iSyHa1tI58lsVs27fOYwHwYDVR0j BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTI2NTg2OTMzOTgyNjU4NzUvMC8zMjMwMzIyZTMx MzIzMzJlMzEzMDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMp7bDANBgkqhkiG9w0BAQsFAAOCAQEAx1MBV0ztJuuHiIEzMTwK xb82T7mJXCtYvrDpa890wQAP3vGoM/+eb49Jayxt61F1JU3rNWQDP6/S4uqLq6W2 x9FI4YM23PWj8k+ghgW7+TO6rWQKwKOLl5XvqgRB4ffWnSsFcM14mnkTDyx915U5 MLBcL/GiipVubEClCzxobfa+sjMdBEe1rQJLeSA07TnZQUPj1iCixKgYCUwa9yF7 /nzcJrVYTqEX+TaaxqNlvWlNIVpdcZAjZLlJ1Jshl/nDdPFy1oZy+549LkVGdkx+ 5QHElpwMisGykKMe8fg+DfSj+wrO3LUIDlmB7QUHoVPdiwGLrT3Ba6rnargKg33y ig== -----END CERTIFICATE-----Generated at Fri May 29 22:58:09 2026 by rpki-client