$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3136302e302f32302d3230203d3e2034383038.roa File: 3231312e3130332e3136302e302f32302d3230203d3e2034383038.roa (raw, json) Hash identifier: D8gEblxEL0PgIAMTl+4CUbHyiPm6RD4pcMpdEZxF1dQ= Subject key identifier: BC:B1:78:97:49:C4:A5:36:00:72:B6:67:82:F4:D3:3B:85:49:5E:6A Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 43BFF45109509ABBE2887EBB2C26BDB558F073CA Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3136302e302f32302d3230203d3e2034383038.roa Signing time: Fri 05 Jun 2026 05:58:34 +0000 ROA not before: Fri 05 Jun 2026 05:53:34 +0000 ROA not after: Fri 04 Jun 2027 05:58:34 +0000 asID: 4808 IP address blocks: 211.103.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:bf:f4:51:09:50:9a:bb:e2:88:7e:bb:2c:26:bd:b5:58:f0:73:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jun 5 05:53:34 2026 GMT Not After : Jun 4 05:58:34 2027 GMT Subject: CN=BCB1789749C4A5360072B66782F4D33B85495E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:ae:c3:fb:dc:d5:36:65:33:9f:09:82:60: 12:18:15:5c:f0:98:da:59:28:c1:f9:65:3e:1e:c1: 7e:33:28:fc:1c:a8:43:f8:60:78:57:f7:bc:b8:f8: 56:31:72:8c:f7:dc:d1:c8:a2:cd:d5:dd:1f:40:cd: d2:37:bb:82:c0:5d:d7:ab:aa:69:ad:e7:6d:69:98: 96:f9:13:49:25:16:29:0e:76:e3:10:1e:3e:0c:98: 98:87:23:15:da:3e:b2:c3:74:02:ba:b3:0d:62:d9: a1:46:03:9b:d3:e5:f0:6a:75:3c:0e:cd:a8:a8:e4: 0f:34:01:66:99:4a:61:a2:05:45:5f:c3:94:63:5d: 11:40:1b:e7:cf:69:ed:92:08:f1:a3:87:e1:69:de: ed:04:b7:11:48:39:3d:f8:47:1d:cb:bb:d8:49:d5: 90:a3:73:81:9e:a0:eb:1e:eb:a6:34:70:77:b6:37: e6:bd:40:50:d2:35:36:de:c7:c6:42:07:86:6a:d3: 35:11:65:14:48:39:bf:ce:13:a1:dc:be:b8:73:27: e4:3c:23:a5:50:de:9c:f7:1b:d7:fb:0b:3a:82:80: de:9b:8d:4d:cb:88:f2:e1:ca:66:4b:de:1f:b9:b6: 06:e4:06:ad:30:63:58:b9:d5:1d:66:09:13:7c:3b: bc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:B1:78:97:49:C4:A5:36:00:72:B6:67:82:F4:D3:3B:85:49:5E:6A X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3136302e302f32302d3230203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.103.160.0/20 Signature Algorithm: sha256WithRSAEncryption 73:34:78:4b:c7:94:60:95:23:2d:61:af:80:93:78:4d:6a:71: 60:65:7e:9b:2c:1d:74:a5:23:77:78:84:0b:f4:32:9e:0c:d1: 63:2e:06:f8:ae:ec:eb:3e:74:6b:f9:8b:4d:0e:7a:2e:05:e0: 17:b6:54:a1:97:73:a3:19:a4:80:9c:43:fc:39:c6:b9:13:a2: e7:c3:81:06:c4:5a:f4:1a:c3:b6:31:dd:0a:d3:52:e5:1d:39: d3:0a:2c:83:ec:54:70:87:83:8b:41:b0:5c:be:24:1e:18:13: af:98:f4:6c:75:89:bb:0b:98:8a:9e:41:b6:b8:a6:2f:7d:49: 52:27:b4:0d:e0:64:67:b6:e0:eb:b6:4d:a2:28:bc:a3:0e:d1: 20:31:b2:96:d1:61:d0:55:d4:a1:b2:5f:86:e6:fc:56:8d:b7: 9a:0b:30:3c:1e:00:09:5c:42:b2:0d:8a:b2:bf:c7:91:33:9d: 18:df:17:88:c0:7a:eb:95:b7:22:4c:dc:48:2c:9d:eb:92:68: da:b7:5e:aa:8e:9a:e8:a7:ff:b5:43:8f:99:02:ba:3d:8e:d5: 7e:33:fe:bf:a2:44:2a:33:d0:71:dd:0f:9b:81:e9:97:04:8d: 08:97:48:52:87:03:70:89:0f:0b:c5:fb:73:20:45:0d:69:a4: 15:0f:7e:91 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQ7/0UQlQmrviiH67LCa9tVjwc8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA2MDUwNTUzMzRaFw0yNzA2MDQwNTU4MzRaMDMxMTAvBgNV BAMTKEJDQjE3ODk3NDlDNEE1MzYwMDcyQjY2NzgyRjREMzNCODU0OTVFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yK7D+9zVNmUznwmCYBIYFVzw mNpZKMH5ZT4ewX4zKPwcqEP4YHhX97y4+FYxcoz33NHIos3V3R9AzdI3u4LAXder qmmt521pmJb5E0klFikOduMQHj4MmJiHIxXaPrLDdAK6sw1i2aFGA5vT5fBqdTwO zaio5A80AWaZSmGiBUVfw5RjXRFAG+fPae2SCPGjh+Fp3u0EtxFIOT34Rx3Lu9hJ 1ZCjc4GeoOse66Y0cHe2N+a9QFDSNTbex8ZCB4Zq0zURZRRIOb/OE6HcvrhzJ+Q8 I6VQ3pz3G9f7CzqCgN6bjU3LiPLhymZL3h+5tgbkBq0wY1i51R1mCRN8O7xzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvLF4l0nEpTYAcrZngvTTO4VJXmowHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMyMzEzMTJlMzEz MDMzMmUzMTM2MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNNnoDANBgkqhkiG9w0BAQsFAAOCAQEAczR4S8eUYJUjLWGvgJN4TWpx YGV+mywddKUjd3iEC/QyngzRYy4G+K7s6z50a/mLTQ56LgXgF7ZUoZdzoxmkgJxD /DnGuROi58OBBsRa9BrDtjHdCtNS5R050wosg+xUcIeDi0GwXL4kHhgTr5j0bHWJ uwuYip5BtrimL31JUie0DeBkZ7bg67ZNoii8ow7RIDGyltFh0FXUobJfhub8Vo23 mgswPB4ACVxCsg2Ksr/HkTOdGN8XiMB665W3IkzcSCyd65Jo2rdeqo6a6Kf/tUOP mQK6PY7VfjP+v6JEKjPQcd0Pm4HplwSNCJdIUocDcIkPC8X7cyBFDWmkFQ9+kQ== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:12 2026 by rpki-client