$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e2039333034.roa File: 3132302e33312e3135322e302f32312d3234203d3e2039333034.roa (raw, json) Hash identifier: qJajhSW3wRtBa0i/ppLH3uRx7y8hSRhAz6GmK6z5Hus= Subject key identifier: 0B:AD:23:39:7E:05:CE:B4:72:19:60:1C:00:34:82:1A:AF:A3:BC:AF Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 1026CC1C54116353184453886E2A959F3FC6ABAC Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e2039333034.roa Signing time: Tue 26 May 2026 08:03:29 +0000 ROA not before: Tue 26 May 2026 07:58:29 +0000 ROA not after: Tue 25 May 2027 08:03:29 +0000 asID: 9304 IP address blocks: 120.31.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:26:cc:1c:54:11:63:53:18:44:53:88:6e:2a:95:9f:3f:c6:ab:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: May 26 07:58:29 2026 GMT Not After : May 25 08:03:29 2027 GMT Subject: CN=0BAD23397E05CEB47219601C0034821AAFA3BCAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:05:cd:1b:b9:97:f9:e7:2c:59:c6:4a:47: b8:9f:ad:f0:a8:e6:01:8b:2f:d6:53:a3:ae:d2:8a: 69:0d:0c:20:dd:30:d9:a7:d6:b0:05:69:1a:e5:a5: ee:19:09:da:cc:83:2a:b2:14:af:7d:68:1a:a1:be: 60:71:28:7f:34:f1:92:47:6c:23:a8:46:8f:af:67: b6:b5:34:b3:d9:f6:e0:a1:f7:3c:9c:74:a6:48:fb: 6e:7b:17:06:a4:32:d0:96:4c:94:93:01:66:64:26: 4d:1d:92:14:3a:93:73:ed:ce:b8:ab:d5:82:4c:d7: 55:ec:74:5a:51:97:9c:6f:0a:47:3b:fc:f8:78:bc: cc:c7:7c:7a:01:66:05:ab:9f:8f:90:0a:6b:50:b6: 3a:b5:9f:f6:a0:0f:23:48:2c:fe:33:ed:75:98:cf: d3:77:83:ed:95:c9:0d:51:a4:bf:62:8b:68:73:a3: 56:f1:d4:a8:64:ed:24:d1:d0:fe:9c:15:b6:1f:70: 08:19:d6:a7:cf:f7:d7:2e:03:18:02:37:69:39:32: 2d:cb:94:26:f9:43:b0:98:11:b8:29:bf:f1:95:50: 0d:55:0c:3e:83:92:d0:d8:96:bf:b4:18:a3:42:5a: 9d:56:99:eb:9e:e3:45:17:44:a6:87:c5:dc:b4:1f: 7f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:AD:23:39:7E:05:CE:B4:72:19:60:1C:00:34:82:1A:AF:A3:BC:AF X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3135322e302f32312d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.31.152.0/21 Signature Algorithm: sha256WithRSAEncryption 6c:6d:c0:82:30:80:7c:3c:05:e4:6e:e8:e3:53:73:4e:f0:64: bc:8b:e8:f0:c4:33:f1:c3:b7:3d:44:e5:3e:a4:ec:91:21:27: 6b:7f:43:4c:89:a2:41:17:a9:73:26:24:0f:eb:b2:0e:e2:89: 16:fb:98:c3:69:cd:6f:4f:1e:9f:d7:09:16:2a:52:64:64:fa: d1:83:b3:96:77:dd:91:d6:12:1e:f6:78:6e:5c:24:da:57:7d: 1e:76:a9:f5:c8:3f:a9:13:e7:cd:2a:45:a1:4f:00:0b:2e:71: 13:cb:82:98:a5:9e:b9:b1:7b:40:2c:9f:85:fb:98:19:8b:9d: 78:8c:7f:c9:8c:df:6b:89:28:07:2a:f0:6b:09:4c:4a:8c:c4: 24:4c:11:bd:bd:3a:76:b8:04:15:ad:c9:0f:c6:07:20:2d:27: e1:10:9e:a7:ec:91:79:1b:f7:7d:85:81:6a:f5:c1:9b:8b:02: 1f:e5:ee:58:e1:1c:4d:ad:0f:2f:7f:04:41:fd:95:dc:da:12: 58:1b:35:26:e3:b5:5a:21:f8:20:9a:88:ee:26:cf:17:a6:0e: ae:02:c2:59:b6:d1:57:b1:e6:5b:a1:bc:55:ea:c0:81:1c:6e: 70:d1:b9:2c:38:31:33:8f:46:c4:50:7c:b5:39:8f:ed:21:fe: ac:4d:3c:d3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUECbMHFQRY1MYRFOIbiqVnz/Gq6wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA1MjYwNzU4MjlaFw0yNzA1MjUwODAzMjlaMDMxMTAvBgNV BAMTKDBCQUQyMzM5N0UwNUNFQjQ3MjE5NjAxQzAwMzQ4MjFBQUZBM0JDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6AXNG7mX+ecsWcZKR7ifrfCo 5gGLL9ZTo67SimkNDCDdMNmn1rAFaRrlpe4ZCdrMgyqyFK99aBqhvmBxKH808ZJH bCOoRo+vZ7a1NLPZ9uCh9zycdKZI+257FwakMtCWTJSTAWZkJk0dkhQ6k3Ptzrir 1YJM11XsdFpRl5xvCkc7/Ph4vMzHfHoBZgWrn4+QCmtQtjq1n/agDyNILP4z7XWY z9N3g+2VyQ1RpL9ii2hzo1bx1Khk7STR0P6cFbYfcAgZ1qfP99cuAxgCN2k5Mi3L lCb5Q7CYEbgpv/GVUA1VDD6DktDYlr+0GKNCWp1Wmeue40UXRKaHxdy0H3+HAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUC60jOX4FzrRyGWAcADSCGq+jvK8wHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMjMwMmUzMzMx MmUzMTM1MzIyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA3gfmDANBgkqhkiG9w0BAQsFAAOCAQEAbG3AgjCAfDwF5G7o41NzTvBkvIvo 8MQz8cO3PUTlPqTskSEna39DTImiQRepcyYkD+uyDuKJFvuYw2nNb08en9cJFipS ZGT60YOzlnfdkdYSHvZ4blwk2ld9Hnap9cg/qRPnzSpFoU8ACy5xE8uCmKWeubF7 QCyfhfuYGYudeIx/yYzfa4koByrwawlMSozEJEwRvb06drgEFa3JD8YHIC0n4RCe p+yReRv3fYWBavXBm4sCH+XuWOEcTa0PL38EQf2V3NoSWBs1JuO1WiH4IJqI7ibP F6YOrgLCWbbRV7HmW6G8VerAgRxucNG5LDgxM49GxFB8tTmP7SH+rE080w== -----END CERTIFICATE-----Generated at Tue Jun 2 20:51:12 2026 by rpki-client