$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa File: 3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: zL0Dm0mURydYd7+TsCOqL5DQfpsmBMxpHIw7pKf+HsM= Subject key identifier: 2D:6E:87:6F:3C:CF:B8:E0:3B:1B:94:A0:51:C1:AB:49:1A:66:A2:02 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 7D74DFB86A961500BCB454A3C0751712510D24B6 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:35 +0000 ROA not before: Mon 13 Jul 2026 03:41:35 +0000 ROA not after: Mon 12 Jul 2027 03:46:35 +0000 asID: 204765 IP address blocks: 101.232.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:74:df:b8:6a:96:15:00:bc:b4:54:a3:c0:75:17:12:51:0d:24:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:35 2026 GMT Not After : Jul 12 03:46:35 2027 GMT Subject: CN=2D6E876F3CCFB8E03B1B94A051C1AB491A66A202 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:e7:98:02:1b:82:14:5d:65:38:e7:3f:b2:2f: da:2f:f0:48:56:0d:9e:0b:6c:c9:81:91:69:d3:99: 3c:21:a1:75:50:cd:29:ee:3c:a9:9b:d7:6e:b2:66: 96:d4:89:27:c2:f3:6b:f8:a7:31:cd:22:44:c8:45: 4b:42:da:1f:a4:96:5b:42:0b:98:c4:0a:a0:fb:fe: 35:34:2a:41:ab:ae:ca:29:f1:e4:8c:f9:5f:03:32: dd:63:f8:f5:35:f2:63:be:09:22:69:82:e5:9f:2a: 34:50:01:6e:ca:a3:48:ef:c9:0b:d0:fa:8e:9b:94: bb:b5:a4:d7:ce:b4:e4:60:0a:9b:04:c4:5d:0b:18: 5b:2f:3d:1c:06:be:33:8a:9c:0c:92:a6:2b:bb:e4: bb:17:3a:d8:7d:49:17:b7:09:02:03:6d:47:3f:0e: f5:72:5d:d8:11:69:60:6b:07:db:8c:aa:00:b4:44: 1c:ff:f5:f9:f1:65:6b:6e:16:8a:c0:c6:2e:27:e2: 4c:d4:3b:29:5e:32:c1:f0:32:d0:cd:85:39:24:a6: 6f:43:9b:6e:2d:c7:6c:3a:e9:2a:bd:15:69:ed:75: 4f:fe:64:37:5d:76:e7:8f:5e:86:d7:b3:1f:7b:c6: bb:b4:3a:3d:09:f3:2f:77:d9:33:1d:fc:8e:6f:8c: aa:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:6E:87:6F:3C:CF:B8:E0:3B:1B:94:A0:51:C1:AB:49:1A:66:A2:02 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.208.0/22 Signature Algorithm: sha256WithRSAEncryption 35:ee:47:ef:82:92:dd:9d:63:ea:a3:f8:eb:20:ac:a1:6d:79: 6e:9f:65:d6:0f:ed:35:e7:49:32:ce:ee:3f:cc:d4:4f:08:89: 26:f9:9d:38:bf:68:b7:02:76:a4:86:1c:67:2c:8f:a9:d3:80: be:3f:52:06:d1:3b:e5:83:5c:44:80:7e:ef:24:24:48:25:9a: 0e:67:46:2f:45:90:f7:e7:d5:3d:8e:5a:8a:5c:6d:8e:db:83: 30:5d:35:73:5f:0a:21:63:83:16:5b:fc:2c:05:ab:0e:cf:08: f0:a6:cc:dc:06:37:62:9f:3d:fc:70:28:ff:e7:5f:f0:00:a1: 96:0b:f2:c5:f1:a1:f4:a8:4c:8c:af:a5:74:2e:0a:0c:a6:ba: 1c:3c:02:62:36:68:aa:6f:28:6e:04:6e:4b:38:7e:db:cd:c8: f7:5a:77:95:66:73:41:49:af:6d:f2:3f:8e:80:23:e9:9d:33: 5e:be:89:92:5e:98:36:da:6d:36:e3:8a:32:b5:c1:34:1f:f9: 00:61:3b:94:c4:ad:d4:2b:90:92:6c:b7:92:1f:9c:82:d0:f3: 7e:65:45:d4:c0:83:a5:a1:a1:ee:6e:e4:c6:47:58:b8:0b:df: cd:35:42:ed:71:cd:45:f8:5c:3c:2d:a5:e4:41:b6:f1:e3:0e: 5d:2d:d9:f9 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUfXTfuGqWFQC8tFSjwHUXElENJLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzVaFw0yNzA3MTIwMzQ2MzVaMDMxMTAvBgNV BAMTKDJENkU4NzZGM0NDRkI4RTAzQjFCOTRBMDUxQzFBQjQ5MUE2NkEyMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE55gCG4IUXWU45z+yL9ov8EhW DZ4LbMmBkWnTmTwhoXVQzSnuPKmb126yZpbUiSfC82v4pzHNIkTIRUtC2h+klltC C5jECqD7/jU0KkGrrsop8eSM+V8DMt1j+PU18mO+CSJpguWfKjRQAW7Ko0jvyQvQ +o6blLu1pNfOtORgCpsExF0LGFsvPRwGvjOKnAySpiu75LsXOth9SRe3CQIDbUc/ DvVyXdgRaWBrB9uMqgC0RBz/9fnxZWtuForAxi4n4kzUOyleMsHwMtDNhTkkpm9D m24tx2w66Sq9FWntdU/+ZDddduePXobXsx97xru0Oj0J8y932TMd/I5vjKopAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQULW6HbzzPuOA7G5SgUcGrSRpmogIwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz MjMzMzIyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmXo0DANBgkqhkiG9w0BAQsFAAOCAQEANe5H74KS3Z1j6qP4 6yCsoW15bp9l1g/tNedJMs7uP8zUTwiJJvmdOL9otwJ2pIYcZyyPqdOAvj9SBtE7 5YNcRIB+7yQkSCWaDmdGL0WQ9+fVPY5ailxtjtuDMF01c18KIWODFlv8LAWrDs8I 8KbM3AY3Yp89/HAo/+df8AChlgvyxfGh9KhMjK+ldC4KDKa6HDwCYjZoqm8obgRu Szh+283I91p3lWZzQUmvbfI/joAj6Z0zXr6Jkl6YNtptNuOKMrXBNB/5AGE7lMSt 1CuQkmy3kh+cgtDzfmVF1MCDpaGh7m7kxkdYuAvfzTVC7XHNRfhcPC2l5EG28eMO XS3Z+Q== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:31 2026 by rpki-client