$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa File: 3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: /nAgRExr87UnptaMnXyaub52EVhpTGGPUthJrZfXB8E= Subject key identifier: 8F:B0:B2:5F:70:ED:D4:CB:BA:39:17:78:6A:0A:F6:45:52:0D:71:C0 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 65C212FC6C3894CF0EDDC8CA8A737C8206407461 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:09:55 +0000 ROA not before: Thu 25 Jun 2026 07:04:55 +0000 ROA not after: Thu 24 Jun 2027 07:09:55 +0000 asID: 151263 IP address blocks: 103.45.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c2:12:fc:6c:38:94:cf:0e:dd:c8:ca:8a:73:7c:82:06:40:74:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:04:55 2026 GMT Not After : Jun 24 07:09:55 2027 GMT Subject: CN=8FB0B25F70EDD4CBBA3917786A0AF645520D71C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:18:e3:04:ee:03:3d:0e:bf:42:4c:40:cc:aa: de:6e:1c:d2:0d:28:5e:75:96:1a:7d:3d:47:e0:8f: 68:85:b1:48:b6:62:bc:1d:1f:78:63:56:32:9d:36: 69:3a:f9:b2:01:fb:51:81:19:be:05:e3:1b:51:4c: 87:65:61:4a:b7:8c:28:46:d0:db:66:25:a7:ef:1d: b1:09:2a:2d:ff:ae:36:e6:4b:58:45:7a:08:d4:b6: 8d:78:99:3e:77:b4:cf:d0:cb:5d:a5:98:ac:1d:d8: 59:a8:e6:2b:cb:0a:06:29:e0:27:f1:7c:92:c7:f9: 3c:13:99:a0:d4:35:13:24:26:19:ad:a1:f5:a9:3d: a6:57:e0:46:ac:0f:3c:6f:1f:ea:c3:80:23:47:10: f6:11:a0:77:f3:ee:69:0b:c4:ca:5d:c7:bf:ac:45: 06:f9:cd:e4:53:2d:f5:72:9b:9a:5e:ff:67:26:9b: bc:0a:59:5f:e2:bb:7c:dc:b7:a4:34:24:70:09:56: 50:53:bc:01:12:96:33:b0:30:21:d1:f2:80:39:33: 8b:c0:cf:cb:4c:25:a5:29:ef:46:19:cd:9d:55:b1: 32:14:0c:a5:c2:8c:28:f6:81:a4:e0:12:e4:94:b0: 95:e8:c2:96:1a:83:c7:7b:4f:3e:8c:cd:e0:21:b5: 6f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B0:B2:5F:70:ED:D4:CB:BA:39:17:78:6A:0A:F6:45:52:0D:71:C0 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3133372e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.45.137.0/24 Signature Algorithm: sha256WithRSAEncryption c5:73:36:c8:76:38:23:42:6d:d5:81:37:0d:a9:29:cb:df:b9: 2b:37:33:f1:87:ef:87:7a:60:b2:50:36:dd:48:e2:00:df:3c: 10:47:3f:b6:d1:4c:8a:5c:0b:0a:a1:6b:45:56:82:51:db:0f: d8:20:e3:7d:11:4b:69:a5:c8:e6:79:e2:bf:fa:95:d8:81:94: d7:69:99:4e:83:df:53:ab:5a:77:9e:de:77:f9:45:9c:59:fd: f7:ff:a0:cc:fd:2a:61:da:10:b9:ad:a8:ff:cb:0c:2d:fb:80: a0:3e:f3:8a:ee:b6:3f:13:d4:38:06:a4:ee:48:eb:f9:f2:59: 5f:62:c8:5b:80:0c:2d:67:d2:08:c8:4e:6b:fa:17:bb:57:ca: 33:5e:7d:cd:c6:7c:8d:af:04:fc:5f:af:df:5e:59:32:15:20: 12:93:3c:96:f9:a1:a8:85:39:4f:48:7f:f6:bc:be:f8:03:f7: 96:62:eb:dd:6f:66:bc:0d:fe:88:2e:97:19:b2:43:07:0c:bf: 2b:fe:54:f1:59:22:00:cb:1d:19:96:2d:47:ee:b5:ae:4e:49: 4d:ff:0c:59:f1:af:ac:e7:bc:78:70:c4:6b:c7:48:5d:7d:e4: 3b:49:08:55:0a:0e:a8:a8:2f:be:75:3e:9b:31:f9:5c:66:b3: 98:78:de:78 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZcIS/Gw4lM8O3cjKinN8ggZAdGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzA0NTVaFw0yNzA2MjQwNzA5NTVaMDMxMTAvBgNV BAMTKDhGQjBCMjVGNzBFREQ0Q0JCQTM5MTc3ODZBMEFGNjQ1NTIwRDcxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLGOME7gM9Dr9CTEDMqt5uHNIN KF51lhp9PUfgj2iFsUi2YrwdH3hjVjKdNmk6+bIB+1GBGb4F4xtRTIdlYUq3jChG 0NtmJafvHbEJKi3/rjbmS1hFegjUto14mT53tM/Qy12lmKwd2Fmo5ivLCgYp4Cfx fJLH+TwTmaDUNRMkJhmtofWpPaZX4EasDzxvH+rDgCNHEPYRoHfz7mkLxMpdx7+s RQb5zeRTLfVym5pe/2cmm7wKWV/iu3zct6Q0JHAJVlBTvAESljOwMCHR8oA5M4vA z8tMJaUp70YZzZ1VsTIUDKXCjCj2gaTgEuSUsJXowpYag8d7Tz6MzeAhtW+9AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUj7CyX3Dt1Mu6ORd4agr2RVINccAwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM0 MzUyZTMxMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGctiTANBgkqhkiG9w0BAQsFAAOCAQEAxXM2yHY4I0Jt1YE3Dakp y9+5Kzcz8Yfvh3pgslA23UjiAN88EEc/ttFMilwLCqFrRVaCUdsP2CDjfRFLaaXI 5nniv/qV2IGU12mZToPfU6tad57ed/lFnFn99/+gzP0qYdoQua2o/8sMLfuAoD7z iu62PxPUOAak7kjr+fJZX2LIW4AMLWfSCMhOa/oXu1fKM159zcZ8ja8E/F+v315Z MhUgEpM8lvmhqIU5T0h/9ry++AP3lmLr3W9mvA3+iC6XGbJDBwy/K/5U8VkiAMsd GZYtR+61rk5JTf8MWfGvrOe8eHDEa8dIXX3kO0kIVQoOqKgvvnU+mzH5XGazmHje eA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:33 2026 by rpki-client