$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa File: 3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: Q5Xw39c+z0AYdFvOytdnv/5LKdw3DwcDWrvcK09ENW0= Subject key identifier: C6:27:3C:A5:8E:07:CB:B3:E0:D5:4D:6D:10:51:D3:63:57:14:BE:6D Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 320171325C8A3D0860EBDD54E331B0237E485A84 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:05:14 +0000 ROA not before: Thu 25 Jun 2026 07:00:14 +0000 ROA not after: Thu 24 Jun 2027 07:05:14 +0000 asID: 151263 IP address blocks: 103.20.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:01:71:32:5c:8a:3d:08:60:eb:dd:54:e3:31:b0:23:7e:48:5a:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:00:14 2026 GMT Not After : Jun 24 07:05:14 2027 GMT Subject: CN=C6273CA58E07CBB3E0D54D6D1051D3635714BE6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:d0:5e:30:1a:ec:b3:cb:90:fe:93:1a:d8:66: ef:e9:31:23:f6:a8:0d:2f:e9:e6:51:69:6c:fe:b9: 28:c4:0e:c3:30:8a:0c:4b:e2:2a:f9:ca:55:e0:36: 67:74:0b:67:8c:4f:8e:a3:e7:27:f2:a6:fe:df:79: 9d:7d:86:97:d1:46:78:8e:68:5d:86:89:8e:3d:63: a5:da:09:29:e2:cb:9c:b9:27:97:38:25:2c:4d:78: 6e:76:dc:ea:e2:15:09:28:b1:4e:55:69:0d:46:b9: 96:18:6e:b7:ea:5e:10:99:aa:06:2f:90:cc:99:e4: 67:d2:b5:aa:ec:8d:94:58:f6:a5:91:bc:0f:ef:38: cd:fb:94:8b:35:ea:3c:05:08:e3:f5:7f:f3:49:4f: 8d:6a:34:0e:3f:de:cb:c0:20:48:c5:b1:24:85:ca: 51:d5:ab:0b:22:05:b6:29:58:c5:46:c6:fd:28:4c: 6d:81:9d:fd:fc:50:c2:4b:cc:d0:6f:5d:bb:7d:30: 05:55:f9:fa:a0:82:e1:4c:66:0b:d1:1f:57:e5:6f: e0:ce:63:c1:da:6d:24:5c:b4:76:a5:e7:58:d5:03: c5:d9:95:49:58:8d:56:9f:a0:50:1f:dd:52:6b:d0: 15:5c:6e:76:07:a0:08:da:37:ac:1a:ef:14:15:c7: 17:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:3C:A5:8E:07:CB:B3:E0:D5:4D:6D:10:51:D3:63:57:14:BE:6D X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132392e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.129.0/24 Signature Algorithm: sha256WithRSAEncryption c6:d5:9a:dc:4a:f2:06:95:a8:70:e4:cf:e2:2c:bb:1f:75:05: e3:17:c2:ea:05:7e:00:c4:a5:ba:ff:ba:30:ac:9b:da:b4:6c: a0:e6:d8:07:bd:47:bc:b1:a0:98:1a:ee:78:f9:fd:70:ed:73: 4a:01:d9:c6:d6:07:f4:2c:34:5a:18:96:a9:cd:a1:dc:b5:20: 85:41:37:40:d6:89:e7:e4:4d:5e:fd:b9:76:ad:25:99:8f:d3: f2:94:42:1a:0f:91:e5:17:ee:c4:92:41:e2:a4:c5:66:d7:56: 54:cd:6d:5e:28:04:08:c2:b1:1b:c4:81:f0:f4:50:0f:72:4d: 07:b3:23:57:fb:ff:51:f8:5a:25:d9:59:fe:2e:99:d9:0e:2c: d5:0b:ea:6b:29:ae:0a:a8:1d:ea:8d:48:d0:84:af:3f:fe:8f: f7:9a:72:7a:68:dc:f1:62:30:b9:31:94:ab:8d:c9:10:c1:f9: f1:9d:95:21:60:b5:c8:d3:a7:c6:19:8f:cc:9a:8d:0c:2c:cb: e0:61:44:d4:5d:70:7d:c8:61:4f:85:a6:51:40:49:6e:3b:7a: f6:7b:23:36:d6:f5:a9:bd:b5:19:89:04:d7:8b:8b:e7:4b:e0: 33:62:0a:fd:9c:b4:33:a9:95:80:c9:cc:eb:ac:eb:83:84:c1: f7:5a:05:70 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMgFxMlyKPQhg691U4zGwI35IWoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzAwMTRaFw0yNzA2MjQwNzA1MTRaMDMxMTAvBgNV BAMTKEM2MjczQ0E1OEUwN0NCQjNFMEQ1NEQ2RDEwNTFEMzYzNTcxNEJFNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv0F4wGuyzy5D+kxrYZu/pMSP2 qA0v6eZRaWz+uSjEDsMwigxL4ir5ylXgNmd0C2eMT46j5yfypv7feZ19hpfRRniO aF2GiY49Y6XaCSniy5y5J5c4JSxNeG523OriFQkosU5VaQ1GuZYYbrfqXhCZqgYv kMyZ5GfStarsjZRY9qWRvA/vOM37lIs16jwFCOP1f/NJT41qNA4/3svAIEjFsSSF ylHVqwsiBbYpWMVGxv0oTG2Bnf38UMJLzNBvXbt9MAVV+fqgguFMZgvRH1flb+DO Y8HabSRctHal51jVA8XZlUlYjVafoFAf3VJr0BVcbnYHoAjaN6wa7xQVxxc/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUxic8pY4Hy7Pg1U1tEFHTY1cUvm0wHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTMy MzAyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGcUgTANBgkqhkiG9w0BAQsFAAOCAQEAxtWa3EryBpWocOTP4iy7 H3UF4xfC6gV+AMSluv+6MKyb2rRsoObYB71HvLGgmBruePn9cO1zSgHZxtYH9Cw0 WhiWqc2h3LUghUE3QNaJ5+RNXv25dq0lmY/T8pRCGg+R5RfuxJJB4qTFZtdWVM1t XigECMKxG8SB8PRQD3JNB7MjV/v/UfhaJdlZ/i6Z2Q4s1QvqaymuCqgd6o1I0ISv P/6P95pyemjc8WIwuTGUq43JEMH58Z2VIWC1yNOnxhmPzJqNDCzL4GFE1F1wfchh T4WmUUBJbjt69nsjNtb1qb21GYkE14uL50vgM2IK/Zy0M6mVgMnM66zrg4TB91oF cA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:22 2026 by rpki-client