$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31322e302f32332d3233203d3e20313430373137.roa File: 3231382e39382e31322e302f32332d3233203d3e20313430373137.roa (raw, json) Hash identifier: Er5H35GjHwcYIeT2zcL8ePBNCRK3mqpBADgNT6nM6c4= Subject key identifier: AC:60:05:96:54:04:E1:5D:AC:E5:41:36:CC:CD:84:F7:5F:78:BF:44 Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Certificate serial: 34DD0E618B3C68D0F8ED4E34E47A59C68AF70CBF Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31322e302f32332d3233203d3e20313430373137.roa Signing time: Wed 03 Jun 2026 07:29:39 +0000 ROA not before: Wed 03 Jun 2026 07:24:39 +0000 ROA not after: Wed 02 Jun 2027 07:29:39 +0000 asID: 140717 IP address blocks: 218.98.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:dd:0e:61:8b:3c:68:d0:f8:ed:4e:34:e4:7a:59:c6:8a:f7:0c:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Validity Not Before: Jun 3 07:24:39 2026 GMT Not After : Jun 2 07:29:39 2027 GMT Subject: CN=AC6005965404E15DACE54136CCCD84F75F78BF44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:b8:99:fb:df:fc:b3:42:72:b2:c4:09:6a: c3:dc:2e:ea:9d:cc:f3:e8:c2:62:23:7f:00:52:ca: 1d:76:1a:15:c7:b7:eb:67:ea:8e:42:f8:d2:45:69: 1e:b0:82:f7:b9:31:4f:75:0b:a7:44:75:53:b0:ff: 4b:46:1d:e1:ad:b9:fc:84:53:83:03:7c:5a:d9:e4: 45:be:d3:6a:d4:2b:0c:21:a2:b9:45:99:ce:30:d2: cf:5d:4a:21:b9:57:c3:e7:51:2c:4b:35:bd:fd:db: cb:41:86:07:ea:4b:f1:7f:4f:82:9c:0b:9c:29:0f: eb:13:8b:98:7f:31:ee:2f:87:2e:06:25:34:dc:c9: b0:a2:a5:f0:b9:c1:43:83:a4:69:66:b2:6d:aa:cc: 08:40:a4:e4:78:32:4f:0b:a5:fd:e8:66:0f:f2:2c: c5:cc:9b:06:38:55:96:dc:d2:e9:db:67:2e:a4:b3: 5b:67:6a:21:92:9e:64:66:45:8b:96:86:85:f6:03: c3:f2:be:51:92:a1:41:c3:bf:7a:64:04:6c:d0:1d: c0:b9:62:f2:ab:9e:e9:b0:c5:d8:4d:e5:dd:57:6a: 61:88:62:6b:1e:d7:a1:74:8b:8b:6a:7c:34:17:e9: d6:c1:25:be:c2:c9:bd:5f:ad:41:fe:2f:c3:fe:f7: 4d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:60:05:96:54:04:E1:5D:AC:E5:41:36:CC:CD:84:F7:5F:78:BF:44 X509v3 Authority Key Identifier: keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e31322e302f32332d3233203d3e20313430373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.12.0/23 Signature Algorithm: sha256WithRSAEncryption cd:ae:27:df:89:10:67:bc:56:97:d2:70:5b:e0:44:d5:a8:cc: 50:52:7b:a2:49:da:ef:63:59:3a:5d:43:dc:40:d7:21:68:73: f2:62:84:82:b3:87:49:9e:2b:80:1b:08:00:9c:c2:48:b1:f5: 01:94:7e:db:de:95:7c:0c:46:63:62:a0:2f:f5:f6:c4:dd:fe: 32:a6:85:d1:70:e0:c0:0d:48:a4:dc:5c:3a:3c:15:5d:df:da: 69:3d:03:46:b2:04:dc:d7:a7:88:ce:73:79:74:96:77:c7:2a: 7e:a8:67:fe:c2:1c:f9:ed:bc:74:ff:44:82:46:2f:74:64:54: de:a7:0e:b3:af:fb:db:46:42:7b:2b:2c:58:7c:85:3d:71:7c: 3b:8a:0e:e9:f4:21:79:06:66:6b:61:93:c1:c2:29:2a:6a:bb: 6e:25:fc:9e:3e:e8:6e:b3:43:ec:3a:12:f5:c2:64:18:a5:a0: ba:29:0b:aa:84:03:a9:fd:77:98:23:c4:72:a9:84:d5:64:47: 03:d9:77:40:4d:7f:29:3c:85:26:3e:24:3b:d3:37:07:09:ec: 35:85:57:46:70:fd:5c:1d:e3:21:e3:f8:19:9f:b7:26:13:5a: e3:24:e3:69:b0:94:27:7a:37:38:88:86:66:72:83:29:fb:22: 99:8d:46:49 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNN0OYYs8aND47U405HpZxor3DL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz NUI3ODFERDAeFw0yNjA2MDMwNzI0MzlaFw0yNzA2MDIwNzI5MzlaMDMxMTAvBgNV BAMTKEFDNjAwNTk2NTQwNEUxNURBQ0U1NDEzNkNDQ0Q4NEY3NUY3OEJGNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKO7iZ+9/8s0JyssQJasPcLuqd zPPowmIjfwBSyh12GhXHt+tn6o5C+NJFaR6wgve5MU91C6dEdVOw/0tGHeGtufyE U4MDfFrZ5EW+02rUKwwhorlFmc4w0s9dSiG5V8PnUSxLNb3928tBhgfqS/F/T4Kc C5wpD+sTi5h/Me4vhy4GJTTcybCipfC5wUODpGlmsm2qzAhApOR4Mk8Lpf3oZg/y LMXMmwY4VZbc0unbZy6ks1tnaiGSnmRmRYuWhoX2A8PyvlGSoUHDv3pkBGzQHcC5 YvKrnumwxdhN5d1XamGIYmse16F0i4tqfDQX6dbBJb7Cyb1frUH+L8P+900VAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUrGAFllQE4V2s5UE2zM2E9194v0QwHwYDVR0j BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5 RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNDM1Njg1NjI2NTk2NTU4NS8wLzMyMzEzODJlMzkz ODJlMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzMDM3MzEzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAdpiDDANBgkqhkiG9w0BAQsFAAOCAQEAza4n34kQZ7xWl9JwW+BE1ajM UFJ7okna72NZOl1D3EDXIWhz8mKEgrOHSZ4rgBsIAJzCSLH1AZR+296VfAxGY2Kg L/X2xN3+MqaF0XDgwA1IpNxcOjwVXd/aaT0DRrIE3NeniM5zeXSWd8cqfqhn/sIc +e28dP9EgkYvdGRU3qcOs6/720ZCeyssWHyFPXF8O4oO6fQheQZma2GTwcIpKmq7 biX8nj7obrND7DoS9cJkGKWguikLqoQDqf13mCPEcqmE1WRHA9l3QE1/KTyFJj4k O9M3BwnsNYVXRnD9XB3jIeP4GZ+3JhNa4yTjabCUJ3o3OIiGZnKDKfsimY1GSQ== -----END CERTIFICATE-----Generated at Fri Jun 12 08:43:25 2026 by rpki-client