$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20323037353530.roa File: 3138302e3232332e34302e302f32312d3234203d3e20323037353530.roa (raw, json) Hash identifier: bn2cycEW+q2Cb+5hzX0pVBU2avqRJoSCU1X6EBWD/GE= Subject key identifier: 3A:BF:51:3A:AD:5B:F9:F1:17:F6:85:11:C2:13:D2:CD:1A:9A:BE:47 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 70151162793C9892F7F1A8EB1C3FC13ACF682CA7 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20323037353530.roa Signing time: Tue 02 Jun 2026 10:39:22 +0000 ROA not before: Tue 02 Jun 2026 10:34:22 +0000 ROA not after: Tue 01 Jun 2027 10:39:22 +0000 asID: 207550 IP address blocks: 180.223.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:15:11:62:79:3c:98:92:f7:f1:a8:eb:1c:3f:c1:3a:cf:68:2c:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: Jun 2 10:34:22 2026 GMT Not After : Jun 1 10:39:22 2027 GMT Subject: CN=3ABF513AAD5BF9F117F68511C213D2CD1A9ABE47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:9c:b2:40:8b:a6:3e:86:fe:5e:89:38:5b: 9c:f6:2e:2e:bc:ce:24:50:27:12:3f:14:48:8e:30: 23:1d:31:5a:c1:92:bc:62:19:b2:3b:af:c4:51:85: 45:5f:0f:78:18:74:22:62:88:08:be:4b:63:67:5a: b9:fc:b2:6e:ef:3a:a1:ed:93:56:10:ee:fc:c6:a3: 8c:e5:f1:a0:73:ef:4f:55:b9:0d:05:dd:fc:12:3e: 86:a5:38:2c:22:65:2d:79:08:90:14:a9:1e:f3:0d: 35:c1:29:b6:e4:a1:93:46:ad:71:dd:5b:8a:9d:0b: 29:b2:b8:b3:fc:88:be:3d:f9:21:bc:bb:7d:75:b6: a9:5b:7a:d6:47:93:f0:f4:ad:cc:53:59:49:4c:f1: 22:47:06:c6:c8:82:5f:80:61:c5:a6:a5:30:a5:65: 1a:4a:aa:a6:0c:fb:c4:61:91:69:16:c9:c6:a6:ab: 1b:62:47:b8:61:87:7f:93:44:77:81:5d:02:33:47: 57:11:70:43:40:fc:a7:eb:26:59:4a:0a:3b:48:1c: 07:b4:e1:57:37:c3:75:b6:a4:a0:f1:e1:a0:f5:0d: 01:d6:d3:2b:73:ee:46:66:21:cd:37:66:df:6c:56: 57:51:28:6c:75:ed:0d:f9:0a:6d:12:7b:b0:8a:10: 1b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BF:51:3A:AD:5B:F9:F1:17:F6:85:11:C2:13:D2:CD:1A:9A:BE:47 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e20323037353530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.40.0/21 Signature Algorithm: sha256WithRSAEncryption 37:e7:93:ba:e7:c7:25:e8:e5:57:4c:da:68:c9:e9:7c:06:01: 4f:6c:ab:de:e6:c2:ce:a3:0b:75:b0:5c:b9:09:b1:74:50:c9: e7:58:ee:23:28:b8:90:fb:86:be:94:e7:27:d8:17:ea:26:08: ef:f5:ca:de:2d:1a:0c:70:9a:25:60:6b:07:61:d0:b6:c5:82: d3:cb:48:59:d4:ec:d3:f4:7d:8f:16:4f:d7:d2:f2:68:e1:e0: 6b:a0:1a:5c:c1:4f:22:9d:60:41:55:69:33:d9:7a:cb:49:5d: 3a:96:6f:a8:b3:9a:d5:30:db:02:83:f1:c1:38:b7:cc:64:ca: a5:7b:51:26:7c:cc:c3:34:41:b2:52:27:ba:93:9c:b2:55:8b: 11:c2:0d:85:92:00:ab:2e:ca:a5:b5:88:f9:5f:49:54:2d:11: 6d:7f:0b:81:b3:93:24:fb:40:be:15:f8:f0:8e:ac:da:7f:1d: 45:a4:ae:cb:f1:81:03:5d:ef:a7:11:51:2e:86:68:89:64:70: 4f:a0:82:fe:c5:1a:68:d2:68:2c:ff:05:09:c3:69:9a:4b:b2: d2:bc:e3:c2:e9:94:be:0a:a5:95:56:83:96:85:0a:e4:4f:5f: 76:0c:aa:45:89:55:91:0b:6e:95:ac:47:ae:8c:45:f8:1b:ea: 55:1c:84:db -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcBURYnk8mJL38ajrHD/BOs9oLKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjA2MDIxMDM0MjJaFw0yNzA2MDExMDM5MjJaMDMxMTAvBgNV BAMTKDNBQkY1MTNBQUQ1QkY5RjExN0Y2ODUxMUMyMTNEMkNEMUE5QUJFNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtZyyQIumPob+Xok4W5z2Li68 ziRQJxI/FEiOMCMdMVrBkrxiGbI7r8RRhUVfD3gYdCJiiAi+S2NnWrn8sm7vOqHt k1YQ7vzGo4zl8aBz709VuQ0F3fwSPoalOCwiZS15CJAUqR7zDTXBKbbkoZNGrXHd W4qdCymyuLP8iL49+SG8u311tqlbetZHk/D0rcxTWUlM8SJHBsbIgl+AYcWmpTCl ZRpKqqYM+8RhkWkWycamqxtiR7hhh3+TRHeBXQIzR1cRcENA/KfrJllKCjtIHAe0 4Vc3w3W2pKDx4aD1DQHW0ytz7kZmIc03Zt9sVldRKGx17Q35Cm0Se7CKEBslAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUOr9ROq1b+fEX9oURwhPSzRqavkcwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTExOTU3MjE1OTY5MjkvMC8zMTM4MzAyZTMy MzIzMzJlMzQzMDJlMzAyZjMyMzEyZDMyMzQyMDNkM2UyMDMyMzAzNzM1MzUzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEA7TfKDANBgkqhkiG9w0BAQsFAAOCAQEAN+eTuufHJejlV0zaaMnp fAYBT2yr3ubCzqMLdbBcuQmxdFDJ51juIyi4kPuGvpTnJ9gX6iYI7/XK3i0aDHCa JWBrB2HQtsWC08tIWdTs0/R9jxZP19LyaOHga6AaXMFPIp1gQVVpM9l6y0ldOpZv qLOa1TDbAoPxwTi3zGTKpXtRJnzMwzRBslInupOcslWLEcINhZIAqy7KpbWI+V9J VC0RbX8LgbOTJPtAvhX48I6s2n8dRaSuy/GBA13vpxFRLoZoiWRwT6CC/sUaaNJo LP8FCcNpmkuy0rzjwumUvgqllVaDloUK5E9fdgyqRYlVkQtulaxHroxF+BvqVRyE 2w== -----END CERTIFICATE-----Generated at Tue Jun 2 21:25:16 2026 by rpki-client