$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234382e302f32322d3234203d3e20323034373635.roa File: 3130312e3233322e3234382e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: 5SXjckLKgvKsrKMfCX5zCQiw9HEgb8VVY5iiv+S/LGU= Subject key identifier: FA:E9:41:65:36:9B:AE:0B:D2:2F:F9:80:E2:BC:13:A9:08:8E:1B:D6 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 170C025150624CE0C7477D0881FE3137F11D4CF4 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234382e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:38 +0000 ROA not before: Mon 13 Jul 2026 03:41:38 +0000 ROA not after: Mon 12 Jul 2027 03:46:38 +0000 asID: 204765 IP address blocks: 101.232.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0c:02:51:50:62:4c:e0:c7:47:7d:08:81:fe:31:37:f1:1d:4c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:38 2026 GMT Not After : Jul 12 03:46:38 2027 GMT Subject: CN=FAE94165369BAE0BD22FF980E2BC13A9088E1BD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:21:a3:61:53:e4:ad:6a:50:d2:2b:d4:e4:6e: 9d:c6:7b:a2:2b:eb:04:cb:cb:2e:d4:d1:ae:8f:57: 19:3c:77:36:00:e9:51:fb:ed:50:c4:3e:55:e6:be: 12:09:bd:18:af:e9:df:74:dd:d2:a6:f5:be:2a:eb: f1:c4:b1:71:07:0e:de:f0:e1:77:69:4d:01:40:86: 45:59:79:e7:77:24:eb:62:6d:f1:39:66:cc:30:24: f6:06:61:fa:a5:70:13:da:b8:00:10:75:59:32:76: 19:c1:5d:48:02:e2:8b:e2:dd:07:ce:1a:49:d1:50: dd:01:28:14:0f:11:c7:6e:77:6b:da:77:ec:f8:20: 6d:b8:97:46:79:5e:65:7a:6d:b3:5f:31:19:3e:ef: 94:4e:47:ab:1b:20:12:04:57:18:d5:e9:3c:f5:e9: 2e:4d:dc:12:7d:74:95:57:3c:98:2a:3f:2f:65:9c: 76:64:d2:56:c4:05:2a:70:39:8e:17:09:cf:3d:cb: fb:3f:71:05:88:4b:fa:08:b0:e8:64:7a:71:5a:18: 9e:e2:82:9b:74:91:32:1f:1e:94:d9:d0:aa:94:f6: be:e4:af:92:da:17:81:3a:a6:42:40:57:ba:98:44: 8d:ed:03:27:b1:f2:1c:de:b4:55:82:cf:10:17:d7: b3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E9:41:65:36:9B:AE:0B:D2:2F:F9:80:E2:BC:13:A9:08:8E:1B:D6 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3234382e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.248.0/22 Signature Algorithm: sha256WithRSAEncryption b5:95:d1:74:6c:54:2a:8b:dc:ab:74:7d:45:b2:9c:33:fd:2b: 40:8d:08:59:e3:e6:17:a1:12:84:44:85:d9:4c:19:4b:7b:34: 26:1a:bc:58:d5:88:1d:8b:3a:3f:ec:18:ba:bd:ee:9a:ce:40: e1:73:67:e1:ce:0f:b1:4e:2b:9b:c5:2a:ba:fa:ed:08:a0:94: 81:fb:40:d8:43:e6:db:24:52:ce:f9:51:54:08:97:d2:0c:e1: 29:8a:10:dd:ae:14:74:65:c0:68:51:36:ad:df:f8:48:61:87: 1c:73:c8:83:29:81:0c:3c:1c:1b:7d:e6:29:7d:f5:60:f2:c5: 05:c0:21:f6:ef:62:32:3a:ee:37:ab:40:83:28:b2:86:ad:ee: 8e:72:0a:8c:e3:92:0a:5c:f8:0c:42:fa:71:2a:28:ef:90:6f: b5:c3:dc:5f:f3:5f:9e:d1:07:ec:9e:7e:ef:4a:40:bf:41:12: a1:74:22:5c:e8:a8:ee:ec:ab:9f:5f:e8:12:1d:04:23:a5:c6: 34:09:f3:9c:c8:87:ed:64:2a:bd:86:95:d9:08:a0:05:f9:a0: 5a:83:1e:d7:b5:ce:bb:e0:5c:eb:a2:3d:bc:77:7b:bf:e1:41: cb:ea:a0:f8:89:87:fe:97:65:5e:a1:ec:96:22:e7:97:cb:75: c1:5c:6d:f7 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUFwwCUVBiTODHR30Igf4xN/EdTPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzhaFw0yNzA3MTIwMzQ2MzhaMDMxMTAvBgNV BAMTKEZBRTk0MTY1MzY5QkFFMEJEMjJGRjk4MEUyQkMxM0E5MDg4RTFCRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIaNhU+StalDSK9Tkbp3Ge6Ir 6wTLyy7U0a6PVxk8dzYA6VH77VDEPlXmvhIJvRiv6d903dKm9b4q6/HEsXEHDt7w 4XdpTQFAhkVZeed3JOtibfE5ZswwJPYGYfqlcBPauAAQdVkydhnBXUgC4ovi3QfO GknRUN0BKBQPEcdud2vad+z4IG24l0Z5XmV6bbNfMRk+75ROR6sbIBIEVxjV6Tz1 6S5N3BJ9dJVXPJgqPy9lnHZk0lbEBSpwOY4XCc89y/s/cQWIS/oIsOhkenFaGJ7i gpt0kTIfHpTZ0KqU9r7kr5LaF4E6pkJAV7qYRI3tAyex8hzetFWCzxAX17MFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU+ulBZTabrgvSL/mA4rwTqQiOG9YwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz MjMzMzIyZTMyMzQzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmXo+DANBgkqhkiG9w0BAQsFAAOCAQEAtZXRdGxUKovcq3R9 RbKcM/0rQI0IWePmF6EShESF2UwZS3s0Jhq8WNWIHYs6P+wYur3ums5A4XNn4c4P sU4rm8UquvrtCKCUgftA2EPm2yRSzvlRVAiX0gzhKYoQ3a4UdGXAaFE2rd/4SGGH HHPIgymBDDwcG33mKX31YPLFBcAh9u9iMjruN6tAgyiyhq3ujnIKjOOSClz4DEL6 cSoo75BvtcPcX/NfntEH7J5+70pAv0ESoXQiXOio7uyrn1/oEh0EI6XGNAnznMiH 7WQqvYaV2QigBfmgWoMe17XOu+Bc66I9vHd7v+FBy+qg+ImH/pdlXqHsliLnl8t1 wVxt9w== -----END CERTIFICATE-----Generated at Tue Jul 21 12:35:09 2026 by rpki-client