$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa File: 3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: USDo1+htgWeAWVdmiLtZJKFxIunLuwdSFDwe8/guZn4= Subject key identifier: 79:FF:0C:70:C2:C0:3F:76:D9:27:E8:7F:68:D7:31:65:88:32:30:2D Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 620169011DAB0D812C94629E77CD2965C57F73A0 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:05:14 +0000 ROA not before: Thu 25 Jun 2026 07:00:14 +0000 ROA not after: Thu 24 Jun 2027 07:05:14 +0000 asID: 151263 IP address blocks: 103.20.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:01:69:01:1d:ab:0d:81:2c:94:62:9e:77:cd:29:65:c5:7f:73:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:00:14 2026 GMT Not After : Jun 24 07:05:14 2027 GMT Subject: CN=79FF0C70C2C03F76D927E87F68D731658832302D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:cb:40:13:9d:5d:9c:80:eb:1f:a2:da:ea:ee: 07:9f:0f:5e:0c:32:24:ab:e7:65:66:9e:4b:cb:37: fd:17:68:ad:0c:9d:2d:bb:e3:a9:86:8e:05:c8:45: 38:5e:e7:73:c5:22:7c:30:0d:a7:7f:fb:0b:7a:6b: 27:63:0b:32:59:af:6e:43:0b:df:f5:ca:2c:05:a2: a5:ba:e5:d2:9e:ed:4d:da:12:8d:36:ed:1d:f2:3b: 6f:34:20:a9:e7:b3:74:73:ac:de:71:4f:30:df:6f: 57:63:e8:1b:eb:fd:f4:b3:3a:51:ae:1f:a0:1d:60: cf:81:f9:1a:41:ac:a7:b6:bd:64:b6:d1:89:28:04: ce:a7:e9:ce:17:c5:84:73:a0:b2:eb:bc:a4:ec:0e: 4c:d4:98:9e:ef:89:e8:aa:9f:3c:69:67:1b:bb:e4: 3d:ac:12:43:5a:c5:b2:b5:29:ee:c1:bd:00:1b:cb: ac:a4:73:2c:d9:0c:e1:a9:93:43:06:d5:87:7a:d7: 1e:49:41:52:73:09:f9:27:54:b6:dd:87:26:cf:31: 59:2f:30:48:e9:26:ac:f9:7e:da:f2:3c:8b:67:e8: d6:46:82:7e:0c:a0:00:c7:20:e2:fa:e5:51:d0:75: 5d:dc:a1:1d:c2:51:e7:5c:20:de:1b:4b:fa:5c:da: 39:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:FF:0C:70:C2:C0:3F:76:D9:27:E8:7F:68:D7:31:65:88:32:30:2D X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132382e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.128.0/24 Signature Algorithm: sha256WithRSAEncryption 69:66:89:b8:93:a5:50:75:09:ea:31:ff:30:b1:66:42:4b:48: 2a:12:36:64:f5:c2:a2:d8:7b:ae:43:1a:1f:54:ba:d0:08:22: 82:b4:fb:a2:71:47:4a:89:71:f7:c4:a5:4f:c6:50:42:e3:fd: d5:e8:d5:f2:bd:95:09:78:98:05:bb:da:2e:f0:ed:b7:0d:01: 40:bf:eb:f1:7b:39:f8:ae:d1:ca:d0:6c:66:92:a7:d2:3d:6a: 74:91:1c:7c:3d:76:fa:02:39:07:20:e4:01:00:dc:59:3a:4f: c9:28:5c:22:b8:f4:ca:c8:0d:ac:29:16:eb:78:ae:24:44:01: 46:ba:63:2a:a6:eb:56:db:53:f3:b7:6e:6c:ce:cf:bd:55:c4: 00:f5:3e:4e:ed:43:a0:ca:ba:f7:2c:7f:99:c6:ff:93:64:44: 1a:03:6c:76:8e:e5:78:08:60:56:d0:28:fa:c2:52:26:fb:de: 0e:10:0a:c4:47:0e:4f:dc:0f:a2:98:76:bd:ac:93:4a:d7:d8: ec:32:c1:ae:12:ca:b4:b3:e8:ac:f0:92:50:9c:fd:a3:4a:09: 79:4f:b2:0f:b0:62:a9:1f:8d:21:a6:45:54:9b:fd:dc:82:f7: ad:67:d9:65:48:14:55:bc:42:7b:4b:bb:e0:8b:af:99:90:66: 04:2e:2a:af -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYgFpAR2rDYEslGKed80pZcV/c6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzAwMTRaFw0yNzA2MjQwNzA1MTRaMDMxMTAvBgNV BAMTKDc5RkYwQzcwQzJDMDNGNzZEOTI3RTg3RjY4RDczMTY1ODgzMjMwMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWy0ATnV2cgOsfotrq7gefD14M MiSr52VmnkvLN/0XaK0MnS2746mGjgXIRThe53PFInwwDad/+wt6aydjCzJZr25D C9/1yiwFoqW65dKe7U3aEo027R3yO280IKnns3RzrN5xTzDfb1dj6Bvr/fSzOlGu H6AdYM+B+RpBrKe2vWS20YkoBM6n6c4XxYRzoLLrvKTsDkzUmJ7vieiqnzxpZxu7 5D2sEkNaxbK1Ke7BvQAby6ykcyzZDOGpk0MG1Yd61x5JQVJzCfknVLbdhybPMVkv MEjpJqz5ftryPItn6NZGgn4MoADHIOL65VHQdV3coR3CUedcIN4bS/pc2jmXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUef8McMLAP3bZJ+h/aNcxZYgyMC0wHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTMy MzAyZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGcUgDANBgkqhkiG9w0BAQsFAAOCAQEAaWaJuJOlUHUJ6jH/MLFm QktIKhI2ZPXCoth7rkMaH1S60AgigrT7onFHSolx98SlT8ZQQuP91ejV8r2VCXiY BbvaLvDttw0BQL/r8Xs5+K7RytBsZpKn0j1qdJEcfD12+gI5ByDkAQDcWTpPyShc Irj0ysgNrCkW63iuJEQBRrpjKqbrVttT87dubM7PvVXEAPU+Tu1DoMq69yx/mcb/ k2REGgNsdo7leAhgVtAo+sJSJvveDhAKxEcOT9wPoph2vayTStfY7DLBrhLKtLPo rPCSUJz9o0oJeU+yD7BiqR+NIaZFVJv93IL3rWfZZUgUVbxCe0u74IuvmZBmBC4q rw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:22 2026 by rpki-client