$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232332e302f32342d3234203d3e2034383437.roa File: 3132302e34372e3232332e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: xNB302fXsACRHpyu8eqXYgfRkA36O2zuczTp6TwBpQM= Subject key identifier: 40:D0:4A:88:DF:D0:CA:B7:D7:20:09:9E:57:95:4B:D7:1A:96:04:AA Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 3CD213895F3CB4C18B952B49B627DCAC42744E10 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232332e302f32342d3234203d3e2034383437.roa Signing time: Fri 05 Jun 2026 06:18:48 +0000 ROA not before: Fri 05 Jun 2026 06:13:48 +0000 ROA not after: Fri 04 Jun 2027 06:18:48 +0000 asID: 4847 IP address blocks: 120.47.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:d2:13:89:5f:3c:b4:c1:8b:95:2b:49:b6:27:dc:ac:42:74:4e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 5 06:13:48 2026 GMT Not After : Jun 4 06:18:48 2027 GMT Subject: CN=40D04A88DFD0CAB7D720099E57954BD71A9604AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1d:b8:4a:12:44:00:ba:97:dc:a6:bf:a0:01: 7f:34:a7:f2:88:ac:24:55:23:aa:f8:ac:0a:f4:6a: 0a:fd:20:eb:b7:92:94:f9:62:e6:05:01:fe:f4:f6: 1e:5e:b1:7d:23:d5:06:72:b7:e3:ab:e9:2c:77:b5: 46:64:17:10:dd:68:e3:e3:db:8e:b0:bb:5c:a5:77: 06:75:64:af:8b:f3:87:8f:8f:a8:cb:02:24:36:22: d7:85:8f:ca:4a:ce:b0:82:e6:09:da:be:2b:84:38: d6:21:28:01:30:23:4e:da:1a:73:85:ab:f3:22:d0: 10:69:1a:8f:80:93:77:c8:45:9f:d4:3a:53:ce:af: eb:d2:b5:c1:11:ed:50:be:35:17:8a:ef:e9:bc:a2: 4c:c6:fd:49:92:9b:43:34:38:35:a1:d8:d5:3a:31: 99:32:a5:43:19:b7:52:42:9f:49:ae:c1:ca:55:88: 6b:47:d4:79:a8:16:df:ce:a3:71:e9:aa:42:63:32: 8f:7e:dc:1a:ef:5e:86:c3:ae:be:59:9f:29:98:4e: 0c:df:a8:1f:b5:07:3b:42:77:9a:44:5e:f5:e6:55: 34:b2:9d:b3:b3:fc:1f:d4:bd:46:f3:57:14:bb:3f: 29:75:2b:c1:9c:e8:24:83:19:79:16:ca:0a:ed:d7: d5:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D0:4A:88:DF:D0:CA:B7:D7:20:09:9E:57:95:4B:D7:1A:96:04:AA X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232332e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.47.223.0/24 Signature Algorithm: sha256WithRSAEncryption b4:32:37:e7:b3:ec:c8:48:a8:ba:0e:1c:86:68:e6:38:09:60: 9c:ed:f6:f2:e6:1d:53:ed:69:ff:20:39:89:b1:f0:2b:1c:88: 18:48:d6:85:f4:37:d7:7f:9e:18:69:d0:4c:9d:68:b3:18:96: 33:48:96:e6:e5:e5:6b:d4:91:63:56:c1:48:ad:78:99:2b:e6: 2c:90:0e:24:1a:a2:b5:4c:d4:03:81:fe:1d:70:0a:fe:4b:f7: 06:df:06:1c:c0:7a:06:9e:ea:67:97:bb:b2:74:7b:3b:58:2b: 2a:59:b0:ba:ab:34:96:2f:ca:dd:c4:f4:c9:86:b1:e5:fa:da: 57:42:cb:f0:6c:15:ca:28:e1:80:ff:54:eb:07:e0:d7:bc:39: b1:12:d9:b7:75:24:c3:82:57:bb:ae:77:8c:b1:c7:76:9a:b4: 4b:cb:9f:f7:51:47:6a:97:12:21:c0:fe:b1:ed:51:86:1f:4b: ac:ac:e7:31:9a:ea:56:c1:74:61:df:6c:c3:b6:d3:1d:ae:ea: 22:3d:e2:c7:2c:05:39:a2:22:85:b5:8a:60:61:4c:e0:7b:d1: 90:49:0e:da:c1:40:3c:e4:67:00:44:26:0f:fe:67:8a:c7:cd: aa:a6:1b:b5:dc:f1:f3:06:66:21:8b:69:f3:93:38:8a:47:80: 87:9c:9d:b3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPNITiV88tMGLlStJtifcrEJ0ThAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MDUwNjEzNDhaFw0yNzA2MDQwNjE4NDhaMDMxMTAvBgNV BAMTKDQwRDA0QTg4REZEMENBQjdENzIwMDk5RTU3OTU0QkQ3MUE5NjA0QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9HbhKEkQAupfcpr+gAX80p/KI rCRVI6r4rAr0agr9IOu3kpT5YuYFAf709h5esX0j1QZyt+Or6Sx3tUZkFxDdaOPj 246wu1yldwZ1ZK+L84ePj6jLAiQ2IteFj8pKzrCC5gnaviuEONYhKAEwI07aGnOF q/Mi0BBpGo+Ak3fIRZ/UOlPOr+vStcER7VC+NReK7+m8okzG/UmSm0M0ODWh2NU6 MZkypUMZt1JCn0muwcpViGtH1HmoFt/Oo3HpqkJjMo9+3BrvXobDrr5ZnymYTgzf qB+1BztCd5pEXvXmVTSynbOz/B/UvUbzVxS7Pyl1K8Gc6CSDGXkWygrt19XvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUQNBKiN/QyrfXIAmeV5VL1xqWBKowHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM3 MmUzMjMyMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHgv3zANBgkqhkiG9w0BAQsFAAOCAQEAtDI357PsyEioug4chmjmOAlgnO32 8uYdU+1p/yA5ibHwKxyIGEjWhfQ313+eGGnQTJ1osxiWM0iW5uXla9SRY1bBSK14 mSvmLJAOJBqitUzUA4H+HXAK/kv3Bt8GHMB6Bp7qZ5e7snR7O1grKlmwuqs0li/K 3cT0yYax5fraV0LL8GwVyijhgP9U6wfg17w5sRLZt3Ukw4JXu653jLHHdpq0S8uf 91FHapcSIcD+se1Rhh9LrKznMZrqVsF0Yd9sw7bTHa7qIj3ixywFOaIihbWKYGFM 4HvRkEkO2sFAPORnAEQmD/5nisfNqqYbtdzx8wZmIYtp85M4ikeAh5ydsw== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:51 2026 by rpki-client