$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa File: 3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa (raw, json) Hash identifier: Oerta/6FyO4G7xGB/2MOZsxBA07vpNkvtKeF+Hda6yU= Subject key identifier: 44:57:74:07:42:B3:4C:30:B5:C5:E4:B5:2D:FD:A6:D5:81:A7:28:E9 Certificate issuer: /CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Certificate serial: 5B8488B04D684C93608CBB7ECF452E461195FF1B Authority key identifier: FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa Signing time: Thu 04 Jun 2026 09:38:24 +0000 ROA not before: Thu 04 Jun 2026 09:33:24 +0000 ROA not after: Thu 03 Jun 2027 09:38:24 +0000 asID: 4808 IP address blocks: 218.240.164.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:84:88:b0:4d:68:4c:93:60:8c:bb:7e:cf:45:2e:46:11:95:ff:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCDC522C2977A42C0E1A992040F5840C8C83FF6A Validity Not Before: Jun 4 09:33:24 2026 GMT Not After : Jun 3 09:38:24 2027 GMT Subject: CN=4457740742B34C30B5C5E4B52DFDA6D581A728E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7d:d5:8a:49:ad:6e:08:fc:13:8c:ed:44:7d: b0:af:9f:db:d2:4b:ff:3c:03:47:33:c6:1f:88:a4: 01:07:e8:17:71:37:12:59:3f:81:f8:7f:84:4d:3f: b1:72:3a:7d:8d:c3:0d:7e:f4:d7:60:0b:40:c9:aa: e7:13:6a:8f:82:da:a0:ba:12:c8:fb:af:35:d4:99: b4:d3:d1:03:fc:d9:23:77:5e:7e:88:a1:e5:db:11: 04:0b:d8:c5:01:f5:ef:53:d5:0b:e8:85:93:4c:08: 95:d1:09:90:f3:e8:aa:de:41:5a:f0:5d:ae:d1:c4: f3:88:ca:2d:b7:93:46:f0:95:28:e3:46:f7:d7:1a: 2d:5e:81:eb:95:3e:1d:62:4a:cf:57:89:8d:6d:7a: 5c:e0:54:c6:4e:1e:d3:f7:fd:76:de:7a:02:3c:56: 61:42:af:21:0d:64:7d:9e:e3:4c:88:8a:71:7a:98: 5f:02:bb:78:05:2b:05:ba:8f:ad:80:a5:d4:60:2d: 15:73:3a:9c:ba:82:d5:2d:9d:01:e0:2d:1c:1e:f1: a1:8f:7f:7d:9f:ca:62:bd:d5:d8:4d:41:79:34:95: da:84:d6:ca:ea:32:65:84:72:c8:7d:7f:bd:51:e0: 2e:7d:e7:05:96:9d:20:1d:b1:39:99:2c:65:10:7d: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:57:74:07:42:B3:4C:30:B5:C5:E4:B5:2D:FD:A6:D5:81:A7:28:E9 X509v3 Authority Key Identifier: keyid:FC:DC:52:2C:29:77:A4:2C:0E:1A:99:20:40:F5:84:0C:8C:83:FF:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCDC522C2977A42C0E1A992040F5840C8C83FF6A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114846589689528347/0/3231382e3234302e3136342e302f32332d3233203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.240.164.0/23 Signature Algorithm: sha256WithRSAEncryption 02:fa:61:83:b9:2d:e7:ac:1e:c5:be:fb:a9:77:b5:91:08:68: 58:7b:95:66:35:f4:84:d9:28:3b:a1:64:fc:5f:1a:68:01:19: e0:b8:25:a3:04:fb:ab:40:ef:08:50:7d:e7:10:a4:5f:54:67: 81:81:6f:40:18:e6:bc:c1:0f:a3:10:e0:e9:94:66:c0:e7:8a: 3b:0c:9c:c5:51:27:48:90:17:2b:8e:f1:0c:b5:d7:3b:34:0f: 0c:c5:b3:1a:68:1c:9d:69:de:bd:5c:cf:1f:13:0f:ba:40:95: 84:61:13:68:b4:50:e7:89:42:0b:a1:f1:b5:a2:25:c5:73:2f: 68:b9:ec:15:24:bc:65:ab:8c:65:ff:99:d9:e2:be:d3:2d:84: de:7e:72:93:94:85:a2:bd:27:aa:f7:23:6a:03:1f:53:cc:d4: 5e:9e:0b:65:53:1d:26:be:76:9e:7f:d9:85:f7:7c:44:23:76: 36:fd:72:57:cb:f0:66:e8:74:0c:91:d8:95:dd:8b:cf:82:28: 9d:52:d9:21:c8:38:69:da:b1:d5:ac:93:8c:fe:37:b0:ea:96: b4:17:b6:28:4d:97:e5:0d:64:1f:1a:c4:8f:a2:1d:8f:7e:94: df:ec:b2:2c:82:ff:13:1a:5c:1e:91:d9:61:f7:46:fa:8f:cb: 62:a9:fe:a1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUW4SIsE1oTJNgjLt+z0UuRhGV/xswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4 QzgzRkY2QTAeFw0yNjA2MDQwOTMzMjRaFw0yNzA2MDMwOTM4MjRaMDMxMTAvBgNV BAMTKDQ0NTc3NDA3NDJCMzRDMzBCNUM1RTRCNTJERkRBNkQ1ODFBNzI4RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYfdWKSa1uCPwTjO1EfbCvn9vS S/88A0czxh+IpAEH6BdxNxJZP4H4f4RNP7FyOn2Nww1+9NdgC0DJqucTao+C2qC6 Esj7rzXUmbTT0QP82SN3Xn6IoeXbEQQL2MUB9e9T1QvohZNMCJXRCZDz6KreQVrw Xa7RxPOIyi23k0bwlSjjRvfXGi1egeuVPh1iSs9XiY1telzgVMZOHtP3/XbeegI8 VmFCryENZH2e40yIinF6mF8Cu3gFKwW6j62ApdRgLRVzOpy6gtUtnQHgLRwe8aGP f32fymK91dhNQXk0ldqE1srqMmWEcsh9f71R4C595wWWnSAdsTmZLGUQfUO1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQURFd0B0KzTDC1xeS1Lf2m1YGnKOkwHwYDVR0j BBgwFoAU/NxSLCl3pCwOGpkgQPWEDIyD/2owDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0NjU4OTY4OTUyODM0Ny8wL0ZDREM1MjJDMjk3N0E0MkMwRTFBOTkyMDQwRjU4 NDBDOEM4M0ZGNkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNEQzUyMkMyOTc3QTQyQzBFMUE5OTIwNDBGNTg0MEM4QzgzRkY2QS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNDg0NjU4OTY4OTUyODM0Ny8wLzMyMzEzODJlMzIz NDMwMmUzMTM2MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAdrwpDANBgkqhkiG9w0BAQsFAAOCAQEAAvphg7kt56wexb77qXe1kQho WHuVZjX0hNkoO6Fk/F8aaAEZ4LglowT7q0DvCFB95xCkX1RngYFvQBjmvMEPoxDg 6ZRmwOeKOwycxVEnSJAXK47xDLXXOzQPDMWzGmgcnWnevVzPHxMPukCVhGETaLRQ 54lCC6HxtaIlxXMvaLnsFSS8ZauMZf+Z2eK+0y2E3n5yk5SFor0nqvcjagMfU8zU Xp4LZVMdJr52nn/Zhfd8RCN2Nv1yV8vwZuh0DJHYld2Lz4IonVLZIcg4adqx1ayT jP43sOqWtBe2KE2X5Q1kHxrEj6Idj36U3+yyLIL/ExpcHpHZYfdG+o/LYqn+oQ== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:12 2026 by rpki-client