$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3230322e3133302e3232342e302f32302d3230203d3e2034383038.roa File: 3230322e3133302e3232342e302f32302d3230203d3e2034383038.roa (raw, json) Hash identifier: RnrA0Y4Cfch7liz5vjkBZfZ+3ISiPGlVIDoH6Gtb9M4= Subject key identifier: 37:EA:0A:D8:FD:20:44:07:F7:A2:35:ED:A4:6F:21:9C:71:DE:89:C8 Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Certificate serial: 0B29FD7D9CDD73838174244E0E5141B429D5405C Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3230322e3133302e3232342e302f32302d3230203d3e2034383038.roa Signing time: Mon 08 Jun 2026 10:22:33 +0000 ROA not before: Mon 08 Jun 2026 10:17:33 +0000 ROA not after: Mon 07 Jun 2027 10:22:33 +0000 asID: 4808 IP address blocks: 202.130.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:29:fd:7d:9c:dd:73:83:81:74:24:4e:0e:51:41:b4:29:d5:40:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Validity Not Before: Jun 8 10:17:33 2026 GMT Not After : Jun 7 10:22:33 2027 GMT Subject: CN=37EA0AD8FD204407F7A235EDA46F219C71DE89C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f5:91:1d:c0:4b:85:eb:ac:c8:67:54:85:2e: 67:72:13:6e:a0:e9:c1:d5:bc:d8:a4:f7:c2:58:6d: 36:f9:4c:89:8d:56:77:6f:eb:3e:a7:20:5f:c2:6d: c5:81:d0:49:3c:3b:d5:f8:97:e7:22:69:4e:1b:c8: 35:52:76:f2:e7:bc:c3:8c:1b:5b:8c:52:82:ee:83: a3:c9:95:ab:d3:7c:6b:cd:8e:0f:ec:ae:c4:12:24: 4a:bf:f4:ca:63:b3:f9:1d:5b:ef:56:bd:0f:ca:7d: 7d:5c:1c:f2:09:82:59:06:f9:c6:59:32:6a:89:e3: 03:3d:c4:e7:c8:43:8d:3a:d3:26:ec:12:93:b3:2c: a2:81:c3:a6:21:14:ff:23:f9:2f:9f:17:dd:77:98: fa:09:54:f0:bd:73:8f:51:4c:b2:68:44:62:21:e0: f6:13:dc:e9:ab:d4:bf:82:9a:e5:83:01:81:f1:1c: 31:aa:0a:53:de:36:e3:8e:e5:54:ad:88:12:ec:f9: 13:e8:2d:bb:a0:43:d5:73:01:bf:29:d7:f1:93:ae: 9a:36:93:46:4f:d0:1b:fc:8f:61:f7:be:48:56:25: f3:22:60:c2:c1:14:00:2d:4a:6d:df:60:58:da:0f: 1e:22:9d:5d:ee:40:c0:6e:1f:34:1f:97:10:f6:73: 3b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:EA:0A:D8:FD:20:44:07:F7:A2:35:ED:A4:6F:21:9C:71:DE:89:C8 X509v3 Authority Key Identifier: keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3230322e3133302e3232342e302f32302d3230203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.130.224.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:03:cf:fb:22:60:d6:a7:db:5a:11:d1:e7:7b:59:75:3c:97: c9:15:01:da:7c:e2:36:8c:ac:5c:19:4d:8c:fe:a3:d3:a4:8e: 37:ab:55:59:a0:64:59:5e:83:14:b3:9b:a1:42:b6:c7:8c:b2: b2:fe:12:85:fe:d1:12:a1:25:c9:7a:ea:a8:7f:19:99:b1:66: 23:e5:04:bc:04:92:98:08:1c:b4:3d:87:dd:02:0a:4e:0f:e7: a6:7e:5c:74:8a:47:34:30:c5:dd:fc:6a:c9:09:c7:78:28:7a: fe:6f:42:3e:b0:18:2a:ad:bd:b7:fc:83:2b:44:04:71:88:6f: 93:09:40:94:26:3d:f6:cc:27:06:75:2a:57:9c:04:1d:ab:8a: 15:e1:86:ea:13:8f:ef:85:93:fd:46:c3:ee:3f:5f:1b:86:ee: 3c:eb:ce:69:70:46:8c:20:11:43:31:41:00:19:47:30:a6:a1: 4b:58:fb:7a:36:c6:2d:e9:d8:db:0c:c7:3f:25:a2:4e:ea:69: ad:7e:3f:4c:57:35:47:b9:b1:51:b5:ec:34:3a:2d:7c:9b:1c: e9:7a:3c:e5:5d:e8:18:8a:d0:9e:cd:c6:e0:25:e6:d2:a0:b3: 30:78:5c:23:e0:30:90:54:18:50:3e:91:49:dd:d4:09:73:4e: b4:c6:e2:b3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCyn9fZzdc4OBdCRODlFBtCnVQFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5 RjkzRjZGODAeFw0yNjA2MDgxMDE3MzNaFw0yNzA2MDcxMDIyMzNaMDMxMTAvBgNV BAMTKDM3RUEwQUQ4RkQyMDQ0MDdGN0EyMzVFREE0NkYyMTlDNzFERTg5QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9ZEdwEuF66zIZ1SFLmdyE26g 6cHVvNik98JYbTb5TImNVndv6z6nIF/CbcWB0Ek8O9X4l+ciaU4byDVSdvLnvMOM G1uMUoLug6PJlavTfGvNjg/srsQSJEq/9Mpjs/kdW+9WvQ/KfX1cHPIJglkG+cZZ MmqJ4wM9xOfIQ4060ybsEpOzLKKBw6YhFP8j+S+fF913mPoJVPC9c49RTLJoRGIh 4PYT3Omr1L+CmuWDAYHxHDGqClPeNuOO5VStiBLs+RPoLbugQ9VzAb8p1/GTrpo2 k0ZP0Bv8j2H3vkhWJfMiYMLBFAAtSm3fYFjaDx4inV3uQMBuHzQflxD2czu5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUN+oK2P0gRAf3ojXtpG8hnHHeicgwHwYDVR0j BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwNzU3NTQzNzUzMTI4MzQ3Ny8wLzMyMzAzMjJlMzEz MzMwMmUzMjMyMzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBMqC4DANBgkqhkiG9w0BAQsFAAOCAQEAPQPP+yJg1qfbWhHR53tZdTyX yRUB2nziNoysXBlNjP6j06SON6tVWaBkWV6DFLOboUK2x4yysv4Shf7REqElyXrq qH8ZmbFmI+UEvASSmAgctD2H3QIKTg/npn5cdIpHNDDF3fxqyQnHeCh6/m9CPrAY Kq29t/yDK0QEcYhvkwlAlCY99swnBnUqV5wEHauKFeGG6hOP74WT/UbD7j9fG4bu POvOaXBGjCARQzFBABlHMKahS1j7ejbGLenY2wzHPyWiTupprX4/TFc1R7mxUbXs NDotfJsc6Xo85V3oGIrQns3G4CXm0qCzMHhcI+AwkFQYUD6RSd3UCXNOtMbisw== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:49 2026 by rpki-client