$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e332e302f32342d3234203d3e203137373831.roa File: 3230332e3139322e332e302f32342d3234203d3e203137373831.roa (raw, json) Hash identifier: 0WS8k8pofZHHVmupE3YpYkM+OR/Seos2N2zmoRKePNo= Subject key identifier: 5D:4C:78:2F:C3:6A:E7:D9:33:93:6F:B1:7F:E9:20:DC:6C:EF:08:A3 Certificate issuer: /CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Certificate serial: 1347FAEDAFCB2CF1A5C4EC5D5DCC283634C4AFD4 Authority key identifier: 24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e332e302f32342d3234203d3e203137373831.roa Signing time: Fri 29 May 2026 08:43:59 +0000 ROA not before: Fri 29 May 2026 08:38:59 +0000 ROA not after: Fri 28 May 2027 08:43:59 +0000 asID: 17781 IP address blocks: 203.192.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:47:fa:ed:af:cb:2c:f1:a5:c4:ec:5d:5d:cc:28:36:34:c4:af:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24302E3FE1ECABBCBCAE52FC85F2A9B46981523D Validity Not Before: May 29 08:38:59 2026 GMT Not After : May 28 08:43:59 2027 GMT Subject: CN=5D4C782FC36AE7D933936FB17FE920DC6CEF08A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:35:5c:f7:50:dc:a6:00:66:31:b0:82:7d:77: 41:ab:b4:c1:07:5d:b3:68:37:8f:7a:e4:39:b3:39: b7:03:96:98:1e:0f:23:13:52:51:39:2a:72:32:b1: 09:99:6a:f6:4a:17:1d:88:00:07:60:f3:68:9c:3e: 37:bb:92:27:62:c2:a0:0b:05:0e:a0:6a:ac:59:50: be:da:89:5e:5f:b8:33:ef:66:56:91:35:3e:b6:e6: 29:6f:02:65:ae:b3:d1:7e:79:cd:73:4e:e2:f5:4e: 4b:de:9a:e1:88:cc:c3:11:9a:a1:f4:f0:3b:a2:71: 8d:f3:5e:64:5b:dc:6c:23:5f:09:b3:9d:65:1e:93: 14:5b:61:8b:02:69:51:1b:dc:1a:19:f5:35:5d:9a: 56:8f:6b:68:23:4f:6f:3f:bf:81:ea:5c:13:24:01: 84:3f:ac:23:5d:45:d3:66:55:f6:d9:97:49:4d:cb: 7c:e8:c6:d3:fc:d8:fa:cf:d7:2e:25:8f:d8:95:f1: 7b:ca:fa:d3:6c:fd:f7:a0:21:3a:9a:c5:81:f7:56: 06:3d:e6:6f:bc:7a:c0:c3:07:a0:9d:8b:8b:b0:50: 88:ab:85:25:76:7f:27:d8:f7:9f:f8:41:dc:07:d3: 82:19:f0:14:e4:29:a4:74:78:6f:c3:c0:42:80:89: 61:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4C:78:2F:C3:6A:E7:D9:33:93:6F:B1:7F:E9:20:DC:6C:EF:08:A3 X509v3 Authority Key Identifier: keyid:24:30:2E:3F:E1:EC:AB:BC:BC:AE:52:FC:85:F2:A9:B4:69:81:52:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/24302E3FE1ECABBCBCAE52FC85F2A9B46981523D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112658693398265875/0/3230332e3139322e332e302f32342d3234203d3e203137373831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.192.3.0/24 Signature Algorithm: sha256WithRSAEncryption 96:9f:9a:4f:8d:fa:c4:84:26:2a:49:12:a3:b7:5d:e6:82:bc: 24:91:9a:c5:37:31:cb:c3:67:54:6b:d4:b1:cf:1f:c3:76:fb: 17:46:31:e8:48:41:a9:a9:22:e2:c1:a8:53:17:85:07:5e:86: 0e:bf:25:9c:b3:a9:d9:4c:7c:5e:2e:a7:51:58:41:90:87:c4: 13:fb:11:c2:a7:18:2a:f3:72:34:0e:85:c9:28:fa:c6:0d:34: d8:2c:cc:d7:26:4f:34:07:74:2d:19:c1:81:77:7d:e5:4c:81: c0:85:41:1b:19:fd:e3:31:36:36:98:9e:14:f8:b7:ea:22:34: 94:72:e4:d0:0a:12:7c:79:31:fd:7d:e4:11:8f:27:49:4e:3a: 96:18:15:63:97:44:ed:7f:8c:b7:ea:fc:60:65:dc:4c:c1:41: cf:ce:93:58:9b:14:bb:46:51:b3:af:91:c5:4d:09:db:80:7a: 2f:1d:1d:b4:2c:18:33:81:8f:96:11:a5:13:c8:db:ae:b8:fd: 2f:e0:cf:4d:35:87:cd:54:e7:31:ce:b1:da:fc:79:dd:54:b3: cd:85:65:25:f7:6d:48:4b:a6:c2:17:27:a7:f6:e2:f6:e7:9b: 06:b9:a9:40:44:52:b1:f8:d2:97:bc:f6:61:0e:7b:8e:9c:82: f7:0c:b6:2c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUE0f67a/LLPGlxOxdXcwoNjTEr9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2 OTgxNTIzRDAeFw0yNjA1MjkwODM4NTlaFw0yNzA1MjgwODQzNTlaMDMxMTAvBgNV BAMTKDVENEM3ODJGQzM2QUU3RDkzMzkzNkZCMTdGRTkyMERDNkNFRjA4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANVz3UNymAGYxsIJ9d0GrtMEH XbNoN4965DmzObcDlpgeDyMTUlE5KnIysQmZavZKFx2IAAdg82icPje7kidiwqAL BQ6gaqxZUL7aiV5fuDPvZlaRNT625ilvAmWus9F+ec1zTuL1TkvemuGIzMMRmqH0 8DuicY3zXmRb3GwjXwmznWUekxRbYYsCaVEb3BoZ9TVdmlaPa2gjT28/v4HqXBMk AYQ/rCNdRdNmVfbZl0lNy3zoxtP82PrP1y4lj9iV8XvK+tNs/fegITqaxYH3VgY9 5m+8esDDB6Cdi4uwUIirhSV2fyfY95/4QdwH04IZ8BTkKaR0eG/DwEKAiWFVAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUXUx4L8Nq59kzk2+xf+kg3GzvCKMwHwYDVR0j BBgwFoAUJDAuP+Hsq7y8rlL8hfKptGmBUj0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY1ODY5MzM5ODI2NTg3NS8wLzI0MzAyRTNGRTFFQ0FCQkNCQ0FFNTJGQzg1RjJB OUI0Njk4MTUyM0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjQzMDJFM0ZFMUVDQUJCQ0JDQUU1MkZDODVGMkE5QjQ2OTgxNTIzRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTEyNjU4NjkzMzk4MjY1ODc1LzAvMzIzMDMzMmUzMTM5 MzIyZTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM3MzgzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAMvAAzANBgkqhkiG9w0BAQsFAAOCAQEAlp+aT436xIQmKkkSo7dd5oK8JJGa xTcxy8NnVGvUsc8fw3b7F0Yx6EhBqaki4sGoUxeFB16GDr8lnLOp2Ux8Xi6nUVhB kIfEE/sRwqcYKvNyNA6FySj6xg002CzM1yZPNAd0LRnBgXd95UyBwIVBGxn94zE2 NpieFPi36iI0lHLk0AoSfHkx/X3kEY8nSU46lhgVY5dE7X+Mt+r8YGXcTMFBz86T WJsUu0ZRs6+RxU0J24B6Lx0dtCwYM4GPlhGlE8jbrrj9L+DPTTWHzVTnMc6x2vx5 3VSzzYVlJfdtSEumwhcnp/bi9uebBrmpQERSsfjSl7z2YQ57jpyC9wy2LA== -----END CERTIFICATE-----Generated at Fri May 29 23:53:11 2026 by rpki-client