$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31352e302f32342d3234203d3e203633353535.roa File: 3232332e302e31352e302f32342d3234203d3e203633353535.roa (raw, json) Hash identifier: ARR5m8OrMVtQOpTDutHa6f9AW7C9GcASNb2RRVB3fSo= Subject key identifier: 69:D4:A3:E2:85:B5:5F:B7:85:8E:5F:14:7F:9E:92:66:EB:FC:97:A6 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 58DAE91BAF5EBFA43CB858E43C2F3566936E4B85 Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31352e302f32342d3234203d3e203633353535.roa Signing time: Mon 15 Jun 2026 05:14:44 +0000 ROA not before: Mon 15 Jun 2026 05:09:44 +0000 ROA not after: Mon 14 Jun 2027 05:14:44 +0000 asID: 63555 IP address blocks: 223.0.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:da:e9:1b:af:5e:bf:a4:3c:b8:58:e4:3c:2f:35:66:93:6e:4b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jun 15 05:09:44 2026 GMT Not After : Jun 14 05:14:44 2027 GMT Subject: CN=69D4A3E285B55FB7858E5F147F9E9266EBFC97A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ed:ae:c7:13:ac:c3:92:3d:3a:50:2d:32:76: 2f:6d:bf:92:77:be:a6:0c:e8:69:3a:b3:a9:8d:fe: 89:67:27:b3:e0:59:af:97:68:c5:66:cd:6a:97:2d: 31:5e:1e:16:d3:ed:9f:62:9d:b6:4b:14:02:95:ae: e2:6c:18:c1:2b:54:70:e3:56:27:15:b7:34:32:77: 70:f3:c0:9e:80:c2:b9:d7:c6:9f:bb:2b:6b:04:23: 81:71:e0:00:ba:28:d3:24:48:db:ea:5b:f8:bd:67: 5a:c9:e2:85:cf:f0:29:23:a4:1f:4d:f8:d3:ab:75: 9d:31:2e:71:87:8f:0b:a4:4b:0e:b7:f8:b0:ac:4d: 19:f1:27:0e:79:d3:ac:80:c3:62:02:91:ed:ba:36: b6:fc:4e:98:ec:7d:57:1e:d5:2e:3b:92:70:60:c0: 40:94:f8:bb:46:2b:8e:d5:d6:54:ab:1a:5f:32:66: 6c:2b:cc:2d:33:05:8e:44:50:b9:43:e1:96:0b:94: 02:64:cd:fc:ee:7e:95:75:97:e9:53:62:3d:b8:6e: 8b:7e:56:8f:eb:1b:1f:9f:f0:66:d8:81:3c:b3:f3: 62:86:b1:a4:62:ea:b8:55:8a:36:c9:7c:a1:9a:7d: f8:6c:f3:8f:f9:e9:e1:91:dc:7a:31:65:57:ec:23: ff:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D4:A3:E2:85:B5:5F:B7:85:8E:5F:14:7F:9E:92:66:EB:FC:97:A6 X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e31352e302f32342d3234203d3e203633353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.15.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:64:ed:3d:76:1e:0a:df:39:fc:1e:58:6e:0c:f2:e0:32:1f: 48:c9:ee:3f:6d:ec:c8:5d:71:d5:9e:89:c1:75:88:02:87:02: 08:23:4b:cb:8e:69:ef:19:6b:6a:c3:44:27:d7:24:5f:62:5f: 25:e2:5b:df:21:eb:25:89:78:d6:18:08:39:dd:48:91:a8:fd: d9:c8:65:bd:1b:36:08:35:58:b7:b0:7c:94:07:b1:0d:68:a6: 96:b0:48:84:fc:32:98:18:32:7e:9c:29:81:a0:4f:44:21:c2: 11:c3:74:bf:36:db:5b:2f:82:a2:05:70:f2:73:14:61:40:ef: 02:7e:4f:fc:d3:52:c3:ad:2c:e4:0b:df:a9:5f:2e:63:4f:05: 80:68:02:fa:2a:44:e8:04:72:f6:54:ec:0b:9d:1d:c3:1b:55: 05:64:4d:ed:29:74:ee:a0:7c:c0:1a:86:8e:92:dd:4e:ca:fb: 21:81:2d:9f:a1:38:a6:6f:b1:07:de:54:fe:fe:76:cf:f9:53: 9e:14:83:d5:e8:e1:9b:5e:af:d6:8e:94:e9:23:2d:ef:6f:55: fd:fd:09:9d:af:30:d9:51:0b:11:c6:28:38:ed:aa:64:52:6d: 52:d3:15:0e:06:59:24:c1:eb:b1:33:9c:fd:19:46:48:40:cc: c0:22:7d:e0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWNrpG69ev6Q8uFjkPC81ZpNuS4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA2MTUwNTA5NDRaFw0yNzA2MTQwNTE0NDRaMDMxMTAvBgNV BAMTKDY5RDRBM0UyODVCNTVGQjc4NThFNUYxNDdGOUU5MjY2RUJGQzk3QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57a7HE6zDkj06UC0ydi9tv5J3 vqYM6Gk6s6mN/olnJ7PgWa+XaMVmzWqXLTFeHhbT7Z9inbZLFAKVruJsGMErVHDj VicVtzQyd3DzwJ6AwrnXxp+7K2sEI4Fx4AC6KNMkSNvqW/i9Z1rJ4oXP8CkjpB9N +NOrdZ0xLnGHjwukSw63+LCsTRnxJw5506yAw2ICke26Nrb8TpjsfVce1S47knBg wECU+LtGK47V1lSrGl8yZmwrzC0zBY5EULlD4ZYLlAJkzfzufpV1l+lTYj24bot+ Vo/rGx+f8GbYgTyz82KGsaRi6rhVijbJfKGaffhs84/56eGR3HoxZVfsI//tAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUadSj4oW1X7eFjl8Uf56SZuv8l6YwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl MzEzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzNTM1MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADfAA8wDQYJKoZIhvcNAQELBQADggEBACxk7T12HgrfOfweWG4M8uAyH0jJ7j9t 7MhdcdWeicF1iAKHAggjS8uOae8Za2rDRCfXJF9iXyXiW98h6yWJeNYYCDndSJGo /dnIZb0bNgg1WLewfJQHsQ1oppawSIT8MpgYMn6cKYGgT0QhwhHDdL8221svgqIF cPJzFGFA7wJ+T/zTUsOtLOQL36lfLmNPBYBoAvoqROgEcvZU7AudHcMbVQVkTe0p dO6gfMAaho6S3U7K+yGBLZ+hOKZvsQfeVP7+ds/5U54Ug9Xo4Zter9aOlOkjLe9v Vf39CZ2vMNlRCxHGKDjtqmRSbVLTFQ4GWSTB67EznP0ZRkhAzMAifeA= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:16 2026 by rpki-client