$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e2039333034.roa File: 3132302e33312e3136302e302f31392d3234203d3e2039333034.roa (raw, json) Hash identifier: Ppvpe0o4T1CmvskSktOi73UA9A0eb8STk0+qnL1/02Q= Subject key identifier: A2:DB:0F:F1:DF:FE:5C:9D:F1:36:BE:8C:FA:2E:71:DB:88:E4:37:A4 Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 05999AC6FDE3C3ECCAF77000951DCB71433B49DD Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e2039333034.roa Signing time: Tue 26 May 2026 08:03:29 +0000 ROA not before: Tue 26 May 2026 07:58:29 +0000 ROA not after: Tue 25 May 2027 08:03:29 +0000 asID: 9304 IP address blocks: 120.31.160.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:99:9a:c6:fd:e3:c3:ec:ca:f7:70:00:95:1d:cb:71:43:3b:49:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: May 26 07:58:29 2026 GMT Not After : May 25 08:03:29 2027 GMT Subject: CN=A2DB0FF1DFFE5C9DF136BE8CFA2E71DB88E437A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3f:b2:68:8a:28:4a:c5:88:ca:c9:fe:1e:cd: b5:25:89:59:d8:12:19:99:f5:ee:b1:5b:63:5c:c3: 02:b2:48:2f:88:cf:54:01:5b:ee:e4:7b:94:36:d8: b9:d7:75:70:dd:59:a6:fe:34:ae:58:5b:9e:ca:14: b9:98:6d:33:2a:9d:cb:fb:7a:e7:1d:7c:93:3b:c5: 1c:45:4e:da:15:50:d4:2a:84:31:d7:33:9f:c1:e3: c2:f6:3f:0c:b6:cb:b7:3c:ac:dc:46:19:77:12:6e: 57:1e:c3:a7:84:02:9d:dd:fa:03:17:a5:f0:ed:90: 7f:c6:fa:60:b8:00:a7:d8:33:1f:2a:d5:21:41:77: 55:6d:bb:1f:3a:a3:92:7c:33:59:fd:2e:6c:8b:2b: 8f:ce:cc:01:53:86:13:cf:9b:e5:3c:87:17:da:51: d9:9d:72:87:08:4c:a4:33:3c:5b:35:ed:3b:a3:4a: d0:5c:9b:46:e1:23:fe:b7:83:f1:08:a9:bf:c5:ce: 49:13:4f:55:7c:73:d8:b6:65:6b:3b:eb:f6:81:60: 8c:3f:d9:ff:6e:e5:61:21:06:fe:c7:40:58:11:63: 85:d5:7c:8d:0f:e6:d5:f3:5c:2a:09:c8:ca:b3:06: 77:7a:5f:3b:0f:b3:f1:d2:1b:a5:b7:e4:f2:31:30: 90:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DB:0F:F1:DF:FE:5C:9D:F1:36:BE:8C:FA:2E:71:DB:88:E4:37:A4 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e3136302e302f31392d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.31.160.0/19 Signature Algorithm: sha256WithRSAEncryption bc:2e:78:26:fb:df:64:2c:82:7a:71:22:47:1b:f2:ae:15:12: af:35:56:d3:1c:1f:ff:b3:b5:21:76:f7:d7:df:83:ce:ee:a1: da:96:40:27:69:b2:2e:f2:5f:c6:39:ec:3a:d6:d6:a9:4c:1d: ae:fd:b9:0e:98:e2:3d:04:f1:5b:b7:7b:d3:be:fd:68:aa:b0: 66:4b:eb:ed:f6:67:84:7d:b6:bf:a5:5d:db:df:d3:9c:da:99: f7:01:39:d6:fb:67:97:d7:50:16:41:49:71:3d:16:2e:d9:56: c8:21:67:1c:26:93:16:be:46:ac:03:8f:56:5d:6f:6e:22:b1: 84:21:fa:bd:54:e6:e0:2c:aa:65:4c:78:2f:96:d6:85:5c:0b: 66:30:4e:74:5d:83:84:5f:d4:d9:91:9f:f5:b6:67:b4:9a:2c: d5:fa:4d:12:ef:b4:de:98:c0:9b:98:f4:37:5f:83:03:5f:33: e2:33:45:79:91:16:7f:c6:82:a1:3d:f1:08:63:1a:9d:6b:ec: 8a:37:c7:02:ba:b6:c4:f0:e9:03:9a:2c:6f:92:77:52:30:69: e2:d7:8c:94:2e:a1:c6:3c:da:3a:66:cc:12:13:9f:d6:f3:bd: 1f:93:a8:9f:a1:58:55:68:be:c5:de:b3:69:77:14:23:d0:a5: da:00:0c:90 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUBZmaxv3jw+zK93AAlR3LcUM7Sd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA1MjYwNzU4MjlaFw0yNzA1MjUwODAzMjlaMDMxMTAvBgNV BAMTKEEyREIwRkYxREZGRTVDOURGMTM2QkU4Q0ZBMkU3MURCODhFNDM3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2P7JoiihKxYjKyf4ezbUliVnY EhmZ9e6xW2NcwwKySC+Iz1QBW+7ke5Q22LnXdXDdWab+NK5YW57KFLmYbTMqncv7 eucdfJM7xRxFTtoVUNQqhDHXM5/B48L2Pwy2y7c8rNxGGXcSblcew6eEAp3d+gMX pfDtkH/G+mC4AKfYMx8q1SFBd1Vtux86o5J8M1n9LmyLK4/OzAFThhPPm+U8hxfa UdmdcocITKQzPFs17TujStBcm0bhI/63g/EIqb/FzkkTT1V8c9i2ZWs76/aBYIw/ 2f9u5WEhBv7HQFgRY4XVfI0P5tXzXCoJyMqzBnd6XzsPs/HSG6W35PIxMJA9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUotsP8d/+XJ3xNr6M+i5x24jkN6QwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMjMwMmUzMzMx MmUzMTM2MzAyZTMwMmYzMTM5MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBXgfoDANBgkqhkiG9w0BAQsFAAOCAQEAvC54JvvfZCyCenEiRxvyrhUSrzVW 0xwf/7O1IXb319+Dzu6h2pZAJ2myLvJfxjnsOtbWqUwdrv25DpjiPQTxW7d70779 aKqwZkvr7fZnhH22v6Vd29/TnNqZ9wE51vtnl9dQFkFJcT0WLtlWyCFnHCaTFr5G rAOPVl1vbiKxhCH6vVTm4CyqZUx4L5bWhVwLZjBOdF2DhF/U2ZGf9bZntJos1fpN Eu+03pjAm5j0N1+DA18z4jNFeZEWf8aCoT3xCGManWvsijfHArq2xPDpA5osb5J3 UjBp4teMlC6hxjzaOmbMEhOf1vO9H5Oon6FYVWi+xd6zaXcUI9Cl2gAMkA== -----END CERTIFICATE-----Generated at Tue Jun 2 20:51:12 2026 by rpki-client