$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2032393134.roa File: 3138302e3232332e302e302f31392d3234203d3e2032393134.roa (raw, json) Hash identifier: KVSc72oIvo42Nw55JelZbYl73OgBOI2qbgv/Zr32AQ8= Subject key identifier: 1F:B2:83:AA:C3:00:7F:25:EC:7E:2B:FB:83:28:22:C7:4D:E0:64:8E Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 59C1DD864F8C1424BA4E70EEF3B3066BE6AAF5FF Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2032393134.roa Signing time: Tue 26 May 2026 08:05:51 +0000 ROA not before: Tue 26 May 2026 08:00:51 +0000 ROA not after: Tue 25 May 2027 08:05:51 +0000 asID: 2914 IP address blocks: 180.223.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 11:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:c1:dd:86:4f:8c:14:24:ba:4e:70:ee:f3:b3:06:6b:e6:aa:f5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: May 26 08:00:51 2026 GMT Not After : May 25 08:05:51 2027 GMT Subject: CN=1FB283AAC3007F25EC7E2BFB832822C74DE0648E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:86:e6:8c:3e:b8:fb:8d:10:c2:e1:e8:77:5d: 8e:52:c3:cf:b7:7e:d3:57:42:b5:2f:19:c1:84:ea: 03:41:2d:8f:4f:85:e5:16:9a:a4:1f:f9:e3:f8:79: 1a:8e:64:5e:f5:aa:61:e3:36:92:f3:3c:2a:7e:82: 72:6c:d3:1c:65:d8:ff:cb:07:76:61:2f:94:c3:92: 12:3e:56:6f:ab:58:39:c6:cb:49:1e:be:e0:e8:32: 03:31:31:00:02:d2:00:52:b2:53:6b:ab:54:85:33: c8:ba:08:65:a9:d7:60:bd:35:b7:51:f8:bf:b4:0b: 51:77:6c:49:67:3d:e4:c2:77:e5:d7:e3:ef:2f:ca: 09:55:29:68:0e:a4:63:3f:f2:4e:33:2f:bb:0a:6c: 69:46:c5:71:aa:21:01:50:ed:87:cf:2a:59:fe:49: 1f:bf:8b:2b:1d:88:5f:0a:4a:4e:4f:b0:76:55:fa: b9:d2:11:19:cc:e7:6d:6b:b9:7d:1c:33:a9:e3:19: 60:14:fc:fa:1e:c8:b1:41:9d:f1:a8:55:e5:24:ec: f3:dc:fd:a0:97:3a:85:2a:55:74:57:7b:86:f7:10: d6:93:b1:41:1b:ee:ee:3c:8b:c3:45:8e:29:8e:ee: 15:2f:12:11:e8:19:ea:d1:09:91:3a:72:7f:ae:0c: 40:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B2:83:AA:C3:00:7F:25:EC:7E:2B:FB:83:28:22:C7:4D:E0:64:8E X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e302e302f31392d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.0.0/19 Signature Algorithm: sha256WithRSAEncryption 14:5c:b6:1f:37:5a:09:8f:61:c1:c1:db:4a:3a:0b:33:68:b4: 58:64:bc:67:ab:f6:76:63:e8:16:13:89:02:8f:fb:b4:84:e3: 9d:05:64:ec:b7:f7:90:12:07:f0:86:e6:c3:9b:11:4e:51:92: cd:2d:96:65:42:a7:4f:90:86:80:0f:35:03:d1:84:55:d2:42: 4b:9f:7b:23:c9:bc:53:1f:98:60:2e:c5:9c:c1:55:0e:59:b8: 15:94:11:3c:f1:6d:76:93:10:37:41:2c:31:82:b9:37:e7:f4: 7a:40:96:74:6e:bb:32:e9:af:da:78:1e:35:6e:5c:5a:66:55: 39:af:a3:ea:cf:31:dc:ad:3b:e2:6a:78:b6:fb:b2:a0:dd:90: d3:dd:a1:2c:fd:b0:7b:0b:ef:14:b1:f6:95:65:4d:33:66:62: 18:bc:a1:43:f1:ad:a4:ee:8f:53:83:bb:61:26:f3:fc:9b:5e: 14:b8:33:36:64:e5:1f:f1:94:c3:f2:52:e9:7b:6d:09:df:f5: 33:23:94:75:5f:f0:78:71:5c:e7:5f:3a:b3:cd:96:8e:a7:6e: 65:e1:77:b2:c1:3e:ca:af:a2:09:71:03:d5:ac:6b:3b:17:86: 0f:89:af:cd:0b:f2:0c:3c:61:2f:f2:2a:dc:fe:4e:6d:31:b4: d6:39:63:d4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWcHdhk+MFCS6TnDu87MGa+aq9f8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjA1MjYwODAwNTFaFw0yNzA1MjUwODA1NTFaMDMxMTAvBgNV BAMTKDFGQjI4M0FBQzMwMDdGMjVFQzdFMkJGQjgzMjgyMkM3NERFMDY0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCThuaMPrj7jRDC4eh3XY5Sw8+3 ftNXQrUvGcGE6gNBLY9PheUWmqQf+eP4eRqOZF71qmHjNpLzPCp+gnJs0xxl2P/L B3ZhL5TDkhI+Vm+rWDnGy0kevuDoMgMxMQAC0gBSslNrq1SFM8i6CGWp12C9NbdR +L+0C1F3bElnPeTCd+XX4+8vyglVKWgOpGM/8k4zL7sKbGlGxXGqIQFQ7YfPKln+ SR+/iysdiF8KSk5PsHZV+rnSERnM521ruX0cM6njGWAU/PoeyLFBnfGoVeUk7PPc /aCXOoUqVXRXe4b3ENaTsUEb7u48i8NFjimO7hUvEhHoGerRCZE6cn+uDECfAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUH7KDqsMAfyXsfiv7gygix03gZI4wHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTMwMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAW03wAwDQYJKoZIhvcNAQELBQADggEBABRcth83WgmPYcHB20o6CzNotFhkvGer 9nZj6BYTiQKP+7SE450FZOy395ASB/CG5sObEU5Rks0tlmVCp0+QhoAPNQPRhFXS QkufeyPJvFMfmGAuxZzBVQ5ZuBWUETzxbXaTEDdBLDGCuTfn9HpAlnRuuzLpr9p4 HjVuXFpmVTmvo+rPMdytO+JqeLb7sqDdkNPdoSz9sHsL7xSx9pVlTTNmYhi8oUPx raTuj1ODu2Em8/ybXhS4MzZk5R/xlMPyUul7bQnf9TMjlHVf8HhxXOdfOrPNlo6n bmXhd7LBPsqvoglxA9WsazsXhg+Jr80L8gw8YS/yKtz+Tm0xtNY5Y9Q= -----END CERTIFICATE-----Generated at Thu Jun 11 18:55:18 2026 by rpki-client