$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e20323034373635.roa File: 3131392e35392e3230382e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: gtybArYqr5JdetF5kbnd4ULtP4w54WqQPp5dM3wJg0I= Subject key identifier: B3:9D:F2:86:10:E3:E9:C6:8C:98:E3:E9:8C:C7:7C:36:71:E3:01:26 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 3C680CE5FE01CAD7EE79E13CFC3FBCA9E51B285D Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e20323034373635.roa Signing time: Mon 13 Jul 2026 03:46:35 +0000 ROA not before: Mon 13 Jul 2026 03:41:35 +0000 ROA not after: Mon 12 Jul 2027 03:46:35 +0000 asID: 204765 IP address blocks: 119.59.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:68:0c:e5:fe:01:ca:d7:ee:79:e1:3c:fc:3f:bc:a9:e5:1b:28:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:35 2026 GMT Not After : Jul 12 03:46:35 2027 GMT Subject: CN=B39DF28610E3E9C68C98E3E98CC77C3671E30126 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ff:e3:e6:18:c6:20:70:60:de:bc:a3:3b:fa:e7: c2:2b:7a:00:33:28:d8:e8:47:4f:6d:1a:9a:31:b5: 0e:fa:9b:39:31:e2:3c:f8:53:ce:86:66:fc:1e:b5: 47:8e:ed:08:f7:38:bd:ee:06:ed:06:51:2b:b2:65: f5:99:b0:0b:c2:36:5c:ba:1a:08:05:20:38:c6:3c: 3b:de:15:c4:68:2e:48:d6:d5:39:f8:06:a3:1f:f2: e9:d4:37:34:27:a6:56:32:83:48:c5:73:13:a8:43: 88:4e:93:2e:a2:bf:aa:dd:ef:9c:79:87:48:e8:10: 4a:0a:d9:10:43:d4:9f:cb:ae:ee:83:ef:b0:e8:e9: 86:43:02:77:25:a2:8f:65:ca:a1:61:a5:ed:0e:fa: 65:e9:b0:13:e4:b7:9c:15:13:7d:cb:22:86:44:4a: 0d:98:2f:95:c9:8a:c9:ff:92:de:84:c6:da:fa:e2: f1:93:2b:35:f6:41:72:60:f2:f9:66:8c:8c:be:91: 2e:e7:01:50:e1:e1:c5:0c:d7:c6:28:4d:76:66:be: 94:ce:64:de:fe:5a:43:02:5c:d6:b3:f5:95:5d:37: 0c:f8:ae:58:ca:61:16:6e:fb:4a:c4:22:df:26:3b: 77:fc:a7:68:c8:84:8b:07:e3:a8:50:89:88:73:61: e3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9D:F2:86:10:E3:E9:C6:8C:98:E3:E9:8C:C7:7C:36:71:E3:01:26 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3230382e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 119.59.208.0/22 Signature Algorithm: sha256WithRSAEncryption 76:97:b1:12:9d:ac:bb:c4:c0:a0:6b:47:c2:4d:e2:25:7d:a7: ba:ac:58:3e:98:ef:48:25:d0:36:a4:b9:aa:17:29:b1:ce:ad: 97:ce:e0:75:20:22:8a:2e:69:ee:89:20:ee:67:63:81:c0:cf: ff:80:f8:56:85:d2:78:a0:22:6a:61:a4:c7:90:be:2f:39:1e: 43:75:95:22:5d:ac:96:a1:0f:46:89:d1:b9:26:f2:1a:b6:89: 2f:84:3c:89:14:77:f5:bc:47:c0:3b:60:86:da:f5:6c:0d:c7: 9e:e0:a8:1e:47:49:7a:31:d2:de:af:cc:4d:a1:4d:89:87:20: 5d:ff:3c:c4:95:34:5b:a1:56:16:38:a5:4a:67:7a:53:92:e2: 70:f3:c6:4b:f7:0e:79:0b:c9:fc:1f:ee:58:cc:e9:d2:a2:80: 98:03:c5:6f:a2:1b:d7:3f:4a:83:cc:0c:8d:87:5a:06:94:0c: 87:54:e5:0b:6f:22:fd:7d:bc:75:ce:c3:f4:d2:c4:f0:d5:39: 7c:2b:61:ca:c2:fc:75:e3:28:68:d9:87:f6:5d:b8:dd:65:9f: 44:32:c4:eb:95:3c:a4:0d:10:b2:d6:4e:2c:88:52:96:c0:82: 15:f4:1e:bb:59:be:2d:ad:a2:3d:6c:04:0c:82:f3:af:9a:b7: 65:7d:3c:39 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPGgM5f4BytfueeE8/D+8qeUbKF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzVaFw0yNzA3MTIwMzQ2MzVaMDMxMTAvBgNV BAMTKEIzOURGMjg2MTBFM0U5QzY4Qzk4RTNFOThDQzc3QzM2NzFFMzAxMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD/4+YYxiBwYN68ozv658IregAz KNjoR09tGpoxtQ76mzkx4jz4U86GZvwetUeO7Qj3OL3uBu0GUSuyZfWZsAvCNly6 GggFIDjGPDveFcRoLkjW1Tn4BqMf8unUNzQnplYyg0jFcxOoQ4hOky6iv6rd75x5 h0joEEoK2RBD1J/Lru6D77Do6YZDAncloo9lyqFhpe0O+mXpsBPkt5wVE33LIoZE Sg2YL5XJisn/kt6Extr64vGTKzX2QXJg8vlmjIy+kS7nAVDh4cUM18YoTXZmvpTO ZN7+WkMCXNaz9ZVdNwz4rljKYRZu+0rEIt8mO3f8p2jIhIsH46hQiYhzYeMXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUs53yhhDj6caMmOPpjMd8NnHjASYwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg1NTMxMjk1MjUyNTEvMC8zMTMxMzkyZTM1 MzkyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAnc70DANBgkqhkiG9w0BAQsFAAOCAQEAdpexEp2su8TAoGtHwk3i JX2nuqxYPpjvSCXQNqS5qhcpsc6tl87gdSAiii5p7okg7mdjgcDP/4D4VoXSeKAi amGkx5C+LzkeQ3WVIl2slqEPRonRuSbyGraJL4Q8iRR39bxHwDtghtr1bA3HnuCo HkdJejHS3q/MTaFNiYcgXf88xJU0W6FWFjilSmd6U5LicPPGS/cOeQvJ/B/uWMzp 0qKAmAPFb6Ib1z9Kg8wMjYdaBpQMh1TlC28i/X28dc7D9NLE8NU5fCthysL8deMo aNmH9l243WWfRDLE65U8pA0QstZOLIhSlsCCFfQeu1m+La2iPWwEDILzr5q3ZX08 OQ== -----END CERTIFICATE-----Generated at Tue Jul 21 12:34:26 2026 by rpki-client