$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e312e302f32342d3234203d3e203633353535.roa File: 3232332e302e312e302f32342d3234203d3e203633353535.roa (raw, json) Hash identifier: 74W8VhGHbjk2MiUfb1fecThK+NeHOOHHnLY1CgNfXj8= Subject key identifier: 15:6B:9F:C6:B4:E8:DA:08:4B:0B:45:AE:A2:BC:85:94:1C:49:43:05 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 085BCC25FB4AAA7664BD4DC64F92AC6CD99E7A40 Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e312e302f32342d3234203d3e203633353535.roa Signing time: Mon 15 Jun 2026 05:14:44 +0000 ROA not before: Mon 15 Jun 2026 05:09:44 +0000 ROA not after: Mon 14 Jun 2027 05:14:44 +0000 asID: 63555 IP address blocks: 223.0.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5b:cc:25:fb:4a:aa:76:64:bd:4d:c6:4f:92:ac:6c:d9:9e:7a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jun 15 05:09:44 2026 GMT Not After : Jun 14 05:14:44 2027 GMT Subject: CN=156B9FC6B4E8DA084B0B45AEA2BC85941C494305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bc:fe:01:20:e8:08:46:f6:36:cb:7f:ba:b6: 84:0a:34:e3:0d:03:73:07:4a:a6:4f:c7:d2:f4:d4: 1e:d4:ab:13:1e:14:44:8f:76:41:94:14:c0:50:7f: dd:86:23:d8:3e:13:10:22:2d:ca:9e:33:f3:0b:91: b7:ac:54:92:ae:5d:e4:4b:c8:9d:9c:38:57:3b:69: df:5c:5b:7d:15:9d:7b:6f:6d:67:f8:99:ec:e3:2d: b3:a8:f1:a3:27:b8:6a:fb:21:a5:7c:22:df:b1:19: 0a:ad:c8:cd:a8:dc:08:e3:b0:11:54:82:68:60:7e: 35:06:c0:5e:bc:ce:73:76:16:91:b1:ac:6a:fd:37: 3a:f9:bd:f3:cf:ec:58:0c:ef:80:d3:8b:28:14:e3: 40:ab:29:48:7e:bd:34:e2:bf:d3:f3:fb:73:ea:55: 14:25:5c:7e:c1:db:f6:d7:70:d6:5c:5e:d6:d5:0f: aa:25:85:e3:a4:b2:20:b2:0b:2b:db:91:ed:e4:83: 42:bb:b2:59:2d:01:f8:78:a2:a1:1f:b1:83:74:8e: ef:28:1a:80:16:00:88:cd:3b:56:c1:e9:46:7e:08: 61:5b:42:a0:5c:30:72:ac:1e:de:48:93:11:04:34: 5a:8b:02:f5:a1:6e:a8:2c:1b:b1:b5:73:7b:27:e6: 52:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:6B:9F:C6:B4:E8:DA:08:4B:0B:45:AE:A2:BC:85:94:1C:49:43:05 X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e312e302f32342d3234203d3e203633353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.1.0/24 Signature Algorithm: sha256WithRSAEncryption 10:d9:05:47:a7:76:5b:27:34:5b:fe:47:65:17:66:d8:bd:b7: 1d:35:23:09:4c:91:d9:50:8a:94:47:2e:d9:b2:e7:11:a6:43: 8d:9a:f4:74:5b:3f:95:7c:75:74:1e:b0:dc:52:79:93:eb:d6: f7:cd:c8:d3:d9:ad:74:9a:01:e9:2b:ba:d8:49:dc:02:f3:c7: 53:08:92:07:2c:25:36:69:82:d9:48:96:0e:62:08:40:36:12: 18:f3:4f:3a:8a:fa:5e:5d:82:9d:9a:79:97:e0:01:96:5b:bb: ab:94:49:4e:bf:45:89:d3:2a:3c:f9:78:02:55:65:da:81:0b: 3b:b8:67:34:ac:44:c9:ed:de:d0:7a:ac:5f:9c:79:1e:1a:82: 0d:e8:b9:85:ee:0d:2a:46:00:74:f1:5b:2d:27:5e:bf:9e:90: 9f:e7:e0:7e:b4:dd:34:16:8d:fa:cd:17:34:23:dc:78:a3:fd: e4:83:ff:a0:fa:5a:7d:6a:1c:cb:d4:1e:d9:f3:f3:61:2d:8f: fb:fc:09:82:5e:65:2f:1f:02:36:f5:60:bd:94:2e:a0:8a:04: c9:44:00:4b:2d:f3:d1:c7:85:4c:51:e9:54:3d:81:cc:cb:7d: c2:98:4b:97:e5:30:c9:40:85:09:31:94:38:fd:f6:cb:22:e2: ba:04:4d:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUCFvMJftKqnZkvU3GT5KsbNmeekAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA2MTUwNTA5NDRaFw0yNzA2MTQwNTE0NDRaMDMxMTAvBgNV BAMTKDE1NkI5RkM2QjRFOERBMDg0QjBCNDVBRUEyQkM4NTk0MUM0OTQzMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4vP4BIOgIRvY2y3+6toQKNOMN A3MHSqZPx9L01B7UqxMeFESPdkGUFMBQf92GI9g+ExAiLcqeM/MLkbesVJKuXeRL yJ2cOFc7ad9cW30VnXtvbWf4mezjLbOo8aMnuGr7IaV8It+xGQqtyM2o3AjjsBFU gmhgfjUGwF68znN2FpGxrGr9Nzr5vfPP7FgM74DTiygU40CrKUh+vTTiv9Pz+3Pq VRQlXH7B2/bXcNZcXtbVD6olheOksiCyCyvbke3kg0K7slktAfh4oqEfsYN0ju8o GoAWAIjNO1bB6UZ+CGFbQqBcMHKsHt5IkxEENFqLAvWhbqgsG7G1c3sn5lLpAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUFWufxrTo2ghLC0WuoryFlBxJQwUwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMzMzUzNTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA 3wABMA0GCSqGSIb3DQEBCwUAA4IBAQAQ2QVHp3ZbJzRb/kdlF2bYvbcdNSMJTJHZ UIqURy7ZsucRpkONmvR0Wz+VfHV0HrDcUnmT69b3zcjT2a10mgHpK7rYSdwC88dT CJIHLCU2aYLZSJYOYghANhIY8086ivpeXYKdmnmX4AGWW7urlElOv0WJ0yo8+XgC VWXagQs7uGc0rETJ7d7QeqxfnHkeGoIN6LmF7g0qRgB08VstJ16/npCf5+B+tN00 Fo36zRc0I9x4o/3kg/+g+lp9ahzL1B7Z8/NhLY/7/AmCXmUvHwI29WC9lC6gigTJ RABLLfPRx4VMUelUPYHMy33CmEuX5TDJQIUJMZQ4/fbLIuK6BE3t -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:25 2026 by rpki-client