$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139362e302f32322d3234203d3e20323034373635.roa File: 3130312e3233322e3139362e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: 3MZhZdqFlGUXrs41Ixg9lETuk2pcfcfoIp+5TjNL/f0= Subject key identifier: D1:23:6C:4B:F5:EA:BA:08:DA:2A:6A:32:ED:7C:4B:4D:90:10:51:95 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 527C70068A5204DAD83D3B2DF863D2CAAC4E34D7 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139362e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:37 +0000 ROA not before: Mon 13 Jul 2026 03:41:37 +0000 ROA not after: Mon 12 Jul 2027 03:46:37 +0000 asID: 204765 IP address blocks: 101.232.196.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7c:70:06:8a:52:04:da:d8:3d:3b:2d:f8:63:d2:ca:ac:4e:34:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:37 2026 GMT Not After : Jul 12 03:46:37 2027 GMT Subject: CN=D1236C4BF5EABA08DA2A6A32ED7C4B4D90105195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a9:06:1b:f7:4f:95:63:90:b1:ad:0d:bb:d3: 0c:fc:ca:6d:69:f2:d7:a7:c1:e5:66:3a:ab:3c:d6: 2e:18:85:59:2f:5e:14:4d:80:2a:8f:9b:25:32:36: 2b:16:36:3c:48:3d:d4:83:16:93:0a:72:62:ad:74: c1:63:56:30:01:f7:d8:fa:08:54:b9:c6:a8:6c:f6: de:cc:b9:5b:53:70:6f:ef:9c:bc:b6:f3:4e:77:67: a0:e9:8d:a4:e3:95:f5:50:bb:79:42:07:08:3c:35: 0c:29:ec:c7:de:5e:c5:75:4c:14:75:66:c1:28:6c: da:50:15:79:78:50:8d:20:3d:46:af:f1:06:ed:72: 3a:5e:27:04:c1:e5:01:52:6f:fe:ec:6d:10:ba:d6: 95:94:43:ff:e2:50:f0:b9:00:33:ab:9e:5f:95:03: a5:6c:8c:42:d4:a8:ab:c2:f2:f0:dc:0e:ba:d0:dd: 05:63:e9:99:1c:5c:d7:93:98:e1:da:c1:c9:5a:54: e4:89:0d:c1:eb:3f:27:cb:c5:05:84:43:f6:d9:76: d8:da:88:ce:6b:38:ac:e6:04:f9:ed:0f:a2:8b:10: b8:ce:ce:b9:ad:f8:47:34:d1:56:8a:d9:00:09:96: 65:2e:91:6f:a0:6d:d5:b1:a8:06:e7:1a:d4:99:4f: 79:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:23:6C:4B:F5:EA:BA:08:DA:2A:6A:32:ED:7C:4B:4D:90:10:51:95 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139362e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.196.0/22 Signature Algorithm: sha256WithRSAEncryption bf:13:f6:36:aa:ed:30:97:cf:e3:3e:c6:18:3e:25:74:26:2e: 23:60:02:85:4f:1a:b1:19:fe:b2:49:ac:42:91:2e:1c:4f:4b: 4d:fd:96:4d:5b:38:7d:16:f1:51:53:a3:2d:b1:d1:03:1f:cf: 6d:e3:1d:25:7d:ee:59:fd:84:81:0f:67:98:c6:04:06:8a:29: e3:57:6b:4c:c3:f5:0b:77:e3:6c:ef:2e:ef:0f:28:ec:1e:28: 30:02:a1:5c:32:38:67:90:0d:2d:5d:65:0a:7b:38:74:f0:82: 3d:16:bb:51:03:92:6e:67:90:50:cc:41:61:4a:76:61:d0:f6: 97:92:30:ee:61:79:ca:5c:1b:7f:12:86:6f:67:b0:73:ee:4f: 10:f8:17:80:30:13:9b:a3:3d:7c:68:3e:0e:d8:50:e7:81:89: 5c:3a:46:b4:cc:bf:35:23:42:bc:d5:a0:99:92:45:b9:11:4e: e6:48:7b:80:b7:93:0b:0c:e2:82:35:89:24:be:38:9d:09:ad: 27:71:94:19:9c:90:ef:31:1a:d7:7f:d4:b2:a8:da:19:ce:cc: b9:b5:a2:a9:36:ba:8d:01:e4:05:cf:2c:62:b2:37:9a:d8:fa: ab:4a:3e:9d:9e:27:fd:2e:0a:54:12:86:14:70:06:86:d4:28: b6:6a:40:0f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUUnxwBopSBNrYPTst+GPSyqxONNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzdaFw0yNzA3MTIwMzQ2MzdaMDMxMTAvBgNV BAMTKEQxMjM2QzRCRjVFQUJBMDhEQTJBNkEzMkVEN0M0QjREOTAxMDUxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkqQYb90+VY5CxrQ270wz8ym1p 8tenweVmOqs81i4YhVkvXhRNgCqPmyUyNisWNjxIPdSDFpMKcmKtdMFjVjAB99j6 CFS5xqhs9t7MuVtTcG/vnLy28053Z6DpjaTjlfVQu3lCBwg8NQwp7MfeXsV1TBR1 ZsEobNpQFXl4UI0gPUav8QbtcjpeJwTB5QFSb/7sbRC61pWUQ//iUPC5ADOrnl+V A6VsjELUqKvC8vDcDrrQ3QVj6ZkcXNeTmOHawclaVOSJDcHrPyfLxQWEQ/bZdtja iM5rOKzmBPntD6KLELjOzrmt+Ec00VaK2QAJlmUukW+gbdWxqAbnGtSZT3mBAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU0SNsS/XqugjaKmoy7XxLTZAQUZUwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz MjMzMzIyZTMxMzkzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmXoxDANBgkqhkiG9w0BAQsFAAOCAQEAvxP2NqrtMJfP4z7G GD4ldCYuI2AChU8asRn+skmsQpEuHE9LTf2WTVs4fRbxUVOjLbHRAx/PbeMdJX3u Wf2EgQ9nmMYEBoop41drTMP1C3fjbO8u7w8o7B4oMAKhXDI4Z5ANLV1lCns4dPCC PRa7UQOSbmeQUMxBYUp2YdD2l5Iw7mF5ylwbfxKGb2ewc+5PEPgXgDATm6M9fGg+ DthQ54GJXDpGtMy/NSNCvNWgmZJFuRFO5kh7gLeTCwzigjWJJL44nQmtJ3GUGZyQ 7zEa13/UsqjaGc7MubWiqTa6jQHkBc8sYrI3mtj6q0o+nZ4n/S4KVBKGFHAGhtQo tmpADw== -----END CERTIFICATE-----Generated at Tue Jul 21 12:35:08 2026 by rpki-client