$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31302e302f32342d3234203d3e203633353535.roa File: 3232332e302e31302e302f32342d3234203d3e203633353535.roa (raw, json) Hash identifier: 0eXINzUSsDNEYCGud2lJwO/fDg04zZUmBQnWqjmqvZ0= Subject key identifier: 18:5D:60:6D:6A:FB:D6:A1:14:64:F4:21:CE:B6:05:46:B8:16:5C:AF Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 336AF35C44FAE3BBFAFD7D44104D75BC205E9387 Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31302e302f32342d3234203d3e203633353535.roa Signing time: Mon 15 Jun 2026 05:14:43 +0000 ROA not before: Mon 15 Jun 2026 05:09:43 +0000 ROA not after: Mon 14 Jun 2027 05:14:43 +0000 asID: 63555 IP address blocks: 223.0.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:6a:f3:5c:44:fa:e3:bb:fa:fd:7d:44:10:4d:75:bc:20:5e:93:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jun 15 05:09:43 2026 GMT Not After : Jun 14 05:14:43 2027 GMT Subject: CN=185D606D6AFBD6A11464F421CEB60546B8165CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b5:27:77:2c:44:96:e9:c1:fc:ab:71:31:27: c2:0f:20:6b:64:97:d9:ce:00:24:66:bb:4e:85:98: e5:ac:c5:b4:23:43:c5:21:f8:aa:4a:c9:f7:24:b8: 9f:0f:d4:6a:bf:b7:ad:61:f3:d0:20:22:11:fb:09: e7:9e:59:e9:c3:87:f4:8d:d2:98:90:18:d8:70:46: 31:ad:e5:43:8a:15:69:d4:e3:75:7f:87:34:36:dd: 6d:41:2b:7a:5d:06:86:b0:d8:29:99:30:ff:f9:0b: 1e:92:59:c9:f3:84:7d:ae:f1:e4:53:0b:1f:55:5d: 5c:6d:fe:8b:f1:12:03:e1:55:58:a4:69:16:cf:07: c4:28:eb:da:96:ea:8c:51:34:bf:a0:c1:8b:cd:df: 4c:10:45:69:eb:34:d7:61:cf:09:65:ea:15:a1:0e: e7:27:fe:72:a4:4a:44:d6:d1:c8:0c:a3:3b:b0:85: 1e:38:c6:83:08:f1:d9:a5:3a:91:c4:39:5f:09:6a: b1:5a:6f:0e:6a:96:7d:f8:29:87:e8:12:43:5f:62: 69:c6:48:70:99:81:c6:91:52:35:d0:fe:ec:d9:5e: f1:27:68:01:a6:62:da:63:bb:be:5c:e6:d1:ec:a4: 95:be:2d:ee:b6:6f:7e:e6:19:be:81:18:fc:cf:5b: b7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:5D:60:6D:6A:FB:D6:A1:14:64:F4:21:CE:B6:05:46:B8:16:5C:AF X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31302e302f32342d3234203d3e203633353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.10.0/24 Signature Algorithm: sha256WithRSAEncryption 24:73:ce:8f:10:c8:f5:e8:b4:57:b6:47:4d:4c:f4:09:2f:0a: 7b:68:ef:d1:b7:e6:07:7a:c6:84:6c:56:66:b6:3b:80:e4:d9: ad:43:9c:7d:19:25:48:88:24:8c:d4:68:ca:60:d1:65:0a:11: 81:97:4b:01:64:73:42:4d:4a:01:08:3c:f9:db:bd:e4:a8:11: 1f:ca:50:83:44:66:df:a3:4d:29:20:5d:8e:9b:5a:ea:2e:15: 32:78:b9:a1:7f:12:8f:a3:cf:31:bd:78:86:53:5e:6e:97:e9: 8e:72:d9:e8:f6:17:65:bc:25:46:ff:dd:44:9b:d7:71:a6:51: aa:43:6e:20:a1:81:21:2f:38:d8:3d:a3:85:4f:95:00:dd:c5: 26:0b:36:cd:25:a1:56:ea:c1:00:b0:e5:e4:c1:ad:03:15:c3: 00:f3:8d:3c:c9:8a:01:2e:fa:ed:6d:e0:77:d1:98:69:7c:ca: 78:5b:80:22:54:22:1d:66:f3:33:c9:f1:84:5e:cd:2b:82:5c: 77:97:ce:47:0a:6a:15:dc:5f:56:40:9c:b5:af:db:14:bb:2c: 16:d0:fd:6e:af:93:2a:b9:e6:46:c4:7d:77:68:ee:78:b9:a8: b8:0c:71:65:ca:f9:fe:8b:bb:5f:1a:76:47:e7:d7:b7:82:06: d3:35:a2:ce -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUM2rzXET647v6/X1EEE11vCBek4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA2MTUwNTA5NDNaFw0yNzA2MTQwNTE0NDNaMDMxMTAvBgNV BAMTKDE4NUQ2MDZENkFGQkQ2QTExNDY0RjQyMUNFQjYwNTQ2QjgxNjVDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctSd3LESW6cH8q3ExJ8IPIGtk l9nOACRmu06FmOWsxbQjQ8Uh+KpKyfckuJ8P1Gq/t61h89AgIhH7CeeeWenDh/SN 0piQGNhwRjGt5UOKFWnU43V/hzQ23W1BK3pdBoaw2CmZMP/5Cx6SWcnzhH2u8eRT Cx9VXVxt/ovxEgPhVVikaRbPB8Qo69qW6oxRNL+gwYvN30wQRWnrNNdhzwll6hWh Ducn/nKkSkTW0cgMozuwhR44xoMI8dmlOpHEOV8JarFabw5qln34KYfoEkNfYmnG SHCZgcaRUjXQ/uzZXvEnaAGmYtpju75c5tHspJW+Le62b37mGb6BGPzPW7c5AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUGF1gbWr71qEUZPQhzrYFRrgWXK8wHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl MzEzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzNTM1MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADfAAowDQYJKoZIhvcNAQELBQADggEBACRzzo8QyPXotFe2R01M9AkvCnto79G3 5gd6xoRsVma2O4Dk2a1DnH0ZJUiIJIzUaMpg0WUKEYGXSwFkc0JNSgEIPPnbveSo ER/KUINEZt+jTSkgXY6bWuouFTJ4uaF/Eo+jzzG9eIZTXm6X6Y5y2ej2F2W8JUb/ 3USb13GmUapDbiChgSEvONg9o4VPlQDdxSYLNs0loVbqwQCw5eTBrQMVwwDzjTzJ igEu+u1t4HfRmGl8ynhbgCJUIh1m8zPJ8YRezSuCXHeXzkcKahXcX1ZAnLWv2xS7 LBbQ/W6vkyq55kbEfXdo7ni5qLgMcWXK+f6Lu18adkfn17eCBtM1os4= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:18 2026 by rpki-client