$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2030.roa File: 3138302e3232332e3132382e302f31382d3234203d3e2030.roa (raw, json) Hash identifier: ZpYQyTkn0bCVI4Cnry27ThhKI2Ed9pn9ZU4xw4uKHnw= Subject key identifier: 1D:90:DA:A3:88:40:1E:DD:C2:64:46:25:30:E1:E3:4C:8E:6B:58:01 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 5DED27E9764539E5AA36B0380E05ECA35D475F15 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2030.roa Signing time: Mon 20 Apr 2026 01:47:12 +0000 ROA not before: Mon 20 Apr 2026 01:42:12 +0000 ROA not after: Mon 19 Apr 2027 01:47:12 +0000 asID: 0 IP address blocks: 180.223.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 09:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ed:27:e9:76:45:39:e5:aa:36:b0:38:0e:05:ec:a3:5d:47:5f:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Apr 20 01:42:12 2026 GMT Not After : Apr 19 01:47:12 2027 GMT Subject: CN=1D90DAA388401EDDC264462530E1E34C8E6B5801 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:9d:67:53:3f:39:9a:60:c3:d3:c5:9d:69:41: 06:69:ac:0d:f8:b7:3d:eb:27:b8:44:19:56:85:e7: d5:9d:b0:fc:5a:d4:ec:3b:1c:b2:b8:23:b1:f1:ba: 11:bb:d3:50:3f:92:08:ae:a3:83:6f:45:73:41:4f: 42:52:75:01:ba:f7:be:36:81:ca:c9:d5:7e:94:e6: 55:37:12:9c:c2:19:21:7e:1b:5d:b0:35:dc:e8:2f: fd:fa:84:70:c2:15:23:9c:67:b8:3b:53:a2:cf:e5: f9:7a:7d:7a:99:29:d6:2a:49:03:14:07:e7:1a:66: 52:7c:e5:46:f3:22:e8:33:60:0b:e7:c2:63:14:e1: 8f:8f:b0:4a:97:54:b3:bc:ba:6e:73:86:84:10:fd: d0:4a:42:04:3c:b8:51:51:ce:10:b9:c8:d3:4d:48: af:d6:aa:de:91:54:75:7c:52:c7:65:b5:c5:fc:2f: d1:c5:19:a7:a6:3f:ff:7b:ff:1b:a9:72:77:2e:0e: e4:6f:12:6c:a9:5c:ed:63:cf:41:01:a7:15:55:ab: e3:f0:44:7a:1c:98:99:24:61:4f:9f:cb:e6:72:2a: eb:bc:b4:32:1c:26:cd:bf:82:9c:4f:7d:06:0c:7f: 30:3c:fe:23:15:be:ed:2a:2e:ae:6b:7e:3f:86:f2: f4:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:90:DA:A3:88:40:1E:DD:C2:64:46:25:30:E1:E3:4C:8E:6B:58:01 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e3132382e302f31382d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.128.0/18 Signature Algorithm: sha256WithRSAEncryption 23:8d:0f:d9:a7:96:02:64:81:bf:3f:e9:1e:e0:24:5d:95:34: 96:f8:94:d7:6f:cf:0b:d1:30:47:9d:fe:f3:a5:3c:4d:1c:98: 2c:81:9b:ca:13:1b:f6:3e:a6:39:b2:51:a3:83:f2:a1:ae:e4: f4:20:cb:31:6a:43:55:c1:0a:2d:f9:8e:d5:f9:b5:b5:02:ee: cb:3b:b9:5f:1c:c7:b9:d2:b6:5a:54:a3:4e:f7:26:98:f9:e4: 88:8e:b1:73:46:b3:02:c4:6e:05:29:84:78:c2:7e:3d:ee:84: 75:5d:f4:6a:74:02:3f:02:f3:98:1d:23:bd:de:21:5c:8d:8e: 1d:d9:27:09:15:fa:7d:21:82:39:f0:2b:06:97:ba:17:0c:09: 47:f1:4d:e5:52:d2:b3:08:74:0a:49:3f:5c:cd:ab:f6:40:44: 4f:6c:d4:c6:d2:f6:88:0e:7f:b5:3f:d3:53:0a:24:73:eb:b9: f5:e2:d2:20:18:3e:bd:9d:be:99:cb:29:91:17:f6:d4:d6:2b: 1f:cf:a1:05:0c:f1:c6:78:cb:02:3c:e8:bc:ff:bc:85:34:55: d6:18:b0:0b:ac:37:de:1d:7b:2c:04:7e:fa:27:1c:b7:56:91: 79:37:cf:1b:06:28:65:57:48:cb:2b:30:05:b8:7a:98:5c:2c: 5e:c4:13:dd -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUXe0n6XZFOeWqNrA4DgXso11HXxUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjA0MjAwMTQyMTJaFw0yNzA0MTkwMTQ3MTJaMDMxMTAvBgNV BAMTKDFEOTBEQUEzODg0MDFFRERDMjY0NDYyNTMwRTFFMzRDOEU2QjU4MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnWdTPzmaYMPTxZ1pQQZprA34 tz3rJ7hEGVaF59WdsPxa1Ow7HLK4I7HxuhG701A/kgiuo4NvRXNBT0JSdQG69742 gcrJ1X6U5lU3EpzCGSF+G12wNdzoL/36hHDCFSOcZ7g7U6LP5fl6fXqZKdYqSQMU B+caZlJ85UbzIugzYAvnwmMU4Y+PsEqXVLO8um5zhoQQ/dBKQgQ8uFFRzhC5yNNN SK/Wqt6RVHV8UsdltcX8L9HFGaemP/97/xupcncuDuRvEmypXO1jz0EBpxVVq+Pw RHocmJkkYU+fy+ZyKuu8tDIcJs2/gpxPfQYMfzA8/iMVvu0qLq5rfj+G8vR1AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUHZDao4hAHt3CZEYlMOHjTI5rWAEwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTMxMzIzODJlMzAyZjMxMzgyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG tN+AMA0GCSqGSIb3DQEBCwUAA4IBAQAjjQ/Zp5YCZIG/P+ke4CRdlTSW+JTXb88L 0TBHnf7zpTxNHJgsgZvKExv2PqY5slGjg/KhruT0IMsxakNVwQot+Y7V+bW1Au7L O7lfHMe50rZaVKNO9yaY+eSIjrFzRrMCxG4FKYR4wn497oR1XfRqdAI/AvOYHSO9 3iFcjY4d2ScJFfp9IYI58CsGl7oXDAlH8U3lUtKzCHQKST9czav2QERPbNTG0vaI Dn+1P9NTCiRz67n14tIgGD69nb6ZyymRF/bU1isfz6EFDPHGeMsCPOi8/7yFNFXW GLALrDfeHXssBH76Jxy3VpF5N88bBihlV0jLKzAFuHqYXCxexBPd -----END CERTIFICATE-----Generated at Wed Apr 22 18:14:15 2026 by rpki-client