$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2032393134.roa File: 3138302e3232332e34302e302f32312d3234203d3e2032393134.roa (raw, json) Hash identifier: gLDRz1Nx/ri97kss/R7ZJb+FFOjFyqdbhjR9wdxGWIE= Subject key identifier: E2:39:8D:82:22:BE:B7:15:D3:CA:F3:7E:C4:EB:C6:F0:C4:C8:C0:82 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 29F14983EB4383CC02544C018D481BFE3ADBEC43 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2032393134.roa Signing time: Tue 26 May 2026 08:06:44 +0000 ROA not before: Tue 26 May 2026 08:01:44 +0000 ROA not after: Tue 25 May 2027 08:06:44 +0000 asID: 2914 IP address blocks: 180.223.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 11:12:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:f1:49:83:eb:43:83:cc:02:54:4c:01:8d:48:1b:fe:3a:db:ec:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: May 26 08:01:44 2026 GMT Not After : May 25 08:06:44 2027 GMT Subject: CN=E2398D8222BEB715D3CAF37EC4EBC6F0C4C8C082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:1f:d1:f6:4f:04:74:49:fc:f4:5b:03:6a: be:d5:55:53:48:27:0c:42:10:17:17:cd:c2:0a:7a: 4e:45:b7:b5:c2:04:17:e0:ae:5b:ff:f1:7c:be:16: e5:cc:1b:d2:e8:1c:c3:5e:7d:19:da:4a:ee:7e:9a: bf:46:27:f3:37:64:c2:53:fd:a4:33:e1:58:d0:ab: fd:7c:65:6a:70:90:11:89:a1:5a:01:47:22:8a:68: a0:17:73:6c:b8:f7:b1:27:9d:ce:3a:d9:1d:c0:12: fd:06:52:ed:3d:3b:cb:cc:8d:08:6c:04:f4:1c:17: b1:75:dd:91:5e:58:71:43:c9:4c:bf:eb:c9:61:b4: 94:b2:47:9f:39:4e:06:38:af:9d:a7:48:72:2a:a9: ea:18:91:9e:cb:57:9e:5a:d0:ae:ed:de:ba:9f:09: 4a:34:45:5e:85:39:3a:09:1d:d8:0d:7b:18:14:3c: 97:13:5a:60:7f:3b:84:bf:72:ed:6f:e2:30:a7:75: 9b:85:4a:72:e1:e0:67:77:9d:20:be:e4:ee:a0:df: 87:2d:20:f9:18:cd:54:4f:e3:47:1f:f6:f6:cf:88: 7c:a7:33:b8:e0:56:0a:2f:f6:63:3e:d9:66:d5:67: e0:7b:7d:ca:48:d7:83:44:83:f5:39:00:22:37:b7: 1f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:39:8D:82:22:BE:B7:15:D3:CA:F3:7E:C4:EB:C6:F0:C4:C8:C0:82 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2032393134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.40.0/21 Signature Algorithm: sha256WithRSAEncryption 12:ae:df:19:19:f1:98:66:f1:00:b2:8a:fd:80:8b:03:1f:9f: e9:a1:ad:a3:37:65:43:26:3d:45:c6:27:b2:85:2e:77:c8:b2: 6d:42:d3:31:93:6e:64:ee:5f:7c:f4:75:ae:d8:7b:a6:54:7f: c3:1f:db:0a:b6:ee:ec:25:2c:0f:f9:bc:61:2f:80:fc:83:ba: 4d:9c:0b:55:4b:d3:83:36:f2:8f:11:61:e8:19:9e:3f:06:28: e5:db:66:43:73:b8:37:b6:5f:c4:eb:ef:18:f5:a0:cd:a9:d6: 51:89:8c:61:de:17:18:12:7a:2f:36:6c:c8:b0:1f:9e:7a:17: 9f:a0:89:c3:ab:26:47:cc:30:10:90:fd:a3:40:54:fd:1e:9c: 00:18:44:dd:e3:5f:d4:03:e5:06:a9:94:7d:a4:bd:48:3b:fd: 86:32:a6:6a:12:1e:a2:e7:3c:5e:f2:99:d4:0f:a9:77:11:4f: 26:85:ed:ca:fd:81:26:4d:40:8f:bb:62:2b:ca:1f:61:1f:5d: 0e:85:16:b2:a0:f4:9e:3a:b0:bc:be:f1:3d:56:87:d7:17:08: 81:f9:93:83:d7:e4:f7:5e:fa:4e:66:ee:96:f7:42:d7:b9:a6: c6:22:35:a4:51:9b:64:1c:59:f4:ad:bc:17:30:59:49:96:8f: 0b:8d:0f:b3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKfFJg+tDg8wCVEwBjUgb/jrb7EMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjA1MjYwODAxNDRaFw0yNzA1MjUwODA2NDRaMDMxMTAvBgNV BAMTKEUyMzk4RDgyMjJCRUI3MTVEM0NBRjM3RUM0RUJDNkYwQzRDOEMwODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ9B/R9k8EdEn89FsDar7VVVNI JwxCEBcXzcIKek5Ft7XCBBfgrlv/8Xy+FuXMG9LoHMNefRnaSu5+mr9GJ/M3ZMJT /aQz4VjQq/18ZWpwkBGJoVoBRyKKaKAXc2y497Ennc462R3AEv0GUu09O8vMjQhs BPQcF7F13ZFeWHFDyUy/68lhtJSyR585TgY4r52nSHIqqeoYkZ7LV55a0K7t3rqf CUo0RV6FOToJHdgNexgUPJcTWmB/O4S/cu1v4jCndZuFSnLh4Gd3nSC+5O6g34ct IPkYzVRP40cf9vbPiHynM7jgVgov9mM+2WbVZ+B7fcpI14NEg/U5ACI3tx/jAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU4jmNgiK+txXTyvN+xOvG8MTIwIIwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTM0MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzMjM5MzEzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfKDANBgkqhkiG9w0BAQsFAAOCAQEAEq7fGRnxmGbxALKK/YCLAx+f6aGt ozdlQyY9RcYnsoUud8iybULTMZNuZO5ffPR1rth7plR/wx/bCrbu7CUsD/m8YS+A /IO6TZwLVUvTgzbyjxFh6BmePwYo5dtmQ3O4N7ZfxOvvGPWgzanWUYmMYd4XGBJ6 LzZsyLAfnnoXn6CJw6smR8wwEJD9o0BU/R6cABhE3eNf1APlBqmUfaS9SDv9hjKm ahIeouc8XvKZ1A+pdxFPJoXtyv2BJk1Aj7tiK8ofYR9dDoUWsqD0njqwvL7xPVaH 1xcIgfmTg9fk9176TmbulvdC17mmxiI1pFGbZBxZ9K28FzBZSZaPC40Psw== -----END CERTIFICATE-----Generated at Thu Jun 11 18:55:18 2026 by rpki-client