$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e2039333034.roa File: 3132302e33312e39362e302f31392d3234203d3e2039333034.roa (raw, json) Hash identifier: DUI+/CH3Ppi2Rr4ZUH2CrDyD8ifc0oCutLndK0uznyw= Subject key identifier: 36:3F:69:95:0E:47:E3:21:9C:1E:4A:9D:F3:ED:E2:60:33:D3:65:E9 Certificate issuer: /CN=18841C63CD89383303F1BA048085C2212B03B0BD Certificate serial: 428E5234E04BDF411036128D7E04ADA58D327246 Authority key identifier: 18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e2039333034.roa Signing time: Tue 26 May 2026 08:03:28 +0000 ROA not before: Tue 26 May 2026 07:58:28 +0000 ROA not after: Tue 25 May 2027 08:03:28 +0000 asID: 9304 IP address blocks: 120.31.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8e:52:34:e0:4b:df:41:10:36:12:8d:7e:04:ad:a5:8d:32:72:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18841C63CD89383303F1BA048085C2212B03B0BD Validity Not Before: May 26 07:58:28 2026 GMT Not After : May 25 08:03:28 2027 GMT Subject: CN=363F69950E47E3219C1E4A9DF3EDE26033D365E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c6:7d:0f:0f:d0:bb:b2:00:68:e6:4d:16:09: 47:a2:c9:06:77:ef:81:4e:d4:82:de:e2:81:80:b4: 32:4f:a7:6d:4f:78:ac:cf:69:5d:8d:ab:72:5e:65: 76:72:e2:07:32:5e:19:9e:d2:dc:d3:0f:2f:d0:3a: 9b:8d:68:75:70:96:ae:0d:9b:dd:52:bd:2c:de:eb: e7:75:24:24:18:01:fe:3a:a1:d7:a3:89:3e:70:66: 84:2f:04:1a:76:b1:ed:61:60:7f:bc:2f:7b:d7:4a: 08:ed:c7:34:cb:09:a5:f6:8f:c9:ee:6c:a8:e7:1c: da:89:7c:be:a2:a1:5b:ee:c8:3a:44:25:aa:75:c7: 30:cf:e3:06:02:1e:52:51:ea:a9:e1:35:e2:6b:4b: bc:54:93:db:d6:0f:42:ee:cb:40:63:aa:37:e1:81: 2c:52:84:fb:a5:bd:48:d3:a8:e6:b8:b5:7e:67:f0: 3f:66:22:f7:ad:84:5b:f3:5c:6a:f1:5e:5f:5a:71: a0:4c:e8:a0:10:dd:fc:e5:da:87:65:a0:c3:7b:76: f8:e9:19:24:b6:e0:83:85:37:39:25:86:75:37:85: 8e:09:6e:b5:c9:fa:82:17:5b:10:59:5e:f2:90:d3: 1b:13:20:b9:4d:6f:e1:21:1d:0b:c4:f8:81:c8:9c: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3F:69:95:0E:47:E3:21:9C:1E:4A:9D:F3:ED:E2:60:33:D3:65:E9 X509v3 Authority Key Identifier: keyid:18:84:1C:63:CD:89:38:33:03:F1:BA:04:80:85:C2:21:2B:03:B0:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/18841C63CD89383303F1BA048085C2212B03B0BD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18841C63CD89383303F1BA048085C2212B03B0BD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217586179/0/3132302e33312e39362e302f31392d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.31.96.0/19 Signature Algorithm: sha256WithRSAEncryption cd:26:28:7a:18:1e:fc:72:50:c9:b3:07:d8:01:21:39:60:86: e3:35:90:64:d6:b1:cf:85:e5:5d:ca:11:47:13:a0:55:6d:f5: 45:02:43:a1:38:9a:d4:64:c9:4d:95:23:58:51:8f:b8:f3:e6: 01:e9:bd:ee:32:58:f9:1a:52:98:e2:07:c4:a5:8c:c8:17:ab: 0f:d8:ce:ed:ba:68:16:6e:45:24:41:1f:e5:6b:86:24:ef:7a: 82:a2:56:bf:30:1e:66:5d:b3:98:54:e7:72:53:26:d2:0e:44: ef:8e:57:c1:49:f0:86:6f:21:9e:c9:20:a3:67:db:35:ec:7a: c6:33:75:b4:2e:a4:d5:3c:49:d1:ff:ff:8a:10:37:28:0f:c0: 69:b1:e7:66:fa:bb:75:ff:ec:03:86:a9:e8:fa:cb:86:ac:ec: e0:f2:89:4e:97:a8:3f:75:8a:91:e5:86:3f:d9:7c:67:a5:e7: 2c:e9:d2:01:9e:b2:d5:10:4c:69:2b:ac:0c:48:db:00:ff:1e: a7:7e:25:1c:88:a7:14:d8:76:42:66:89:68:73:ac:a4:77:49: 69:a7:92:d1:42:9a:5a:c1:ae:f3:e4:f8:b4:2f:0b:57:c7:f5: c0:d3:3c:23:ab:83:f0:f1:3c:de:01:0c:2e:3a:8c:e4:94:88: ea:07:cb:a7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUQo5SNOBL30EQNhKNfgStpY0yckYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEy QjAzQjBCRDAeFw0yNjA1MjYwNzU4MjhaFw0yNzA1MjUwODAzMjhaMDMxMTAvBgNV BAMTKDM2M0Y2OTk1MEU0N0UzMjE5QzFFNEE5REYzRURFMjYwMzNEMzY1RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3xn0PD9C7sgBo5k0WCUeiyQZ3 74FO1ILe4oGAtDJPp21PeKzPaV2Nq3JeZXZy4gcyXhme0tzTDy/QOpuNaHVwlq4N m91SvSze6+d1JCQYAf46odejiT5wZoQvBBp2se1hYH+8L3vXSgjtxzTLCaX2j8nu bKjnHNqJfL6ioVvuyDpEJap1xzDP4wYCHlJR6qnhNeJrS7xUk9vWD0Luy0Bjqjfh gSxShPulvUjTqOa4tX5n8D9mIvethFvzXGrxXl9acaBM6KAQ3fzl2odloMN7dvjp GSS24IOFNzklhnU3hY4JbrXJ+oIXWxBZXvKQ0xsTILlNb+EhHQvE+IHInEMlAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUNj9plQ5H4yGcHkqd8+3iYDPTZekwHwYDVR0j BBgwFoAUGIQcY82JODMD8boEgIXCISsDsL0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzU4NjE3OS8wLzE4ODQxQzYzQ0Q4OTM4MzMwM0YxQkEwNDgwODVD MjIxMkIwM0IwQkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg4NDFDNjNDRDg5MzgzMzAzRjFCQTA0ODA4NUMyMjEyQjAzQjBCRC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTg2MTc5LzAvMzEzMjMwMmUzMzMx MmUzOTM2MmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAV4H2AwDQYJKoZIhvcNAQELBQADggEBAM0mKHoYHvxyUMmzB9gBITlghuM1kGTW sc+F5V3KEUcToFVt9UUCQ6E4mtRkyU2VI1hRj7jz5gHpve4yWPkaUpjiB8SljMgX qw/Yzu26aBZuRSRBH+VrhiTveoKiVr8wHmZds5hU53JTJtIORO+OV8FJ8IZvIZ7J IKNn2zXsesYzdbQupNU8SdH//4oQNygPwGmx52b6u3X/7AOGqej6y4as7ODyiU6X qD91ipHlhj/ZfGel5yzp0gGestUQTGkrrAxI2wD/Hqd+JRyIpxTYdkJmiWhzrKR3 SWmnktFCmlrBrvPk+LQvC1fH9cDTPCOrg/DxPN4BDC46jOSUiOoHy6c= -----END CERTIFICATE-----Generated at Tue Jun 2 20:51:09 2026 by rpki-client