$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1068702911388712962/0/3132332e35382e31382e302f32342d3234203d3e20313331343935.roa File: 3132332e35382e31382e302f32342d3234203d3e20313331343935.roa (raw, json) Hash identifier: zVMGVY0EM8475klEV+uLpw9koaC8+tsutJ4w5FXxBkI= Subject key identifier: 67:DC:8F:A1:8A:43:64:62:03:FD:57:F5:70:5D:94:D5:DF:57:1D:06 Certificate issuer: /CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Certificate serial: 2F035D614EDA9D021BADDB161BC2085B83BB3FBB Authority key identifier: D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/3132332e35382e31382e302f32342d3234203d3e20313331343935.roa Signing time: Fri 30 Oct 2026 07:40:11 +0000 ROA not before: Fri 30 Oct 2026 07:35:11 +0000 ROA not after: Fri 29 Oct 2027 07:40:11 +0000 asID: 131495 IP address blocks: 123.58.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 10:49:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:03:5d:61:4e:da:9d:02:1b:ad:db:16:1b:c2:08:5b:83:bb:3f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6FB3E7668FDC6CD18106EE853D1C6458896BE4D Validity Not Before: Oct 30 07:35:11 2026 GMT Not After : Oct 29 07:40:11 2027 GMT Subject: CN=67DC8FA18A43646203FD57F5705D94D5DF571D06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:91:25:51:02:ff:08:7b:6a:67:dd:df:c7: 68:de:b9:85:41:a0:65:3a:d4:a1:04:aa:a2:25:8d: 9a:0d:f4:ad:ec:82:02:71:d3:5b:dc:67:c2:47:a7: 1d:4f:db:79:13:c9:18:41:3c:46:c2:f2:8d:70:18: 0a:8a:4a:7d:15:da:b1:d4:b6:82:bc:34:6c:ea:1e: a2:4b:ca:fd:f3:d0:73:f5:36:31:a0:b2:13:7c:60: 54:c1:c4:7b:20:a0:a9:86:f3:c5:47:e7:6b:38:ca: e6:e6:60:bc:05:3a:a3:ad:37:66:82:21:8f:94:d2: 3e:ef:7a:52:fe:b6:5d:aa:a0:0e:75:d4:0c:d7:c0: e4:da:cb:1e:1a:f2:ba:73:e8:15:3a:2b:5d:32:b6: 21:a4:00:05:2f:c8:8c:23:55:4f:4a:1c:87:b3:24: 6b:51:91:4b:dc:ee:7a:07:38:dd:dc:81:a5:44:f4: e1:e2:d5:d3:2a:69:16:3f:6d:c8:ff:ce:db:0e:57: 46:9e:51:b7:97:47:9b:c2:1a:1c:e4:47:7f:12:12: 2a:7f:0f:0f:c4:dd:d2:31:f7:3a:c2:b7:90:d8:d3: d1:02:68:37:a6:5b:98:9c:88:9e:9d:28:39:d3:37: 1c:c8:d8:a9:0e:74:37:3e:d8:22:fb:70:dc:ae:7e: a9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:DC:8F:A1:8A:43:64:62:03:FD:57:F5:70:5D:94:D5:DF:57:1D:06 X509v3 Authority Key Identifier: keyid:D6:FB:3E:76:68:FD:C6:CD:18:10:6E:E8:53:D1:C6:45:88:96:BE:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6FB3E7668FDC6CD18106EE853D1C6458896BE4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068702911388712962/0/3132332e35382e31382e302f32342d3234203d3e20313331343935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.58.18.0/24 Signature Algorithm: sha256WithRSAEncryption 7d:08:b0:65:58:a5:4a:b2:e2:d1:79:43:63:14:6f:42:8d:98: d9:55:e0:42:89:5f:d8:56:a7:8c:9d:ed:c1:54:64:02:46:25: 1d:21:32:0e:32:73:5b:31:af:f2:36:54:40:fe:62:18:c0:39: 8b:2b:c0:dc:d4:1b:f6:f2:1f:5c:3c:25:ab:16:83:d3:37:5c: 77:20:1d:dc:83:c3:80:46:e1:a8:02:51:bd:80:8b:d6:f3:8c: 0f:34:5b:dd:42:bb:bb:2a:d0:be:4d:93:38:0a:72:ef:d2:7a: 4c:c0:e0:16:92:09:48:ff:ca:2a:22:08:b2:0e:9d:3b:57:8c: 99:22:ed:2b:b6:34:35:f4:37:6a:86:22:5a:6e:c1:03:ac:43: 61:fe:56:8d:6b:c4:54:09:38:42:9d:61:92:b4:5d:35:94:6d: c7:81:6b:d8:5e:02:db:d9:d8:d1:30:cd:d7:20:aa:b1:80:f9: 51:29:20:56:89:51:cc:47:9d:2a:ef:cd:2f:17:7d:13:a3:d2: 26:15:b8:02:a8:03:3b:eb:ce:2c:72:d1:a9:c7:e7:d5:49:6b: 70:33:48:05:0a:7c:bb:b3:0b:29:a0:27:41:2b:f8:0c:9a:fd: e4:4e:f1:58:36:ef:01:5c:2c:e8:6d:da:f9:ba:cc:28:5d:b2: e3:65:16:22 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULwNdYU7anQIbrdsWG8IIW4O7P7swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4 ODk2QkU0RDAeFw0yNjEwMzAwNzM1MTFaFw0yNzEwMjkwNzQwMTFaMDMxMTAvBgNV BAMTKDY3REM4RkExOEE0MzY0NjIwM0ZENTdGNTcwNUQ5NEQ1REY1NzFEMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClppElUQL/CHtqZ93fx2jeuYVB oGU61KEEqqIljZoN9K3sggJx01vcZ8JHpx1P23kTyRhBPEbC8o1wGAqKSn0V2rHU toK8NGzqHqJLyv3z0HP1NjGgshN8YFTBxHsgoKmG88VH52s4yubmYLwFOqOtN2aC IY+U0j7velL+tl2qoA511AzXwOTayx4a8rpz6BU6K10ytiGkAAUvyIwjVU9KHIez JGtRkUvc7noHON3cgaVE9OHi1dMqaRY/bcj/ztsOV0aeUbeXR5vCGhzkR38SEip/ Dw/E3dIx9zrCt5DY09ECaDemW5iciJ6dKDnTNxzI2KkOdDc+2CL7cNyufqlBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZ9yPoYpDZGID/Vf1cF2U1d9XHQYwHwYDVR0j BBgwFoAU1vs+dmj9xs0YEG7oU9HGRYiWvk0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODcwMjkxMTM4ODcxMjk2Mi8wL0Q2RkIzRTc2NjhGREM2Q0QxODEwNkVFODUzRDFD NjQ1ODg5NkJFNEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDZGQjNFNzY2OEZEQzZDRDE4MTA2RUU4NTNEMUM2NDU4ODk2QkU0RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2ODcwMjkxMTM4ODcxMjk2Mi8wLzMxMzIzMzJlMzUz ODJlMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM0MzkzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHs6EjANBgkqhkiG9w0BAQsFAAOCAQEAfQiwZVilSrLi0XlDYxRvQo2Y 2VXgQolf2FanjJ3twVRkAkYlHSEyDjJzWzGv8jZUQP5iGMA5iyvA3NQb9vIfXDwl qxaD0zdcdyAd3IPDgEbhqAJRvYCL1vOMDzRb3UK7uyrQvk2TOApy79J6TMDgFpIJ SP/KKiIIsg6dO1eMmSLtK7Y0NfQ3aoYiWm7BA6xDYf5WjWvEVAk4Qp1hkrRdNZRt x4Fr2F4C29nY0TDN1yCqsYD5USkgVolRzEedKu/NLxd9E6PSJhW4AqgDO+vOLHLR qcfn1UlrcDNIBQp8u7MLKaAnQSv4DJr95E7xWDbvAVws6G3a+brMKF2y42UWIg== -----END CERTIFICATE-----Generated at Sun Nov 1 08:33:07 2026 by rpki-client