$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e38302e302f32302d3234203d3e2039333034.roa File: 3132302e33312e38302e302f32302d3234203d3e2039333034.roa (raw, json) Hash identifier: 6HXdLSeAZkRYqxITB0V4ZT7RXAbrUk9l0NQTYGGqw3M= Subject key identifier: 36:C9:54:EF:2D:B9:4B:07:2A:B3:69:9F:52:50:E0:1B:AE:B6:7C:B8 Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 78A2E787CCCAFBDC46D7CC56B1C2D8B26EAC7768 Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e38302e302f32302d3234203d3e2039333034.roa Signing time: Tue 26 May 2026 08:03:29 +0000 ROA not before: Tue 26 May 2026 07:58:29 +0000 ROA not after: Tue 25 May 2027 08:03:29 +0000 asID: 9304 IP address blocks: 120.31.80.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:a2:e7:87:cc:ca:fb:dc:46:d7:cc:56:b1:c2:d8:b2:6e:ac:77:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: May 26 07:58:29 2026 GMT Not After : May 25 08:03:29 2027 GMT Subject: CN=36C954EF2DB94B072AB3699F5250E01BAEB67CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d7:76:1b:68:c7:81:fd:b0:32:03:cb:e5:a9: 8d:c4:98:bc:87:ae:dd:4d:c8:b0:e6:90:95:04:98: f5:1b:f7:16:83:f4:a3:ac:44:3c:07:b8:e5:e6:a1: 4e:f3:98:bd:60:ec:4f:81:f6:66:b6:77:09:70:9b: a8:53:72:31:53:4c:e7:fe:60:b0:e2:34:dc:35:9d: f0:62:9c:07:61:01:e6:4a:9a:ac:ed:30:50:ff:5f: 84:6b:de:0a:88:0e:bf:c7:fd:2b:7c:70:fe:aa:88: a7:06:45:07:ac:88:24:f3:69:a5:d4:36:f3:75:17: b4:1c:7b:b3:84:67:1f:f0:f0:98:e4:29:62:5f:5c: 14:91:80:75:8e:bf:38:45:34:74:c3:9d:ad:f2:c1: 0e:da:55:42:90:6b:15:22:d3:3e:a1:50:32:7b:d2: 48:6d:7f:c1:58:d5:8c:2b:4d:65:7c:1f:d1:b6:38: cd:4d:8b:0a:0d:2a:f8:f4:d8:89:11:af:c7:16:6a: c6:c5:4d:d3:14:72:a9:c3:c8:ea:85:08:ae:32:19: 35:f4:46:1b:cd:c7:87:82:0a:de:ca:e6:5a:94:f6: 5b:bb:20:f0:1c:83:0b:77:fa:cd:c2:1d:32:fd:59: e0:35:02:53:cb:d1:de:d1:4c:16:3b:35:62:fd:c7: d5:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:C9:54:EF:2D:B9:4B:07:2A:B3:69:9F:52:50:E0:1B:AE:B6:7C:B8 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e38302e302f32302d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.31.80.0/20 Signature Algorithm: sha256WithRSAEncryption 72:ef:a6:cc:e5:0b:f7:66:80:c9:62:25:a5:96:f5:b4:8b:73: 8c:a9:4d:6b:e9:e9:c0:05:04:31:20:f4:c0:91:89:11:d0:b1: 72:8a:92:35:16:55:aa:79:b3:5f:62:c0:f9:63:04:25:c5:02: 89:05:a6:a0:02:b3:8a:31:62:fd:41:e8:ad:01:e8:54:a9:23: ea:6f:4e:ba:f8:93:e6:25:ea:ee:fe:84:72:d0:7a:7f:11:2d: 7c:4d:a4:2f:b6:c3:0d:71:61:ee:a7:89:ad:60:96:73:bf:fc: ea:1d:e5:f9:d2:14:99:86:38:f9:10:63:9b:14:f7:02:30:a5: d9:47:ff:a1:3e:5b:3d:f2:b0:01:46:84:70:78:ef:34:a9:13: bd:b5:f7:c6:4f:eb:7f:1b:03:4c:f2:20:5e:13:9d:8e:90:90: ab:fd:7e:70:77:c4:4e:79:79:2d:b5:7d:4f:92:57:ac:81:2b: c0:4b:1c:eb:85:fc:02:02:c9:14:0e:7e:c8:c1:7c:6f:e5:3b: e0:06:e0:64:0e:f4:21:1b:ee:2f:2e:a4:4e:5e:f6:e6:81:58: 3d:67:b3:2c:e5:37:17:a5:58:fd:40:7a:70:54:f0:85:3d:58: a2:df:82:5f:43:69:93:6f:56:a9:56:11:cf:fc:d7:fb:7e:e7: 4f:61:4f:c6 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUeKLnh8zK+9xG18xWscLYsm6sd2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA1MjYwNzU4MjlaFw0yNzA1MjUwODAzMjlaMDMxMTAvBgNV BAMTKDM2Qzk1NEVGMkRCOTRCMDcyQUIzNjk5RjUyNTBFMDFCQUVCNjdDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv13YbaMeB/bAyA8vlqY3EmLyH rt1NyLDmkJUEmPUb9xaD9KOsRDwHuOXmoU7zmL1g7E+B9ma2dwlwm6hTcjFTTOf+ YLDiNNw1nfBinAdhAeZKmqztMFD/X4Rr3gqIDr/H/St8cP6qiKcGRQesiCTzaaXU NvN1F7Qce7OEZx/w8JjkKWJfXBSRgHWOvzhFNHTDna3ywQ7aVUKQaxUi0z6hUDJ7 0khtf8FY1YwrTWV8H9G2OM1NiwoNKvj02IkRr8cWasbFTdMUcqnDyOqFCK4yGTX0 RhvNx4eCCt7K5lqU9lu7IPAcgwt3+s3CHTL9WeA1AlPL0d7RTBY7NWL9x9WvAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUNslU7y25Swcqs2mfUlDgG662fLgwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMjMwMmUzMzMx MmUzODMwMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAR4H1AwDQYJKoZIhvcNAQELBQADggEBAHLvpszlC/dmgMliJaWW9bSLc4ypTWvp 6cAFBDEg9MCRiRHQsXKKkjUWVap5s19iwPljBCXFAokFpqACs4oxYv1B6K0B6FSp I+pvTrr4k+Yl6u7+hHLQen8RLXxNpC+2ww1xYe6nia1glnO//Ood5fnSFJmGOPkQ Y5sU9wIwpdlH/6E+Wz3ysAFGhHB47zSpE72198ZP638bA0zyIF4TnY6QkKv9fnB3 xE55eS21fU+SV6yBK8BLHOuF/AICyRQOfsjBfG/lO+AG4GQO9CEb7i8upE5e9uaB WD1nsyzlNxelWP1AenBU8IU9WKLfgl9DaZNvVqlWEc/81/t+509hT8Y= -----END CERTIFICATE-----Generated at Tue Jun 2 20:52:58 2026 by rpki-client