$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e38342e31372e302f32342d3234203d3e203137373831.roa File: 3230322e38342e31372e302f32342d3234203d3e203137373831.roa (raw, json) Hash identifier: 1I+ea8Rekynt7Imb05kV7gQ8KNgPu0KKaGq6waMXCoQ= Subject key identifier: 10:47:E7:0E:F2:4D:24:3A:AD:8B:3F:F0:C6:17:3C:7A:6A:5E:D7:77 Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Certificate serial: 649B3A131A3B60F255B178A472E4DE981F7186BA Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e38342e31372e302f32342d3234203d3e203137373831.roa Signing time: Fri 29 May 2026 08:44:00 +0000 ROA not before: Fri 29 May 2026 08:39:00 +0000 ROA not after: Fri 28 May 2027 08:44:00 +0000 asID: 17781 IP address blocks: 202.84.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:9b:3a:13:1a:3b:60:f2:55:b1:78:a4:72:e4:de:98:1f:71:86:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Validity Not Before: May 29 08:39:00 2026 GMT Not After : May 28 08:44:00 2027 GMT Subject: CN=1047E70EF24D243AAD8B3FF0C6173C7A6A5ED777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c4:02:b6:67:13:cd:c4:00:db:64:07:82:76: 10:42:03:9f:e1:f1:7c:ad:4f:a3:71:9c:2e:1b:40: 42:ff:41:76:4a:5e:35:bb:23:78:ed:3f:14:d8:53: a3:c2:b9:e7:ad:43:04:20:ae:88:48:3c:06:cc:2c: a5:6e:15:3e:0a:f9:be:b6:a5:5d:5c:26:7e:5b:e0: 05:61:db:48:f2:ec:70:94:5e:64:7b:04:5a:9e:79: 86:b4:19:e1:a6:c8:d0:6a:e4:ab:5f:55:44:5f:3b: 8b:e1:24:d4:8d:dd:e6:0e:89:b5:25:c7:c0:3d:5f: 02:04:de:20:1e:98:ac:1d:14:1f:ee:4e:00:3b:7d: 9a:8e:12:41:9c:57:c7:d4:97:1a:b0:f7:2e:e4:23: dd:27:e0:6c:76:f9:6c:86:69:d7:a9:b6:85:07:d9: 64:ee:8c:72:c1:70:3b:e4:37:b9:e9:02:67:9b:ea: 40:11:0b:de:75:75:07:d1:e9:bb:5a:36:a6:97:40: 18:05:b2:31:8b:42:0c:b0:0e:40:8c:e1:43:de:d8: 99:1a:91:8b:17:76:e8:8a:38:3f:35:96:dd:9d:ab: 42:8d:01:94:ff:22:c7:99:38:60:34:cd:03:99:c1: c8:cc:d3:37:fb:3e:a7:a5:e6:cf:95:43:af:4e:2c: 1e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:47:E7:0E:F2:4D:24:3A:AD:8B:3F:F0:C6:17:3C:7A:6A:5E:D7:77 X509v3 Authority Key Identifier: keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230322e38342e31372e302f32342d3234203d3e203137373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.84.17.0/24 Signature Algorithm: sha256WithRSAEncryption 90:4e:cd:cc:56:bf:65:be:09:77:97:87:43:bd:bb:36:5a:e9: 1f:0f:cd:24:6c:b7:12:88:3f:8d:a3:d4:84:26:9d:7e:aa:94: 21:3c:04:b2:be:44:39:34:c7:48:83:4a:76:ef:47:13:97:72: f6:89:71:88:db:dd:68:c7:a7:8a:7f:8d:7e:1f:49:ad:ee:46: 70:0c:5b:33:0a:ea:51:78:71:15:ca:15:cf:df:83:f8:62:1b: 7f:1d:21:29:2b:cc:27:c0:e7:c2:4f:80:ec:2f:0e:1c:03:e8: 72:75:64:3e:eb:7d:e8:7b:67:6e:15:b3:d8:ae:af:5f:e1:0a: e4:93:ec:99:c2:99:80:01:9a:83:3c:1a:5c:4f:ad:bd:1f:98: dc:d5:7c:74:11:6f:04:02:41:42:a2:8d:8a:16:a7:eb:3b:f6: e5:c3:c3:07:99:0e:d2:0a:3b:c9:8e:ba:5f:45:2d:35:c8:44: ee:5f:5e:cb:c7:38:ce:53:fc:92:65:27:3c:bd:42:0d:2f:89: 5b:18:b9:03:16:b0:5a:88:3c:2e:63:a1:5d:ff:56:67:3b:0d: 8c:c2:38:06:b1:71:9d:c1:5a:7e:43:2e:77:34:10:70:cd:11: ad:15:7a:51:6a:92:92:59:ed:de:63:2a:0b:e1:11:c8:ce:36: c5:b9:db:51 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZJs6Exo7YPJVsXikcuTemB9xhrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2 OTgxNTIzRDAeFw0yNjA1MjkwODM5MDBaFw0yNzA1MjgwODQ0MDBaMDMxMTAvBgNV BAMTKDEwNDdFNzBFRjI0RDI0M0FBRDhCM0ZGMEM2MTczQzdBNkE1RUQ3NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixAK2ZxPNxADbZAeCdhBCA5/h 8XytT6NxnC4bQEL/QXZKXjW7I3jtPxTYU6PCueetQwQgrohIPAbMLKVuFT4K+b62 pV1cJn5b4AVh20jy7HCUXmR7BFqeeYa0GeGmyNBq5KtfVURfO4vhJNSN3eYOibUl x8A9XwIE3iAemKwdFB/uTgA7fZqOEkGcV8fUlxqw9y7kI90n4Gx2+WyGadeptoUH 2WTujHLBcDvkN7npAmeb6kARC951dQfR6btaNqaXQBgFsjGLQgywDkCM4UPe2Jka kYsXduiKOD81lt2dq0KNAZT/IseZOGA0zQOZwcjM0zf7Pqel5s+VQ69OLB6rAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUEEfnDvJNJDqtiz/wxhc8empe13cwHwYDVR0j BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTEyNjU4NjkzMzk4MjY1ODc1LzAvMzIzMDMyMmUzODM0 MmUzMTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMpUETANBgkqhkiG9w0BAQsFAAOCAQEAkE7NzFa/Zb4Jd5eHQ727NlrpHw/N JGy3Eog/jaPUhCadfqqUITwEsr5EOTTHSINKdu9HE5dy9olxiNvdaMenin+Nfh9J re5GcAxbMwrqUXhxFcoVz9+D+GIbfx0hKSvMJ8Dnwk+A7C8OHAPocnVkPut96Htn bhWz2K6vX+EK5JPsmcKZgAGagzwaXE+tvR+Y3NV8dBFvBAJBQqKNihan6zv25cPD B5kO0go7yY66X0UtNchE7l9ey8c4zlP8kmUnPL1CDS+JWxi5AxawWog8LmOhXf9W ZzsNjMI4BrFxncFafkMudzQQcM0RrRV6UWqSklnt3mMqC+ERyM42xbnbUQ== -----END CERTIFICATE-----Generated at Fri May 29 23:56:35 2026 by rpki-client