$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230322e302f32342d3234203d3e2034383437.roa File: 3231392e37322e3230322e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: p4ZOzzNRLlPOXrtSKvmhi+3854u3TTh3zCCsXV/pKBI= Subject key identifier: FD:6C:D2:9D:40:60:D7:27:EC:B7:F0:E4:D4:C8:B9:9D:8D:E0:DB:9B Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 3B38737FBE1C951797CD8FA1ED08B88D97E0D32E Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230322e302f32342d3234203d3e2034383437.roa Signing time: Fri 05 Jun 2026 06:21:24 +0000 ROA not before: Fri 05 Jun 2026 06:16:24 +0000 ROA not after: Fri 04 Jun 2027 06:21:24 +0000 asID: 4847 IP address blocks: 219.72.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:38:73:7f:be:1c:95:17:97:cd:8f:a1:ed:08:b8:8d:97:e0:d3:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 5 06:16:24 2026 GMT Not After : Jun 4 06:21:24 2027 GMT Subject: CN=FD6CD29D4060D727ECB7F0E4D4C8B99D8DE0DB9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:98:29:7b:17:66:22:ce:83:7c:d6:79:92: 24:81:cc:09:43:b6:b1:21:d4:bc:6e:7b:0f:62:e8: d9:e7:81:ff:46:83:a2:d0:99:a2:ac:a5:bb:67:7e: a8:8a:30:1f:21:17:5f:17:3d:2e:56:7f:96:6d:7b: e9:b8:01:ca:32:b6:50:ab:8f:ac:4d:34:0f:1e:fa: 86:ee:c6:86:18:cb:64:51:c1:ac:48:c1:a6:62:f0: 9b:1e:1d:77:0b:20:97:93:36:e2:f2:fe:7d:9a:23: d0:4c:76:c7:fe:31:52:06:88:06:28:0f:86:c6:88: ed:7e:8c:ff:85:c7:05:0a:99:09:f5:37:a0:1c:9c: 01:9a:d4:79:87:a8:75:7a:4f:aa:67:01:8d:38:81: 44:77:7c:e1:8a:4e:7d:05:b2:be:7d:0b:a6:90:14: b7:84:ad:fe:71:8c:53:1f:a6:98:ad:9b:05:0b:a6: f6:c1:86:85:97:dd:ca:16:28:1c:29:2b:ce:fe:0d: e3:15:fd:7e:ab:d2:c8:f2:1e:27:7a:76:b6:d8:89: 34:e9:ba:19:25:ee:3e:97:d1:f4:f5:c2:bf:ac:cf: a8:1e:ef:37:73:05:de:de:fb:2f:87:6f:ce:d3:bc: 18:c6:13:59:a1:19:3d:62:61:ab:66:90:ed:f4:c5: 94:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:6C:D2:9D:40:60:D7:27:EC:B7:F0:E4:D4:C8:B9:9D:8D:E0:DB:9B X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230322e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.72.202.0/24 Signature Algorithm: sha256WithRSAEncryption 01:3c:7f:2f:a5:d7:6c:4e:08:45:42:ef:6e:62:b6:f0:34:ff: 2c:90:3b:c8:c9:8b:77:39:51:f3:e6:0b:b9:9b:2f:c5:3e:39: 11:e3:14:17:7f:65:06:27:d8:4c:c3:2b:80:03:3a:a3:04:ab: cf:90:7e:29:f1:f7:28:98:7a:b2:cb:df:72:fe:04:93:74:14: 92:89:3b:4a:5a:d8:e0:e6:80:7d:6e:1b:7d:0d:8c:6f:38:2b: fc:0a:fc:2e:c6:d6:81:1f:e8:64:9e:25:70:d3:bc:09:99:56: 60:4c:72:75:cd:41:5f:28:9b:42:f4:f5:24:8d:99:fc:c7:5c: 22:9f:9c:36:66:6d:19:30:0c:50:93:e3:a5:7e:aa:a0:2e:3f: c3:df:1c:d6:42:e8:9c:a3:eb:2c:a5:01:0b:b1:d2:0e:3a:d5: 3b:02:78:36:da:a8:b0:f4:22:f3:58:01:9f:36:34:8d:6f:b7: 63:35:61:29:cd:44:5d:98:53:e1:22:b2:05:e0:ce:c0:b0:0a: 99:21:c7:88:b8:ec:9c:40:1d:df:cc:5f:2c:7e:f0:32:90:54: 51:57:d5:ac:ca:48:c9:89:16:dc:01:78:4a:1b:8c:94:6b:df: c1:16:9e:e9:cc:fa:e5:c1:20:af:9d:54:db:96:c9:90:8d:88: e3:51:15:bc -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOzhzf74clReXzY+h7Qi4jZfg0y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MDUwNjE2MjRaFw0yNzA2MDQwNjIxMjRaMDMxMTAvBgNV BAMTKEZENkNEMjlENDA2MEQ3MjdFQ0I3RjBFNEQ0QzhCOTlEOERFMERCOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8n5gpexdmIs6DfNZ5kiSBzAlD trEh1Lxuew9i6Nnngf9Gg6LQmaKspbtnfqiKMB8hF18XPS5Wf5Zte+m4AcoytlCr j6xNNA8e+obuxoYYy2RRwaxIwaZi8JseHXcLIJeTNuLy/n2aI9BMdsf+MVIGiAYo D4bGiO1+jP+FxwUKmQn1N6AcnAGa1HmHqHV6T6pnAY04gUR3fOGKTn0Fsr59C6aQ FLeErf5xjFMfppitmwULpvbBhoWX3coWKBwpK87+DeMV/X6r0sjyHid6drbYiTTp uhkl7j6X0fT1wr+sz6ge7zdzBd7e+y+Hb87TvBjGE1mhGT1iYatmkO30xZRDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU/WzSnUBg1yfst/Dk1Mi5nY3g25swHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzIzMTM5MmUzNzMy MmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEANtIyjANBgkqhkiG9w0BAQsFAAOCAQEAATx/L6XXbE4IRULvbmK28DT/LJA7 yMmLdzlR8+YLuZsvxT45EeMUF39lBifYTMMrgAM6owSrz5B+KfH3KJh6ssvfcv4E k3QUkok7SlrY4OaAfW4bfQ2Mbzgr/Ar8LsbWgR/oZJ4lcNO8CZlWYExydc1BXyib QvT1JI2Z/MdcIp+cNmZtGTAMUJPjpX6qoC4/w98c1kLonKPrLKUBC7HSDjrVOwJ4 NtqosPQi81gBnzY0jW+3YzVhKc1EXZhT4SKyBeDOwLAKmSHHiLjsnEAd38xfLH7w MpBUUVfVrMpIyYkW3AF4ShuMlGvfwRae6cz65cEgr51U25bJkI2I41EVvA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:24:08 2026 by rpki-client