$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa File: 3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: kcIRXgf91pkWImY3pwTHQ8GC6HyQp3uGNJdbtYT8LVs= Subject key identifier: 02:83:45:F2:9B:06:66:37:F1:9A:D6:BA:D4:68:72:69:6D:5F:4C:D0 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 62B357EBDAF905BAB861774142E9F3F61B6F3333 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:05:14 +0000 ROA not before: Thu 25 Jun 2026 07:00:14 +0000 ROA not after: Thu 24 Jun 2027 07:05:14 +0000 asID: 151263 IP address blocks: 103.255.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b3:57:eb:da:f9:05:ba:b8:61:77:41:42:e9:f3:f6:1b:6f:33:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:00:14 2026 GMT Not After : Jun 24 07:05:14 2027 GMT Subject: CN=028345F29B066637F19AD6BAD46872696D5F4CD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7d:05:87:ea:14:e6:d8:da:f1:aa:54:d1:da: 55:f9:fb:37:5d:4d:d2:d6:c9:4a:a8:5c:91:ff:7a: 9f:b8:2d:e2:cd:dd:f8:13:d2:07:08:94:4d:6e:02: d8:39:a2:eb:00:62:cd:f9:69:06:d5:74:bf:3f:88: 86:07:40:64:16:22:0d:7e:13:d2:a2:3b:f9:b7:40: e9:84:3b:86:44:eb:d9:c4:f2:7e:7b:ac:da:af:39: 93:7c:28:e0:37:e1:d1:d0:82:24:c9:7b:b3:0e:fa: 35:7b:d1:02:93:7d:f3:cd:52:01:4c:d9:92:8d:3a: d5:33:86:8b:bf:f7:4e:ba:7a:f7:f7:a2:bd:94:64: f9:53:0f:53:67:67:e8:ab:8d:1c:37:d9:ca:fc:e9: 80:59:a7:0f:f3:89:bf:7e:c3:1d:b2:c6:5c:18:83: c2:ce:32:29:54:85:65:a3:30:d7:f0:03:b6:b2:3c: b3:e1:a5:74:9c:8f:21:68:78:d3:31:ba:b5:c4:ff: 9c:84:ef:46:75:1a:5a:da:a7:c9:4b:13:6c:73:0e: 74:58:84:97:64:0f:d5:ea:3b:bb:bc:04:f0:21:75: 49:2c:08:5a:5b:0d:0d:ae:12:3a:a6:35:ef:ed:c6: 1d:68:45:69:1e:88:a8:01:b0:87:fd:b3:1a:0d:10: 64:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:83:45:F2:9B:06:66:37:F1:9A:D6:BA:D4:68:72:69:6D:5F:4C:D0 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e36382e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.68.0/24 Signature Algorithm: sha256WithRSAEncryption c3:fa:f7:ab:9c:6b:a1:f1:23:66:56:24:42:52:f9:bd:7d:0b: cb:ea:3d:65:ff:28:86:c3:5d:69:fb:b1:26:3c:87:57:c7:70: 06:e8:4d:bf:95:a5:44:89:69:96:67:36:65:0c:5a:1f:c0:64: 58:ea:80:b8:d3:f5:14:de:bc:19:d9:b6:2a:08:eb:6e:6e:5d: b4:01:8f:f4:f6:b6:7e:29:56:9c:f2:40:83:77:11:2d:5c:a5: 6e:2c:52:d9:39:3d:38:0f:a9:ce:6d:28:0d:0f:75:a2:96:23: 88:74:b5:b2:e9:af:d4:35:bd:3a:d4:e1:fe:94:94:30:26:26: ab:37:06:72:a3:6d:3c:e2:44:ad:e3:b9:08:98:3c:c6:88:8b: 48:74:a8:0e:91:27:13:97:c8:6c:ce:7a:f9:58:77:8f:ef:f5: fa:59:4a:10:a8:cc:ad:db:f9:03:f6:00:54:ec:58:30:23:7b: 55:d6:fb:a0:6e:f3:3f:44:98:0e:57:4d:83:1e:ad:95:75:45: c9:4e:ed:ae:fd:32:27:92:df:39:9d:c3:ba:fa:fd:ec:f9:3a: 03:9c:37:2b:36:4f:ed:43:56:d3:ad:a6:29:f7:e7:1e:05:cf: 46:e2:21:cc:76:9c:ab:8d:1b:ad:d5:2d:c0:58:55:08:6b:b7: 23:9b:e3:2f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYrNX69r5Bbq4YXdBQunz9htvMzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzAwMTRaFw0yNzA2MjQwNzA1MTRaMDMxMTAvBgNV BAMTKDAyODM0NUYyOUIwNjY2MzdGMTlBRDZCQUQ0Njg3MjY5NkQ1RjRDRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFfQWH6hTm2NrxqlTR2lX5+zdd TdLWyUqoXJH/ep+4LeLN3fgT0gcIlE1uAtg5ousAYs35aQbVdL8/iIYHQGQWIg1+ E9KiO/m3QOmEO4ZE69nE8n57rNqvOZN8KOA34dHQgiTJe7MO+jV70QKTffPNUgFM 2ZKNOtUzhou/9066evf3or2UZPlTD1NnZ+irjRw32cr86YBZpw/zib9+wx2yxlwY g8LOMilUhWWjMNfwA7ayPLPhpXScjyFoeNMxurXE/5yE70Z1Glrap8lLE2xzDnRY hJdkD9XqO7u8BPAhdUksCFpbDQ2uEjqmNe/txh1oRWkeiKgBsIf9sxoNEGSXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUAoNF8psGZjfxmta61GhyaW1fTNAwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTMy MzUzNTJlMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf/RDANBgkqhkiG9w0BAQsFAAOCAQEAw/r3q5xrofEjZlYkQlL5 vX0Ly+o9Zf8ohsNdafuxJjyHV8dwBuhNv5WlRIlplmc2ZQxaH8BkWOqAuNP1FN68 Gdm2Kgjrbm5dtAGP9Pa2filWnPJAg3cRLVylbixS2Tk9OA+pzm0oDQ91opYjiHS1 sumv1DW9OtTh/pSUMCYmqzcGcqNtPOJEreO5CJg8xoiLSHSoDpEnE5fIbM56+Vh3 j+/1+llKEKjMrdv5A/YAVOxYMCN7Vdb7oG7zP0SYDldNgx6tlXVFyU7trv0yJ5Lf OZ3Duvr97Pk6A5w3KzZP7UNW062mKffnHgXPRuIhzHacq40brdUtwFhVCGu3I5vj Lw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:55 2026 by rpki-client