$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3137362e302f32302d3230203d3e2034383038.roa File: 3231312e3130332e3137362e302f32302d3230203d3e2034383038.roa (raw, json) Hash identifier: /mk+QS9qJTqy5jG7xtwVUCcCIXmrswdS650JV1bk0dk= Subject key identifier: 3A:49:EE:1C:13:84:79:DF:23:3F:6A:3C:D3:21:2D:B4:FB:6F:6C:77 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 380E428CF8F5A8F4AA25860AF98566B1A8BEE1DF Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3137362e302f32302d3230203d3e2034383038.roa Signing time: Fri 05 Jun 2026 05:58:35 +0000 ROA not before: Fri 05 Jun 2026 05:53:35 +0000 ROA not after: Fri 04 Jun 2027 05:58:35 +0000 asID: 4808 IP address blocks: 211.103.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:0e:42:8c:f8:f5:a8:f4:aa:25:86:0a:f9:85:66:b1:a8:be:e1:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: Jun 5 05:53:35 2026 GMT Not After : Jun 4 05:58:35 2027 GMT Subject: CN=3A49EE1C138479DF233F6A3CD3212DB4FB6F6C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:57:b7:d4:6a:d1:b0:e1:50:0d:33:24:50:af: 57:b0:d4:cd:ce:2a:59:66:57:91:d4:81:6e:6f:22: 3c:10:1c:24:c3:f0:d2:6a:1c:0e:86:dd:54:c3:6f: b9:1c:23:12:26:9d:ed:0a:9e:db:92:e3:40:f8:6d: 61:ac:6b:ff:fb:1b:82:7e:59:c4:7b:97:77:01:ae: 31:d8:9b:b3:99:f4:e6:24:98:09:25:1f:74:3f:02: 40:07:29:db:63:e3:69:3c:f6:a2:9b:81:02:c3:61: 85:ba:50:7f:de:4f:aa:3a:93:d7:39:ca:4d:b5:d1: 07:d7:15:85:40:de:b6:ee:d4:7a:bb:94:d3:6d:20: 62:c3:59:a1:9d:02:c5:64:6e:c7:2b:03:9a:85:f2: 94:a9:3e:e5:64:dd:0b:f5:57:6e:65:3d:11:c9:fb: 5c:50:69:df:84:2f:d4:67:31:44:74:e3:86:37:1d: 70:b1:65:df:df:3e:23:07:83:78:dc:0b:f0:ce:45: 63:7e:5e:2f:1d:4a:43:08:3e:62:0f:68:3a:25:4c: 5d:38:77:69:13:94:95:2e:4a:33:dc:2a:e9:7b:2f: 2b:58:83:f6:57:33:1a:13:80:5f:9d:54:ef:7d:f0: 43:29:63:55:41:4c:ac:13:12:61:1e:a8:a4:be:d5: ea:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:49:EE:1C:13:84:79:DF:23:3F:6A:3C:D3:21:2D:B4:FB:6F:6C:77 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3137362e302f32302d3230203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 211.103.176.0/20 Signature Algorithm: sha256WithRSAEncryption 6d:8a:68:8f:45:c1:04:43:58:85:f4:6a:07:ff:33:d3:f9:98: a4:1b:30:e7:c5:21:1c:17:3b:7f:42:13:8b:b5:03:47:6b:02: 39:de:4d:4e:aa:ca:fd:3e:f7:99:80:22:20:6b:12:a8:43:e2: 5e:15:a3:cc:5b:76:79:68:c2:59:3f:e5:8c:d0:dd:34:4b:8a: 39:f5:68:13:18:1d:09:50:96:a4:17:1e:2d:9c:d7:ac:a7:69: 94:da:aa:37:3b:a4:9a:72:3e:91:31:76:ee:a5:5a:54:d7:3e: 49:6e:83:80:d0:7a:86:90:3c:fe:18:af:a1:58:a8:f4:70:ee: 32:2b:67:d1:67:f3:38:24:37:ac:ce:3c:2c:77:c6:0d:61:d6: 8b:0b:de:f2:ec:cb:20:d3:86:66:5b:34:19:ae:c0:b4:70:a0: 5a:0c:a5:17:eb:fe:8b:13:bc:2d:47:33:33:fd:72:c9:04:dd: e4:d7:88:06:97:13:cf:11:b5:e6:d7:91:c2:76:e9:32:55:8c: 10:b5:51:13:a9:48:f6:e8:3f:c6:02:fd:0f:42:70:d4:00:d3: 24:ce:7b:2f:11:33:37:a5:9d:ac:fc:8e:bc:d6:d0:bc:7b:c3: aa:9e:67:1f:1f:b7:ec:70:fa:7f:62:1e:29:96:d6:ca:c7:76: 25:4a:7e:6f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOA5CjPj1qPSqJYYK+YVmsai+4d8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA2MDUwNTUzMzVaFw0yNzA2MDQwNTU4MzVaMDMxMTAvBgNV BAMTKDNBNDlFRTFDMTM4NDc5REYyMzNGNkEzQ0QzMjEyREI0RkI2RjZDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVV7fUatGw4VANMyRQr1ew1M3O KllmV5HUgW5vIjwQHCTD8NJqHA6G3VTDb7kcIxImne0KntuS40D4bWGsa//7G4J+ WcR7l3cBrjHYm7OZ9OYkmAklH3Q/AkAHKdtj42k89qKbgQLDYYW6UH/eT6o6k9c5 yk210QfXFYVA3rbu1Hq7lNNtIGLDWaGdAsVkbscrA5qF8pSpPuVk3Qv1V25lPRHJ +1xQad+EL9RnMUR044Y3HXCxZd/fPiMHg3jcC/DORWN+Xi8dSkMIPmIPaDolTF04 d2kTlJUuSjPcKul7LytYg/ZXMxoTgF+dVO998EMpY1VBTKwTEmEeqKS+1eo5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOknuHBOEed8jP2o80yEttPtvbHcwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMyMzEzMTJlMzEz MDMzMmUzMTM3MzYyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBNNnsDANBgkqhkiG9w0BAQsFAAOCAQEAbYpoj0XBBENYhfRqB/8z0/mY pBsw58UhHBc7f0ITi7UDR2sCOd5NTqrK/T73mYAiIGsSqEPiXhWjzFt2eWjCWT/l jNDdNEuKOfVoExgdCVCWpBceLZzXrKdplNqqNzukmnI+kTF27qVaVNc+SW6DgNB6 hpA8/hivoVio9HDuMitn0WfzOCQ3rM48LHfGDWHWiwve8uzLINOGZls0Ga7AtHCg WgylF+v+ixO8LUczM/1yyQTd5NeIBpcTzxG15teRwnbpMlWMELVRE6lI9ug/xgL9 D0Jw1ADTJM57LxEzN6WdrPyOvNbQvHvDqp5nHx+37HD6f2IeKZbWysd2JUp+bw== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:09 2026 by rpki-client