$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e203536303430.roa File: 3130332e3233392e3230342e302f32322d3232203d3e203536303430.roa (raw, json) Hash identifier: DX8TfZ/AacCXstB9zzDLtLPpu3OkGddCsxxjB+Kml5U= Subject key identifier: 07:AB:13:C2:6A:64:2F:8D:30:03:A1:C5:18:1A:D9:78:24:BF:F2:4E Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 7729709FDB42E56CCB40846E6C164E03874A852F Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e203536303430.roa Signing time: Mon 27 Jul 2026 11:44:41 +0000 ROA not before: Mon 27 Jul 2026 11:39:41 +0000 ROA not after: Mon 26 Jul 2027 11:44:41 +0000 asID: 56040 IP address blocks: 103.239.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 08:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:29:70:9f:db:42:e5:6c:cb:40:84:6e:6c:16:4e:03:87:4a:85:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Jul 27 11:39:41 2026 GMT Not After : Jul 26 11:44:41 2027 GMT Subject: CN=07AB13C26A642F8D3003A1C5181AD97824BFF24E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bb:55:d5:fa:fb:19:52:d0:a7:41:d2:83:d7: a3:be:9b:f2:c2:31:cf:b8:89:a2:c8:2f:0d:0e:41: 36:fa:b9:de:dd:23:f6:41:cb:eb:f2:64:06:07:8c: d1:9c:c2:cc:07:d3:5c:e1:dd:38:33:f1:b7:19:06: 2d:86:0f:80:3b:e4:ef:54:09:31:e4:99:e7:0a:7d: 76:ed:ce:cd:6f:d7:17:c9:67:02:6f:48:7d:b6:ae: db:a9:e0:d0:11:10:08:42:9f:27:9e:2b:49:fe:c5: ed:e0:3d:b8:ed:b6:d7:3f:f0:00:1c:05:88:d5:8d: af:d3:98:b4:d8:b2:27:9d:b5:ac:6e:06:fc:0a:20: 48:0b:14:a6:45:44:cf:e2:67:05:a2:ba:75:a8:3c: e9:0a:f0:3e:d2:6d:ac:12:d8:bb:42:7a:93:8e:a6: ca:cb:de:5d:c5:d0:ab:02:2a:35:b2:ad:1c:f4:a5: 43:10:78:15:c7:c4:cf:e8:ed:2f:88:58:d0:cb:56: 46:38:e4:c6:10:03:28:31:e2:7e:7f:f6:51:93:21: dd:04:41:9a:d0:01:7a:67:fd:b9:c6:86:18:64:12: fa:53:3e:e1:14:2f:29:7b:1d:06:2b:a1:cd:5c:b9: 9f:b2:32:98:60:89:d2:9c:ff:a5:b6:eb:f3:c0:e0: 19:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:AB:13:C2:6A:64:2F:8D:30:03:A1:C5:18:1A:D9:78:24:BF:F2:4E X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.204.0/22 Signature Algorithm: sha256WithRSAEncryption 66:97:a6:90:c1:c8:ac:41:8c:4c:c2:7f:17:47:61:d7:88:1a: c6:8d:b7:1e:37:65:0f:f1:dc:e5:b6:bb:e9:c2:0d:76:d3:17: fe:90:ca:5d:95:93:18:cd:bc:f9:63:c9:64:90:c1:3f:b6:30: f3:5e:58:7a:61:96:ca:b9:32:18:a2:87:e6:77:0d:8a:c3:1b: 18:20:ed:e6:b4:13:73:a3:f9:83:ed:8b:38:31:ff:a6:bf:d8: 19:83:28:80:e5:2e:dc:7b:3e:ca:2a:b0:f3:5c:35:54:ab:2c: 01:4a:89:95:62:72:f8:76:9a:e7:ef:80:4b:8b:16:43:6a:6b: 69:7e:a8:72:41:6d:dd:72:92:8b:47:ba:5d:aa:ee:fe:4c:df: 95:bc:f4:bf:90:ed:49:f3:fb:c8:0f:bd:4f:ef:06:4f:76:51: 37:a2:37:20:6e:92:56:c8:fc:36:05:9d:19:9c:78:b2:77:3b: 77:e5:06:ce:64:aa:97:20:5c:a2:6e:cd:c4:03:5b:d7:16:42: c9:76:f2:c9:76:25:8b:f9:14:29:54:92:7e:90:a4:f4:6d:8c: ca:ac:ad:08:9d:aa:a9:d1:26:f5:80:44:bf:69:8c:ff:55:b6: ae:54:5c:41:7f:9a:94:43:b8:86:1b:1b:e6:37:fd:05:b5:83: e5:fa:52:e0 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUdylwn9tC5WzLQIRubBZOA4dKhS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA3MjcxMTM5NDFaFw0yNzA3MjYxMTQ0NDFaMDMxMTAvBgNV BAMTKDA3QUIxM0MyNkE2NDJGOEQzMDAzQTFDNTE4MUFEOTc4MjRCRkYyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCu1XV+vsZUtCnQdKD16O+m/LC Mc+4iaLILw0OQTb6ud7dI/ZBy+vyZAYHjNGcwswH01zh3Tgz8bcZBi2GD4A75O9U CTHkmecKfXbtzs1v1xfJZwJvSH22rtup4NAREAhCnyeeK0n+xe3gPbjtttc/8AAc BYjVja/TmLTYsiedtaxuBvwKIEgLFKZFRM/iZwWiunWoPOkK8D7SbawS2LtCepOO psrL3l3F0KsCKjWyrRz0pUMQeBXHxM/o7S+IWNDLVkY45MYQAygx4n5/9lGTId0E QZrQAXpn/bnGhhhkEvpTPuEULyl7HQYroc1cuZ+yMphgidKc/6W26/PA4BkVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUB6sTwmpkL40wA6HFGBrZeCS/8k4wHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8zMTMwMzMyZTMy MzMzOTJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfvzDANBgkqhkiG9w0BAQsFAAOCAQEAZpemkMHIrEGMTMJ/F0dh 14gaxo23HjdlD/Hc5ba76cINdtMX/pDKXZWTGM28+WPJZJDBP7Yw815YemGWyrky GKKH5ncNisMbGCDt5rQTc6P5g+2LODH/pr/YGYMogOUu3Hs+yiqw81w1VKssAUqJ lWJy+Haa5++AS4sWQ2praX6ockFt3XKSi0e6Xaru/kzflbz0v5DtSfP7yA+9T+8G T3ZRN6I3IG6SVsj8NgWdGZx4snc7d+UGzmSqlyBcom7NxANb1xZCyXbyyXYli/kU KVSSfpCk9G2MyqytCJ2qqdEm9YBEv2mM/1W2rlRcQX+alEO4hhsb5jf9BbWD5fpS 4A== -----END CERTIFICATE-----Generated at Mon Jul 27 14:53:53 2026 by rpki-client