$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e34302e302f32342d3234203d3e203633353535.roa File: 3232332e302e34302e302f32342d3234203d3e203633353535.roa (raw, json) Hash identifier: g/EfA2rPqHSFmRXQdxp6nC43y7u20n6Iinx5IxUkC+c= Subject key identifier: 1C:C8:1B:99:6D:18:15:E7:86:2A:45:90:81:7C:8C:39:49:7F:CE:02 Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 228E6C30107A29AFEA090FEA4D5A3F0A0CBB9FCC Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e34302e302f32342d3234203d3e203633353535.roa Signing time: Mon 15 Jun 2026 05:14:43 +0000 ROA not before: Mon 15 Jun 2026 05:09:43 +0000 ROA not after: Mon 14 Jun 2027 05:14:43 +0000 asID: 63555 IP address blocks: 223.0.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8e:6c:30:10:7a:29:af:ea:09:0f:ea:4d:5a:3f:0a:0c:bb:9f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jun 15 05:09:43 2026 GMT Not After : Jun 14 05:14:43 2027 GMT Subject: CN=1CC81B996D1815E7862A4590817C8C39497FCE02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0c:3a:b7:03:80:4c:5d:c5:57:cc:d4:d3:97: ec:c8:b9:ed:b5:34:76:79:9f:4c:21:d7:8d:48:d8: 0e:07:09:b8:42:dc:c2:08:57:ea:5d:69:b5:1e:41: 86:68:e8:b5:b1:d9:5f:e2:5f:a4:c4:f3:36:06:6e: 1d:5f:ae:a2:79:60:44:57:f8:8e:51:3d:d0:07:54: 93:87:7b:64:c3:80:3c:ce:8f:d0:4c:7b:c6:a0:bf: 3c:99:a7:bb:a6:c0:b4:a2:9f:08:74:21:2c:4d:95: 39:c0:ce:c5:62:ba:93:51:e3:78:c7:03:6f:40:42: 01:68:23:69:61:1b:42:3c:9b:ff:18:e8:91:b7:be: c5:69:fa:3e:db:ff:78:c9:65:8b:29:c0:89:86:19: c0:47:b6:63:f5:52:fa:b0:83:29:7a:fb:a7:43:05: 14:88:e1:fe:fd:0b:8a:25:d9:14:73:e6:6a:2d:84: d4:0b:ce:51:76:f0:90:96:85:48:75:cb:25:ee:4b: 30:ab:83:30:a3:7b:e1:fc:ac:1e:e7:17:fe:db:31: 60:63:07:54:7e:48:bd:a3:c3:10:9e:69:92:98:e7: 29:08:17:b3:3a:4c:ee:57:77:d7:0c:7e:d4:f7:4e: 45:f9:b1:a7:48:fc:17:d1:0a:0f:24:0a:8c:94:61: d2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C8:1B:99:6D:18:15:E7:86:2A:45:90:81:7C:8C:39:49:7F:CE:02 X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e34302e302f32342d3234203d3e203633353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.40.0/24 Signature Algorithm: sha256WithRSAEncryption 54:bb:67:52:32:97:8a:38:5e:7a:b7:91:69:61:cc:52:98:cc: 51:f7:48:25:cd:bd:cb:12:33:21:18:b0:9a:4d:c7:f1:cf:04: 17:26:06:17:a2:2c:8f:69:84:bd:be:b6:83:5a:f1:61:4a:f5: 44:77:24:28:01:3c:61:3a:36:04:ee:b9:cb:6b:1f:42:0b:35: 14:b6:de:ea:3f:ba:19:0e:ce:74:3b:61:35:7a:be:63:2c:4b: bd:dd:61:22:01:65:fb:d9:e1:45:db:7f:12:0a:51:bc:fb:90: 60:28:a3:5d:bc:68:14:0c:e1:2e:4b:06:de:c8:95:16:5e:b0: 9a:5e:9f:09:53:f4:96:1c:d4:7f:89:1f:2f:ac:cd:08:43:4c: af:f0:75:6b:26:a5:7a:55:b5:58:62:d1:bd:bd:49:99:49:08: 2e:89:6c:b2:86:e2:18:8f:82:ca:45:3b:81:cd:92:8b:c9:fe: f5:9d:8c:13:88:9c:e2:3f:72:cf:d6:f6:7f:7b:5d:2c:3a:3e: 82:fa:01:f4:14:3f:aa:75:ba:a9:e1:66:5e:ad:d5:6e:ad:a2: da:bc:aa:2c:a5:90:dd:e5:cb:e6:a8:c9:e0:65:9e:02:d1:39: 4b:ad:e6:79:38:2f:ba:10:ee:26:a6:8b:09:fe:3e:19:73:23: dc:fc:ac:e4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUIo5sMBB6Ka/qCQ/qTVo/Cgy7n8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA2MTUwNTA5NDNaFw0yNzA2MTQwNTE0NDNaMDMxMTAvBgNV BAMTKDFDQzgxQjk5NkQxODE1RTc4NjJBNDU5MDgxN0M4QzM5NDk3RkNFMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDDq3A4BMXcVXzNTTl+zIue21 NHZ5n0wh141I2A4HCbhC3MIIV+pdabUeQYZo6LWx2V/iX6TE8zYGbh1frqJ5YERX +I5RPdAHVJOHe2TDgDzOj9BMe8agvzyZp7umwLSinwh0ISxNlTnAzsViupNR43jH A29AQgFoI2lhG0I8m/8Y6JG3vsVp+j7b/3jJZYspwImGGcBHtmP1Uvqwgyl6+6dD BRSI4f79C4ol2RRz5mothNQLzlF28JCWhUh1yyXuSzCrgzCje+H8rB7nF/7bMWBj B1R+SL2jwxCeaZKY5ykIF7M6TO5Xd9cMftT3TkX5sadI/BfRCg8kCoyUYdJ3AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUHMgbmW0YFeeGKkWQgXyMOUl/zgIwHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl MzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2MzMzNTM1MzUucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BADfACgwDQYJKoZIhvcNAQELBQADggEBAFS7Z1Iyl4o4Xnq3kWlhzFKYzFH3SCXN vcsSMyEYsJpNx/HPBBcmBheiLI9phL2+toNa8WFK9UR3JCgBPGE6NgTuuctrH0IL NRS23uo/uhkOznQ7YTV6vmMsS73dYSIBZfvZ4UXbfxIKUbz7kGAoo128aBQM4S5L Bt7IlRZesJpenwlT9JYc1H+JHy+szQhDTK/wdWsmpXpVtVhi0b29SZlJCC6JbLKG 4hiPgspFO4HNkovJ/vWdjBOInOI/cs/W9n97XSw6PoL6AfQUP6p1uqnhZl6t1W6t otq8qiylkN3ly+aoyeBlngLROUut5nk4L7oQ7iamiwn+PhlzI9z8rOQ= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:19 2026 by rpki-client