$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e39382e302f32342d3234203d3e203137373831.roa File: 3230322e3132332e39382e302f32342d3234203d3e203137373831.roa (raw, json) Hash identifier: 5YOOHhOu3QXd/4aaDjVX3d1nj51K6HH65UEeEz4zkEc= Subject key identifier: 63:E2:15:54:72:C1:BE:BC:F8:7E:F0:16:58:8F:50:B5:F8:19:13:E6 Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Certificate serial: 453E3A3DB607E2E905C3849C2173F8A3A8BF948E Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e39382e302f32342d3234203d3e203137373831.roa Signing time: Fri 29 May 2026 08:43:59 +0000 ROA not before: Fri 29 May 2026 08:38:59 +0000 ROA not after: Fri 28 May 2027 08:43:59 +0000 asID: 17781 IP address blocks: 202.123.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:3e:3a:3d:b6:07:e2:e9:05:c3:84:9c:21:73:f8:a3:a8:bf:94:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Validity Not Before: May 29 08:38:59 2026 GMT Not After : May 28 08:43:59 2027 GMT Subject: CN=63E2155472C1BEBCF87EF016588F50B5F81913E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:d3:a9:ec:fb:17:fc:6a:ac:0a:d4:17:52: d8:65:7d:3c:50:b6:22:0c:e5:94:bf:19:c1:d6:49: c8:ea:79:f2:50:05:4e:cc:88:a8:c7:2c:8a:66:12: fe:a3:49:c8:0c:d1:06:1a:b7:6c:26:3c:6e:b7:3a: a8:a9:63:a9:51:27:a0:9b:c0:04:02:16:b1:3b:6c: 9e:b3:33:28:05:27:b1:1d:49:85:84:93:6c:72:73: 5f:be:25:a7:e4:43:88:bb:11:e3:1c:09:72:b0:a8: 85:4e:19:09:32:ff:2c:b7:5d:0e:3e:c0:99:d1:57: 2e:33:33:d6:f1:b0:1c:0f:5a:59:f3:2a:fd:a1:2b: 14:5d:cb:9c:fd:56:d3:1b:2f:b3:1f:96:3b:02:1e: d1:47:95:61:3d:7c:76:83:af:65:75:23:52:4f:0f: 95:e9:c7:82:91:c0:00:97:e2:31:a4:78:39:e7:56: be:95:84:04:ff:2e:3c:b3:f8:5f:2f:90:5a:4e:8a: 42:1d:36:ba:9c:aa:20:30:1b:49:1d:45:98:7f:20: 94:8e:e3:1c:b0:58:f9:95:2d:b5:61:f7:43:13:40: 3a:f0:ea:96:26:b5:b3:1a:ce:cd:b8:bb:7e:65:ac: ae:46:00:fc:49:9a:1e:b1:ab:b8:3b:d2:36:75:3d: e9:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:E2:15:54:72:C1:BE:BC:F8:7E:F0:16:58:8F:50:B5:F8:19:13:E6 X509v3 Authority Key Identifier: keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e3132332e39382e302f32342d3234203d3e203137373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.123.98.0/24 Signature Algorithm: sha256WithRSAEncryption bc:c2:02:b8:b8:09:69:b7:30:72:ea:8a:08:ef:b4:a9:cc:b3: 5a:01:fa:08:6f:b3:b7:40:17:0b:8d:c0:b0:52:b4:4e:c9:de: 11:aa:31:37:50:62:4f:c3:4f:25:d7:f8:8f:b6:32:9b:f3:a3: a6:91:01:ed:03:82:5b:5e:e0:10:c4:df:df:ef:e1:8e:92:7a: 59:26:57:37:53:a1:90:cb:7c:5b:32:6a:4f:d8:d3:2d:9c:17: be:8b:8f:8b:eb:3e:95:1d:2f:dc:e8:4c:7c:fc:2b:f0:ca:c4: d4:91:38:a4:b3:ae:8d:b0:d9:a5:00:76:f3:25:c3:9a:2f:db: 6d:10:21:e1:78:2d:df:a4:7d:52:d3:06:14:9b:29:f6:5e:f4: f4:08:e8:1c:8f:19:7b:cd:db:19:48:14:c9:b1:02:50:b8:68: ef:13:c5:4f:59:ab:f7:0f:a7:d4:e2:07:cd:b4:17:3a:58:47: bd:5b:93:75:b8:6e:b7:6d:19:9f:cc:09:72:58:56:bb:ac:0c: 18:9f:1a:9c:70:b9:2d:f5:e4:a3:7d:a2:b2:97:8e:2f:43:ab: d8:e9:c6:b0:fb:7d:10:0c:f0:a6:41:54:e1:0f:61:c8:bd:a1: ea:9b:a0:9a:71:f8:6c:77:7e:6d:47:36:7b:f0:95:06:d9:2e: bd:fd:a5:79 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURT46PbYH4ukFw4ScIXP4o6i/lI4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2 OTgxNTIzRDAeFw0yNjA1MjkwODM4NTlaFw0yNzA1MjgwODQzNTlaMDMxMTAvBgNV BAMTKDYzRTIxNTU0NzJDMUJFQkNGODdFRjAxNjU4OEY1MEI1RjgxOTEzRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYBNOp7PsX/GqsCtQXUthlfTxQ tiIM5ZS/GcHWScjqefJQBU7MiKjHLIpmEv6jScgM0QYat2wmPG63OqipY6lRJ6Cb wAQCFrE7bJ6zMygFJ7EdSYWEk2xyc1++JafkQ4i7EeMcCXKwqIVOGQky/yy3XQ4+ wJnRVy4zM9bxsBwPWlnzKv2hKxRdy5z9VtMbL7MfljsCHtFHlWE9fHaDr2V1I1JP D5Xpx4KRwACX4jGkeDnnVr6VhAT/Ljyz+F8vkFpOikIdNrqcqiAwG0kdRZh/IJSO 4xywWPmVLbVh90MTQDrw6pYmtbMazs24u35lrK5GAPxJmh6xq7g70jZ1PelZAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUY+IVVHLBvrz4fvAWWI9QtfgZE+YwHwYDVR0j BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExMjY1ODY5MzM5ODI2NTg3NS8wLzMyMzAzMjJlMzEz MjMzMmUzOTM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMp7YjANBgkqhkiG9w0BAQsFAAOCAQEAvMICuLgJabcwcuqKCO+0qcyz WgH6CG+zt0AXC43AsFK0TsneEaoxN1BiT8NPJdf4j7Yym/OjppEB7QOCW17gEMTf 3+/hjpJ6WSZXN1OhkMt8WzJqT9jTLZwXvouPi+s+lR0v3OhMfPwr8MrE1JE4pLOu jbDZpQB28yXDmi/bbRAh4Xgt36R9UtMGFJsp9l709AjoHI8Ze83bGUgUybECULho 7xPFT1mr9w+n1OIHzbQXOlhHvVuTdbhut20Zn8wJclhWu6wMGJ8anHC5LfXko32i speOL0Or2OnGsPt9EAzwpkFU4Q9hyL2h6pugmnH4bHd+bUc2e/CVBtkuvf2leQ== -----END CERTIFICATE-----Generated at Fri May 29 22:57:48 2026 by rpki-client