$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa File: 3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: j47sMbHM1m2pa9sdXpdOqe2ulNU6K+ubDOp951xAJ40= Subject key identifier: 1C:F4:96:5C:77:FE:9E:7C:2D:B0:2A:7A:81:B9:30:F5:DC:46:3B:30 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 1E9D95E7726DD65980FC58E77FF8DF3B187DCA35 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:34 +0000 ROA not before: Mon 13 Jul 2026 03:41:34 +0000 ROA not after: Mon 12 Jul 2027 03:46:34 +0000 asID: 204765 IP address blocks: 101.232.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:9d:95:e7:72:6d:d6:59:80:fc:58:e7:7f:f8:df:3b:18:7d:ca:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:34 2026 GMT Not After : Jul 12 03:46:34 2027 GMT Subject: CN=1CF4965C77FE9E7C2DB02A7A81B930F5DC463B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c1:18:e5:2a:29:6c:5b:56:b5:09:86:04:03: f6:1e:8a:81:0b:13:98:1b:dd:09:5d:29:10:8f:dc: 97:0f:12:ef:96:dc:9c:78:c7:e0:c7:a9:1f:21:e0: b9:91:99:a0:a6:83:0d:2d:84:51:aa:4d:bb:4d:31: bf:bf:a2:b4:79:dc:83:99:b8:42:c0:0a:67:92:93: 5c:47:8c:67:6a:a1:3b:bf:94:6b:f4:42:45:73:d6: 43:bc:13:65:01:d7:b4:0e:f5:42:cb:8a:36:fd:7d: cc:1d:e0:ac:9f:eb:7a:ef:dd:36:e4:9b:1d:4d:8e: ff:06:3a:cb:91:5b:90:66:58:af:40:77:fd:70:71: 69:9c:36:53:bb:e5:6b:e2:9d:88:4e:b3:b5:f2:bc: 7e:43:20:01:25:50:30:72:ed:87:ac:61:6d:7a:af: 98:c3:6d:48:17:ea:d7:5d:9a:f7:a9:d2:3c:fa:7d: 90:4d:66:66:d2:6f:83:70:e8:af:1d:b7:7b:3c:a5: c2:7c:e1:a2:44:5a:0d:70:a8:7e:ad:50:59:a2:6b: eb:60:47:a8:cb:cb:80:25:5e:b4:ae:f4:f5:f5:9a: a1:5d:f0:d3:1e:74:e4:95:98:44:a7:b4:7f:d0:65: e1:36:54:5d:01:a8:5b:73:e8:29:d6:ad:f7:bb:04: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:F4:96:5C:77:FE:9E:7C:2D:B0:2A:7A:81:B9:30:F5:DC:46:3B:30 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234342e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.244.0/22 Signature Algorithm: sha256WithRSAEncryption 10:5b:07:28:cf:da:6f:76:d2:34:64:80:09:0f:bc:9f:49:4c: 93:92:a8:83:f4:5a:fc:09:f9:ed:4e:80:b3:b5:a9:ed:29:dd: a4:d6:1f:cd:40:6e:4a:52:5b:2b:8a:70:f6:11:5c:af:99:92: 26:66:6c:6b:89:96:27:2d:f9:12:f5:85:a1:9d:cf:ec:97:a9: d0:c3:bf:6f:ca:63:72:1b:95:ca:88:6e:d4:a1:bc:c4:64:3e: cb:ce:c2:2a:60:69:b0:8f:43:b8:84:8b:72:84:36:c1:ae:f0: 73:86:0a:ec:d2:36:bc:8e:8e:fb:cb:b1:11:0d:5a:3f:b7:ec: ec:f6:74:9a:db:d8:68:34:25:35:ba:8e:a4:3b:77:61:c3:c1: 98:b1:a7:ef:20:39:ab:d9:5b:4f:04:83:2d:10:98:d5:d0:0c: 88:bb:54:3c:47:ed:a5:8f:a3:eb:6b:0c:38:d0:39:86:ef:e5: a1:75:62:5e:83:2c:ba:0a:c4:e0:88:84:92:10:cc:02:69:87: 99:21:50:8e:0b:a2:c7:d1:06:0d:34:04:31:c0:4d:f2:62:e7: 96:86:41:b3:ba:07:54:cf:15:9e:52:4b:6d:90:1e:6c:62:cb: 11:76:e1:14:f4:6b:f9:b8:02:85:be:3b:23:a7:7e:2c:e8:8f: a8:a7:22:18 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUHp2V53Jt1lmA/Fjnf/jfOxh9yjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzRaFw0yNzA3MTIwMzQ2MzRaMDMxMTAvBgNV BAMTKDFDRjQ5NjVDNzdGRTlFN0MyREIwMkE3QTgxQjkzMEY1REM0NjNCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSwRjlKilsW1a1CYYEA/YeioEL E5gb3QldKRCP3JcPEu+W3Jx4x+DHqR8h4LmRmaCmgw0thFGqTbtNMb+/orR53IOZ uELACmeSk1xHjGdqoTu/lGv0QkVz1kO8E2UB17QO9ULLijb9fcwd4Kyf63rv3Tbk mx1Njv8GOsuRW5BmWK9Ad/1wcWmcNlO75WvinYhOs7XyvH5DIAElUDBy7YesYW16 r5jDbUgX6tddmvep0jz6fZBNZmbSb4Nw6K8dt3s8pcJ84aJEWg1wqH6tUFmia+tg R6jLy4AlXrSu9PX1mqFd8NMedOSVmESntH/QZeE2VF0BqFtz6CnWrfe7BKhPAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUHPSWXHf+nnwtsCp6gbkw9dxGOzAwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz MjMzMzIyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmXo9DANBgkqhkiG9w0BAQsFAAOCAQEAEFsHKM/ab3bSNGSA CQ+8n0lMk5Kog/Ra/An57U6As7Wp7SndpNYfzUBuSlJbK4pw9hFcr5mSJmZsa4mW Jy35EvWFoZ3P7Jep0MO/b8pjchuVyohu1KG8xGQ+y87CKmBpsI9DuISLcoQ2wa7w c4YK7NI2vI6O+8uxEQ1aP7fs7PZ0mtvYaDQlNbqOpDt3YcPBmLGn7yA5q9lbTwSD LRCY1dAMiLtUPEftpY+j62sMONA5hu/loXViXoMsugrE4IiEkhDMAmmHmSFQjgui x9EGDTQEMcBN8mLnloZBs7oHVM8VnlJLbZAebGLLEXbhFPRr+bgChb47I6d+LOiP qKciGA== -----END CERTIFICATE-----Generated at Tue Jul 21 12:35:09 2026 by rpki-client