$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3233362e302f32322d3234203d3e20323034373635.roa File: 3130312e3233322e3233362e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: sdxipP+Z9ytyPzwfXecZagU6yaWt8doey2bJlBdCGvQ= Subject key identifier: 6A:42:C3:8F:D6:34:DB:EA:5D:C5:A5:71:A0:3E:01:BF:99:F9:8D:7A Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 4EB008BBC7EFF60D7EA64BABA684CDA0F284AB83 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3233362e302f32322d3234203d3e20323034373635.roa Signing time: Thu 16 Jul 2026 03:25:44 +0000 ROA not before: Thu 16 Jul 2026 03:20:44 +0000 ROA not after: Thu 15 Jul 2027 03:25:44 +0000 asID: 204765 IP address blocks: 101.232.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:b0:08:bb:c7:ef:f6:0d:7e:a6:4b:ab:a6:84:cd:a0:f2:84:ab:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 16 03:20:44 2026 GMT Not After : Jul 15 03:25:44 2027 GMT Subject: CN=6A42C38FD634DBEA5DC5A571A03E01BF99F98D7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:48:c8:47:3d:de:8c:44:9a:2a:6f:59:7b:09: 9d:0c:ee:a1:1a:90:76:5c:5d:62:66:50:3e:65:5f: 23:8b:83:90:b0:3d:aa:aa:22:cf:6c:51:6e:d1:e0: 6c:3f:a7:88:e1:b9:1f:34:2a:24:f9:d4:e7:56:dc: ef:3e:7a:f3:34:22:0a:75:d2:c1:57:50:63:6a:b0: cf:1f:b7:81:37:43:b9:99:01:9c:c5:b0:21:ae:e7: 52:6b:e1:0e:ae:41:fb:2a:0d:8d:d4:eb:30:7d:34: d2:89:1e:4e:62:f3:7a:d3:5b:47:43:68:05:06:48: e8:f2:12:94:83:f0:56:02:a7:df:87:67:1b:68:98: 77:98:23:28:ac:50:d2:8a:f4:0f:cd:b2:b2:9e:85: 9a:d5:74:d4:06:e8:e6:82:3f:6a:e0:a5:3d:63:b9: 49:93:87:05:d1:d3:b4:87:2e:88:77:58:9e:3e:8d: 19:66:ab:94:d4:1f:7c:b8:4c:63:f5:3d:6d:1f:1b: b6:03:e6:cc:70:40:0c:63:46:94:0b:75:dc:f3:6a: 3e:ba:24:78:ac:0e:78:46:be:10:4a:92:5a:b1:14: 98:e8:81:9c:90:e0:cf:a5:61:17:d3:cd:13:37:b7: cf:3c:72:f0:00:28:b4:28:5f:76:ff:27:22:12:52: 87:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:42:C3:8F:D6:34:DB:EA:5D:C5:A5:71:A0:3E:01:BF:99:F9:8D:7A X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3233362e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.236.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:7b:ca:18:f7:f6:37:4f:5e:83:e1:a8:b1:1c:0c:42:98:52: ee:66:c2:c6:a2:12:df:5c:ec:d2:ca:58:8d:dc:e5:21:a4:af: 96:5f:fb:88:d3:15:99:65:8a:fd:8e:fc:fe:ac:be:4b:50:c2: e4:ee:fb:04:7d:6f:6c:8e:e8:e3:fb:78:e5:51:ed:fa:75:56: bb:c6:88:2c:ee:5b:b3:96:fe:19:25:39:75:81:73:8b:b1:ee: e9:77:32:28:5c:69:1f:e1:06:e8:a3:fb:b8:6b:f4:2f:d4:79: be:34:3a:bb:d1:84:99:da:15:e1:07:a6:fd:74:16:c3:16:47: 8f:30:d5:af:cc:05:7d:d2:07:ca:ea:98:e6:48:c0:0d:6a:17: 9b:bb:4c:bb:5a:89:02:1e:31:a6:0c:68:6f:16:44:20:50:d0: e8:30:24:da:2f:32:5c:53:be:e7:9e:33:af:fb:d4:a3:aa:6d: 8d:93:16:73:ee:8e:f0:6c:d7:97:2c:d1:f1:a6:57:47:15:6b: 48:be:dd:ca:5c:d2:d4:e9:e2:5f:71:c1:b3:6f:59:d8:e4:f8: f1:33:fd:4b:3b:94:31:3b:4b:2e:d8:51:5b:43:82:fe:27:3b: 07:57:30:ca:ba:af:4f:ee:60:39:7c:1c:d4:56:ee:e5:76:29: 07:4f:c1:7b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUTrAIu8fv9g1+pkurpoTNoPKEq4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTYwMzIwNDRaFw0yNzA3MTUwMzI1NDRaMDMxMTAvBgNV BAMTKDZBNDJDMzhGRDYzNERCRUE1REM1QTU3MUEwM0UwMUJGOTlGOThEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVSMhHPd6MRJoqb1l7CZ0M7qEa kHZcXWJmUD5lXyOLg5CwPaqqIs9sUW7R4Gw/p4jhuR80KiT51OdW3O8+evM0Igp1 0sFXUGNqsM8ft4E3Q7mZAZzFsCGu51Jr4Q6uQfsqDY3U6zB9NNKJHk5i83rTW0dD aAUGSOjyEpSD8FYCp9+HZxtomHeYIyisUNKK9A/NsrKehZrVdNQG6OaCP2rgpT1j uUmThwXR07SHLoh3WJ4+jRlmq5TUH3y4TGP1PW0fG7YD5sxwQAxjRpQLddzzaj66 JHisDnhGvhBKklqxFJjogZyQ4M+lYRfTzRM3t888cvAAKLQoX3b/JyISUof1AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUakLDj9Y02+pdxaVxoD4Bv5n5jXowHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz MjMzMzIyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmXo7DANBgkqhkiG9w0BAQsFAAOCAQEAanvKGPf2N09eg+Go sRwMQphS7mbCxqIS31zs0spYjdzlIaSvll/7iNMVmWWK/Y78/qy+S1DC5O77BH1v bI7o4/t45VHt+nVWu8aILO5bs5b+GSU5dYFzi7Hu6XcyKFxpH+EG6KP7uGv0L9R5 vjQ6u9GEmdoV4Qem/XQWwxZHjzDVr8wFfdIHyuqY5kjADWoXm7tMu1qJAh4xpgxo bxZEIFDQ6DAk2i8yXFO+554zr/vUo6ptjZMWc+6O8GzXlyzR8aZXRxVrSL7dylzS 1OniX3HBs29Z2OT48TP9SzuUMTtLLthRW0OC/ic7B1cwyrqvT+5gOXwc1Fbu5XYp B0/Bew== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:31 2026 by rpki-client