$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e34382e302f32312d3231203d3e2034383337.roa File: 3231382e39382e34382e302f32312d3231203d3e2034383337.roa (raw, json) Hash identifier: q8qnU7j+1N8NyQ+ghGIoRaDKOZyBFA/KKidc/DCPT2w= Subject key identifier: 70:82:E3:AE:9E:21:D0:5E:6D:94:7E:D2:DC:C3:C8:2D:44:A3:0A:E6 Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Certificate serial: 761BFC5DBA05B2F2C38C8A9B7A4891A5FF5CD101 Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e34382e302f32312d3231203d3e2034383337.roa Signing time: Thu 04 Jun 2026 07:22:58 +0000 ROA not before: Thu 04 Jun 2026 07:17:58 +0000 ROA not after: Thu 03 Jun 2027 07:22:58 +0000 asID: 4837 IP address blocks: 218.98.48.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1b:fc:5d:ba:05:b2:f2:c3:8c:8a:9b:7a:48:91:a5:ff:5c:d1:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Validity Not Before: Jun 4 07:17:58 2026 GMT Not After : Jun 3 07:22:58 2027 GMT Subject: CN=7082E3AE9E21D05E6D947ED2DCC3C82D44A30AE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:09:1d:eb:fa:04:93:3e:df:2a:b6:96:d5:d2: da:01:41:90:45:06:5d:1e:06:5f:e6:a8:01:61:fe: f6:a8:19:9e:8e:95:ae:5c:6e:b4:21:bd:02:22:a1: 44:c4:ab:26:c4:e5:c4:75:9b:39:e2:3f:24:c9:2f: e0:91:05:11:a4:b7:11:6f:db:a1:ba:ce:12:9c:ad: f2:8e:b6:74:6b:ae:50:35:cb:f1:93:62:a6:5f:90: cb:4d:ff:30:83:90:5f:ca:bf:6d:7b:d6:ea:4e:13: fa:10:1f:e2:ba:87:10:ba:03:e0:ba:35:cc:a2:d2: 9c:87:97:af:b5:e4:09:b3:b2:68:72:45:cb:3d:7a: 52:53:71:f3:58:01:47:3f:c5:76:32:14:67:d0:a6: be:11:e6:4b:48:11:89:8b:b3:20:eb:32:ff:5f:c6: 82:26:06:d3:33:3b:46:fa:18:dd:88:ba:54:aa:70: 8d:85:16:d5:88:f5:e8:8d:f1:27:86:5c:01:8e:a2: 49:1d:2c:7e:85:b8:63:41:57:59:3d:a0:00:7c:d3: ae:a5:4e:fb:37:dd:61:f7:0d:9e:b2:7f:da:9a:b2: 04:79:0e:b1:5e:a6:e3:2f:98:82:6f:fe:a2:b9:2c: 1a:e8:25:77:46:9c:b7:c7:d6:48:3b:10:73:09:d1: 43:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:82:E3:AE:9E:21:D0:5E:6D:94:7E:D2:DC:C3:C8:2D:44:A3:0A:E6 X509v3 Authority Key Identifier: keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e34382e302f32312d3231203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.48.0/21 Signature Algorithm: sha256WithRSAEncryption 49:91:df:a4:21:dc:36:c1:82:da:fd:ba:3a:24:d0:f9:1e:99: 55:f4:2d:2c:20:58:0d:25:ff:45:78:eb:d5:cb:a6:aa:be:66: 68:3d:a3:83:74:36:b9:b4:03:86:34:4c:eb:98:7e:b5:22:93: 57:6f:67:ae:d6:b7:c9:80:fb:ff:fa:c3:d9:d7:99:85:5d:4c: 05:61:61:bd:16:79:9c:5c:a9:b5:46:6f:cb:55:17:06:6c:8c: 50:c3:35:7b:8d:ef:3a:ef:e9:8e:ac:d2:9b:79:b2:fc:ed:0e: d4:fa:b6:26:94:42:fa:d1:05:5d:41:ef:9a:d5:29:2a:f1:d4: 64:8a:ab:73:f3:fd:43:13:c1:35:49:01:27:db:f2:19:69:21: 85:7e:7b:34:49:b1:48:e8:f1:4a:4d:de:e5:6f:b6:80:64:86: 91:d0:07:93:05:b9:88:36:af:2a:af:aa:a5:d5:6e:78:e5:b2: c2:f7:30:e3:11:06:a7:91:4b:d2:ac:77:83:a0:9a:60:60:ed: c7:6f:a6:99:57:ee:7c:a8:91:19:61:17:e6:4d:ca:c9:65:93: d7:c9:37:3d:93:9e:c7:e8:27:d4:75:07:38:10:d4:d2:f6:3f: db:50:40:f0:b4:4c:8a:c6:df:96:45:55:83:6b:20:a5:90:3b: 93:0a:4f:41 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUdhv8XboFsvLDjIqbekiRpf9c0QEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz NUI3ODFERDAeFw0yNjA2MDQwNzE3NThaFw0yNzA2MDMwNzIyNThaMDMxMTAvBgNV BAMTKDcwODJFM0FFOUUyMUQwNUU2RDk0N0VEMkRDQzNDODJENDRBMzBBRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQCR3r+gSTPt8qtpbV0toBQZBF Bl0eBl/mqAFh/vaoGZ6Ola5cbrQhvQIioUTEqybE5cR1mzniPyTJL+CRBRGktxFv 26G6zhKcrfKOtnRrrlA1y/GTYqZfkMtN/zCDkF/Kv2171upOE/oQH+K6hxC6A+C6 Ncyi0pyHl6+15AmzsmhyRcs9elJTcfNYAUc/xXYyFGfQpr4R5ktIEYmLsyDrMv9f xoImBtMzO0b6GN2IulSqcI2FFtWI9eiN8SeGXAGOokkdLH6FuGNBV1k9oAB8066l Tvs33WH3DZ6yf9qasgR5DrFepuMvmIJv/qK5LBroJXdGnLfH1kg7EHMJ0UONAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUcILjrp4h0F5tlH7S3MPILUSjCuYwHwYDVR0j BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5 RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzIzMTM4MmUzOTM4 MmUzNDM4MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAPaYjAwDQYJKoZIhvcNAQELBQADggEBAEmR36Qh3DbBgtr9ujok0PkemVX0LSwg WA0l/0V469XLpqq+Zmg9o4N0Nrm0A4Y0TOuYfrUik1dvZ67Wt8mA+//6w9nXmYVd TAVhYb0WeZxcqbVGb8tVFwZsjFDDNXuN7zrv6Y6s0pt5svztDtT6tiaUQvrRBV1B 75rVKSrx1GSKq3Pz/UMTwTVJASfb8hlpIYV+ezRJsUjo8UpN3uVvtoBkhpHQB5MF uYg2ryqvqqXVbnjlssL3MOMRBqeRS9Ksd4OgmmBg7cdvpplX7nyokRlhF+ZNysll k9fJNz2TnsfoJ9R1BzgQ1NL2P9tQQPC0TIrG35ZFVYNrIKWQO5MKT0E= -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:23 2026 by rpki-client