$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e302e302f32342d3234203d3e203633353535.roa File: 3232332e302e302e302f32342d3234203d3e203633353535.roa (raw, json) Hash identifier: qHK3533azRntNorF8khL1iiH4iIO2Pjl4ySCEShV4hg= Subject key identifier: 31:26:8C:D8:29:DB:33:81:2D:89:23:4C:70:40:37:42:EF:2D:D8:64 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 2C623A85131570227B9834B86F885FEF11851B8F Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e302e302f32342d3234203d3e203633353535.roa Signing time: Mon 15 Jun 2026 05:24:48 +0000 ROA not before: Mon 15 Jun 2026 05:19:48 +0000 ROA not after: Mon 14 Jun 2027 05:24:48 +0000 asID: 63555 IP address blocks: 223.0.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:62:3a:85:13:15:70:22:7b:98:34:b8:6f:88:5f:ef:11:85:1b:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jun 15 05:19:48 2026 GMT Not After : Jun 14 05:24:48 2027 GMT Subject: CN=31268CD829DB33812D89234C70403742EF2DD864 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ed:0d:3d:ed:48:44:33:88:f5:de:ac:8a:ac: 34:80:2d:e2:fc:f5:8d:02:d5:ce:9a:4c:fb:79:72: dc:fb:16:01:36:3d:05:be:69:71:83:2d:17:3b:56: bf:b7:f9:fb:22:a6:c0:fa:2d:a5:bd:6b:cf:2a:ac: d4:01:55:8e:dd:8e:e8:6a:5b:5e:7e:08:ac:0e:64: 56:b5:23:4b:58:7c:f9:6a:ab:11:65:a8:9a:68:9e: 4c:84:cc:b0:5c:9c:ea:cc:b6:72:47:07:d5:46:b7: b3:d1:d6:3b:25:1a:0c:c7:53:bb:a7:c4:82:55:9e: 7d:0a:6e:4f:d7:ce:f2:52:59:78:c0:01:91:80:1f: df:5f:e3:74:e1:38:9b:dd:36:a2:79:7f:c5:05:72: 44:76:53:a7:d1:a9:e1:f8:b5:5c:7a:7a:ee:7e:ef: 01:93:d9:8a:5a:9f:48:80:b6:02:26:72:b1:89:9d: 6f:04:ec:b0:aa:50:c3:7f:2a:a7:8f:41:57:50:7d: e5:0d:af:6b:a6:fe:92:07:58:e3:6e:9d:25:f9:b9: dc:f8:e0:91:a2:17:3d:1a:52:eb:64:8d:be:b2:92: fd:49:6b:ec:2e:c2:22:b4:de:02:5a:2a:d3:40:e0: 27:74:43:83:b0:1f:82:eb:fc:26:fb:c1:1d:a6:8c: 4b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:26:8C:D8:29:DB:33:81:2D:89:23:4C:70:40:37:42:EF:2D:D8:64 X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e302e302f32342d3234203d3e203633353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.0.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:ec:01:2b:ac:0a:57:ee:93:2d:42:86:07:c6:76:db:d8:4c: c1:9a:8d:ac:30:73:09:bb:36:6b:b1:38:3b:91:4c:6d:e0:1f: 8c:03:f4:5f:71:1c:de:bc:00:d0:91:14:63:82:e9:c8:9b:09: 9b:a1:61:2a:07:cf:45:14:28:eb:60:12:e1:55:0b:38:b9:f6: c5:6a:c6:23:62:7e:1d:c1:1a:ea:ef:db:c8:90:48:7f:90:9d: 31:ae:fc:4b:68:03:b7:ba:f3:d0:34:2c:4e:1a:50:ca:86:11: a5:e6:a8:dd:b4:d9:52:ae:1b:c7:43:fb:2c:7c:db:d4:35:74: d2:69:f5:70:66:b2:39:f5:b4:a8:b0:35:da:3e:47:72:46:a5: 3a:8c:b3:5b:8b:86:3b:c1:e2:b2:00:45:22:8c:0d:36:f6:b1: 61:54:d6:d2:1a:17:39:cb:7c:a0:5c:fa:09:7d:1c:a3:bd:34: 0e:a4:1e:a1:03:1a:08:40:20:bc:ff:55:21:d3:7b:41:36:f4: df:44:8b:4b:c6:19:1e:69:99:2e:19:46:eb:34:79:a7:97:88: ea:c6:e6:4f:28:de:af:50:b6:a0:69:c7:e7:b4:03:e6:93:46: af:1f:d7:d3:8e:24:9a:a2:5e:ac:93:1a:5b:04:c5:04:ff:c9: 54:66:d5:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULGI6hRMVcCJ7mDS4b4hf7xGFG48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA2MTUwNTE5NDhaFw0yNzA2MTQwNTI0NDhaMDMxMTAvBgNV BAMTKDMxMjY4Q0Q4MjlEQjMzODEyRDg5MjM0QzcwNDAzNzQyRUYyREQ4NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa7Q097UhEM4j13qyKrDSALeL8 9Y0C1c6aTPt5ctz7FgE2PQW+aXGDLRc7Vr+3+fsipsD6LaW9a88qrNQBVY7djuhq W15+CKwOZFa1I0tYfPlqqxFlqJponkyEzLBcnOrMtnJHB9VGt7PR1jslGgzHU7un xIJVnn0Kbk/XzvJSWXjAAZGAH99f43ThOJvdNqJ5f8UFckR2U6fRqeH4tVx6eu5+ 7wGT2Ypan0iAtgImcrGJnW8E7LCqUMN/KqePQVdQfeUNr2um/pIHWONunSX5udz4 4JGiFz0aUutkjb6ykv1Ja+wuwiK03gJaKtNA4Cd0Q4OwH4Lr/Cb7wR2mjEtRAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUMSaM2CnbM4EtiSNMcEA3Qu8t2GQwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl MzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzUzNTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 3wAAMA0GCSqGSIb3DQEBCwUAA4IBAQBr7AErrApX7pMtQoYHxnbb2EzBmo2sMHMJ uzZrsTg7kUxt4B+MA/RfcRzevADQkRRjgunImwmboWEqB89FFCjrYBLhVQs4ufbF asYjYn4dwRrq79vIkEh/kJ0xrvxLaAO3uvPQNCxOGlDKhhGl5qjdtNlSrhvHQ/ss fNvUNXTSafVwZrI59bSosDXaPkdyRqU6jLNbi4Y7weKyAEUijA029rFhVNbSGhc5 y3ygXPoJfRyjvTQOpB6hAxoIQCC8/1Uh03tBNvTfRItLxhkeaZkuGUbrNHmnl4jq xuZPKN6vULagacfntAPmk0avH9fTjiSaol6skxpbBMUE/8lUZtVG -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:26 2026 by rpki-client