$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2039333034.roa File: 3132302e33312e302e302f31382d3234203d3e2039333034.roa (raw, json) Hash identifier: FypChaVbWeP5kqBMQtbErhxfSl8ZiosHxQsGFGAQA9E= Subject key identifier: 34:88:33:81:52:53:4B:1F:35:51:F7:96:6F:AC:03:88:9E:74:07:28 Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 123E8549FDC0D98DDDD8D06C8FD04308C9A0327C Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2039333034.roa Signing time: Tue 26 May 2026 07:58:12 +0000 ROA not before: Tue 26 May 2026 07:53:12 +0000 ROA not after: Tue 25 May 2027 07:58:12 +0000 asID: 9304 IP address blocks: 120.31.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:3e:85:49:fd:c0:d9:8d:dd:d8:d0:6c:8f:d0:43:08:c9:a0:32:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: May 26 07:53:12 2026 GMT Not After : May 25 07:58:12 2027 GMT Subject: CN=3488338152534B1F3551F7966FAC03889E740728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ab:b1:8f:d2:31:8c:be:a0:7b:84:2f:23:89: ff:24:97:e1:16:2b:b7:1c:24:6e:08:9e:42:7d:9d: 7e:29:2d:65:bf:61:5a:37:15:57:c9:d1:2d:9e:c9: d0:45:16:be:46:c4:37:ef:11:e1:f9:8e:19:b3:55: 03:db:5c:56:14:01:4e:12:78:02:08:5f:87:33:eb: bf:e6:a4:e4:e5:76:a2:aa:94:a4:a4:cb:e3:3d:ef: 66:88:9e:3a:48:af:f7:1b:ef:2e:5b:93:eb:0c:b8: b2:f2:c7:c8:21:a5:73:4d:64:8d:b9:1c:16:87:16: ae:49:f5:6b:ac:79:a5:34:6c:9a:f4:b0:9f:0f:a3: 52:a7:ae:a7:cd:07:99:7c:2a:95:a4:e7:fc:ac:66: 47:a0:86:fd:03:ba:c6:c9:12:23:39:97:74:0d:4a: a3:8a:ed:b7:d0:6a:4a:2a:7f:a0:87:2f:84:4e:66: 55:e6:a9:7f:ad:d5:ef:21:54:5b:b3:e9:eb:a5:6f: 3a:59:6e:81:82:03:b4:06:7a:9e:74:fd:48:10:2a: 8c:fb:3f:7e:2b:d2:6c:57:21:67:e7:8f:4a:09:a8: 5b:64:e5:0c:f7:b4:19:e3:76:a2:89:d3:bd:c9:4d: 04:57:1a:9a:3e:44:32:97:cf:3f:9b:79:1b:9b:c4: 45:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:88:33:81:52:53:4B:1F:35:51:F7:96:6F:AC:03:88:9E:74:07:28 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e302e302f31382d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.31.0.0/18 Signature Algorithm: sha256WithRSAEncryption 0b:92:00:f9:8c:23:a4:c8:a5:66:30:b8:65:3d:e0:cd:42:09: ed:22:49:79:ee:f7:1b:63:4c:8d:51:1c:e1:af:04:04:49:f2: 8d:97:5f:eb:5d:ba:f7:f7:14:c0:2c:03:b0:51:80:16:be:d7: c9:a5:e6:c7:08:70:32:45:90:79:73:c3:17:83:c2:53:16:a7: 31:1a:85:3d:60:bc:13:8d:94:4e:a7:db:16:89:fd:64:e0:30: 72:0a:8f:33:1b:3b:a3:39:5e:15:01:7e:18:79:bf:d8:d3:3a: 78:e2:1a:7c:de:b6:11:f1:c1:91:09:94:2a:a1:8e:a8:ab:ed: 4c:50:5f:fe:1d:19:7f:ed:f7:5b:90:0c:af:09:1c:fa:57:c9: ea:ab:d7:8b:56:59:10:38:39:cf:84:52:6d:7e:b6:e3:85:f3: ee:7c:57:0f:83:e3:00:75:b8:48:d7:42:27:55:a1:f3:92:9c: 22:51:8c:81:86:eb:52:71:33:e4:5a:b4:9d:c3:28:4b:21:c2: c8:6c:a7:a3:41:db:b4:f5:ca:f0:f9:f0:46:1c:47:ef:6b:9a: 1f:57:63:8f:10:40:45:3a:95:32:86:f9:86:4d:b4:55:04:30: db:26:ed:d6:98:21:5a:5c:f6:6f:a4:c3:59:8a:58:25:5f:9b: 76:9c:19:3f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUEj6FSf3A2Y3d2NBsj9BDCMmgMnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA1MjYwNzUzMTJaFw0yNzA1MjUwNzU4MTJaMDMxMTAvBgNV BAMTKDM0ODgzMzgxNTI1MzRCMUYzNTUxRjc5NjZGQUMwMzg4OUU3NDA3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFq7GP0jGMvqB7hC8jif8kl+EW K7ccJG4InkJ9nX4pLWW/YVo3FVfJ0S2eydBFFr5GxDfvEeH5jhmzVQPbXFYUAU4S eAIIX4cz67/mpOTldqKqlKSky+M972aInjpIr/cb7y5bk+sMuLLyx8ghpXNNZI25 HBaHFq5J9WuseaU0bJr0sJ8Po1KnrqfNB5l8KpWk5/ysZkeghv0DusbJEiM5l3QN SqOK7bfQakoqf6CHL4ROZlXmqX+t1e8hVFuz6eulbzpZboGCA7QGep50/UgQKoz7 P34r0mxXIWfnj0oJqFtk5Qz3tBnjdqKJ073JTQRXGpo+RDKXzz+beRubxEU7AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUNIgzgVJTSx81UfeWb6wDiJ50BygwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMjMwMmUzMzMx MmUzMDJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDM5MzMzMDM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG eB8AMA0GCSqGSIb3DQEBCwUAA4IBAQALkgD5jCOkyKVmMLhlPeDNQgntIkl57vcb Y0yNURzhrwQESfKNl1/rXbr39xTALAOwUYAWvtfJpebHCHAyRZB5c8MXg8JTFqcx GoU9YLwTjZROp9sWif1k4DByCo8zGzujOV4VAX4Yeb/Y0zp44hp83rYR8cGRCZQq oY6oq+1MUF/+HRl/7fdbkAyvCRz6V8nqq9eLVlkQODnPhFJtfrbjhfPufFcPg+MA dbhI10InVaHzkpwiUYyBhutScTPkWrSdwyhLIcLIbKejQdu09crw+fBGHEfva5of V2OPEEBFOpUyhvmGTbRVBDDbJu3WmCFaXPZvpMNZilglX5t2nBk/ -----END CERTIFICATE-----Generated at Tue Jun 2 20:52:58 2026 by rpki-client