$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa File: 3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: MP5WdchBZczFdD99X0JoChDNpIiLPWpHqxtELxECGmc= Subject key identifier: 47:56:98:7B:2D:2F:34:BA:36:66:4B:7C:06:92:E1:3A:7C:F5:54:DB Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 5A11066A8D946C83EB85647CDE5090DB2BE3AF6B Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:05:14 +0000 ROA not before: Thu 25 Jun 2026 07:00:14 +0000 ROA not after: Thu 24 Jun 2027 07:05:14 +0000 asID: 151263 IP address blocks: 103.20.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:11:06:6a:8d:94:6c:83:eb:85:64:7c:de:50:90:db:2b:e3:af:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:00:14 2026 GMT Not After : Jun 24 07:05:14 2027 GMT Subject: CN=4756987B2D2F34BA36664B7C0692E13A7CF554DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:19:d8:76:b8:e9:06:bb:e0:f5:0b:f4:e4:4a: dd:c2:b9:73:72:e7:03:8d:82:6b:03:57:5c:fa:40: d1:09:42:6a:ad:5b:74:33:0e:46:6b:de:1f:97:33: 0f:73:60:c7:cd:38:94:a8:34:45:23:ac:f5:c2:b9: ae:54:91:1c:32:97:30:32:76:d7:6e:af:34:0d:b9: 5c:06:eb:ce:a2:19:6e:40:c5:47:61:6e:97:e5:6c: 77:f1:9a:d5:92:a5:42:7e:b0:7c:49:7b:a4:56:83: 4b:05:07:84:4b:1d:c5:37:f9:cc:00:61:c6:89:50: 6e:43:1b:f9:eb:96:ce:ad:6a:b0:90:5f:73:e2:9a: b3:16:3b:39:f4:02:a3:81:55:7d:76:b8:90:6d:d7: a7:25:28:3b:84:4b:85:52:79:48:60:72:87:53:1d: 96:50:88:81:d0:be:39:08:a9:bf:04:bc:78:cd:03: 8d:c0:b2:34:c6:7b:b0:0b:4d:44:65:1a:37:50:48: c2:13:9d:e6:c2:ff:89:65:4f:4c:e2:37:34:3f:c1: 15:4c:c7:f1:33:01:44:88:3f:17:15:49:0e:f4:61: c4:56:16:7a:43:ca:35:90:26:6a:6d:b8:43:b4:38: ee:a1:62:06:e0:63:d1:74:8d:f0:6a:97:d2:09:f1: 3b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:56:98:7B:2D:2F:34:BA:36:66:4B:7C:06:92:E1:3A:7C:F5:54:DB X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3133312e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.131.0/24 Signature Algorithm: sha256WithRSAEncryption 40:8f:d0:ac:d6:4f:72:1f:67:35:b8:f8:cf:49:63:4f:f4:96: ff:94:3b:f4:29:93:3a:a7:a1:45:66:6b:79:bf:3a:97:83:09: ed:9d:23:c5:88:4b:76:d1:c0:f9:c5:d9:57:d0:1d:a1:ef:3e: 9b:ec:73:0d:46:95:c6:b9:c8:57:eb:f8:68:20:b1:eb:e6:d6: 5c:8e:32:5e:6d:f9:6c:cc:fd:d3:37:1a:3c:03:f6:c2:c9:3e: e5:2a:cd:9e:1b:b7:c0:c1:65:78:11:1d:4a:2d:dd:46:7d:8b: 4e:99:da:e6:21:74:75:da:9b:d7:86:6d:97:46:6b:95:86:90: f0:4b:f3:fd:c0:62:5b:25:6e:65:a5:58:79:14:ef:30:ca:80: 4b:de:18:a5:a3:5a:c3:be:f4:8c:d8:54:d1:22:0f:75:a4:3f: 1e:fc:ff:6c:75:7a:2f:e3:5a:d0:12:b9:f9:c5:ab:8a:e0:99: 03:45:1a:a5:b4:48:ee:82:5a:e6:ed:b2:39:14:46:b3:d2:f1: 5e:a6:02:a3:4f:96:26:8f:fa:90:aa:56:3c:13:d2:81:a0:aa: 1c:cf:72:62:05:39:0e:27:82:bf:c7:00:5b:a9:df:cb:81:1a: cd:da:54:67:fd:3a:3b:b9:e3:89:1b:b3:c3:9b:30:1a:77:a5: 47:a1:64:47 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWhEGao2UbIPrhWR83lCQ2yvjr2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzAwMTRaFw0yNzA2MjQwNzA1MTRaMDMxMTAvBgNV BAMTKDQ3NTY5ODdCMkQyRjM0QkEzNjY2NEI3QzA2OTJFMTNBN0NGNTU0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXGdh2uOkGu+D1C/TkSt3CuXNy 5wONgmsDV1z6QNEJQmqtW3QzDkZr3h+XMw9zYMfNOJSoNEUjrPXCua5UkRwylzAy dtdurzQNuVwG686iGW5AxUdhbpflbHfxmtWSpUJ+sHxJe6RWg0sFB4RLHcU3+cwA YcaJUG5DG/nrls6tarCQX3PimrMWOzn0AqOBVX12uJBt16clKDuES4VSeUhgcodT HZZQiIHQvjkIqb8EvHjNA43AsjTGe7ALTURlGjdQSMITnebC/4llT0ziNzQ/wRVM x/EzAUSIPxcVSQ70YcRWFnpDyjWQJmptuEO0OO6hYgbgY9F0jfBql9IJ8TsTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUR1aYey0vNLo2Zkt8BpLhOnz1VNswHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTMy MzAyZTMxMzMzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGcUgzANBgkqhkiG9w0BAQsFAAOCAQEAQI/QrNZPch9nNbj4z0lj T/SW/5Q79CmTOqehRWZreb86l4MJ7Z0jxYhLdtHA+cXZV9Adoe8+m+xzDUaVxrnI V+v4aCCx6+bWXI4yXm35bMz90zcaPAP2wsk+5SrNnhu3wMFleBEdSi3dRn2LTpna 5iF0ddqb14Ztl0ZrlYaQ8Evz/cBiWyVuZaVYeRTvMMqAS94YpaNaw770jNhU0SIP daQ/Hvz/bHV6L+Na0BK5+cWriuCZA0UapbRI7oJa5u2yORRGs9LxXqYCo0+WJo/6 kKpWPBPSgaCqHM9yYgU5DieCv8cAW6nfy4EazdpUZ/06O7njiRuzw5swGnelR6Fk Rw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:52:48 2026 by rpki-client