$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2032393134.roa File: 3138302e3232332e3132382e302f31372d3234203d3e2032393134.roa (raw, json) Hash identifier: K1nWnSvKOhaeWO8fwsi7ZbK3h4WaUa9J8JMlkhbdmj0= Subject key identifier: 40:25:88:0A:91:56:31:2A:8A:7A:E0:5F:07:BF:C2:69:52:95:38:B6 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 7A2EF3D0FFA3464B5BE4F9A9829C89AA81ADC62C Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2032393134.roa Signing time: Tue 26 May 2026 08:11:51 +0000 ROA not before: Tue 26 May 2026 08:06:51 +0000 ROA not after: Tue 25 May 2027 08:11:51 +0000 asID: 2914 IP address blocks: 180.223.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 11:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:2e:f3:d0:ff:a3:46:4b:5b:e4:f9:a9:82:9c:89:aa:81:ad:c6:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: May 26 08:06:51 2026 GMT Not After : May 25 08:11:51 2027 GMT Subject: CN=4025880A9156312A8A7AE05F07BFC269529538B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:27:7a:39:ee:b1:8c:7b:3c:07:46:c0:bc:ef: b4:3f:d3:ce:10:e4:04:64:dc:50:4d:da:80:0c:b7: fa:09:64:37:06:cf:18:08:1b:8f:54:cb:99:3c:54: e2:48:30:c1:5b:d2:17:f1:a9:e8:0a:d5:52:3d:4b: 62:16:d9:a2:d3:02:fe:48:ff:b4:98:62:14:cc:4a: e2:0a:d6:8a:84:50:95:87:6d:7b:69:50:85:7a:95: ea:a8:45:90:86:f7:e9:14:bb:02:64:8e:8a:d4:d1: 5e:f9:6e:20:98:7f:e0:eb:2b:c2:79:c3:15:06:ab: aa:70:28:38:90:51:1d:76:3c:7c:8d:7b:b3:45:10: ea:58:7c:9e:d0:2b:d6:f6:7f:aa:cd:5c:78:c5:d2: 34:ed:70:8b:3a:40:ae:06:53:ec:bd:08:ed:a3:32: a6:89:ec:2f:73:ea:99:26:12:30:a0:40:6e:48:12: 2e:c1:17:f5:90:6f:50:1d:f6:ec:a1:2a:8b:fb:1d: f8:d7:b5:a9:da:21:f7:53:02:01:5a:b7:e1:7d:83: 17:1c:00:b1:3f:44:f9:66:85:e4:ad:f6:13:a1:f3: 1b:e0:c0:8f:cf:3b:9f:7c:eb:3a:6a:69:93:e3:38: bf:ea:99:01:a8:39:cd:39:72:2e:88:b0:d0:de:76: 4e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:25:88:0A:91:56:31:2A:8A:7A:E0:5F:07:BF:C2:69:52:95:38:B6 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.128.0/17 Signature Algorithm: sha256WithRSAEncryption 99:a5:fd:ac:88:5b:e5:2f:74:4f:ce:7e:2c:a2:67:61:5c:70: ab:bc:fd:78:6b:74:1b:58:65:30:93:cc:78:da:84:31:d1:c4: 44:ac:ff:09:27:24:6d:77:7a:e8:53:4b:f7:d3:f4:13:3a:a8: 73:24:bf:1d:25:46:29:05:bf:4a:5d:eb:5e:59:65:ab:2f:a1: 5e:28:75:82:3a:db:07:91:eb:bc:4f:67:c1:98:3b:c2:ba:52: e5:dd:fd:c8:7a:1c:9e:c7:8c:82:6d:ec:80:4a:d1:27:08:17: 1d:99:9a:cd:18:e9:10:96:58:41:d7:7e:ea:45:89:c0:68:6f: a7:d1:52:ea:6e:51:56:b7:ce:83:43:87:32:c4:70:cd:21:77: 72:69:1d:fe:1f:70:b0:93:62:07:d9:10:53:c3:12:1a:69:bc: 67:5f:da:14:5a:be:2b:39:80:82:9e:82:45:11:19:f8:b2:15: af:b4:c6:ee:d7:44:0f:c9:ef:88:46:ab:d4:ad:04:af:10:29: df:70:82:7e:d9:0c:53:6f:49:1e:17:4f:ef:3e:27:b0:96:9a: 1d:bd:a5:3e:0e:6e:dc:55:7b:f4:49:61:c6:d7:d0:16:33:d4: 16:b9:29:f4:c5:90:70:0d:7e:eb:ce:b9:4a:8b:de:e8:17:38: 12:5d:61:df -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUei7z0P+jRktb5PmpgpyJqoGtxiwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjA1MjYwODA2NTFaFw0yNzA1MjUwODExNTFaMDMxMTAvBgNV BAMTKDQwMjU4ODBBOTE1NjMxMkE4QTdBRTA1RjA3QkZDMjY5NTI5NTM4QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEJ3o57rGMezwHRsC877Q/084Q 5ARk3FBN2oAMt/oJZDcGzxgIG49Uy5k8VOJIMMFb0hfxqegK1VI9S2IW2aLTAv5I /7SYYhTMSuIK1oqEUJWHbXtpUIV6leqoRZCG9+kUuwJkjorU0V75biCYf+DrK8J5 wxUGq6pwKDiQUR12PHyNe7NFEOpYfJ7QK9b2f6rNXHjF0jTtcIs6QK4GU+y9CO2j MqaJ7C9z6pkmEjCgQG5IEi7BF/WQb1Ad9uyhKov7HfjXtanaIfdTAgFat+F9gxcc ALE/RPlmheSt9hOh8xvgwI/PO5986zpqaZPjOL/qmQGoOc05ci6IsNDedk7/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQCWICpFWMSqKeuBfB7/CaVKVOLYwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEB7TfgDANBgkqhkiG9w0BAQsFAAOCAQEAmaX9rIhb5S90T85+LKJnYVxw q7z9eGt0G1hlMJPMeNqEMdHERKz/CSckbXd66FNL99P0EzqocyS/HSVGKQW/Sl3r Xlllqy+hXih1gjrbB5HrvE9nwZg7wrpS5d39yHocnseMgm3sgErRJwgXHZmazRjp EJZYQdd+6kWJwGhvp9FS6m5RVrfOg0OHMsRwzSF3cmkd/h9wsJNiB9kQU8MSGmm8 Z1/aFFq+KzmAgp6CRREZ+LIVr7TG7tdED8nviEar1K0ErxAp33CCftkMU29JHhdP 7z4nsJaaHb2lPg5u3FV79ElhxtfQFjPUFrkp9MWQcA1+6865Sove6Bc4El1h3w== -----END CERTIFICATE-----Generated at Thu Jun 11 18:55:18 2026 by rpki-client