$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa File: 3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: p/qliSMIaGfeJnj2HvSHkLewIifj1a1eahS9MFrpoIc= Subject key identifier: 95:DF:04:3D:77:3F:21:46:1D:20:0E:8D:BB:91:91:38:43:34:6B:A3 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 34943612013B6EAFF89EF64E6518C9B4C089C022 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:09:54 +0000 ROA not before: Thu 25 Jun 2026 07:04:54 +0000 ROA not after: Thu 24 Jun 2027 07:09:54 +0000 asID: 151263 IP address blocks: 103.45.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:94:36:12:01:3b:6e:af:f8:9e:f6:4e:65:18:c9:b4:c0:89:c0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:04:54 2026 GMT Not After : Jun 24 07:09:54 2027 GMT Subject: CN=95DF043D773F21461D200E8DBB91913843346BA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bb:da:d1:77:66:2a:61:b2:cd:c9:2d:a1:5c: ad:13:48:6d:3a:81:3a:4f:08:80:4c:89:f4:33:64: f0:fe:0a:fd:de:ae:40:32:ed:69:5c:b3:5b:51:ff: 5a:fc:78:1f:36:4b:9f:74:6e:83:3a:04:7b:93:00: 40:63:a6:8d:f3:ca:b9:0a:02:21:d1:e1:1b:07:79: ae:6e:fa:2a:af:8a:3f:c0:58:6f:79:f9:38:7e:0a: 75:48:ed:a8:12:2a:f5:32:ed:fa:91:44:10:8f:a1: e6:01:e9:5f:b6:48:db:6d:dc:fd:58:0b:94:d6:1e: 64:1c:45:5e:69:52:e4:b6:40:1d:35:fe:67:7d:f2: d5:a5:a8:ab:5e:b4:ef:77:4c:74:0d:73:8e:9a:6f: 58:9e:ef:87:27:81:30:2d:31:39:0c:d2:d4:50:94: 95:0c:df:79:3d:ac:80:9c:12:51:46:bc:72:b0:4e: 06:8b:09:93:68:2a:e4:3b:7a:4e:75:d0:ff:f2:fa: f6:12:dc:59:67:61:c7:8e:c8:70:ac:1f:2a:53:8d: 33:53:e3:25:3b:c8:78:bc:55:5e:b1:ac:b9:c4:17: 73:9d:ac:e8:6c:36:96:33:97:83:ee:60:4b:da:09: ec:ff:54:57:1e:c4:f7:69:99:be:57:bc:1d:29:b7: ae:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:DF:04:3D:77:3F:21:46:1D:20:0E:8D:BB:91:91:38:43:34:6B:A3 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132382e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.45.128.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:80:28:40:21:44:0a:52:b6:55:fd:d5:0e:a9:77:f4:e6:11: 4b:8b:a0:96:6e:5e:2b:fc:79:6e:6f:9a:ad:0b:fb:57:4e:40: 5a:85:37:60:fc:7d:04:44:25:93:49:05:dd:5d:4e:cb:20:f8: 14:6e:cb:b0:b8:a6:12:67:ef:a7:9a:cc:0f:b4:ab:3c:96:b6: 95:9f:1d:5d:4d:cf:ef:29:29:dd:53:de:56:db:cb:05:54:91: 9e:fd:76:e3:26:07:f8:9a:38:f0:f9:bd:83:92:75:f0:41:f8: f0:04:38:77:20:87:0a:15:5b:37:4a:7a:97:d6:87:23:6e:3d: 08:98:a0:7b:ec:73:32:16:ec:f2:01:3e:6c:30:30:16:e2:30: e9:3e:d7:9b:ee:e8:74:bf:84:ae:f9:11:e1:13:34:1e:fc:07: 52:94:c5:92:aa:91:8f:01:31:18:ae:0d:07:a2:81:2e:f6:6d: 8a:71:f6:eb:3b:e7:9a:03:11:9b:36:32:c7:d9:03:78:83:b7: a9:2b:f8:bb:67:25:14:db:83:a2:bc:af:49:db:12:35:31:cd: 94:0a:c2:51:22:0b:d1:64:fe:e5:e8:ee:f4:ed:c8:4f:b2:5a: 0a:ab:60:fa:2d:b4:d5:05:7a:57:fc:62:cd:75:c5:df:91:34: fe:67:b6:c6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNJQ2EgE7bq/4nvZOZRjJtMCJwCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzA0NTRaFw0yNzA2MjQwNzA5NTRaMDMxMTAvBgNV BAMTKDk1REYwNDNENzczRjIxNDYxRDIwMEU4REJCOTE5MTM4NDMzNDZCQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnu9rRd2YqYbLNyS2hXK0TSG06 gTpPCIBMifQzZPD+Cv3erkAy7Wlcs1tR/1r8eB82S590boM6BHuTAEBjpo3zyrkK AiHR4RsHea5u+iqvij/AWG95+Th+CnVI7agSKvUy7fqRRBCPoeYB6V+2SNtt3P1Y C5TWHmQcRV5pUuS2QB01/md98tWlqKtetO93THQNc46ab1ie74cngTAtMTkM0tRQ lJUM33k9rICcElFGvHKwTgaLCZNoKuQ7ek510P/y+vYS3FlnYceOyHCsHypTjTNT 4yU7yHi8VV6xrLnEF3OdrOhsNpYzl4PuYEvaCez/VFcexPdpmb5XvB0pt66jAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUld8EPXc/IUYdIA6Nu5GROEM0a6MwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM0 MzUyZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGctgDANBgkqhkiG9w0BAQsFAAOCAQEAioAoQCFEClK2Vf3VDql3 9OYRS4uglm5eK/x5bm+arQv7V05AWoU3YPx9BEQlk0kF3V1OyyD4FG7LsLimEmfv p5rMD7SrPJa2lZ8dXU3P7ykp3VPeVtvLBVSRnv124yYH+Jo48Pm9g5J18EH48AQ4 dyCHChVbN0p6l9aHI249CJige+xzMhbs8gE+bDAwFuIw6T7Xm+7odL+ErvkR4RM0 HvwHUpTFkqqRjwExGK4NB6KBLvZtinH26zvnmgMRmzYyx9kDeIO3qSv4u2clFNuD oryvSdsSNTHNlArCUSIL0WT+5eju9O3IT7JaCqtg+i201QV6V/xizXXF35E0/me2 xg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:30 2026 by rpki-client