$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1119152684591480863/0/3230322e33382e3132382e302f32332d3233203d3e2037343937.roa File: 3230322e33382e3132382e302f32332d3233203d3e2037343937.roa (raw, json) Hash identifier: 3KN0MikBInjR2AE42lOEjDcp6hhwhQEE2fCSsY3rvnk= Subject key identifier: 3A:73:73:61:CA:C1:0F:35:B4:14:5F:92:6A:F6:8E:ED:5B:F2:04:5F Certificate issuer: /CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Certificate serial: 50D7A7067669D1321C8A4A7626C1E54E9C0623 Authority key identifier: 18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/3230322e33382e3132382e302f32332d3233203d3e2037343937.roa Signing time: Thu 18 Jun 2026 07:12:35 +0000 ROA not before: Thu 18 Jun 2026 07:07:35 +0000 ROA not after: Thu 17 Jun 2027 07:12:35 +0000 asID: 7497 IP address blocks: 202.38.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 13:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d7:a7:06:76:69:d1:32:1c:8a:4a:76:26:c1:e5:4e:9c:06:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1866933B3427D9BEFE57E3F20A7049BD1D54E7D8 Validity Not Before: Jun 18 07:07:35 2026 GMT Not After : Jun 17 07:12:35 2027 GMT Subject: CN=3A737361CAC10F35B4145F926AF68EED5BF2045F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ff:7d:78:a5:ae:56:49:8b:1c:97:9a:22:6e: 65:7f:18:e7:51:bd:9c:aa:87:d2:64:41:23:35:ab: 7d:4a:fe:3a:70:9e:1d:df:31:94:37:66:94:c7:a9: c1:09:90:d9:94:dc:d7:a1:82:50:09:7e:8b:91:dd: bc:70:3c:0c:0b:4e:7a:11:88:35:40:77:3c:3c:a7: 57:85:c5:56:b9:61:eb:ad:06:91:a9:0e:8c:9c:16: 01:f7:de:ed:9b:52:30:bd:54:55:ce:96:ff:70:a5: d2:94:bf:80:d8:98:27:b2:1f:18:8f:56:45:96:47: be:30:55:39:a8:66:11:60:84:93:c5:f6:12:a3:24: 04:8b:46:0e:c7:a7:6a:56:97:d1:56:fa:24:0e:a5: e9:31:ef:57:e3:0c:b1:8b:3a:56:ae:75:a2:d0:3e: c3:b6:a4:01:f5:78:74:a9:41:3b:4b:a4:ae:96:ae: af:0c:a6:19:63:3d:32:e5:36:b5:e5:12:41:b7:a3: 39:ee:8b:d0:b0:ce:7e:10:b7:86:38:a5:74:f0:08: 44:64:1f:bf:16:0a:59:b6:45:66:d6:f8:c0:50:e3: d1:0a:06:01:d3:ee:37:5a:7d:5f:6a:31:ff:74:d6: 82:99:5d:c3:dc:74:c7:c7:bd:06:fb:bb:ba:f2:28: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:73:73:61:CA:C1:0F:35:B4:14:5F:92:6A:F6:8E:ED:5B:F2:04:5F X509v3 Authority Key Identifier: keyid:18:66:93:3B:34:27:D9:BE:FE:57:E3:F2:0A:70:49:BD:1D:54:E7:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1866933B3427D9BEFE57E3F20A7049BD1D54E7D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1119152684591480863/0/3230322e33382e3132382e302f32332d3233203d3e2037343937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.38.128.0/23 Signature Algorithm: sha256WithRSAEncryption c2:1a:77:34:0b:02:36:61:ee:4f:1d:d7:66:dc:37:37:27:0a: b1:83:d0:f5:22:6b:3b:e1:b2:0b:b7:98:2c:42:9e:95:d0:0a: 51:fe:61:c4:7a:e6:c0:aa:3b:41:e1:93:5b:ad:bc:b2:e4:23: 02:e3:bf:90:98:6b:16:a3:8b:ee:96:f6:c7:e7:f7:c5:15:04: cc:30:12:47:79:fe:8c:3f:22:81:f6:fa:85:13:0b:87:8d:0f: af:1e:f3:48:00:ec:50:b5:6b:22:17:52:12:30:c9:80:e3:04: a0:84:47:12:dc:a6:54:98:f5:7b:10:14:3d:e4:1f:d9:af:85: 30:33:2c:92:3e:d8:9e:11:d2:93:fc:ae:bf:2b:27:1c:50:1d: d8:fd:10:01:8a:04:4b:36:2d:f0:54:ff:bf:39:13:fe:9e:72: 5c:b7:06:f6:73:7f:cd:86:45:5b:9c:fa:9b:6c:f1:f7:74:78: ce:2c:8c:02:a3:2a:37:a5:78:79:77:ac:2b:68:40:98:ab:1d: 53:03:69:bd:25:10:2c:63:12:00:96:53:75:2a:ad:db:97:bb: de:11:ad:97:41:c8:6f:33:f8:e3:f7:c2:40:53:d6:e6:38:63: 2c:f8:0c:27:77:5b:9a:97:ef:ed:7c:c4:d7:fc:29:2b:6f:74: e8:78:e8:07 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgITUNenBnZp0TIcikp2JsHlTpwGIzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxODY2OTMzQjM0MjdEOUJFRkU1N0UzRjIwQTcwNDlCRDFE NTRFN0Q4MB4XDTI2MDYxODA3MDczNVoXDTI3MDYxNzA3MTIzNVowMzExMC8GA1UE AxMoM0E3MzczNjFDQUMxMEYzNUI0MTQ1RjkyNkFGNjhFRUQ1QkYyMDQ1RjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKz/fXilrlZJixyXmiJuZX8Y51G9 nKqH0mRBIzWrfUr+OnCeHd8xlDdmlMepwQmQ2ZTc16GCUAl+i5HdvHA8DAtOehGI NUB3PDynV4XFVrlh660GkakOjJwWAffe7ZtSML1UVc6W/3Cl0pS/gNiYJ7IfGI9W RZZHvjBVOahmEWCEk8X2EqMkBItGDsenalaX0Vb6JA6l6THvV+MMsYs6Vq51otA+ w7akAfV4dKlBO0ukrpaurwymGWM9MuU2teUSQbejOe6L0LDOfhC3hjildPAIRGQf vxYKWbZFZtb4wFDj0QoGAdPuN1p9X2ox/3TWgpldw9x0x8e9Bvu7uvIoHgsCAwEA AaOCAhEwggINMB0GA1UdDgQWBBQ6c3NhysEPNbQUX5Jq9o7tW/IEXzAfBgNVHSME GDAWgBQYZpM7NCfZvv5X4/IKcEm9HVTn2DAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTE5 MTUyNjg0NTkxNDgwODYzLzAvMTg2NjkzM0IzNDI3RDlCRUZFNTdFM0YyMEE3MDQ5 QkQxRDU0RTdEOC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS8xODY2OTMzQjM0MjdEOUJFRkU1N0UzRjIwQTcwNDlCRDFENTRFN0Q4LmNlcjCB igYIKwYBBQUHAQsEfjB8MHoGCCsGAQUFBzALhm5yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTkxNTI2ODQ1OTE0ODA4NjMvMC8zMjMwMzIyZTMzMzgy ZTMxMzIzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDM3MzQzOTM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQByiaAMA0GCSqGSIb3DQEBCwUAA4IBAQDCGnc0CwI2Ye5PHddm3Dc3Jwqxg9D1 Ims74bILt5gsQp6V0ApR/mHEeubAqjtB4ZNbrbyy5CMC47+QmGsWo4vulvbH5/fF FQTMMBJHef6MPyKB9vqFEwuHjQ+vHvNIAOxQtWsiF1ISMMmA4wSghEcS3KZUmPV7 EBQ95B/Zr4UwMyySPtieEdKT/K6/KyccUB3Y/RABigRLNi3wVP+/ORP+nnJctwb2 c3/NhkVbnPqbbPH3dHjOLIwCoyo3pXh5d6wraECYqx1TA2m9JRAsYxIAllN1Kq3b l7veEa2XQchvM/jj98JAU9bmOGMs+Awnd1ual+/tfMTX/Ckrb3ToeOgH -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:22 2026 by rpki-client