$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32312d3231203d3e2034383337.roa File: 3231382e39382e382e302f32312d3231203d3e2034383337.roa (raw, json) Hash identifier: ROWbXWbFlZdOkZkRltLaj/Tx8S1Sx4SkOXNrEfnYGO8= Subject key identifier: 4F:C3:99:E3:2B:B4:08:4E:66:A6:54:33:C6:FB:C7:71:86:FE:01:82 Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Certificate serial: 635749BA99B49BBFC1F541BDF181EB34AEC53244 Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32312d3231203d3e2034383337.roa Signing time: Thu 04 Jun 2026 07:21:46 +0000 ROA not before: Thu 04 Jun 2026 07:16:46 +0000 ROA not after: Thu 03 Jun 2027 07:21:46 +0000 asID: 4837 IP address blocks: 218.98.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:57:49:ba:99:b4:9b:bf:c1:f5:41:bd:f1:81:eb:34:ae:c5:32:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Validity Not Before: Jun 4 07:16:46 2026 GMT Not After : Jun 3 07:21:46 2027 GMT Subject: CN=4FC399E32BB4084E66A65433C6FBC77186FE0182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:28:0f:13:40:79:1c:3c:1c:6f:da:85:01: 8f:90:26:51:7e:53:bc:2c:32:c8:53:82:91:10:50: d1:90:8e:e5:c6:a3:a7:33:33:b3:46:4e:22:3a:b9: 37:98:73:17:77:25:34:29:57:ef:30:12:77:cc:b1: 6b:84:4f:1a:a8:e8:d8:ca:76:7a:86:f0:b4:3e:09: 73:dc:91:ec:e3:c8:49:49:a9:dc:f2:5d:a2:a5:80: 14:b6:0a:27:e5:10:3c:c1:ea:e4:ed:c0:7d:59:e8: 62:e7:96:7c:6c:aa:e0:30:1d:f9:b6:92:7b:ff:4f: 9a:ff:8b:06:37:48:2c:5d:d1:cf:8f:29:d1:32:18: a1:dd:e1:39:68:08:23:f0:df:ce:2c:28:bb:c4:34: d4:57:1c:d3:8c:80:d5:41:c5:7a:82:ff:6c:67:24: bd:24:ad:a3:05:f4:e2:11:66:31:c3:7d:f0:c8:9a: b8:0c:c7:c6:5e:31:94:58:82:4d:a4:a1:f3:99:1a: d1:c0:59:be:5a:11:cc:dd:3d:51:fe:c7:14:b2:7a: a5:9b:79:1a:07:e4:ea:29:b2:37:e1:c3:cc:32:a2: 2d:20:12:38:d4:35:c2:7f:4b:57:de:ee:fc:2b:b8: 47:a3:1d:38:58:c2:52:d6:e4:b7:0c:fb:66:84:f4: 5d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:C3:99:E3:2B:B4:08:4E:66:A6:54:33:C6:FB:C7:71:86:FE:01:82 X509v3 Authority Key Identifier: keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3231382e39382e382e302f32312d3231203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.98.8.0/21 Signature Algorithm: sha256WithRSAEncryption c2:0f:af:5d:dc:4a:15:03:33:22:d3:d6:5c:c2:38:74:b7:f9: 1d:eb:b6:59:9f:97:9f:f4:a4:05:e9:4d:b3:f3:97:ed:11:04: 6f:ac:df:ce:1b:47:5e:08:6a:76:e3:5e:08:0a:dc:ca:d0:7f: b4:42:90:0e:9f:be:e4:83:4d:68:00:50:c3:0b:de:6c:51:c3: 80:a3:a0:74:b1:08:ce:a1:35:a6:5f:82:cf:c0:20:b3:09:5a: dd:2e:2f:5b:7a:5d:2c:b0:3c:58:83:50:20:ac:c4:e7:42:92: 54:8d:b2:90:2d:d3:14:49:48:6c:53:a3:82:6b:ca:f6:d5:ee: 98:d2:d2:e1:28:b9:5a:af:ed:3b:52:88:51:0e:1c:b7:0c:0f: 6b:30:4a:be:5e:1a:53:c2:36:e3:a0:8c:d0:bd:3f:75:f7:cc: 3e:12:08:d7:f5:ef:e9:32:bb:50:2e:02:14:87:73:15:e6:c3: 35:dc:02:1f:75:e9:76:cf:dc:80:38:c1:95:5e:71:5d:98:c9: 20:45:28:13:65:c3:ee:9c:76:cc:ae:64:4a:67:73:be:74:5d: 0d:1b:8a:ec:3b:92:2b:83:d1:2c:ee:04:23:d8:ad:fe:99:db: 23:ae:e5:de:cc:67:f6:44:bb:94:9d:16:10:fa:2a:a5:9d:ab: 49:cd:0e:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUY1dJupm0m7/B9UG98YHrNK7FMkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz NUI3ODFERDAeFw0yNjA2MDQwNzE2NDZaFw0yNzA2MDMwNzIxNDZaMDMxMTAvBgNV BAMTKDRGQzM5OUUzMkJCNDA4NEU2NkE2NTQzM0M2RkJDNzcxODZGRTAxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWGSgPE0B5HDwcb9qFAY+QJlF+ U7wsMshTgpEQUNGQjuXGo6czM7NGTiI6uTeYcxd3JTQpV+8wEnfMsWuETxqo6NjK dnqG8LQ+CXPckezjyElJqdzyXaKlgBS2CiflEDzB6uTtwH1Z6GLnlnxsquAwHfm2 knv/T5r/iwY3SCxd0c+PKdEyGKHd4TloCCPw384sKLvENNRXHNOMgNVBxXqC/2xn JL0kraMF9OIRZjHDffDImrgMx8ZeMZRYgk2kofOZGtHAWb5aEczdPVH+xxSyeqWb eRoH5Oopsjfhw8wyoi0gEjjUNcJ/S1fe7vwruEejHThYwlLW5LcM+2aE9F1FAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUT8OZ4yu0CE5mplQzxvvHcYb+AYIwHwYDVR0j BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5 RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzIzMTM4MmUzOTM4 MmUzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD 2mIIMA0GCSqGSIb3DQEBCwUAA4IBAQDCD69d3EoVAzMi09Zcwjh0t/kd67ZZn5ef 9KQF6U2z85ftEQRvrN/OG0deCGp2414ICtzK0H+0QpAOn77kg01oAFDDC95sUcOA o6B0sQjOoTWmX4LPwCCzCVrdLi9bel0ssDxYg1AgrMTnQpJUjbKQLdMUSUhsU6OC a8r21e6Y0tLhKLlar+07UohRDhy3DA9rMEq+XhpTwjbjoIzQvT9198w+EgjX9e/p MrtQLgIUh3MV5sM13AIfdel2z9yAOMGVXnFdmMkgRSgTZcPunHbMrmRKZ3O+dF0N G4rsO5Irg9Es7gQj2K3+mdsjruXezGf2RLuUnRYQ+iqlnatJzQ7B -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:25 2026 by rpki-client