$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e20323037353530.roa File: 3138302e3232332e3132382e302f31372d3234203d3e20323037353530.roa (raw, json) Hash identifier: 4LkK9lMgEiiumdgQVxtyzSLMc3ZKMox2zpgWcnCa1go= Subject key identifier: 6D:45:A1:35:7D:AA:40:52:90:DB:D6:E2:3F:7E:AB:FE:B7:F2:EB:02 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 67E81EF731FC57025438FA68345E3ACB79E76514 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e20323037353530.roa Signing time: Tue 02 Jun 2026 10:39:22 +0000 ROA not before: Tue 02 Jun 2026 10:34:22 +0000 ROA not after: Tue 01 Jun 2027 10:39:22 +0000 asID: 207550 IP address blocks: 180.223.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e8:1e:f7:31:fc:57:02:54:38:fa:68:34:5e:3a:cb:79:e7:65:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jun 2 10:34:22 2026 GMT Not After : Jun 1 10:39:22 2027 GMT Subject: CN=6D45A1357DAA405290DBD6E23F7EABFEB7F2EB02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f3:28:0e:88:25:e0:a5:08:8b:35:91:39:bc: 2d:f6:07:be:da:5f:27:e1:3e:4f:cf:61:ec:a1:0f: 32:8c:37:83:92:26:41:79:54:51:33:f4:20:5e:b8: 49:18:27:3a:99:5a:be:8d:94:5a:7e:37:b7:42:54: d6:fd:cf:67:45:97:13:a8:fa:b1:f7:c1:47:77:92: 28:39:f8:21:7e:6f:7b:e4:6d:ac:dd:00:cb:75:1d: 61:ad:2d:f2:3d:c3:71:73:88:40:d5:94:4f:bb:00: bf:17:10:d9:e7:b4:75:04:82:96:fc:c1:be:4d:54: c1:c2:d7:b1:29:a2:cc:01:6c:16:10:b6:d2:de:c3: 2d:92:89:5e:58:2b:6e:34:3a:cc:24:be:7e:b1:c5: e4:4e:2f:af:2f:59:4a:6b:2f:27:35:bb:84:77:b5: 74:e7:f6:df:37:1c:19:cf:de:3d:66:95:64:64:d2: 73:65:c3:94:8a:92:30:87:a0:1d:d9:c2:4b:c1:1a: 69:03:51:37:c8:03:27:1f:6a:06:48:2c:4b:18:1a: 9c:e4:6f:73:1c:4f:e3:33:98:77:6e:0c:ae:64:6c: 59:07:79:18:3d:cf:95:e2:80:c6:f4:9d:10:87:0e: 07:21:b2:73:6e:c1:bd:b0:0f:9a:18:21:61:3c:99: 3a:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:45:A1:35:7D:AA:40:52:90:DB:D6:E2:3F:7E:AB:FE:B7:F2:EB:02 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e20323037353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.128.0/17 Signature Algorithm: sha256WithRSAEncryption 05:72:5b:63:8a:1a:e3:85:5e:37:e7:39:42:2f:d8:6a:42:a8: bc:46:b4:8a:41:fc:f2:65:a6:ed:da:61:99:af:42:c1:55:57: 65:a2:e8:73:86:04:ce:66:03:31:bd:30:4b:ab:f4:d4:10:6d: 2c:30:29:51:92:09:fa:c3:a5:2d:51:f7:10:90:13:37:65:67: 11:c4:0f:75:aa:ee:40:ef:f0:c3:cd:6e:0e:59:4a:71:4a:8a: 34:5a:1c:7e:64:24:7a:90:fc:d2:6f:1b:55:90:53:34:42:e0: fc:4d:53:13:6b:17:f2:f5:a4:73:e8:72:f4:9d:1b:49:d9:35: 3d:fa:f2:3a:00:15:4f:44:c9:62:14:3a:c3:8b:00:5b:2e:33: d0:64:e7:a4:50:15:29:28:0a:03:57:e1:a3:6b:17:6b:64:4e: 9d:ae:4f:a1:b7:4f:9c:2e:e3:cf:bc:45:8b:ef:ab:0e:b5:a1: 8b:cb:04:32:4b:df:38:1c:bc:04:17:ec:ad:a9:f4:5c:ce:73: 12:66:47:35:1a:8a:56:b3:ec:4a:70:ea:b0:52:47:f2:4e:c1: 4d:ed:79:c7:b6:4b:3d:49:35:7e:71:63:ee:d4:a9:4a:88:16: 10:15:e6:d8:70:4f:77:d8:91:3c:f2:00:d6:66:81:c0:be:62: c6:f9:4d:73 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUZ+ge9zH8VwJUOPpoNF46y3nnZRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjA2MDIxMDM0MjJaFw0yNzA2MDExMDM5MjJaMDMxMTAvBgNV BAMTKDZENDVBMTM1N0RBQTQwNTI5MERCRDZFMjNGN0VBQkZFQjdGMkVCMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS8ygOiCXgpQiLNZE5vC32B77a XyfhPk/PYeyhDzKMN4OSJkF5VFEz9CBeuEkYJzqZWr6NlFp+N7dCVNb9z2dFlxOo +rH3wUd3kig5+CF+b3vkbazdAMt1HWGtLfI9w3FziEDVlE+7AL8XENnntHUEgpb8 wb5NVMHC17EposwBbBYQttLewy2SiV5YK240Oswkvn6xxeROL68vWUprLyc1u4R3 tXTn9t83HBnP3j1mlWRk0nNlw5SKkjCHoB3ZwkvBGmkDUTfIAycfagZILEsYGpzk b3McT+MzmHduDK5kbFkHeRg9z5XigMb0nRCHDgchsnNuwb2wD5oYIWE8mTqbAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUbUWhNX2qQFKQ29biP36r/rfy6wIwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUz MjMyMzMyZTMxMzIzODJlMzAyZjMxMzcyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzUz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEB7TfgDANBgkqhkiG9w0BAQsFAAOCAQEABXJbY4oa44VeN+c5 Qi/YakKovEa0ikH88mWm7dphma9CwVVXZaLoc4YEzmYDMb0wS6v01BBtLDApUZIJ +sOlLVH3EJATN2VnEcQPdaruQO/ww81uDllKcUqKNFocfmQkepD80m8bVZBTNELg /E1TE2sX8vWkc+hy9J0bSdk1PfryOgAVT0TJYhQ6w4sAWy4z0GTnpFAVKSgKA1fh o2sXa2ROna5PobdPnC7jz7xFi++rDrWhi8sEMkvfOBy8BBfsran0XM5zEmZHNRqK VrPsSnDqsFJH8k7BTe15x7ZLPUk1fnFj7tSpSogWEBXm2HBPd9iRPPIA1maBwL5i xvlNcw== -----END CERTIFICATE-----Generated at Tue Jun 2 21:25:10 2026 by rpki-client