$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133312e302f32342d3234203d3e2034383437.roa File: 3132302e34352e3133312e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: rZVShIdcBPrlYEoA5+c1qu28FxcdD4pDA57BCl5MpLg= Subject key identifier: 1C:02:D0:9C:D9:1C:55:F8:96:75:1D:09:47:4A:D8:35:F6:9B:5A:02 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 47C37EA4E5D37263DC2961A446DE133E6605FE1E Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133312e302f32342d3234203d3e2034383437.roa Signing time: Fri 05 Jun 2026 06:18:50 +0000 ROA not before: Fri 05 Jun 2026 06:13:50 +0000 ROA not after: Fri 04 Jun 2027 06:18:50 +0000 asID: 4847 IP address blocks: 120.45.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:c3:7e:a4:e5:d3:72:63:dc:29:61:a4:46:de:13:3e:66:05:fe:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 5 06:13:50 2026 GMT Not After : Jun 4 06:18:50 2027 GMT Subject: CN=1C02D09CD91C55F896751D09474AD835F69B5A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:c4:06:2c:56:74:da:0a:74:24:7b:74:40: 35:ac:73:61:e3:f4:87:19:67:a5:5c:42:4e:eb:43: e7:b3:25:1e:d5:37:3e:d1:a3:40:eb:92:6c:0c:c3: f5:fc:58:95:19:89:3d:39:a4:39:6a:70:66:6c:de: 33:5e:b7:06:be:48:7c:b9:24:e9:38:00:f7:81:37: 9c:61:ed:aa:e5:76:9b:ad:ac:be:d2:64:52:f8:5c: 78:28:b7:a6:fa:7a:4b:49:8b:b6:10:1a:ca:38:6f: 15:31:34:71:9e:2a:70:1d:31:42:9e:28:d9:8e:b5: 9d:65:a3:45:52:48:ef:8f:fa:7c:93:b2:39:4d:35: ab:6b:2b:cb:b4:7e:cb:e3:68:86:6c:b3:73:3e:f6: 2a:76:ab:db:45:c1:fa:31:5c:14:a9:61:85:95:c3: 6c:48:3a:02:00:8b:c5:32:14:ef:d1:71:ae:d8:8c: f7:31:14:39:a7:a8:8e:e5:b0:02:6d:37:55:f6:e9: 6f:b7:d9:e9:00:10:51:1f:36:e7:cb:26:8d:89:09: c7:92:f0:bf:10:02:b9:57:a7:78:17:bb:1d:a4:79: fc:71:1e:50:ca:40:9d:ca:27:77:18:98:2f:6a:78: 44:d0:02:f3:69:86:ab:fa:15:57:3d:ed:4d:a8:22: 2d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:02:D0:9C:D9:1C:55:F8:96:75:1D:09:47:4A:D8:35:F6:9B:5A:02 X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133312e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.45.131.0/24 Signature Algorithm: sha256WithRSAEncryption aa:a1:da:75:7d:ac:fe:b8:e7:90:3f:e3:10:c7:01:d4:c4:bd: 75:a5:85:78:35:b8:34:18:d3:4d:9b:32:e0:a6:4e:e4:74:57: c0:12:17:d7:76:05:a8:ba:01:2e:f2:97:c2:52:1b:1f:f5:e7: 74:b4:43:c7:a8:77:5d:86:ff:7c:43:47:86:5a:ee:9a:c6:c5: 2e:8f:e6:f6:aa:3e:9d:ff:94:1c:95:65:6b:55:89:56:b3:db: 13:c3:31:51:01:3a:fe:66:93:44:17:3a:31:38:d9:d4:3b:d6: 2c:08:00:55:34:cb:1f:c9:e9:fa:9a:87:9f:0a:6c:87:1b:ca: 4b:b2:3d:b8:e3:4d:13:da:58:af:a3:f4:0d:85:69:7e:13:67: 78:19:91:23:80:22:47:67:a0:dd:db:c2:3a:f2:76:a8:ad:be: fd:1f:aa:5c:d6:48:07:3a:1a:a8:1f:63:61:8a:9d:ff:21:65: 8f:f3:84:50:35:73:d1:47:ae:24:de:96:5a:e6:d5:5e:5b:df: 78:3c:81:c4:88:f4:a4:ba:f1:cc:d8:8f:46:98:f9:b4:a5:7b: 43:01:1a:5c:02:e5:08:c6:e6:a4:6e:38:d6:6c:20:47:d4:64: 32:f2:da:c6:99:1c:36:77:6d:8c:b7:ea:0e:8b:6d:91:b4:77: a8:06:f6:45 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUR8N+pOXTcmPcKWGkRt4TPmYF/h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MDUwNjEzNTBaFw0yNzA2MDQwNjE4NTBaMDMxMTAvBgNV BAMTKDFDMDJEMDlDRDkxQzU1Rjg5Njc1MUQwOTQ3NEFEODM1RjY5QjVBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn3MQGLFZ02gp0JHt0QDWsc2Hj 9IcZZ6VcQk7rQ+ezJR7VNz7Ro0DrkmwMw/X8WJUZiT05pDlqcGZs3jNetwa+SHy5 JOk4APeBN5xh7arldputrL7SZFL4XHgot6b6ektJi7YQGso4bxUxNHGeKnAdMUKe KNmOtZ1lo0VSSO+P+nyTsjlNNatrK8u0fsvjaIZss3M+9ip2q9tFwfoxXBSpYYWV w2xIOgIAi8UyFO/Rca7YjPcxFDmnqI7lsAJtN1X26W+32ekAEFEfNufLJo2JCceS 8L8QArlXp3gXux2kefxxHlDKQJ3KJ3cYmC9qeETQAvNphqv6FVc97U2oIi3LAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUHALQnNkcVfiWdR0JR0rYNfabWgIwHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM1 MmUzMTMzMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHgtgzANBgkqhkiG9w0BAQsFAAOCAQEAqqHadX2s/rjnkD/jEMcB1MS9daWF eDW4NBjTTZsy4KZO5HRXwBIX13YFqLoBLvKXwlIbH/XndLRDx6h3XYb/fENHhlru msbFLo/m9qo+nf+UHJVla1WJVrPbE8MxUQE6/maTRBc6MTjZ1DvWLAgAVTTLH8np +pqHnwpshxvKS7I9uONNE9pYr6P0DYVpfhNneBmRI4AiR2eg3dvCOvJ2qK2+/R+q XNZIBzoaqB9jYYqd/yFlj/OEUDVz0UeuJN6WWubVXlvfeDyBxIj0pLrxzNiPRpj5 tKV7QwEaXALlCMbmpG441mwgR9RkMvLaxpkcNndtjLfqDottkbR3qAb2RQ== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:52 2026 by rpki-client