$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231362e302f32322d3234203d3e2033353033.roa File: 3132342e34322e3231362e302f32322d3234203d3e2033353033.roa (raw, json) Hash identifier: gEnuf6cN2NXBwCx3GkChc5+QWK12V6ygRVQqqV1BZWk= Subject key identifier: 80:70:8B:37:55:B8:F5:4C:DC:79:C2:A0:CD:B5:F4:DE:DD:A4:AD:4D Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 60B38CE1D1C40FB91C7B2EB7AA0D2B2CC3C949BD Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231362e302f32322d3234203d3e2033353033.roa Signing time: Mon 13 Jul 2026 03:46:33 +0000 ROA not before: Mon 13 Jul 2026 03:41:33 +0000 ROA not after: Mon 12 Jul 2027 03:46:33 +0000 asID: 3503 IP address blocks: 124.42.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 03:41:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:b3:8c:e1:d1:c4:0f:b9:1c:7b:2e:b7:aa:0d:2b:2c:c3:c9:49:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: Jul 13 03:41:33 2026 GMT Not After : Jul 12 03:46:33 2027 GMT Subject: CN=80708B3755B8F54CDC79C2A0CDB5F4DEDDA4AD4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:04:91:52:75:c9:fe:b7:37:78:dc:f8:0f: 2a:4c:e7:37:0c:66:35:83:77:34:8a:3d:6e:cd:b4: 7c:a1:97:9c:e4:ef:bc:d1:48:65:56:93:e5:81:32: 0f:82:f1:3c:d4:5b:1c:5e:25:0c:68:12:b1:16:99: dc:a6:ce:21:43:1f:93:34:68:f7:26:4a:c8:0d:ad: 1f:aa:a8:6b:92:8d:aa:f7:b0:d1:13:fb:f1:cd:f6: f4:3a:94:8e:1c:c3:d7:6e:c7:dc:a7:5f:58:bc:c0: 97:2d:8b:88:45:b5:50:c9:14:11:b6:14:1a:70:41: ee:15:38:4a:71:3b:9e:53:5c:13:5f:86:1e:91:45: db:77:fd:15:91:4a:7d:9e:f5:3e:03:b7:4c:5a:c6: b7:d4:46:12:fe:41:7e:05:2e:8d:cc:29:32:e8:e0: 5c:90:ea:5f:5f:86:49:19:97:e2:39:a8:f3:5a:96: a2:b8:29:46:50:05:ec:1e:3c:c6:25:25:da:4f:ed: 5b:ff:32:74:62:53:d9:d3:17:7e:b8:a7:2a:74:f1: 11:38:92:13:87:1b:fb:39:2c:5f:bc:10:55:0a:35: 3b:e8:9c:6d:ee:24:b5:5a:6e:4a:97:37:6f:1d:1d: d2:56:48:c8:a6:02:fa:7a:98:b6:a6:19:05:20:f6: aa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:70:8B:37:55:B8:F5:4C:DC:79:C2:A0:CD:B5:F4:DE:DD:A4:AD:4D X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231362e302f32322d3234203d3e2033353033.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.42.216.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:fb:a8:53:83:ce:83:23:f2:34:65:11:58:71:4e:83:ba:ca: 86:10:7f:bd:af:0f:53:36:dd:2d:8e:d6:d6:c3:3d:a4:6e:8e: e9:84:d6:8c:46:0a:24:90:df:25:1d:98:78:f9:04:fe:b6:bd: d2:e2:6d:92:8d:a7:26:c9:39:63:80:95:d7:0e:a6:af:da:5d: 68:f3:87:02:5e:f0:0c:b5:36:c6:c6:45:1c:f0:83:f3:43:8e: 36:24:9a:20:af:0f:37:10:2d:14:5d:1d:e5:d5:0f:78:de:da: 52:ee:c9:bf:be:7c:0d:06:a5:6f:f2:b0:1d:4f:d6:56:d1:f7: e0:d1:67:4c:51:f2:27:9d:05:ed:3c:0a:df:00:3d:4f:e9:ee: c5:46:c7:7d:e3:5f:f3:d2:e6:38:16:dc:83:e2:8d:12:da:64: 1f:35:1e:a2:7e:c4:ef:d3:c8:7f:55:70:5a:27:30:18:e2:ff: 17:41:6b:9c:85:a0:d4:61:69:d8:dc:b1:eb:29:8f:72:8a:03: 83:44:05:00:f5:1b:55:95:04:f8:cb:3a:64:4a:54:e2:60:86: eb:9b:27:25:ed:12:59:77:46:c4:a0:3b:d0:f9:69:76:0b:6f: 73:fe:5a:3a:71:77:c5:69:9e:27:39:bd:51:c4:e5:dc:86:22: 81:94:7d:dd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYLOM4dHED7kcey63qg0rLMPJSb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzNaFw0yNzA3MTIwMzQ2MzNaMDMxMTAvBgNV BAMTKDgwNzA4QjM3NTVCOEY1NENEQzc5QzJBMENEQjVGNERFRERBNEFENEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCspQSRUnXJ/rc3eNz4DypM5zcM ZjWDdzSKPW7NtHyhl5zk77zRSGVWk+WBMg+C8TzUWxxeJQxoErEWmdymziFDH5M0 aPcmSsgNrR+qqGuSjar3sNET+/HN9vQ6lI4cw9dux9ynX1i8wJcti4hFtVDJFBG2 FBpwQe4VOEpxO55TXBNfhh6RRdt3/RWRSn2e9T4Dt0xaxrfURhL+QX4FLo3MKTLo 4FyQ6l9fhkkZl+I5qPNalqK4KUZQBewePMYlJdpP7Vv/MnRiU9nTF364pyp08RE4 khOHG/s5LF+8EFUKNTvonG3uJLVabkqXN28dHdJWSMimAvp6mLamGQUg9qrnAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUgHCLN1W49UzcecKgzbX03t2krU0wHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjM0MmUzNDMy MmUzMjMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMzM1MzAzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAnwq2DANBgkqhkiG9w0BAQsFAAOCAQEAHPuoU4POgyPyNGURWHFOg7rKhhB/ va8PUzbdLY7W1sM9pG6O6YTWjEYKJJDfJR2YePkE/ra90uJtko2nJsk5Y4CV1w6m r9pdaPOHAl7wDLU2xsZFHPCD80OONiSaIK8PNxAtFF0d5dUPeN7aUu7Jv758DQal b/KwHU/WVtH34NFnTFHyJ50F7TwK3wA9T+nuxUbHfeNf89LmOBbcg+KNEtpkHzUe on7E79PIf1VwWicwGOL/F0FrnIWg1GFp2Nyx6ymPcooDg0QFAPUbVZUE+Ms6ZEpU 4mCG65snJe0SWXdGxKA70Plpdgtvc/5aOnF3xWmeJzm9UcTl3IYigZR93Q== -----END CERTIFICATE-----Generated at Tue Jul 21 14:02:50 2026 by rpki-client