$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31322e302f32342d3234203d3e203633353535.roa File: 3232332e302e31322e302f32342d3234203d3e203633353535.roa (raw, json) Hash identifier: Ht505vt6sU0B3Pu0i/gkl2yzluEheZdZuhNmuDvND88= Subject key identifier: 7C:9E:1D:00:F8:DF:79:B9:2F:9F:72:A1:CD:42:FA:D3:12:42:92:55 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 5B2283B634292F693D9E98D613CBE4BB0779FE57 Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31322e302f32342d3234203d3e203633353535.roa Signing time: Mon 15 Jun 2026 05:14:43 +0000 ROA not before: Mon 15 Jun 2026 05:09:43 +0000 ROA not after: Mon 14 Jun 2027 05:14:43 +0000 asID: 63555 IP address blocks: 223.0.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:22:83:b6:34:29:2f:69:3d:9e:98:d6:13:cb:e4:bb:07:79:fe:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jun 15 05:09:43 2026 GMT Not After : Jun 14 05:14:43 2027 GMT Subject: CN=7C9E1D00F8DF79B92F9F72A1CD42FAD312429255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:fd:a9:11:d1:b7:17:ba:30:ba:f5:89:13:76: d7:6a:53:20:17:8b:18:1c:bc:92:ac:17:b7:e6:0f: d8:ae:7e:3f:dc:e5:82:0f:f6:24:09:01:df:54:8c: 39:ca:56:5a:1b:3d:b7:e2:82:72:bd:6c:99:0c:c2: dd:26:fc:22:d8:19:55:88:7f:1b:9b:d7:0e:b1:00: d3:4c:25:e7:eb:af:66:34:6f:aa:74:62:b7:71:ef: 5c:a4:28:f2:94:ac:ff:8d:b6:3b:42:13:ed:0b:da: 47:83:e5:47:dd:c3:b4:17:c0:2b:6f:62:0e:5b:71: 6a:c1:9a:39:f5:51:f3:23:ef:a6:13:04:26:bc:7a: 12:2a:42:70:f1:16:2d:b6:44:39:da:e1:e5:49:b7: e7:d1:34:87:11:64:b6:d2:c2:05:f0:d8:30:c4:e1: 3b:89:91:47:39:83:ad:05:e8:65:74:8e:eb:f9:cc: 96:fa:dd:79:b6:fe:e5:ea:56:8f:55:04:ac:ca:ac: 7e:6f:d2:01:de:05:7b:7f:de:aa:60:53:3c:7e:96: 0f:ca:7e:27:ef:4f:37:f6:84:de:dd:e6:40:52:e0: 8f:d6:c9:c3:8b:e8:35:2b:96:d3:3e:8e:e2:c7:f6: 67:c7:a5:c8:fb:62:80:3f:9d:ee:1a:26:1e:b6:59: 27:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9E:1D:00:F8:DF:79:B9:2F:9F:72:A1:CD:42:FA:D3:12:42:92:55 X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31322e302f32342d3234203d3e203633353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.12.0/24 Signature Algorithm: sha256WithRSAEncryption 99:75:8d:da:17:52:5c:9f:a3:fa:1a:a9:17:a8:39:84:ca:b3: 21:bf:24:e3:b9:88:5e:4b:b5:c0:bb:13:56:08:56:77:ab:17: 0f:31:78:18:bd:9b:8d:44:a5:b9:a1:6f:c3:13:45:02:48:90: 63:a1:1a:97:d7:fc:75:85:15:75:a0:03:d3:71:b2:4a:5e:e0: 88:7e:8f:0d:65:cc:56:16:4f:ad:c2:fb:a5:90:ea:9a:12:35: bb:67:ec:25:33:20:34:c9:2e:cc:9c:0f:92:ea:7e:c7:ee:cb: 87:16:dd:be:1d:f2:c5:2a:2b:7e:6e:00:9e:dc:e3:d2:50:92: d2:49:44:48:5a:12:2c:c3:58:1e:9f:93:b9:97:af:cb:58:19: 26:c4:2b:4a:0f:9a:b4:9b:c3:3d:3e:0a:4a:39:a5:ed:ce:35: 44:8e:59:19:ab:d3:e6:2c:ab:b7:a8:04:3d:6c:50:7b:36:64: b4:88:30:1c:72:01:ce:7f:8b:90:d5:58:42:3d:f5:4a:d2:29: 52:d3:11:1a:ba:71:81:25:e4:37:47:77:f9:cc:d4:7c:2c:58: 2a:3a:3b:8a:20:67:b1:32:b2:5b:98:cd:59:60:b0:4f:8e:3f: e0:43:7f:e2:f4:36:ab:a7:5e:57:c5:96:23:9e:3f:3a:bf:83: 50:32:8c:91 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWyKDtjQpL2k9npjWE8vkuwd5/lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA2MTUwNTA5NDNaFw0yNzA2MTQwNTE0NDNaMDMxMTAvBgNV BAMTKDdDOUUxRDAwRjhERjc5QjkyRjlGNzJBMUNENDJGQUQzMTI0MjkyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCM/akR0bcXujC69YkTdtdqUyAX ixgcvJKsF7fmD9iufj/c5YIP9iQJAd9UjDnKVlobPbfignK9bJkMwt0m/CLYGVWI fxub1w6xANNMJefrr2Y0b6p0Yrdx71ykKPKUrP+NtjtCE+0L2keD5Ufdw7QXwCtv Yg5bcWrBmjn1UfMj76YTBCa8ehIqQnDxFi22RDna4eVJt+fRNIcRZLbSwgXw2DDE 4TuJkUc5g60F6GV0juv5zJb63Xm2/uXqVo9VBKzKrH5v0gHeBXt/3qpgUzx+lg/K fifvTzf2hN7d5kBS4I/WycOL6DUrltM+juLH9mfHpcj7YoA/ne4aJh62WSfPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUfJ4dAPjfebkvn3KhzUL60xJCklUwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl MzEzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzNTM1MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADfAAwwDQYJKoZIhvcNAQELBQADggEBAJl1jdoXUlyfo/oaqReoOYTKsyG/JOO5 iF5LtcC7E1YIVnerFw8xeBi9m41Epbmhb8MTRQJIkGOhGpfX/HWFFXWgA9Nxskpe 4Ih+jw1lzFYWT63C+6WQ6poSNbtn7CUzIDTJLsycD5Lqfsfuy4cW3b4d8sUqK35u AJ7c49JQktJJREhaEizDWB6fk7mXr8tYGSbEK0oPmrSbwz0+Cko5pe3ONUSOWRmr 0+Ysq7eoBD1sUHs2ZLSIMBxyAc5/i5DVWEI99UrSKVLTERq6cYEl5DdHd/nM1Hws WCo6O4ogZ7EysluYzVlgsE+OP+BDf+L0NqunXlfFliOePzq/g1AyjJE= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:14 2026 by rpki-client