$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa File: 3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa (raw, json) Hash identifier: 0GJxn9D0pYDb4yxO7Aud+dLGirj3mYMN7u3UYAKJgB4= Subject key identifier: 1D:81:E8:7E:9F:D5:2C:33:7F:EF:97:4A:A8:C2:AD:C2:B2:DB:31:7B Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Certificate serial: 3E92087C595F3CA9B6812D32FE9960E1B89E48F0 Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa Signing time: Fri 29 May 2026 08:43:59 +0000 ROA not before: Fri 29 May 2026 08:38:59 +0000 ROA not after: Fri 28 May 2027 08:43:59 +0000 asID: 17781 IP address blocks: 202.123.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:92:08:7c:59:5f:3c:a9:b6:81:2d:32:fe:99:60:e1:b8:9e:48:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Validity Not Before: May 29 08:38:59 2026 GMT Not After : May 28 08:43:59 2027 GMT Subject: CN=1D81E87E9FD52C337FEF974AA8C2ADC2B2DB317B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:70:b4:a6:9c:18:54:d3:99:e8:c4:49:ee:4e: 8e:7f:39:d5:d9:fb:2e:2a:cd:6b:25:96:44:df:15: 2d:71:34:10:dc:71:3e:82:9f:da:19:7f:f0:71:8b: f9:72:53:57:4e:92:99:23:36:c0:42:2b:68:17:da: 8c:3c:bd:99:f9:b9:b2:79:b8:49:af:02:d5:eb:cc: b4:55:c2:e4:1f:e1:ac:b0:f1:93:dd:f8:5d:f9:24: 26:66:5a:1c:eb:54:5a:92:22:19:e6:f3:1e:42:34: bb:68:95:d7:49:7f:df:3d:f4:8d:a5:32:05:8e:ff: 51:1b:51:b4:2f:44:8f:9f:13:a4:de:c2:7f:63:77: e1:86:85:fe:77:09:2f:c2:fc:4b:13:4f:89:3f:33: 7a:e8:69:08:a2:cf:3b:e7:69:32:9c:e3:f1:e2:3e: 95:d4:1b:a6:42:a3:37:8b:9c:01:07:c0:32:76:b1: 1a:d0:d7:0f:42:07:c5:f1:07:3a:10:f1:8f:d4:dc: 2a:70:9f:d5:57:88:e6:e5:5c:20:1c:b2:5f:ef:8f: dd:ce:30:3c:e0:a7:dd:6b:10:b9:98:a2:d8:49:a2: 2a:8e:5e:88:7a:52:5c:3c:60:f7:fb:f0:e0:9b:16: 7e:fd:41:b8:c4:a1:40:b0:72:3b:bd:4d:66:0f:b1: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:81:E8:7E:9F:D5:2C:33:7F:EF:97:4A:A8:C2:AD:C2:B2:DB:31:7B X509v3 Authority Key Identifier: keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e3131312e302f32342d3234203d3e203137373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.123.111.0/24 Signature Algorithm: sha256WithRSAEncryption 58:a7:20:75:dc:43:2d:d0:1c:81:66:a5:95:23:24:b9:fe:14: bd:63:21:43:c6:e3:40:ea:9e:29:ee:3b:62:14:22:f8:4b:d5: 10:34:04:81:8b:13:89:25:f7:4d:ca:75:dd:fe:3c:3c:ee:22: 7e:e8:d6:e0:d2:b2:b0:96:5a:0a:64:b0:a4:f9:54:85:a8:3f: 9b:a7:81:a5:fe:e3:04:7a:80:6a:3f:53:a2:60:14:29:46:88: b5:4a:d2:c8:c0:79:37:16:99:13:a8:0b:c8:df:b9:02:0f:86: 10:b2:85:4d:64:b1:96:1e:10:8d:71:f4:27:4e:ed:46:a9:1b: de:cb:5a:2d:e6:3d:63:f9:03:c8:4b:e7:db:58:1c:a9:6a:de: 3c:15:53:bc:48:65:22:50:58:19:12:a8:6b:8f:48:d8:0a:76: b9:d0:4c:f7:86:c8:a9:c3:d9:22:2f:a9:a5:00:21:fa:2f:6b: 66:ad:14:45:7a:3f:16:cf:c0:f3:70:51:36:a3:11:2b:b2:54: 91:95:03:0f:1c:05:fd:5a:80:55:38:f7:5b:a1:09:56:33:19: e4:f3:5e:b5:d0:88:a8:20:4d:65:66:bc:23:25:35:a8:bc:b4: 71:93:dd:e8:63:c6:e2:e4:6f:e8:8d:7e:70:d1:6a:fc:c9:32: d7:70:4d:f4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPpIIfFlfPKm2gS0y/plg4bieSPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2 OTgxNTIzRDAeFw0yNjA1MjkwODM4NTlaFw0yNzA1MjgwODQzNTlaMDMxMTAvBgNV BAMTKDFEODFFODdFOUZENTJDMzM3RkVGOTc0QUE4QzJBREMyQjJEQjMxN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbcLSmnBhU05noxEnuTo5/OdXZ +y4qzWsllkTfFS1xNBDccT6Cn9oZf/Bxi/lyU1dOkpkjNsBCK2gX2ow8vZn5ubJ5 uEmvAtXrzLRVwuQf4ayw8ZPd+F35JCZmWhzrVFqSIhnm8x5CNLtolddJf9899I2l MgWO/1EbUbQvRI+fE6Tewn9jd+GGhf53CS/C/EsTT4k/M3roaQiizzvnaTKc4/Hi PpXUG6ZCozeLnAEHwDJ2sRrQ1w9CB8XxBzoQ8Y/U3Cpwn9VXiOblXCAcsl/vj93O MDzgp91rELmYothJoiqOXoh6Ulw8YPf78OCbFn79QbjEoUCwcju9TWYPsU8nAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUHYHofp/VLDN/75dKqMKtwrLbMXswHwYDVR0j BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTI2NTg2OTMzOTgyNjU4NzUvMC8zMjMwMzIyZTMx MzIzMzJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAMp7bzANBgkqhkiG9w0BAQsFAAOCAQEAWKcgddxDLdAcgWallSMk uf4UvWMhQ8bjQOqeKe47YhQi+EvVEDQEgYsTiSX3Tcp13f48PO4ifujW4NKysJZa CmSwpPlUhag/m6eBpf7jBHqAaj9TomAUKUaItUrSyMB5NxaZE6gLyN+5Ag+GELKF TWSxlh4QjXH0J07tRqkb3staLeY9Y/kDyEvn21gcqWrePBVTvEhlIlBYGRKoa49I 2Ap2udBM94bIqcPZIi+ppQAh+i9rZq0URXo/Fs/A83BRNqMRK7JUkZUDDxwF/VqA VTj3W6EJVjMZ5PNetdCIqCBNZWa8IyU1qLy0cZPd6GPG4uRv6I1+cNFq/Mky13BN 9A== -----END CERTIFICATE-----Generated at Fri May 29 22:58:23 2026 by rpki-client