$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2036303937.roa File: 3138302e3232332e34302e302f32312d3234203d3e2036303937.roa (raw, json) Hash identifier: R8b2PWj+KTxlqUDzGZHp6eAUDpvDQdlwCH8UwtZuRTo= Subject key identifier: 5F:51:7E:2C:D8:09:96:FB:9F:62:D6:61:CA:2A:2F:E6:00:65:29:87 Certificate issuer: /CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Certificate serial: 2CF6B6E20E10CF76E2C6CFC28627181C7AA9E921 Authority key identifier: 0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2036303937.roa Signing time: Tue 26 May 2026 08:06:44 +0000 ROA not before: Tue 26 May 2026 08:01:44 +0000 ROA not after: Tue 25 May 2027 08:06:44 +0000 asID: 6097 IP address blocks: 180.223.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 13:22:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:f6:b6:e2:0e:10:cf:76:e2:c6:cf:c2:86:27:18:1c:7a:a9:e9:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C02007C391DB5414355DE1A053D4E6D06CDD2CE Validity Not Before: May 26 08:01:44 2026 GMT Not After : May 25 08:06:44 2027 GMT Subject: CN=5F517E2CD80996FB9F62D661CA2A2FE600652987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5b:23:06:a6:31:66:26:e9:41:a1:20:fc:73: d6:8c:83:c2:5f:74:e4:12:75:44:3f:df:28:b9:7e: a3:ad:89:99:1b:a4:74:ab:cd:6e:67:88:71:6f:5e: c9:78:e8:a5:4b:0a:d5:10:10:ad:7a:ea:57:22:bb: 7b:e6:7c:7e:12:18:09:97:6a:e0:3d:ce:c4:70:76: dd:9e:f4:77:70:81:6d:ed:e6:5d:fc:56:a4:86:97: c5:43:f1:b1:5c:fa:e9:4e:1a:aa:9b:36:31:8b:93: 05:0f:37:b1:9b:b1:3a:65:2a:c9:d6:e4:60:d0:ba: 2d:ef:7c:90:72:74:b9:8f:38:49:35:8d:95:ff:db: a0:bb:d8:a1:5c:a6:e1:a0:a8:2d:f3:10:ec:3a:2a: da:46:d5:2f:24:59:c2:62:b1:f4:f4:b9:f1:b4:94: dd:e1:67:43:bb:2d:d8:b4:a1:33:81:53:7e:8f:9d: 2d:fe:9b:93:41:64:dc:e5:e8:77:46:91:16:8d:ac: 7d:fd:e1:c1:67:fd:c3:e6:1d:b2:14:5c:ee:67:0b: b6:bf:55:51:45:4a:96:cd:57:74:b6:2f:ea:e0:69: 3c:dd:0c:7d:bd:43:f9:f0:d7:14:aa:6f:74:f8:2b: 91:17:4e:1d:24:46:ba:ea:b9:dc:3a:ce:32:45:ad: c3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:51:7E:2C:D8:09:96:FB:9F:62:D6:61:CA:2A:2F:E6:00:65:29:87 X509v3 Authority Key Identifier: keyid:0C:02:00:7C:39:1D:B5:41:43:55:DE:1A:05:3D:4E:6D:06:CD:D2:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0C02007C391DB5414355DE1A053D4E6D06CDD2CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721596929/0/3138302e3232332e34302e302f32312d3234203d3e2036303937.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.223.40.0/21 Signature Algorithm: sha256WithRSAEncryption ba:5f:39:c0:94:ba:42:7c:a5:99:02:03:51:be:75:3b:9c:b4: 0c:a3:ea:93:56:09:81:11:c9:40:84:98:c5:80:f9:ec:b5:8e: ca:63:e0:a5:97:f5:da:09:80:f8:e3:5c:41:f2:52:4e:40:b8: 09:86:c9:d8:14:5f:1e:ca:4b:8b:a5:4e:78:47:ed:fc:2f:3f: 74:1c:d8:8c:6a:f0:d1:7a:88:21:7a:60:22:36:c3:73:31:49: 07:15:31:e3:08:2d:9f:0f:cf:33:0e:50:9d:b1:f4:b5:78:fc: 20:c5:27:85:c7:df:33:08:7c:47:72:b7:f8:0a:55:40:61:08: f4:da:e7:9a:89:3c:53:4b:3e:22:7a:ae:b7:3b:6c:21:ee:f1: 09:aa:c2:52:de:34:9f:e1:2e:7e:5a:62:6d:8b:08:76:3b:34: 9e:4d:b6:34:bc:6e:8b:b0:3f:22:25:54:77:16:cd:bc:d3:9a: 2c:a7:4d:ce:d6:db:a5:ee:86:f5:d6:41:35:9d:16:52:a8:76: 3f:55:16:0a:2d:45:9f:8f:a7:a3:9b:a5:33:b2:33:f1:20:08: 2d:cb:c2:20:b0:13:e0:e1:e6:bd:23:4b:02:32:ec:97:cf:ab: 59:cd:8e:ed:26:39:0f:23:e2:41:2d:b5:25:58:ba:67:a4:20: 2a:84:67:54 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULPa24g4Qz3bixs/ChicYHHqp6SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQw NkNERDJDRTAeFw0yNjA1MjYwODAxNDRaFw0yNzA1MjUwODA2NDRaMDMxMTAvBgNV BAMTKDVGNTE3RTJDRDgwOTk2RkI5RjYyRDY2MUNBMkEyRkU2MDA2NTI5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuWyMGpjFmJulBoSD8c9aMg8Jf dOQSdUQ/3yi5fqOtiZkbpHSrzW5niHFvXsl46KVLCtUQEK166lciu3vmfH4SGAmX auA9zsRwdt2e9HdwgW3t5l38VqSGl8VD8bFc+ulOGqqbNjGLkwUPN7GbsTplKsnW 5GDQui3vfJBydLmPOEk1jZX/26C72KFcpuGgqC3zEOw6KtpG1S8kWcJisfT0ufG0 lN3hZ0O7Ldi0oTOBU36PnS3+m5NBZNzl6HdGkRaNrH394cFn/cPmHbIUXO5nC7a/ VVFFSpbNV3S2L+rgaTzdDH29Q/nw1xSqb3T4K5EXTh0kRrrqudw6zjJFrcMTAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUX1F+LNgJlvufYtZhyiov5gBlKYcwHwYDVR0j BBgwFoAUDAIAfDkdtUFDVd4aBT1ObQbN0s4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTU5NjkyOS8wLzBDMDIwMDdDMzkxREI1NDE0MzU1REUxQTA1M0Q0 RTZEMDZDREQyQ0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEMwMjAwN0MzOTFEQjU0MTQzNTVERTFBMDUzRDRFNkQwNkNERDJDRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNTk2OTI5LzAvMzEzODMwMmUzMjMy MzMyZTM0MzAyZTMwMmYzMjMxMmQzMjM0MjAzZDNlMjAzNjMwMzkzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEA7TfKDANBgkqhkiG9w0BAQsFAAOCAQEAul85wJS6QnylmQIDUb51O5y0DKPq k1YJgRHJQISYxYD57LWOymPgpZf12gmA+ONcQfJSTkC4CYbJ2BRfHspLi6VOeEft /C8/dBzYjGrw0XqIIXpgIjbDczFJBxUx4wgtnw/PMw5QnbH0tXj8IMUnhcffMwh8 R3K3+ApVQGEI9Nrnmok8U0s+InqutztsIe7xCarCUt40n+EuflpibYsIdjs0nk22 NLxui7A/IiVUdxbNvNOaLKdNztbbpe6G9dZBNZ0WUqh2P1UWCi1Fn4+no5ulM7Iz 8SAILcvCILAT4OHmvSNLAjLsl8+rWc2O7SY5DyPiQS21JVi6Z6QgKoRnVA== -----END CERTIFICATE-----Generated at Sat May 30 00:42:20 2026 by rpki-client