$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e2034383437.roa File: 3132302e34352e3133362e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: G/AftjdDuP2P0UsfUjL59a44Zo4QexPqC2A3nlshZG8= Subject key identifier: 9E:67:D9:5B:B7:59:EF:D2:75:C4:1A:22:69:06:17:BB:33:69:04:2A Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 7525FA78F3C2DB99FF35DFF46D3B1F3A641FE7C1 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e2034383437.roa Signing time: Fri 05 Jun 2026 06:18:49 +0000 ROA not before: Fri 05 Jun 2026 06:13:49 +0000 ROA not after: Fri 04 Jun 2027 06:18:49 +0000 asID: 4847 IP address blocks: 120.45.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:25:fa:78:f3:c2:db:99:ff:35:df:f4:6d:3b:1f:3a:64:1f:e7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 5 06:13:49 2026 GMT Not After : Jun 4 06:18:49 2027 GMT Subject: CN=9E67D95BB759EFD275C41A22690617BB3369042A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c2:23:6c:45:62:c6:d6:f1:bb:36:b4:00:1c: 82:dd:ba:d1:8e:af:de:78:64:b3:12:65:e8:59:ef: d4:60:9f:a5:86:14:d4:d2:8c:e0:2f:74:e8:fe:e7: ce:0b:90:66:02:71:70:0f:6c:1b:2a:c8:f0:3f:9c: 9f:03:e5:52:c4:9f:1c:60:d8:88:5f:36:99:45:6c: 28:1f:4c:d9:04:13:ae:74:91:50:e2:90:55:dd:6a: 8a:df:39:93:c1:58:aa:9c:dc:8e:f9:e1:90:ba:38: 4a:20:10:38:8b:31:de:57:a1:53:ff:f0:d5:d3:1e: bf:db:92:3f:de:15:1a:12:bf:48:b0:63:70:fb:a8: 06:0a:f5:a4:2d:21:83:69:d7:b3:87:4c:77:04:e8: 5b:bf:01:10:3b:7e:c8:71:06:68:ae:3f:c9:19:84: 5b:8a:51:5c:43:f9:e6:87:4a:8e:59:12:8d:63:2e: af:a1:20:22:50:5e:2e:d1:1d:4e:3b:7c:ce:b7:a4: 76:12:e9:a6:38:cc:ba:11:5f:84:82:d8:e2:6c:d6: 4f:2b:90:87:46:40:6c:95:6d:6a:79:60:80:52:90: e0:94:62:14:f6:38:c3:c5:d6:ac:31:4c:dd:6a:fb: 28:80:30:c7:9b:b0:7a:30:b5:5b:e6:23:53:d2:ba: 60:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:67:D9:5B:B7:59:EF:D2:75:C4:1A:22:69:06:17:BB:33:69:04:2A X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.45.136.0/24 Signature Algorithm: sha256WithRSAEncryption 88:4b:ec:9d:bc:60:bd:a2:0e:72:ef:1f:d7:f7:19:08:02:67: 67:7b:f2:be:68:37:6e:e4:c0:33:52:80:92:70:e0:f0:d5:62: 11:30:d2:9c:f0:4f:b1:fa:21:24:33:bf:12:d7:a3:ce:6e:e0: 31:7a:d7:e0:e2:19:9f:fc:81:0e:a1:28:ab:93:e5:53:9e:07: 94:fb:6c:b9:f8:ea:2b:b3:be:0e:2c:b6:e4:18:d5:06:9a:f3: 2e:b9:e5:62:62:93:03:f1:49:b0:b3:ca:d8:da:42:6c:03:ec: b4:d5:59:9b:66:10:5a:eb:63:9d:83:14:aa:40:f5:77:85:7c: c8:30:ae:b5:53:05:32:90:34:69:45:30:c7:fe:3d:60:95:26: 9c:ee:11:2d:22:b0:c8:1b:4d:16:ec:5d:c3:f5:1d:7c:d4:77: 17:72:ee:89:a2:fa:33:63:6c:95:fc:32:2d:ec:92:d0:2a:a4: ed:53:a5:eb:08:c7:49:4e:4a:af:1d:26:c7:2e:a7:8d:c6:7f: 7b:9b:89:7c:9b:0a:28:0d:2c:e1:32:d6:cb:c7:2d:5f:26:61: 5c:4f:54:b0:a9:c6:35:ae:bc:f7:97:c9:8d:e9:89:b7:4a:d3: 4f:e0:b8:78:fc:e4:80:de:b1:5d:99:1b:a8:77:b7:a3:b1:7a: 3c:a0:ab:54 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdSX6ePPC25n/Nd/0bTsfOmQf58EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MDUwNjEzNDlaFw0yNzA2MDQwNjE4NDlaMDMxMTAvBgNV BAMTKDlFNjdEOTVCQjc1OUVGRDI3NUM0MUEyMjY5MDYxN0JCMzM2OTA0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUwiNsRWLG1vG7NrQAHILdutGO r954ZLMSZehZ79Rgn6WGFNTSjOAvdOj+584LkGYCcXAPbBsqyPA/nJ8D5VLEnxxg 2IhfNplFbCgfTNkEE650kVDikFXdaorfOZPBWKqc3I754ZC6OEogEDiLMd5XoVP/ 8NXTHr/bkj/eFRoSv0iwY3D7qAYK9aQtIYNp17OHTHcE6Fu/ARA7fshxBmiuP8kZ hFuKUVxD+eaHSo5ZEo1jLq+hICJQXi7RHU47fM63pHYS6aY4zLoRX4SC2OJs1k8r kIdGQGyVbWp5YIBSkOCUYhT2OMPF1qwxTN1q+yiAMMebsHowtVvmI1PSumBzAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUnmfZW7dZ79J1xBoiaQYXuzNpBCowHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM1 MmUzMTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHgtiDANBgkqhkiG9w0BAQsFAAOCAQEAiEvsnbxgvaIOcu8f1/cZCAJnZ3vy vmg3buTAM1KAknDg8NViETDSnPBPsfohJDO/Etejzm7gMXrX4OIZn/yBDqEoq5Pl U54HlPtsufjqK7O+Diy25BjVBprzLrnlYmKTA/FJsLPK2NpCbAPstNVZm2YQWutj nYMUqkD1d4V8yDCutVMFMpA0aUUwx/49YJUmnO4RLSKwyBtNFuxdw/UdfNR3F3Lu iaL6M2NslfwyLeyS0Cqk7VOl6wjHSU5Krx0mxy6njcZ/e5uJfJsKKA0s4TLWy8ct XyZhXE9UsKnGNa6895fJjemJt0rTT+C4ePzkgN6xXZkbqHe3o7F6PKCrVA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:50 2026 by rpki-client