$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e382e302f32332d3233203d3e203633353535.roa File: 3232332e302e382e302f32332d3233203d3e203633353535.roa (raw, json) Hash identifier: p2i7deFz+0stL78YFguHKbviAg0+bv/0+ERzBeRSzYw= Subject key identifier: C5:39:3E:98:13:83:96:17:CB:B7:36:38:85:C2:48:1D:A8:05:C3:CB Certificate issuer: /CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Certificate serial: 2FA15A68EEF44BF99665F98EF9F74AEA1639AF6A Authority key identifier: 42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e382e302f32332d3233203d3e203633353535.roa Signing time: Mon 15 Jun 2026 05:14:43 +0000 ROA not before: Mon 15 Jun 2026 05:09:43 +0000 ROA not after: Mon 14 Jun 2027 05:14:43 +0000 asID: 63555 IP address blocks: 223.0.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 18:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a1:5a:68:ee:f4:4b:f9:96:65:f9:8e:f9:f7:4a:ea:16:39:af:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=429CF9671E0E2EFE8713E9A9C3EEB6443DC91251 Validity Not Before: Jun 15 05:09:43 2026 GMT Not After : Jun 14 05:14:43 2027 GMT Subject: CN=C5393E9813839617CBB7363885C2481DA805C3CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:2c:76:fb:9f:b6:c7:43:73:ff:a1:38:c5:9c: d7:7b:19:fb:bf:f7:9a:3a:dc:aa:e3:75:98:56:95: f5:71:d7:a5:da:86:4d:40:bd:5d:fe:71:0e:ff:78: 0c:9e:3b:52:e9:7d:ef:41:3e:74:e1:f4:85:e6:b0: 23:30:9c:28:26:05:d4:e5:98:12:54:39:2b:11:15: af:91:90:17:c5:fc:d5:48:84:bd:05:ce:d4:9c:87: 02:f8:62:d1:5f:8a:c0:35:c1:57:53:87:af:23:03: 6b:5d:51:bb:02:7b:6e:60:1d:22:ea:d8:7e:92:d1: 84:40:ac:9e:92:d0:5a:3c:45:82:cf:29:71:4d:65: 93:56:a4:4c:2a:b3:ab:ec:a6:5f:be:01:6b:4e:d6: 66:0a:f9:0b:5f:35:78:49:d5:c4:56:9d:df:4a:08: d7:1f:ae:35:42:3b:37:d9:f7:fb:03:0d:6f:23:8c: d8:1f:92:58:84:02:54:89:d2:cd:d2:e7:2d:71:4c: 56:27:e8:31:3b:5d:5f:19:03:32:53:6e:dd:3d:2a: 26:58:07:c0:3f:e2:06:89:27:50:ee:fe:d6:78:41: 01:e9:06:22:fb:92:ff:17:25:f2:6b:2c:b9:42:b6: 8e:e2:eb:ad:31:27:44:e4:3f:15:ff:87:bd:1b:e1: 3a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:39:3E:98:13:83:96:17:CB:B7:36:38:85:C2:48:1D:A8:05:C3:CB X509v3 Authority Key Identifier: keyid:42:9C:F9:67:1E:0E:2E:FE:87:13:E9:A9:C3:EE:B6:44:3D:C9:12:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/429CF9671E0E2EFE8713E9A9C3EEB6443DC91251.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118769455250276379/0/3232332e302e382e302f32332d3233203d3e203633353535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 223.0.8.0/23 Signature Algorithm: sha256WithRSAEncryption 44:4c:e3:d4:e8:0a:1c:a2:3c:e0:17:ac:1a:7c:8a:37:80:ea: c3:dc:a0:aa:eb:85:87:50:a5:50:74:9f:61:a3:94:3d:8b:80: ee:2c:ad:2a:dd:cd:43:9a:62:59:42:e4:a0:6b:0a:96:30:63: af:f9:13:b0:80:75:80:bf:82:c4:6f:a6:f3:6c:0f:3b:ce:54: 45:fc:b8:ea:d2:0b:0e:de:a4:d1:a3:bf:56:f3:ca:5d:06:69: e3:68:49:6c:d2:44:10:44:87:ac:96:21:9b:be:5f:ab:1a:29: 07:d1:98:4d:65:2e:c8:20:60:0d:7f:ab:50:1c:5a:35:ca:8e: 15:71:5e:6f:cc:8f:c4:92:65:65:a5:eb:a7:b0:ee:22:f8:41: b6:7f:e5:40:c5:e0:db:dc:ba:11:6d:8a:5d:96:ba:3f:ed:17: 4b:6c:86:85:8b:ba:f8:de:39:6f:9e:ce:d0:be:21:4b:0e:35: 7c:bb:2d:b2:0f:11:95:df:41:8f:f3:e3:43:02:86:bc:96:f9: 26:ae:c5:ee:2b:15:12:ef:5b:e9:62:d6:87:42:e6:e6:50:a2: 96:f6:06:28:ee:9d:f6:d5:ae:9a:57:b4:76:c2:32:02:6b:61: 34:dc:68:c2:14:75:47:9d:3d:d8:65:2c:da:6b:9d:28:c0:57: 58:6f:9e:f2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUL6FaaO70S/mWZfmO+fdK6hY5r2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQz REM5MTI1MTAeFw0yNjA2MTUwNTA5NDNaFw0yNzA2MTQwNTE0NDNaMDMxMTAvBgNV BAMTKEM1MzkzRTk4MTM4Mzk2MTdDQkI3MzYzODg1QzI0ODFEQTgwNUMzQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCALHb7n7bHQ3P/oTjFnNd7Gfu/ 95o63KrjdZhWlfVx16Xahk1AvV3+cQ7/eAyeO1Lpfe9BPnTh9IXmsCMwnCgmBdTl mBJUOSsRFa+RkBfF/NVIhL0FztSchwL4YtFfisA1wVdTh68jA2tdUbsCe25gHSLq 2H6S0YRArJ6S0Fo8RYLPKXFNZZNWpEwqs6vspl++AWtO1mYK+QtfNXhJ1cRWnd9K CNcfrjVCOzfZ9/sDDW8jjNgfkliEAlSJ0s3S5y1xTFYn6DE7XV8ZAzJTbt09KiZY B8A/4gaJJ1Du/tZ4QQHpBiL7kv8XJfJrLLlCto7i660xJ0TkPxX/h70b4TqVAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUxTk+mBODlhfLtzY4hcJIHagFw8swHwYDVR0j BBgwFoAUQpz5Zx4OLv6HE+mpw+62RD3JElEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODc2OTQ1NTI1MDI3NjM3OS8wLzQyOUNGOTY3MUUwRTJFRkU4NzEzRTlBOUMzRUVC NjQ0M0RDOTEyNTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDI5Q0Y5NjcxRTBFMkVGRTg3MTNFOUE5QzNFRUI2NDQzREM5MTI1MS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzY5NDU1MjUwMjc2Mzc5LzAvMzIzMjMzMmUzMDJl MzgyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMzMzUzNTM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB 3wAIMA0GCSqGSIb3DQEBCwUAA4IBAQBETOPU6AocojzgF6wafIo3gOrD3KCq64WH UKVQdJ9ho5Q9i4DuLK0q3c1DmmJZQuSgawqWMGOv+ROwgHWAv4LEb6bzbA87zlRF /Ljq0gsO3qTRo79W88pdBmnjaEls0kQQRIesliGbvl+rGikH0ZhNZS7IIGANf6tQ HFo1yo4VcV5vzI/EkmVlpeunsO4i+EG2f+VAxeDb3LoRbYpdlro/7RdLbIaFi7r4 3jlvns7QviFLDjV8uy2yDxGV30GP8+NDAoa8lvkmrsXuKxUS71vpYtaHQubmUKKW 9gYo7p321a6aV7R2wjICa2E03GjCFHVHnT3YZSzaa50owFdYb57y -----END CERTIFICATE-----Generated at Tue Jul 14 20:57:59 2026 by rpki-client