$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232362e302f32342d3234203d3e2034383437.roa File: 3132302e34372e3232362e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: P21SZFNOI7R0Usni7jv/UzWYrI/lI43ADUaogvqJy8Q= Subject key identifier: AB:D3:9C:C7:21:CA:3C:6D:10:BF:03:EC:12:AF:26:45:58:48:16:75 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 0D4D07273280C28F0CA3FD2D486AB41F0B68994B Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232362e302f32342d3234203d3e2034383437.roa Signing time: Fri 05 Jun 2026 06:18:49 +0000 ROA not before: Fri 05 Jun 2026 06:13:49 +0000 ROA not after: Fri 04 Jun 2027 06:18:49 +0000 asID: 4847 IP address blocks: 120.47.226.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4d:07:27:32:80:c2:8f:0c:a3:fd:2d:48:6a:b4:1f:0b:68:99:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 5 06:13:49 2026 GMT Not After : Jun 4 06:18:49 2027 GMT Subject: CN=ABD39CC721CA3C6D10BF03EC12AF264558481675 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fe:21:1e:34:b8:97:ae:f3:16:6a:3c:c0:bf: 50:08:9f:f6:fa:ca:33:53:ed:90:07:fc:39:75:ca: a0:bb:c5:ed:56:ac:5c:eb:3b:64:43:9f:fd:7e:32: 3a:25:cb:13:e5:6d:04:5d:86:e0:6d:c6:8f:fb:8d: 7f:e4:48:bd:1a:d9:38:5c:1d:f1:21:96:e9:2f:f6: 41:94:10:7a:9c:30:67:9f:f8:2e:e1:dc:16:70:80: f9:d7:7f:38:74:d0:dc:62:e0:46:6c:62:82:cd:92: de:8c:34:a9:fe:1b:8e:ac:84:73:5f:20:2d:40:51: 36:14:3d:8b:4c:d8:b2:ac:62:3b:ad:b5:35:e5:71: db:e8:6f:7d:58:cb:4a:f3:11:6e:a5:58:81:21:17: 55:d7:de:18:96:4f:ef:95:45:e1:58:fd:c0:a6:de: 73:2b:0c:4c:f1:d2:ee:56:7f:91:8b:46:e6:72:3b: 7f:df:d8:b8:ae:04:62:1f:44:af:8f:39:d7:75:0d: 94:c8:71:ec:e8:90:6d:47:1a:9f:66:49:20:8c:99: 9a:69:f0:6a:2d:60:0b:79:e6:83:2e:c1:ed:da:93: 8b:a6:a6:aa:12:26:55:4c:b5:f6:12:ef:ad:1f:1a: 81:32:d4:d7:e4:a4:6d:cb:20:ea:6e:5e:84:e7:27: a3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D3:9C:C7:21:CA:3C:6D:10:BF:03:EC:12:AF:26:45:58:48:16:75 X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232362e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.47.226.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:8a:8a:71:46:63:0d:da:e0:02:3f:32:54:5e:e5:7e:c3:9c: 6e:ba:73:68:3b:e3:28:96:40:aa:d1:5c:02:64:57:6b:c1:91: 68:a0:d2:32:ce:15:18:b9:2d:c8:89:ea:5f:18:31:f4:93:fb: 5d:a2:9d:e3:50:d7:34:7b:a1:e3:77:6b:0d:bd:e6:af:51:69: 08:08:75:d5:7d:a3:e7:02:b3:c2:26:2e:c1:91:c2:cc:88:4f: 15:0a:fe:cd:2d:b6:9c:5a:40:05:be:ef:e6:d0:ee:15:b7:05: f3:46:2a:57:88:c6:71:29:0d:b9:42:81:51:df:cb:d8:d1:42: 19:5f:5d:41:09:5e:47:df:22:32:19:6a:41:ea:e3:92:71:fa: b4:30:e8:14:d8:b7:98:35:d1:b5:cf:af:f0:8c:ba:7c:29:95: 63:74:fb:7b:f0:45:db:ca:2e:22:83:9f:78:10:0c:ae:dd:66: 43:0c:3c:40:32:65:d7:8e:24:2b:6f:3f:da:9e:6c:b3:be:7f: c5:1f:20:0a:74:59:66:50:6f:2c:a8:1f:d3:fb:eb:4d:43:f1: fb:e9:9e:06:2b:54:88:c4:ff:5b:6c:dd:cf:63:1f:4e:68:89: a7:c8:a1:4b:f6:ef:42:54:9a:47:d1:d9:57:8e:3e:47:a7:5f: 42:ff:be:03 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDU0HJzKAwo8Mo/0tSGq0HwtomUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MDUwNjEzNDlaFw0yNzA2MDQwNjE4NDlaMDMxMTAvBgNV BAMTKEFCRDM5Q0M3MjFDQTNDNkQxMEJGMDNFQzEyQUYyNjQ1NTg0ODE2NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/iEeNLiXrvMWajzAv1AIn/b6 yjNT7ZAH/Dl1yqC7xe1WrFzrO2RDn/1+MjolyxPlbQRdhuBtxo/7jX/kSL0a2Thc HfEhlukv9kGUEHqcMGef+C7h3BZwgPnXfzh00Nxi4EZsYoLNkt6MNKn+G46shHNf IC1AUTYUPYtM2LKsYjuttTXlcdvob31Yy0rzEW6lWIEhF1XX3hiWT++VReFY/cCm 3nMrDEzx0u5Wf5GLRuZyO3/f2LiuBGIfRK+POdd1DZTIcezokG1HGp9mSSCMmZpp 8GotYAt55oMuwe3ak4umpqoSJlVMtfYS760fGoEy1NfkpG3LIOpuXoTnJ6MzAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUq9OcxyHKPG0QvwPsEq8mRVhIFnUwHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM3 MmUzMjMyMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHgv4jANBgkqhkiG9w0BAQsFAAOCAQEAC4qKcUZjDdrgAj8yVF7lfsOcbrpz aDvjKJZAqtFcAmRXa8GRaKDSMs4VGLktyInqXxgx9JP7XaKd41DXNHuh43drDb3m r1FpCAh11X2j5wKzwiYuwZHCzIhPFQr+zS22nFpABb7v5tDuFbcF80YqV4jGcSkN uUKBUd/L2NFCGV9dQQleR98iMhlqQerjknH6tDDoFNi3mDXRtc+v8Iy6fCmVY3T7 e/BF28ouIoOfeBAMrt1mQww8QDJl144kK28/2p5ss75/xR8gCnRZZlBvLKgf0/vr TUPx++meBitUiMT/W2zdz2MfTmiJp8ihS/bvQlSaR9HZV44+R6dfQv++Aw== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:49 2026 by rpki-client