$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e34302e302f32312d3231203d3e2034383337.roa File: 3231382e39382e34302e302f32312d3231203d3e2034383337.roa (raw, json) Hash identifier: 09h3Z6BHNUh1h+PnkZGeJ9Juph5X00XtvWq9XHo9Wqs= Subject key identifier: 5E:2E:2F:95:C1:88:05:AE:15:3E:30:54:12:EA:26:57:91:6B:9F:1E Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Certificate serial: 125FD7E2D49FB428D4CBBC4B0FC842DD9BD0C6C3 Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e34302e302f32312d3231203d3e2034383337.roa Signing time: Thu 04 Jun 2026 07:22:58 +0000 ROA not before: Thu 04 Jun 2026 07:17:58 +0000 ROA not after: Thu 03 Jun 2027 07:22:58 +0000 asID: 4837 IP address blocks: 218.98.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:5f:d7:e2:d4:9f:b4:28:d4:cb:bc:4b:0f:c8:42:dd:9b:d0:c6:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Validity Not Before: Jun 4 07:17:58 2026 GMT Not After : Jun 3 07:22:58 2027 GMT Subject: CN=5E2E2F95C18805AE153E305412EA2657916B9F1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b8:62:28:d6:a5:83:74:e8:65:41:85:cd:1f: ba:2d:d0:a9:17:8c:8b:45:74:6f:4d:aa:d3:98:7b: 00:d2:a4:90:78:02:ba:6a:5e:68:89:71:6e:69:3f: 39:88:a3:95:9c:92:84:5c:af:c2:ba:2a:ba:22:40: da:9b:e4:5b:74:21:04:54:3f:64:da:dc:3d:b7:cd: be:32:8a:4d:41:d0:1b:51:43:df:6c:b1:52:fa:2f: 2e:d7:02:8d:d2:2c:c7:7d:9f:ff:db:cd:2f:d7:c4: 04:7d:87:da:98:89:76:0d:02:a0:a5:30:f2:71:72: 33:23:3a:01:bd:51:f1:0f:25:d8:2f:aa:dd:dc:16: 05:71:b2:b8:eb:5d:e9:95:da:0f:61:01:39:38:54: 2d:81:ee:f0:73:ba:06:73:1f:9b:1a:a6:7f:72:bd: cd:86:ab:c9:19:41:71:0d:be:9d:c4:51:b5:51:b2: 74:ee:78:0b:aa:af:b9:a5:6f:1a:2e:bc:7d:b1:6f: 7d:6f:5e:59:ce:f9:6a:01:4e:fa:04:be:1d:c2:d1: 6e:ba:f7:46:ae:93:1f:1a:55:99:08:0c:af:a5:8c: cc:0c:6f:dc:3d:c1:ac:f9:28:dd:60:03:80:af:d9: 0c:50:76:1b:43:35:ea:0f:89:28:f1:f9:ee:51:73: e3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:2E:2F:95:C1:88:05:AE:15:3E:30:54:12:EA:26:57:91:6B:9F:1E X509v3 Authority Key Identifier: keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e34302e302f32312d3231203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.40.0/21 Signature Algorithm: sha256WithRSAEncryption a5:c8:c4:9e:69:d9:13:8c:c3:e3:c2:11:2d:ff:60:e4:8e:a9: 40:58:1f:e9:d0:0f:db:99:fb:74:69:6a:97:3e:4b:66:f4:76: 74:92:c5:be:fa:e8:a0:e2:90:1d:eb:c6:1b:9d:a5:7d:5e:85: 0b:63:1c:d9:6f:e1:f9:8e:f6:69:c2:b0:48:fb:5c:a3:09:78: fa:ff:0c:49:ae:fe:b8:e0:68:cf:dd:40:ce:b1:fc:d1:5e:6b: 8b:e0:c1:9a:21:58:e9:eb:65:58:ba:28:33:53:4f:dd:87:e3: ae:30:77:9b:7a:c5:bf:38:f5:34:b5:13:22:b5:c6:75:36:62: 32:c0:d5:34:a7:24:ed:86:80:26:24:af:45:2b:81:48:db:99: 7a:e7:04:79:0d:9d:3d:ad:64:f1:57:24:16:56:3f:2c:ab:a2: 05:71:bd:3e:36:80:09:ee:a8:fe:5d:db:3c:c2:e8:88:ba:0a: f0:ec:cb:54:57:ff:25:49:32:82:e9:a1:f7:43:76:58:fe:fd: 30:02:94:a3:2a:2b:26:71:3d:d2:dc:f1:a8:f6:39:bf:9b:d2: 18:82:0b:f3:34:ef:03:48:b7:41:68:ed:3e:64:60:e9:b8:70: b4:49:ac:ad:ba:04:7f:b2:6d:af:50:a7:ee:b8:a5:0b:e5:1e: 35:c9:7e:e1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUEl/X4tSftCjUy7xLD8hC3ZvQxsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz NUI3ODFERDAeFw0yNjA2MDQwNzE3NThaFw0yNzA2MDMwNzIyNThaMDMxMTAvBgNV BAMTKDVFMkUyRjk1QzE4ODA1QUUxNTNFMzA1NDEyRUEyNjU3OTE2QjlGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCluGIo1qWDdOhlQYXNH7ot0KkX jItFdG9NqtOYewDSpJB4ArpqXmiJcW5pPzmIo5WckoRcr8K6KroiQNqb5Ft0IQRU P2Ta3D23zb4yik1B0BtRQ99ssVL6Ly7XAo3SLMd9n//bzS/XxAR9h9qYiXYNAqCl MPJxcjMjOgG9UfEPJdgvqt3cFgVxsrjrXemV2g9hATk4VC2B7vBzugZzH5sapn9y vc2Gq8kZQXENvp3EUbVRsnTueAuqr7mlbxouvH2xb31vXlnO+WoBTvoEvh3C0W66 90aukx8aVZkIDK+ljMwMb9w9waz5KN1gA4Cv2QxQdhtDNeoPiSjx+e5Rc+MBAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUXi4vlcGIBa4VPjBUEuomV5Frnx4wHwYDVR0j BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5 RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzIzMTM4MmUzOTM4 MmUzNDMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPaYigwDQYJKoZIhvcNAQELBQADggEBAKXIxJ5p2ROMw+PCES3/YOSOqUBYH+nQ D9uZ+3Rpapc+S2b0dnSSxb766KDikB3rxhudpX1ehQtjHNlv4fmO9mnCsEj7XKMJ ePr/DEmu/rjgaM/dQM6x/NFea4vgwZohWOnrZVi6KDNTT92H464wd5t6xb849TS1 EyK1xnU2YjLA1TSnJO2GgCYkr0UrgUjbmXrnBHkNnT2tZPFXJBZWPyyrogVxvT42 gAnuqP5d2zzC6Ii6CvDsy1RX/yVJMoLpofdDdlj+/TAClKMqKyZxPdLc8aj2Ob+b 0hiCC/M07wNIt0Fo7T5kYOm4cLRJrK26BH+yba9Qp+64pQvlHjXJfuE= -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:25 2026 by rpki-client