$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2039333034.roa File: 3138302e3232332e3132382e302f31372d3234203d3e2039333034.roa (raw, json) Hash identifier: P/jiq+dtMZ5TQTTZOD/phG/UPFmMkdFYhGJ1E5zVdqw= Subject key identifier: 4E:65:2F:92:A0:41:71:DB:C5:0C:7F:D9:24:0F:C3:B8:9D:EF:F2:3C Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 579C5AF484091CE44B6E2BC1498B1AA6094BC0E2 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2039333034.roa Signing time: Tue 26 May 2026 08:11:50 +0000 ROA not before: Tue 26 May 2026 08:06:50 +0000 ROA not after: Tue 25 May 2027 08:11:50 +0000 asID: 9304 IP address blocks: 180.223.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:9c:5a:f4:84:09:1c:e4:4b:6e:2b:c1:49:8b:1a:a6:09:4b:c0:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: May 26 08:06:50 2026 GMT Not After : May 25 08:11:50 2027 GMT Subject: CN=4E652F92A04171DBC50C7FD9240FC3B89DEFF23C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:0a:18:5a:56:d4:e9:15:24:ed:27:80:15: 60:01:ed:6a:ba:1a:fb:71:36:2c:a3:82:24:65:42: 30:ee:e7:4f:4d:c5:20:b9:2b:9a:75:e0:9f:3e:9c: f8:2f:3d:77:4c:75:4f:59:9c:dc:5c:28:09:08:74: d1:8f:5a:62:97:d8:79:08:14:f7:72:ed:c5:b4:f0: e4:77:69:0c:92:17:d5:5e:39:41:f8:8c:db:83:f5: 0f:91:e3:28:74:bb:e4:d5:c2:87:18:a6:56:07:ca: 7f:b7:8e:52:1d:37:fc:63:0d:3b:60:cd:8a:cf:b0: b8:98:86:b0:43:18:40:0e:9a:64:06:d1:39:a3:c0: ce:79:77:b7:79:73:4d:58:f0:14:0b:a4:bb:ec:1f: b9:6b:5a:3d:4b:dd:bc:91:11:a4:58:a5:96:43:5e: 0b:56:c7:79:6f:28:6c:f6:92:a6:2a:f2:24:69:8c: 2e:75:4b:13:9f:59:f5:c6:05:7e:1c:76:21:9d:31: 41:74:bb:5e:85:52:50:82:ed:85:52:88:f2:4d:89: 6f:9d:55:9b:1d:19:83:9d:06:c6:6f:7a:66:58:fa: 2b:7e:b2:db:bc:25:e8:a9:05:c4:dc:df:7a:e8:2b: 17:dc:52:ab:39:95:dd:f8:1b:5a:f5:2d:d1:e7:e5: 53:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:65:2F:92:A0:41:71:DB:C5:0C:7F:D9:24:0F:C3:B8:9D:EF:F2:3C X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31372d3234203d3e2039333034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.128.0/17 Signature Algorithm: sha256WithRSAEncryption 57:95:0a:a6:3c:b3:fc:a9:29:44:31:4e:f9:52:27:82:87:53: a3:d4:60:ce:2d:10:42:76:69:80:e7:d6:1e:d1:26:c5:82:57: 7e:24:4d:b6:68:39:f4:69:56:8d:9d:8b:69:11:5e:a4:9c:04: ea:7f:9e:70:c0:f4:40:33:2b:5a:56:2f:d3:33:a6:12:be:b7: 67:61:ea:db:1a:63:dc:f4:bb:da:96:b5:c1:d8:e2:e1:b9:bd: 5c:5f:59:f6:41:3b:d0:8b:34:04:05:07:f0:d3:8d:60:16:52: ac:7d:13:ee:f6:10:40:c8:ff:de:8b:6d:e9:6d:55:3a:52:89: a6:9f:00:ea:eb:d0:55:5c:ad:b0:e0:e5:da:8a:92:16:59:ce: a1:eb:61:00:9e:6e:35:af:d6:43:50:9b:f9:cc:ac:c7:d3:6d: d0:45:00:78:af:29:2a:ee:39:bb:aa:e1:12:86:ee:64:d6:e8: 83:05:d8:b7:8a:49:29:ed:ce:7c:3e:8c:55:58:a6:50:f2:6b: 60:86:ab:dc:56:d8:75:12:5e:22:03:5e:9e:10:f5:2c:2d:37: a2:83:c9:54:2e:82:fb:7d:29:b0:c8:7b:70:b7:b2:98:17:19: dd:81:47:17:8b:79:da:26:a1:cd:78:c4:2f:83:a5:95:7d:84: 77:d2:1f:d2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUV5xa9IQJHORLbivBSYsapglLwOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjA1MjYwODA2NTBaFw0yNzA1MjUwODExNTBaMDMxMTAvBgNV BAMTKDRFNjUyRjkyQTA0MTcxREJDNTBDN0ZEOTI0MEZDM0I4OURFRkYyM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFgAoYWlbU6RUk7SeAFWAB7Wq6 GvtxNiyjgiRlQjDu509NxSC5K5p14J8+nPgvPXdMdU9ZnNxcKAkIdNGPWmKX2HkI FPdy7cW08OR3aQySF9VeOUH4jNuD9Q+R4yh0u+TVwocYplYHyn+3jlIdN/xjDTtg zYrPsLiYhrBDGEAOmmQG0TmjwM55d7d5c01Y8BQLpLvsH7lrWj1L3byREaRYpZZD XgtWx3lvKGz2kqYq8iRpjC51SxOfWfXGBX4cdiGdMUF0u16FUlCC7YVSiPJNiW+d VZsdGYOdBsZvemZY+it+stu8JeipBcTc33roKxfcUqs5ld34G1r1LdHn5VONAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUTmUvkqBBcdvFDH/ZJA/DuJ3v8jwwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU5MTE5NTcyMTU5NjkyOS8wLzMxMzgzMDJlMzIz MjMzMmUzMTMyMzgyZTMwMmYzMTM3MmQzMjM0MjAzZDNlMjAzOTMzMzAzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEB7TfgDANBgkqhkiG9w0BAQsFAAOCAQEAV5UKpjyz/KkpRDFO+VIngodT o9Rgzi0QQnZpgOfWHtEmxYJXfiRNtmg59GlWjZ2LaRFepJwE6n+ecMD0QDMrWlYv 0zOmEr63Z2Hq2xpj3PS72pa1wdji4bm9XF9Z9kE70Is0BAUH8NONYBZSrH0T7vYQ QMj/3ott6W1VOlKJpp8A6uvQVVytsODl2oqSFlnOoethAJ5uNa/WQ1Cb+cysx9Nt 0EUAeK8pKu45u6rhEobuZNbogwXYt4pJKe3OfD6MVVimUPJrYIar3FbYdRJeIgNe nhD1LC03ooPJVC6C+30psMh7cLeymBcZ3YFHF4t52iahzXjEL4OllX2Ed9If0g== -----END CERTIFICATE-----Generated at Tue Jun 2 20:51:11 2026 by rpki-client