$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e39362e302f32342d3234203d3e203137373831.roa File: 3230322e3132332e39362e302f32342d3234203d3e203137373831.roa (raw, json) Hash identifier: oPL+WqvBQ1jMwFkI+nTHLmCwxfrPvPAUqSpu7XtDHhg= Subject key identifier: 5D:19:4F:2D:79:64:01:71:4A:5A:6B:42:32:9C:63:9B:2A:C6:5A:86 Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Certificate serial: 16CC7880D44381263CC5182304E3F21ADF8F86D1 Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e39362e302f32342d3234203d3e203137373831.roa Signing time: Fri 29 May 2026 08:43:59 +0000 ROA not before: Fri 29 May 2026 08:38:59 +0000 ROA not after: Fri 28 May 2027 08:43:59 +0000 asID: 17781 IP address blocks: 202.123.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:cc:78:80:d4:43:81:26:3c:c5:18:23:04:e3:f2:1a:df:8f:86:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Validity Not Before: May 29 08:38:59 2026 GMT Not After : May 28 08:43:59 2027 GMT Subject: CN=5D194F2D796401714A5A6B42329C639B2AC65A86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c0:d7:09:38:3e:87:ce:1d:1c:f8:9f:21:06: 9d:67:0c:0b:00:cc:48:64:19:a4:4d:d2:81:06:59: 03:fa:12:ec:fd:42:fe:da:f8:75:a8:50:a0:9c:5c: 44:2a:6e:7e:2b:af:66:cf:b5:ef:86:b6:50:29:94: a5:49:ae:c8:22:ff:f0:80:e6:8a:56:9a:ec:fb:3c: a8:a9:33:d2:33:a9:17:23:5f:37:79:dd:f9:33:5a: 02:f6:1f:13:74:52:80:c3:61:b9:d8:8b:3b:aa:36: 0b:b3:3c:14:63:59:fe:46:cf:40:08:d5:7f:d5:90: 68:25:71:e3:dd:b6:45:d9:88:ba:32:c3:2c:75:dc: 38:45:3a:8b:fd:cd:35:66:cb:2e:bb:24:32:ae:29: 6b:48:71:e1:92:b4:64:34:83:51:90:72:8c:b3:9a: a8:f9:3e:f9:8c:a1:78:1f:f4:43:ae:7c:b7:25:3d: 10:7e:bb:22:45:db:2d:79:74:0b:27:63:5f:98:86: 43:e0:e2:37:e4:45:07:40:cd:98:2f:33:9b:9a:d6: e7:a3:b0:20:e5:e6:d2:65:58:61:d3:3b:cc:6e:fb: 65:41:18:c8:27:84:a1:ce:65:e4:15:81:28:89:a3: 23:5b:d5:b8:24:58:02:f3:03:a6:5c:6f:88:7c:c5: e5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:19:4F:2D:79:64:01:71:4A:5A:6B:42:32:9C:63:9B:2A:C6:5A:86 X509v3 Authority Key Identifier: keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e39362e302f32342d3234203d3e203137373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.123.96.0/24 Signature Algorithm: sha256WithRSAEncryption b3:5e:96:fe:5a:30:81:44:23:65:71:0b:cc:56:30:72:b5:b0: 3e:9c:2e:4f:b0:1b:bd:78:83:fd:f2:1e:91:c2:cf:e6:99:0b: 70:4f:15:fb:ba:1b:ef:cf:2a:d7:09:09:71:e5:5d:66:20:4f: 41:79:14:12:ff:93:87:fa:c4:f0:3b:8e:b3:16:a1:68:fe:01: ee:42:a1:59:fb:57:ba:28:62:c6:58:cf:5f:8d:69:bf:ce:1e: db:d8:f0:78:75:b2:1d:1a:4a:ae:3c:15:c6:71:4c:7b:bd:ca: a3:88:fe:57:a8:19:71:b5:e3:43:b4:c7:3b:49:fd:ca:95:29: 6d:af:29:60:4d:12:93:07:50:2f:76:5d:01:22:04:1d:40:f2: 0c:54:bb:bb:a4:e9:cd:00:91:8d:2d:00:a1:92:e6:8f:86:07: 6e:f4:a7:71:9e:ba:4f:0a:dc:d3:74:9c:04:a9:8d:50:03:cf: 87:ae:a1:7a:a4:ae:5f:b8:ce:0a:d4:bf:85:46:e0:3d:16:f3: 4c:bc:df:8d:2e:b9:b0:eb:92:b1:56:c2:40:a8:78:bb:aa:11: a5:ca:5e:75:1c:dd:70:e0:08:f1:8b:9b:71:bf:c7:62:8d:fe: e0:24:d6:d4:fb:9f:46:41:c3:7b:d8:e8:e7:b6:18:c9:79:aa: 6c:91:da:75 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFsx4gNRDgSY8xRgjBOPyGt+PhtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2 OTgxNTIzRDAeFw0yNjA1MjkwODM4NTlaFw0yNzA1MjgwODQzNTlaMDMxMTAvBgNV BAMTKDVEMTk0RjJENzk2NDAxNzE0QTVBNkI0MjMyOUM2MzlCMkFDNjVBODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwNcJOD6Hzh0c+J8hBp1nDAsA zEhkGaRN0oEGWQP6Euz9Qv7a+HWoUKCcXEQqbn4rr2bPte+GtlAplKVJrsgi//CA 5opWmuz7PKipM9IzqRcjXzd53fkzWgL2HxN0UoDDYbnYizuqNguzPBRjWf5Gz0AI 1X/VkGglcePdtkXZiLoywyx13DhFOov9zTVmyy67JDKuKWtIceGStGQ0g1GQcoyz mqj5PvmMoXgf9EOufLclPRB+uyJF2y15dAsnY1+YhkPg4jfkRQdAzZgvM5ua1uej sCDl5tJlWGHTO8xu+2VBGMgnhKHOZeQVgSiJoyNb1bgkWALzA6Zcb4h8xeUnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUXRlPLXlkAXFKWmtCMpxjmyrGWoYwHwYDVR0j BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExMjY1ODY5MzM5ODI2NTg3NS8wLzMyMzAzMjJlMzEz MjMzMmUzOTM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMp7YDANBgkqhkiG9w0BAQsFAAOCAQEAs16W/lowgUQjZXELzFYwcrWw PpwuT7AbvXiD/fIekcLP5pkLcE8V+7ob788q1wkJceVdZiBPQXkUEv+Th/rE8DuO sxahaP4B7kKhWftXuihixljPX41pv84e29jweHWyHRpKrjwVxnFMe73Ko4j+V6gZ cbXjQ7THO0n9ypUpba8pYE0SkwdQL3ZdASIEHUDyDFS7u6TpzQCRjS0AoZLmj4YH bvSncZ66Twrc03ScBKmNUAPPh66heqSuX7jOCtS/hUbgPRbzTLzfjS65sOuSsVbC QKh4u6oRpcpedRzdcOAI8Yubcb/HYo3+4CTW1PufRkHDe9jo57YYyXmqbJHadQ== -----END CERTIFICATE-----Generated at Fri May 29 22:57:58 2026 by rpki-client