$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3138382e302f32322d3234203d3e2033353033.roa File: 3132342e34322e3138382e302f32322d3234203d3e2033353033.roa (raw, json) Hash identifier: jbPhc7fh3U7t3OusxbgufkvAlVih0cB9SiOWXgzNpbs= Subject key identifier: 60:D6:51:74:F4:8D:87:49:57:7D:70:CD:B1:AC:7B:F7:1F:C9:90:DC Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 2CAF9BD3A0BA61A2417ECA15300911F507855057 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3138382e302f32322d3234203d3e2033353033.roa Signing time: Mon 13 Jul 2026 03:46:38 +0000 ROA not before: Mon 13 Jul 2026 03:41:38 +0000 ROA not after: Mon 12 Jul 2027 03:46:38 +0000 asID: 3503 IP address blocks: 124.42.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:af:9b:d3:a0:ba:61:a2:41:7e:ca:15:30:09:11:f5:07:85:50:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:38 2026 GMT Not After : Jul 12 03:46:38 2027 GMT Subject: CN=60D65174F48D8749577D70CDB1AC7BF71FC990DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7a:92:f0:58:fc:fa:b6:aa:c6:8b:3c:37:92: 0f:f4:fa:de:1a:97:11:a0:02:d6:da:fb:5b:e7:56: 7b:37:7a:25:9e:6b:5a:f0:44:f7:79:d3:8e:98:60: 27:02:30:e0:52:39:1c:20:99:3e:cd:10:22:b3:a2: 01:c1:03:bb:3e:9b:1f:90:03:33:f1:c8:26:d1:f7: a6:6a:d7:ed:cd:9c:27:bf:00:2c:8e:6b:cd:98:ae: 1c:3f:35:90:d8:45:09:7e:6d:fe:9f:b5:55:f1:51: 5d:e5:24:a3:ca:21:77:01:94:d7:d4:0b:2d:5a:44: 1d:88:6f:14:52:d0:86:0c:89:52:f7:d5:50:9e:3e: 74:79:3f:f5:b9:7b:b1:24:68:7c:fe:89:7e:67:82: ea:35:85:55:6f:33:6a:ea:f4:e6:17:72:65:8f:a6: f9:89:59:8d:ba:e6:c3:01:ad:28:41:94:cb:91:ed: 53:cc:4a:52:4c:9e:a2:46:0b:15:f1:c0:66:c2:a8: a5:0a:f6:61:36:7c:31:2d:08:c2:32:41:b6:b5:e7: bf:91:07:29:a4:6c:4c:5e:41:93:57:47:3b:64:b8: 53:71:ba:73:0f:5e:02:f5:d7:45:12:6c:14:ad:51: fd:93:ba:d5:63:a7:1d:67:cc:3e:fa:61:f6:0c:c8: 1d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D6:51:74:F4:8D:87:49:57:7D:70:CD:B1:AC:7B:F7:1F:C9:90:DC X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3138382e302f32322d3234203d3e2033353033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.188.0/22 Signature Algorithm: sha256WithRSAEncryption 07:75:b0:b3:15:3e:40:0c:33:73:72:77:13:85:fa:31:60:82: 7c:8a:f9:5f:72:d5:06:8b:3a:05:fd:b4:1c:8c:e3:1e:d9:03: 57:d8:c4:0d:2e:df:0d:d4:b1:9c:6d:58:23:a5:54:60:42:1f: 9d:28:7c:6b:7e:06:e4:61:4a:4e:77:40:61:06:53:f3:3d:24: 92:56:ee:ff:cd:3c:eb:70:a0:d4:47:2b:35:63:0b:06:4b:1e: 68:26:e0:ab:74:b2:7b:3c:fb:75:2e:26:09:05:ca:0b:0e:80: f0:f4:99:54:29:ad:5f:5e:99:59:83:ce:9e:31:88:ea:40:02: 55:4d:5d:31:44:b7:6f:e1:33:04:d6:fc:cc:4b:f5:8f:09:8a: 45:89:3b:9c:04:a0:13:a6:ae:15:3b:90:32:af:30:a0:7d:b3: 2f:18:12:80:6d:c4:2e:71:fd:d8:c3:44:25:17:60:7e:77:38: 4d:ed:32:ac:d3:a0:73:83:03:28:1b:e2:1e:17:20:e0:75:50: 67:e7:cf:9a:e4:06:95:09:e7:4f:9d:30:98:38:bd:18:d4:a3: b4:44:70:6a:17:06:5e:d4:e7:16:bc:be:67:e5:cb:9a:6b:ef: 12:68:d8:39:e7:23:3c:8c:65:73:f9:64:91:6c:78:44:48:3f: 8a:1a:82:e4 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULK+b06C6YaJBfsoVMAkR9QeFUFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzhaFw0yNzA3MTIwMzQ2MzhaMDMxMTAvBgNV BAMTKDYwRDY1MTc0RjQ4RDg3NDk1NzdENzBDREIxQUM3QkY3MUZDOTkwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIepLwWPz6tqrGizw3kg/0+t4a lxGgAtba+1vnVns3eiWea1rwRPd5046YYCcCMOBSORwgmT7NECKzogHBA7s+mx+Q AzPxyCbR96Zq1+3NnCe/ACyOa82Yrhw/NZDYRQl+bf6ftVXxUV3lJKPKIXcBlNfU Cy1aRB2IbxRS0IYMiVL31VCePnR5P/W5e7EkaHz+iX5nguo1hVVvM2rq9OYXcmWP pvmJWY265sMBrShBlMuR7VPMSlJMnqJGCxXxwGbCqKUK9mE2fDEtCMIyQba157+R BymkbExeQZNXRztkuFNxunMPXgL110USbBStUf2TutVjpx1nzD76YfYMyB3FAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUYNZRdPSNh0lXfXDNsax79x/JkNwwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjM0MmUzNDMy MmUzMTM4MzgyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM1MzAzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnwqvDANBgkqhkiG9w0BAQsFAAOCAQEAB3WwsxU+QAwzc3J3E4X6MWCCfIr5 X3LVBos6Bf20HIzjHtkDV9jEDS7fDdSxnG1YI6VUYEIfnSh8a34G5GFKTndAYQZT 8z0kklbu/80863Cg1EcrNWMLBkseaCbgq3Syezz7dS4mCQXKCw6A8PSZVCmtX16Z WYPOnjGI6kACVU1dMUS3b+EzBNb8zEv1jwmKRYk7nASgE6auFTuQMq8woH2zLxgS gG3ELnH92MNEJRdgfnc4Te0yrNOgc4MDKBviHhcg4HVQZ+fPmuQGlQnnT50wmDi9 GNSjtERwahcGXtTnFry+Z+XLmmvvEmjYOecjPIxlc/lkkWx4REg/ihqC5A== -----END CERTIFICATE-----Generated at Tue Jul 21 14:02:50 2026 by rpki-client