$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134312e302f32342d3234203d3e2030.roa File: 3130332e3232312e3134312e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: ph6sfbq6dDQWSlIA55Lr6Sdxols01VkpyJl30HEO20s= Subject key identifier: DC:55:A9:08:91:89:9F:95:AA:26:A8:74:45:ED:7E:4F:30:8B:89:D5 Certificate issuer: /CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Certificate serial: 1A8E262F7DD6B661A9B67FA154B829BCC9DD6E59 Authority key identifier: 20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134312e302f32342d3234203d3e2030.roa Signing time: Tue 23 Jun 2026 08:17:45 +0000 ROA not before: Tue 23 Jun 2026 08:12:45 +0000 ROA not after: Tue 22 Jun 2027 08:17:45 +0000 asID: 0 IP address blocks: 103.221.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 23:43:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:8e:26:2f:7d:d6:b6:61:a9:b6:7f:a1:54:b8:29:bc:c9:dd:6e:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=200F3395B71E54CEA9D9E15A8452B36EA909B567 Validity Not Before: Jun 23 08:12:45 2026 GMT Not After : Jun 22 08:17:45 2027 GMT Subject: CN=DC55A90891899F95AA26A87445ED7E4F308B89D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e7:a8:44:1f:25:5e:c4:7d:db:0f:68:47:7d: 9b:3e:0c:85:15:ef:ac:0f:85:17:79:c5:7f:df:f1: 07:62:99:2e:a1:f8:ae:93:b7:10:55:5e:41:f5:51: 14:2f:84:6e:6c:f0:82:2e:ea:5b:c4:0c:b9:50:cd: 02:73:14:f5:f7:3d:2d:84:5a:a5:12:4b:3f:99:5b: 16:6e:32:05:0e:16:e0:6d:3f:f0:4f:58:39:16:cb: 9d:a4:05:59:f4:ed:73:cd:b4:7f:6f:ca:ab:18:50: 19:2a:85:93:22:a0:cb:2b:e9:48:18:83:31:ee:14: 22:6d:a5:8c:2e:f1:30:73:42:7a:2c:a8:54:8a:9e: d3:b5:ef:4d:2c:19:3e:cc:fe:9c:5e:50:81:05:1a: 9b:c1:7a:1c:66:e7:c5:db:39:32:af:cd:54:3a:24: 9e:c3:97:4c:62:4b:64:8c:3b:3f:29:80:b0:ea:8b: c5:63:ff:a4:a4:21:bf:17:e8:01:15:8a:a2:39:b1: d9:04:de:27:89:22:f6:d5:b6:72:f6:a4:9e:a1:e4: 88:e6:78:7d:b3:df:ad:bb:2f:74:19:b6:3f:6e:c1: 05:5e:e3:e8:63:6e:23:b3:86:c4:98:6f:14:00:3c: a3:c3:d0:c0:3e:76:bc:55:51:f5:1d:7b:23:a2:6e: ce:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:55:A9:08:91:89:9F:95:AA:26:A8:74:45:ED:7E:4F:30:8B:89:D5 X509v3 Authority Key Identifier: keyid:20:0F:33:95:B7:1E:54:CE:A9:D9:E1:5A:84:52:B3:6E:A9:09:B5:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/200F3395B71E54CEA9D9E15A8452B36EA909B567.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/200F3395B71E54CEA9D9E15A8452B36EA909B567.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097437560596070403/0/3130332e3232312e3134312e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.221.141.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:0b:56:21:50:2d:a9:8e:3b:b4:58:2a:3c:a4:74:27:b5:a0: ff:82:b7:48:3a:42:de:0c:e1:93:1e:26:3b:58:c8:97:f0:66: d7:49:cd:0c:32:7c:1e:72:7b:0c:e0:a6:69:aa:a4:9f:4d:19: 55:ac:0b:3d:bd:f3:76:5e:87:6b:ed:e8:b5:e5:9a:e8:ce:0d: 03:f7:04:b0:b4:6b:3c:fd:37:c9:29:47:23:6d:07:2d:4a:00: 07:df:b4:cf:d4:83:44:23:3d:d5:4b:c0:45:97:0e:9d:1b:d8: bc:ef:1c:b5:28:3b:bb:19:8b:73:48:f3:fa:59:7b:e8:08:eb: 01:e3:e9:d9:37:a8:9d:03:c4:52:e4:8a:04:93:9e:52:f0:6c: 7f:05:6c:b2:0b:29:eb:24:18:5c:61:21:ed:ba:c2:dc:b5:d5: e9:fb:ff:03:0f:e1:c2:31:53:e4:ea:07:6f:4e:33:f4:0b:3f: 11:6b:62:d3:37:7a:58:ce:fb:b0:05:a4:02:d6:dd:e1:90:14: 01:11:61:d3:85:61:f5:74:97:16:76:7b:72:38:2a:f8:42:21: bd:b9:04:cf:0d:f7:2d:6a:f6:93:5b:1b:89:75:25:77:54:fc: 1e:56:2a:ea:21:67:30:ec:3e:9c:8a:6d:1b:45:ba:bf:c7:ab: b0:3b:67:c2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUGo4mL33WtmGptn+hVLgpvMndblkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVB OTA5QjU2NzAeFw0yNjA2MjMwODEyNDVaFw0yNzA2MjIwODE3NDVaMDMxMTAvBgNV BAMTKERDNTVBOTA4OTE4OTlGOTVBQTI2QTg3NDQ1RUQ3RTRGMzA4Qjg5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+56hEHyVexH3bD2hHfZs+DIUV 76wPhRd5xX/f8QdimS6h+K6TtxBVXkH1URQvhG5s8IIu6lvEDLlQzQJzFPX3PS2E WqUSSz+ZWxZuMgUOFuBtP/BPWDkWy52kBVn07XPNtH9vyqsYUBkqhZMioMsr6UgY gzHuFCJtpYwu8TBzQnosqFSKntO1700sGT7M/pxeUIEFGpvBehxm58XbOTKvzVQ6 JJ7Dl0xiS2SMOz8pgLDqi8Vj/6SkIb8X6AEViqI5sdkE3ieJIvbVtnL2pJ6h5Ijm eH2z3627L3QZtj9uwQVe4+hjbiOzhsSYbxQAPKPD0MA+drxVUfUdeyOibs7tAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU3FWpCJGJn5WqJqh0Re1+TzCLidUwHwYDVR0j BBgwFoAUIA8zlbceVM6p2eFahFKzbqkJtWcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzNzU2MDU5NjA3MDQwMy8wLzIwMEYzMzk1QjcxRTU0Q0VBOUQ5RTE1QTg0NTJC MzZFQTkwOUI1NjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjAwRjMzOTVCNzFFNTRDRUE5RDlFMTVBODQ1MkIzNkVBOTA5QjU2Ny5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3NDM3NTYwNTk2MDcwNDAzLzAvMzEzMDMzMmUzMjMy MzEyZTMxMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Z92NMA0GCSqGSIb3DQEBCwUAA4IBAQBOC1YhUC2pjju0WCo8pHQntaD/grdIOkLe DOGTHiY7WMiX8GbXSc0MMnwecnsM4KZpqqSfTRlVrAs9vfN2Xodr7ei15Zrozg0D 9wSwtGs8/TfJKUcjbQctSgAH37TP1INEIz3VS8BFlw6dG9i87xy1KDu7GYtzSPP6 WXvoCOsB4+nZN6idA8RS5IoEk55S8Gx/BWyyCynrJBhcYSHtusLctdXp+/8DD+HC MVPk6gdvTjP0Cz8Ra2LTN3pYzvuwBaQC1t3hkBQBEWHThWH1dJcWdntyOCr4QiG9 uQTPDfctavaTWxuJdSV3VPweVirqIWcw7D6cim0bRbq/x6uwO2fC -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:26 2026 by rpki-client