$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32352e302f32342d3234203d3e203137373831.roa File: 3230332e3139322e32352e302f32342d3234203d3e203137373831.roa (raw, json) Hash identifier: Xo0MC9gPyqAkaqWViitQYw2ysJ5sNhY/oWc7KDvqJfU= Subject key identifier: FC:9B:2F:04:54:A6:B9:02:53:69:AB:96:41:35:11:05:CA:4A:EE:9A Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Certificate serial: 5837FA62F7D366CC46C9136832ED6A291BFBD5F5 Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32352e302f32342d3234203d3e203137373831.roa Signing time: Fri 29 May 2026 08:44:00 +0000 ROA not before: Fri 29 May 2026 08:39:00 +0000 ROA not after: Fri 28 May 2027 08:44:00 +0000 asID: 17781 IP address blocks: 203.192.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:37:fa:62:f7:d3:66:cc:46:c9:13:68:32:ed:6a:29:1b:fb:d5:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Validity Not Before: May 29 08:39:00 2026 GMT Not After : May 28 08:44:00 2027 GMT Subject: CN=FC9B2F0454A6B9025369AB9641351105CA4AEE9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2b:3e:50:d1:1f:ac:64:3c:ca:6c:b1:d6:f3: 85:ac:9f:a2:73:af:d2:ac:75:9f:10:ee:67:a3:44: de:4d:32:b1:8e:00:90:f2:21:2f:4e:e1:3e:ae:0d: 02:97:7e:d0:92:41:c0:7c:95:fb:5f:e1:c4:13:81: db:cd:60:40:77:cf:24:a5:28:77:3a:3a:83:ad:f1: a8:85:e1:bf:fe:e7:79:41:32:5e:47:a3:21:0d:7f: 72:e0:8c:06:d0:df:af:f8:c7:50:b0:c1:84:44:32: 47:fd:93:cd:ce:11:8b:27:0b:cb:e0:b5:2c:1a:8e: 64:5a:55:8c:5a:a3:28:6a:98:e2:2f:8b:a2:da:3b: e7:9e:7f:d1:a5:61:db:dc:c1:ff:4d:67:2e:0b:59: 4a:e2:ac:80:b4:08:84:29:da:fd:db:d7:29:2e:e3: f6:6c:0b:b4:cd:4e:4b:f4:de:fd:46:92:ee:82:2b: 10:44:67:fa:c6:1a:52:6d:d0:23:8f:3b:71:45:a3: 44:3b:03:b0:f6:8f:0f:6b:3e:a1:40:a9:eb:c3:9a: 78:2a:08:58:ac:8e:56:5b:17:c9:14:c7:56:6d:39: a6:d5:72:b2:89:6b:bb:8c:50:a0:2c:d1:6f:77:39: 7a:4d:98:43:c3:c6:45:16:80:92:a0:50:7d:b0:ef: 12:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9B:2F:04:54:A6:B9:02:53:69:AB:96:41:35:11:05:CA:4A:EE:9A X509v3 Authority Key Identifier: keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e32352e302f32342d3234203d3e203137373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.192.25.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:0c:2a:60:84:32:d2:21:fc:44:3e:d2:18:00:28:63:92:eb: 4c:bf:9b:2d:c3:66:18:38:34:7b:44:07:15:37:e9:6b:98:ea: a5:be:b0:b0:06:d2:bc:ce:d5:75:11:23:cf:95:03:85:97:29: 8c:8f:91:5e:40:4f:a8:26:00:ed:5b:b5:36:ec:4c:58:f1:47: 91:0e:ea:d3:b9:45:84:70:5f:02:76:7d:f1:99:e0:3e:dd:e8: f3:7b:19:da:28:ab:d4:48:8a:5d:2c:db:df:a1:58:81:00:23: a3:47:c5:43:ef:c2:db:d4:3e:ef:a0:f9:7a:c2:06:24:4d:2c: 36:95:7e:7a:ac:27:83:c8:8c:47:14:80:54:b2:48:6f:20:8c: b2:bb:58:a2:37:db:d2:56:25:e7:ea:2b:e3:49:ba:fb:18:26: f4:43:6c:2e:72:68:9f:38:d1:71:dc:e4:59:71:c2:0c:96:e6: 92:53:14:91:41:ad:3a:94:e0:cc:6b:66:71:6e:ab:de:5d:70: 9b:1e:f9:7a:95:aa:37:60:78:a6:38:70:7e:63:ff:68:ac:8a: 58:a4:a9:43:83:f7:17:c3:d9:d8:74:bd:00:2c:96:07:ae:07: c0:11:eb:f9:4e:e2:bc:22:f1:aa:39:9b:c9:6c:3c:33:20:e5: c1:56:79:33 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWDf6YvfTZsxGyRNoMu1qKRv71fUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2 OTgxNTIzRDAeFw0yNjA1MjkwODM5MDBaFw0yNzA1MjgwODQ0MDBaMDMxMTAvBgNV BAMTKEZDOUIyRjA0NTRBNkI5MDI1MzY5QUI5NjQxMzUxMTA1Q0E0QUVFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEKz5Q0R+sZDzKbLHW84Wsn6Jz r9KsdZ8Q7mejRN5NMrGOAJDyIS9O4T6uDQKXftCSQcB8lftf4cQTgdvNYEB3zySl KHc6OoOt8aiF4b/+53lBMl5HoyENf3LgjAbQ36/4x1CwwYREMkf9k83OEYsnC8vg tSwajmRaVYxaoyhqmOIvi6LaO+eef9GlYdvcwf9NZy4LWUrirIC0CIQp2v3b1yku 4/ZsC7TNTkv03v1Gku6CKxBEZ/rGGlJt0COPO3FFo0Q7A7D2jw9rPqFAqevDmngq CFisjlZbF8kUx1ZtOabVcrKJa7uMUKAs0W93OXpNmEPDxkUWgJKgUH2w7xLjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU/JsvBFSmuQJTaauWQTURBcpK7powHwYDVR0j BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExMjY1ODY5MzM5ODI2NTg3NS8wLzMyMzAzMzJlMzEz OTMyMmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAMvAGTANBgkqhkiG9w0BAQsFAAOCAQEAHgwqYIQy0iH8RD7SGAAoY5Lr TL+bLcNmGDg0e0QHFTfpa5jqpb6wsAbSvM7VdREjz5UDhZcpjI+RXkBPqCYA7Vu1 NuxMWPFHkQ7q07lFhHBfAnZ98ZngPt3o83sZ2iir1EiKXSzb36FYgQAjo0fFQ+/C 29Q+76D5esIGJE0sNpV+eqwng8iMRxSAVLJIbyCMsrtYojfb0lYl5+or40m6+xgm 9ENsLnJonzjRcdzkWXHCDJbmklMUkUGtOpTgzGtmcW6r3l1wmx75epWqN2B4pjhw fmP/aKyKWKSpQ4P3F8PZ2HS9ACyWB64HwBHr+U7ivCLxqjmbyWw8MyDlwVZ5Mw== -----END CERTIFICATE-----Generated at Fri May 29 23:54:31 2026 by rpki-client