$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa File: 3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: UqttEmoA1unL7s9nMNBmisuqhHlP+3LOeNNI03OtFmg= Subject key identifier: 5D:82:CA:21:54:63:04:9A:73:2E:38:3D:84:9D:97:33:0B:1D:3B:F5 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 20A7411F0A88CE2DAAA61C595837676F72A36199 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:05:14 +0000 ROA not before: Thu 25 Jun 2026 07:00:14 +0000 ROA not after: Thu 24 Jun 2027 07:05:14 +0000 asID: 151263 IP address blocks: 103.255.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:a7:41:1f:0a:88:ce:2d:aa:a6:1c:59:58:37:67:6f:72:a3:61:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:00:14 2026 GMT Not After : Jun 24 07:05:14 2027 GMT Subject: CN=5D82CA215463049A732E383D849D97330B1D3BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:21:f5:2a:4d:c1:17:8b:df:a1:6d:49:a1:d0: 41:ab:18:d1:77:31:d3:99:1a:44:17:61:18:77:5b: 51:ce:58:7d:c5:fd:ec:49:74:d0:bb:a5:d5:99:dd: b2:d6:70:36:19:d8:fe:10:59:32:62:17:8a:dc:04: 7a:11:c3:c7:39:29:0a:4c:c4:c9:97:19:c0:ac:79: 2c:6c:dd:ef:87:ac:64:34:98:e7:d9:b1:60:1c:b1: ee:bb:d4:e5:89:bb:93:27:d3:01:d0:28:42:5a:44: b1:82:fe:22:47:e9:00:ee:42:a1:93:84:26:5b:e0: 11:2d:e7:88:a4:96:02:cc:32:cf:eb:37:09:9c:1e: a8:ed:76:b9:22:f4:ca:b0:ea:95:2c:26:72:d7:68: 43:0d:cb:70:f1:06:98:b1:ea:5e:f2:06:ba:7f:13: 1b:69:ac:0e:bf:71:12:84:0d:e1:a1:08:92:9e:c9: df:aa:0d:1a:cb:0c:8c:04:e5:31:cc:a5:37:ac:f1: 2b:00:b0:6c:86:db:21:56:9c:96:96:20:03:ab:a3: 95:be:cc:ff:28:e4:17:13:ce:c5:3d:ce:12:db:d1: 8b:e1:fc:fa:84:4b:80:bd:8c:28:16:bb:29:ae:d6: 14:6f:79:8b:ff:f2:f9:9c:43:fc:6b:0b:5f:90:37: 4a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:82:CA:21:54:63:04:9A:73:2E:38:3D:84:9D:97:33:0B:1D:3B:F5 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e3235352e37312e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.71.0/24 Signature Algorithm: sha256WithRSAEncryption be:db:d3:e0:16:12:34:35:38:f5:12:23:b8:51:3a:72:b0:17: 42:25:b6:bd:dd:a6:e4:0c:29:48:51:26:f0:47:db:42:05:42: 73:95:8b:f6:cb:1a:42:22:d9:88:d6:bf:2c:97:e3:0d:0e:97: 68:ae:bd:25:80:82:9b:58:22:56:98:ae:18:50:36:eb:0e:93: 5c:09:49:22:5f:76:fd:f8:44:e4:8c:c1:a3:e5:ba:e2:71:9d: c5:e5:5c:f0:e7:c2:fd:3e:d1:fe:72:d3:13:d8:24:e3:20:ea: 81:00:38:04:28:19:02:b2:15:9c:33:11:f9:72:ab:3f:90:52: 6b:05:0e:2b:36:65:a1:15:8b:ac:24:a6:d9:24:29:b9:41:b2: f7:4b:6c:77:9e:55:18:49:07:ac:47:14:e5:77:ed:42:63:b5: 27:67:6c:f5:5b:90:9f:78:17:5a:f4:11:bf:9c:db:1f:cd:3c: 5e:a2:6f:24:39:5f:2a:4a:39:d8:ee:3a:88:2b:e0:60:77:28: 6b:da:8e:77:08:70:4c:93:a7:72:0b:97:ea:81:13:0b:7d:84: be:76:47:2b:ff:c4:81:b9:bd:34:92:cf:1b:1a:91:88:c5:3d: 6a:1f:8b:0c:ce:3c:ce:d5:48:de:1a:86:7f:76:a1:44:55:7a: 48:ce:48:e7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUIKdBHwqIzi2qphxZWDdnb3KjYZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzAwMTRaFw0yNzA2MjQwNzA1MTRaMDMxMTAvBgNV BAMTKDVEODJDQTIxNTQ2MzA0OUE3MzJFMzgzRDg0OUQ5NzMzMEIxRDNCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8IfUqTcEXi9+hbUmh0EGrGNF3 MdOZGkQXYRh3W1HOWH3F/exJdNC7pdWZ3bLWcDYZ2P4QWTJiF4rcBHoRw8c5KQpM xMmXGcCseSxs3e+HrGQ0mOfZsWAcse671OWJu5Mn0wHQKEJaRLGC/iJH6QDuQqGT hCZb4BEt54iklgLMMs/rNwmcHqjtdrki9Mqw6pUsJnLXaEMNy3DxBpix6l7yBrp/ ExtprA6/cRKEDeGhCJKeyd+qDRrLDIwE5THMpTes8SsAsGyG2yFWnJaWIAOro5W+ zP8o5BcTzsU9zhLb0Yvh/PqES4C9jCgWuymu1hRveYv/8vmcQ/xrC1+QN0oHAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUXYLKIVRjBJpzLjg9hJ2XMwsdO/UwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTMy MzUzNTJlMzczMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGf/RzANBgkqhkiG9w0BAQsFAAOCAQEAvtvT4BYSNDU49RIjuFE6 crAXQiW2vd2m5AwpSFEm8EfbQgVCc5WL9ssaQiLZiNa/LJfjDQ6XaK69JYCCm1gi VpiuGFA26w6TXAlJIl92/fhE5IzBo+W64nGdxeVc8OfC/T7R/nLTE9gk4yDqgQA4 BCgZArIVnDMR+XKrP5BSawUOKzZloRWLrCSm2SQpuUGy90tsd55VGEkHrEcU5Xft QmO1J2ds9VuQn3gXWvQRv5zbH808XqJvJDlfKko52O46iCvgYHcoa9qOdwhwTJOn cguX6oETC32EvnZHK//Egbm9NJLPGxqRiMU9ah+LDM48ztVI3hqGf3ahRFV6SM5I 5w== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:54 2026 by rpki-client