$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa File: 3132342e3137332e302e302f31382d3234203d3e2030.roa (raw, json) Hash identifier: fC2qAvunzrP9gHFSWhHMUq+7k/jDaSnZdJJyRsO+SaQ= Subject key identifier: 25:04:56:F4:3B:88:BE:96:FF:90:C9:31:DA:07:49:09:86:65:47:44 Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D Certificate serial: 22379311550B2ABE888014A12C88914BF423D0BB Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa Signing time: Mon 06 Jul 2026 08:43:09 +0000 ROA not before: Mon 06 Jul 2026 08:38:09 +0000 ROA not after: Mon 05 Jul 2027 08:43:09 +0000 asID: 0 IP address blocks: 124.173.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 Jul 2026 05:15:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:37:93:11:55:0b:2a:be:88:80:14:a1:2c:88:91:4b:f4:23:d0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D Validity Not Before: Jul 6 08:38:09 2026 GMT Not After : Jul 5 08:43:09 2027 GMT Subject: CN=250456F43B88BE96FF90C931DA07490986654744 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2e:ab:e8:14:38:2e:b5:d3:4f:39:84:96:aa: 46:dd:e9:a6:f6:62:8a:9c:f9:4d:4f:52:c1:83:6c: 01:e2:e3:1c:7f:84:14:62:d4:a9:34:71:46:9e:7c: f8:74:51:ae:8e:2d:aa:ff:17:f8:73:33:7a:c3:de: 5c:4c:f4:12:92:24:67:d1:07:d1:74:40:2f:f8:57: 34:fd:ed:8d:cf:70:0e:1d:0e:9a:06:c7:2c:9f:1a: 60:ae:98:4c:f6:a9:8d:c3:1e:56:3c:ce:66:52:7a: a6:c8:5a:dc:df:ec:d5:32:23:de:80:49:4d:1e:8b: d1:fe:cc:82:d1:d0:3a:9e:1c:c0:ff:fc:ca:e0:6d: 89:b7:85:2b:c5:83:f4:c0:eb:96:2e:6c:4c:d7:ae: 97:28:70:62:bb:10:d2:d2:29:d8:4c:2c:72:68:64: 4e:07:82:ac:94:72:ce:3b:62:65:93:b4:db:48:3a: 15:3e:f6:c9:26:b5:f7:e8:53:9c:65:79:d7:04:8d: b4:86:b2:20:c6:7f:68:71:45:9e:c1:d6:d4:17:e0: 2b:82:24:77:20:5c:31:54:d8:d3:21:45:b4:c3:92: 81:bc:02:56:a4:4d:24:92:02:f8:c7:a6:3f:6f:f0: e6:d3:f0:e8:ec:dc:a0:6e:a1:a8:20:cd:56:ab:a3: 1a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:04:56:F4:3B:88:BE:96:FF:90:C9:31:DA:07:49:09:86:65:47:44 X509v3 Authority Key Identifier: keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.173.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0e:2f:ad:fd:9f:a1:08:4f:ad:07:fd:e8:7f:cc:f4:8b:31:75: c7:db:3b:9a:78:67:9b:cf:e8:a6:1c:69:46:90:e4:f5:c5:aa: db:a0:50:90:8c:8f:fb:5a:d5:4b:3c:f7:e8:00:02:37:30:a2: 3d:0f:98:bb:95:8e:c3:60:65:3c:32:85:1e:41:35:f8:52:0f: f8:78:8f:af:92:b9:4c:73:ae:c0:62:af:44:90:0b:17:8e:16: ab:f7:09:c8:e7:9c:ec:f0:36:93:ca:9a:63:32:85:11:ab:de: d2:8b:ac:85:95:43:69:dd:48:97:5b:f4:3d:5e:71:c0:d3:10: a0:19:d1:d1:ec:f8:c9:c2:82:c1:2a:91:fe:d3:c8:87:08:cf: d1:f5:56:57:89:6c:5c:dc:6f:05:1b:6a:98:22:8a:36:ae:1c: 9e:23:b7:74:19:2c:95:df:6a:51:e8:5f:c6:7f:b6:18:8a:79: 1c:f1:cb:4c:d9:8f:ea:91:ee:5b:93:41:79:4a:ae:cb:50:f0: 50:d9:dc:22:b3:64:2b:02:fc:2f:03:a1:f5:31:64:14:44:3a: 4e:42:38:ae:a5:49:bc:8f:e2:24:de:3b:4a:9e:9f:cb:eb:69: 4c:72:c4:9d:a9:2a:df:c9:e6:d9:92:a2:0b:b6:a8:66:33:f2: 11:55:4e:a9 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUIjeTEVULKr6IgBShLIiRS/Qj0LswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2 QkY0MjQzRDAeFw0yNjA3MDYwODM4MDlaFw0yNzA3MDUwODQzMDlaMDMxMTAvBgNV BAMTKDI1MDQ1NkY0M0I4OEJFOTZGRjkwQzkzMURBMDc0OTA5ODY2NTQ3NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9LqvoFDgutdNPOYSWqkbd6ab2 Yoqc+U1PUsGDbAHi4xx/hBRi1Kk0cUaefPh0Ua6OLar/F/hzM3rD3lxM9BKSJGfR B9F0QC/4VzT97Y3PcA4dDpoGxyyfGmCumEz2qY3DHlY8zmZSeqbIWtzf7NUyI96A SU0ei9H+zILR0DqeHMD//MrgbYm3hSvFg/TA65YubEzXrpcocGK7ENLSKdhMLHJo ZE4HgqyUcs47YmWTtNtIOhU+9skmtffoU5xledcEjbSGsiDGf2hxRZ7B1tQX4CuC JHcgXDFU2NMhRbTDkoG8AlakTSSSAvjHpj9v8ObT8Ojs3KBuoaggzVaroxqBAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUJQRW9DuIvpb/kMkx2gdJCYZlR0QwHwYDVR0j BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUzMTM3 MzMyZTMwMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAZ8rQAw DQYJKoZIhvcNAQELBQADggEBAA4vrf2foQhPrQf96H/M9IsxdcfbO5p4Z5vP6KYc aUaQ5PXFqtugUJCMj/ta1Us89+gAAjcwoj0PmLuVjsNgZTwyhR5BNfhSD/h4j6+S uUxzrsBir0SQCxeOFqv3CcjnnOzwNpPKmmMyhRGr3tKLrIWVQ2ndSJdb9D1eccDT EKAZ0dHs+MnCgsEqkf7TyIcIz9H1VleJbFzcbwUbapgiijauHJ4jt3QZLJXfalHo X8Z/thiKeRzxy0zZj+qR7luTQXlKrstQ8FDZ3CKzZCsC/C8DofUxZBREOk5COK6l SbyP4iTeO0qen8vraUxyxJ2pKt/J5tmSogu2qGYz8hFVTqk= -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:13 2026 by rpki-client