$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230302e302f32322d3234203d3e20323034373635.roa File: 3130312e3233322e3230302e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: +C8g95OxCK0q1DkJdewPp9hwaZEVUsSCVllR1kqERKE= Subject key identifier: 45:26:42:D0:3E:1D:EF:3B:0A:36:FC:78:50:1D:95:61:2E:C7:A3:2E Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 3E42EF9C4FAF47F451BEBB1A4371450038BAF53A Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230302e302f32322d3234203d3e20323034373635.roa Signing time: Thu 16 Jul 2026 03:25:16 +0000 ROA not before: Thu 16 Jul 2026 03:20:16 +0000 ROA not after: Thu 15 Jul 2027 03:25:16 +0000 asID: 204765 IP address blocks: 101.232.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:42:ef:9c:4f:af:47:f4:51:be:bb:1a:43:71:45:00:38:ba:f5:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 16 03:20:16 2026 GMT Not After : Jul 15 03:25:16 2027 GMT Subject: CN=452642D03E1DEF3B0A36FC78501D95612EC7A32E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:21:83:16:89:86:60:92:5d:84:b4:f3:e6:50: a7:2b:cb:83:d4:0d:ff:d7:d2:12:c6:df:7e:fb:5d: c7:c2:1f:66:d0:4c:3b:57:b0:11:b6:ed:da:d9:2e: 18:db:aa:8a:48:0d:55:be:d2:f9:56:49:f0:a8:69: d2:ad:47:0d:46:12:79:aa:3a:b8:be:93:19:e1:e1: f1:8a:22:6b:ba:7b:6b:e0:04:9d:30:a3:a4:cf:e1: 2c:1b:50:34:e9:27:ba:e4:7e:45:cd:c9:35:2f:65: 62:ab:c4:07:a0:9d:c4:a7:54:a0:25:f2:35:dd:b5: ba:0c:d7:e3:80:b4:84:4b:01:06:d1:c3:ed:1f:79: ca:e7:8c:99:10:c6:ab:41:15:15:30:e0:df:78:c8: 71:64:b9:89:e5:20:0a:5d:22:bd:86:6e:75:ce:0b: 36:40:6e:d7:c7:6b:ff:d8:5f:4f:a1:1c:57:f8:d0: d3:7a:39:4b:2d:59:bc:f3:93:04:a0:10:f9:a2:58: 18:31:64:b1:68:af:59:aa:80:7d:25:73:15:31:68: f7:9e:c0:bb:4c:48:48:59:4d:c7:3e:2d:f6:c5:bd: 7e:97:fb:00:6a:3b:27:7e:1b:64:c9:08:3d:c8:17: 27:2f:46:b7:55:ac:b2:68:d3:df:57:04:f9:6b:bd: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:26:42:D0:3E:1D:EF:3B:0A:36:FC:78:50:1D:95:61:2E:C7:A3:2E X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230302e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.200.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:99:fd:1c:4e:98:d8:ff:67:ae:87:1e:2a:f8:8b:29:82:7c: c4:41:3e:58:df:6b:5f:96:8a:63:47:9a:2b:d5:60:27:b4:43: 84:9f:43:60:87:3e:a2:29:28:24:20:77:1d:93:c4:9d:cc:c8: 2d:c1:26:ba:51:5b:8b:92:2d:ea:4f:56:95:55:ac:11:fe:cf: ea:38:88:be:f3:e8:20:eb:32:4c:36:67:9e:a5:06:af:bd:3a: 01:64:9b:0c:20:16:27:86:8a:e9:1f:a4:78:4c:45:c1:b3:21: 96:9b:c1:1c:24:82:21:5b:a0:aa:21:89:70:9f:a5:3e:9d:a7: e7:47:20:8d:61:d4:ad:c8:3e:76:cb:ba:9a:94:a7:1b:e2:4d: 00:12:5a:89:f5:1b:b3:c5:0f:a4:c9:90:c3:c1:c9:5e:0a:c1: 28:e2:eb:96:c9:c9:d2:b5:37:64:3b:fa:56:0f:85:e8:bd:df: 96:6a:dc:cb:48:6f:d2:b9:a9:80:5c:db:94:4e:a1:0d:cb:25: 35:68:18:dd:c8:c3:6e:6a:af:b8:5c:09:7e:5c:8e:21:42:ef: 90:be:0d:db:0d:c8:63:7f:c3:dd:9f:c6:d4:19:73:48:19:8f: ae:63:d6:be:56:df:1c:67:36:49:74:ab:98:db:45:5f:0e:4c: cd:e5:ee:07 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUPkLvnE+vR/RRvrsaQ3FFADi69TowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTYwMzIwMTZaFw0yNzA3MTUwMzI1MTZaMDMxMTAvBgNV BAMTKDQ1MjY0MkQwM0UxREVGM0IwQTM2RkM3ODUwMUQ5NTYxMkVDN0EzMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzIYMWiYZgkl2EtPPmUKcry4PU Df/X0hLG3377XcfCH2bQTDtXsBG27drZLhjbqopIDVW+0vlWSfCoadKtRw1GEnmq Ori+kxnh4fGKImu6e2vgBJ0wo6TP4SwbUDTpJ7rkfkXNyTUvZWKrxAegncSnVKAl 8jXdtboM1+OAtIRLAQbRw+0fecrnjJkQxqtBFRUw4N94yHFkuYnlIApdIr2GbnXO CzZAbtfHa//YX0+hHFf40NN6OUstWbzzkwSgEPmiWBgxZLFor1mqgH0lcxUxaPee wLtMSEhZTcc+LfbFvX6X+wBqOyd+G2TJCD3IFycvRrdVrLJo099XBPlrvZerAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQURSZC0D4d7zsKNvx4UB2VYS7Hoy4wHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz MjMzMzIyZTMyMzAzMDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmXoyDANBgkqhkiG9w0BAQsFAAOCAQEAfpn9HE6Y2P9nroce KviLKYJ8xEE+WN9rX5aKY0eaK9VgJ7RDhJ9DYIc+oikoJCB3HZPEnczILcEmulFb i5It6k9WlVWsEf7P6jiIvvPoIOsyTDZnnqUGr706AWSbDCAWJ4aK6R+keExFwbMh lpvBHCSCIVugqiGJcJ+lPp2n50cgjWHUrcg+dsu6mpSnG+JNABJaifUbs8UPpMmQ w8HJXgrBKOLrlsnJ0rU3ZDv6Vg+F6L3flmrcy0hv0rmpgFzblE6hDcslNWgY3cjD bmqvuFwJflyOIULvkL4N2w3IY3/D3Z/G1BlzSBmPrmPWvlbfHGc2SXSrmNtFXw5M zeXuBw== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:28 2026 by rpki-client