$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e33322e302f32302d3230203d3e2034383437.roa File: 3132302e34352e33322e302f32302d3230203d3e2034383437.roa (raw, json) Hash identifier: EkmT6NlTMkOEL78440ooHW0//r+3sg62pAHAzFd1Mmc= Subject key identifier: 4D:58:E3:89:BB:21:09:AC:82:1A:F9:E4:AA:EE:22:73:54:E0:54:62 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 24B447D391879943187968F0BDDB2C632393A901 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e33322e302f32302d3230203d3e2034383437.roa Signing time: Fri 05 Jun 2026 06:23:49 +0000 ROA not before: Fri 05 Jun 2026 06:18:49 +0000 ROA not after: Fri 04 Jun 2027 06:23:49 +0000 asID: 4847 IP address blocks: 120.45.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:b4:47:d3:91:87:99:43:18:79:68:f0:bd:db:2c:63:23:93:a9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 5 06:18:49 2026 GMT Not After : Jun 4 06:23:49 2027 GMT Subject: CN=4D58E389BB2109AC821AF9E4AAEE227354E05462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:95:62:4a:17:77:6e:2d:fb:c1:cf:57:ca: 0a:9b:d6:cf:a0:4b:2d:67:5e:43:83:6d:37:02:f5: 57:7d:fa:31:9e:b2:ce:ec:c0:d6:35:18:14:7f:a9: 09:26:57:8f:23:5f:f6:c5:11:9a:02:58:ce:62:3b: a2:72:18:f0:34:74:51:52:0d:e5:25:ad:1f:78:23: a7:bc:d2:0b:f3:a8:d3:1c:1b:12:e3:bb:d3:37:47: d2:0c:3d:92:d9:66:50:f3:99:e8:85:dc:b6:8e:75: 91:e9:ac:a3:1d:89:b3:73:22:18:ea:8c:0b:db:38: ea:89:4c:72:dd:db:52:5d:00:d2:78:f6:a9:c5:24: 02:bf:e4:8b:8e:57:8e:55:29:82:f8:a2:ca:d0:46: f0:85:98:4c:60:f6:c1:a6:e7:f8:16:58:8e:e5:98: dd:26:86:42:31:4f:91:e4:e0:49:8c:b6:88:d6:96: 30:4d:53:ca:6d:5d:12:a2:e4:d1:db:9f:5e:82:54: b9:d6:dd:c9:d2:3b:3d:14:6e:58:2d:75:6e:0e:2b: e3:c7:33:97:d8:5f:ac:f3:94:40:f9:61:dc:86:b7: 7e:35:38:e9:8c:29:6c:8e:5f:86:e4:12:33:28:19: 5c:17:8c:78:35:c3:bf:a6:49:c4:c0:1f:47:71:c2: 97:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:58:E3:89:BB:21:09:AC:82:1A:F9:E4:AA:EE:22:73:54:E0:54:62 X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e33322e302f32302d3230203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.45.32.0/20 Signature Algorithm: sha256WithRSAEncryption c5:1f:6c:0c:34:fb:23:5b:cc:8f:27:8f:a5:b8:f4:1d:99:8f: 30:39:91:a3:9d:59:02:6d:ac:a0:38:84:cc:e2:1c:56:1c:74: f5:ba:37:4e:ed:36:cd:f6:31:be:c9:02:fb:80:d0:c9:4c:74: 3e:e0:e6:77:89:2a:54:87:1f:ff:89:f9:11:12:32:8a:a7:a0: a4:08:a5:53:4a:05:fe:12:6c:e6:05:f3:68:6c:70:72:cd:56: a7:25:9d:d2:94:cb:b2:8a:bd:e2:8c:27:0a:0b:96:6b:66:8b: 78:74:0e:2a:2d:ec:db:f6:2b:1c:4f:91:b2:8a:d4:e3:1d:e4: 66:40:67:92:f8:db:fa:4d:a3:82:1b:21:95:ba:cc:2b:11:cd: b5:03:eb:37:7b:9c:1d:27:13:c4:ca:20:e4:28:8d:f7:bf:e4: b7:3e:6e:2e:c5:95:c1:3b:6a:90:21:fa:eb:8f:e9:35:cb:83: b2:99:f8:1a:83:92:b6:e5:8e:25:9b:6e:0d:be:12:e9:63:32: 97:04:ec:dc:c6:d9:1a:5c:38:2e:ad:4c:bf:c8:7d:af:f8:59: 10:ed:6e:89:74:53:be:20:2c:3f:cd:23:dd:87:9d:bf:2b:b8: 42:57:48:04:83:94:d2:52:18:09:aa:d4:e5:e7:11:78:f4:67: cd:db:5a:32 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUJLRH05GHmUMYeWjwvdssYyOTqQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MDUwNjE4NDlaFw0yNzA2MDQwNjIzNDlaMDMxMTAvBgNV BAMTKDRENThFMzg5QkIyMTA5QUM4MjFBRjlFNEFBRUUyMjczNTRFMDU0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvS5ViShd3bi37wc9Xygqb1s+g Sy1nXkODbTcC9Vd9+jGess7swNY1GBR/qQkmV48jX/bFEZoCWM5iO6JyGPA0dFFS DeUlrR94I6e80gvzqNMcGxLju9M3R9IMPZLZZlDzmeiF3LaOdZHprKMdibNzIhjq jAvbOOqJTHLd21JdANJ49qnFJAK/5IuOV45VKYL4osrQRvCFmExg9sGm5/gWWI7l mN0mhkIxT5Hk4EmMtojWljBNU8ptXRKi5NHbn16CVLnW3cnSOz0UblgtdW4OK+PH M5fYX6zzlED5YdyGt341OOmMKWyOX4bkEjMoGVwXjHg1w7+mScTAH0dxwpeJAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUTVjjibshCayCGvnkqu4ic1TgVGIwHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM1 MmUzMzMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAR4LSAwDQYJKoZIhvcNAQELBQADggEBAMUfbAw0+yNbzI8nj6W49B2ZjzA5kaOd WQJtrKA4hMziHFYcdPW6N07tNs32Mb7JAvuA0MlMdD7g5neJKlSHH/+J+RESMoqn oKQIpVNKBf4SbOYF82hscHLNVqclndKUy7KKveKMJwoLlmtmi3h0Diot7Nv2KxxP kbKK1OMd5GZAZ5L42/pNo4IbIZW6zCsRzbUD6zd7nB0nE8TKIOQojfe/5Lc+bi7F lcE7apAh+uuP6TXLg7KZ+BqDkrbljiWbbg2+EuljMpcE7NzG2RpcOC6tTL/Ifa/4 WRDtbol0U74gLD/NI92Hnb8ruEJXSASDlNJSGAmq1OXnEXj0Z83bWjI= -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:39 2026 by rpki-client