$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3230322e3133302e3234302e302f32312d3231203d3e2034383038.roa File: 3230322e3133302e3234302e302f32312d3231203d3e2034383038.roa (raw, json) Hash identifier: yczlkHuxh0aqZGORKtEIyhXIrxrPj57D36ltxIpixKU= Subject key identifier: 09:36:13:3C:D7:96:BB:96:B0:D9:9E:5F:22:FB:4F:89:57:34:31:D1 Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Certificate serial: 41A3C5D6596592C57CA023DB0464B1DFD43EBBEC Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3230322e3133302e3234302e302f32312d3231203d3e2034383038.roa Signing time: Mon 08 Jun 2026 10:21:55 +0000 ROA not before: Mon 08 Jun 2026 10:16:55 +0000 ROA not after: Mon 07 Jun 2027 10:21:55 +0000 asID: 4808 IP address blocks: 202.130.240.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a3:c5:d6:59:65:92:c5:7c:a0:23:db:04:64:b1:df:d4:3e:bb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8 Validity Not Before: Jun 8 10:16:55 2026 GMT Not After : Jun 7 10:21:55 2027 GMT Subject: CN=0936133CD796BB96B0D99E5F22FB4F89573431D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2c:94:fc:4e:57:9a:9e:8c:7c:7c:46:d0:7b: 87:e4:ab:86:23:64:5c:90:80:e3:0b:2a:51:cb:8d: 5e:67:b2:80:ef:76:e1:cf:b3:c1:8a:2c:5e:9d:26: 3c:67:b0:f2:94:c4:c1:40:f8:0a:9e:01:7d:bf:db: ac:bd:2e:c6:df:29:ff:ab:70:5a:56:f5:9f:7e:18: 64:63:d6:cb:d2:53:76:bf:55:e1:42:08:2d:f1:6f: d1:a0:e5:26:66:b9:7a:6d:98:55:b5:f8:00:2e:b4: f0:b1:c8:92:e7:50:1a:63:5f:76:c5:40:71:09:2b: 72:79:ec:00:d8:96:34:9f:66:03:c2:6b:09:8e:45: 87:f2:e1:65:1f:cc:c4:00:62:31:a6:43:91:4a:84: 35:4d:18:62:8a:20:94:87:8d:20:80:2a:02:b8:a6: 3f:f5:35:ab:92:d8:47:1f:ca:ff:76:0d:43:59:3e: ab:62:0f:bc:b6:e0:06:14:53:96:85:a0:f3:21:66: fb:b4:3c:3c:75:a4:2a:bf:38:d2:8b:c1:6b:0f:45: 39:c9:e7:3b:05:bf:af:28:73:5e:44:55:e9:37:08: f9:ec:44:a7:20:81:85:f7:cb:fc:55:ec:1e:58:ad: 2a:31:6d:34:54:d1:b9:75:14:c1:9a:c8:18:fe:46: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:36:13:3C:D7:96:BB:96:B0:D9:9E:5F:22:FB:4F:89:57:34:31:D1 X509v3 Authority Key Identifier: keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3230322e3133302e3234302e302f32312d3231203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.130.240.0/21 Signature Algorithm: sha256WithRSAEncryption 59:38:c0:ee:99:ba:91:96:9b:19:ad:0d:d6:72:6e:5d:8b:0e: c5:04:3a:87:d9:aa:0d:47:80:4d:17:cf:b1:b6:69:6e:b5:84: a6:66:fc:ff:ef:71:62:33:08:d6:6f:f1:5e:b6:48:63:7a:15: c5:e7:e5:34:b8:09:30:59:91:d2:c3:9f:5b:6c:45:f7:32:71: 60:ee:5a:34:89:ba:10:dc:69:2b:1e:83:cd:58:f7:80:4c:a3: d6:d4:48:c1:18:d0:5c:98:eb:df:20:70:81:d6:d4:c9:59:81: f3:28:ec:d2:fa:eb:81:03:47:7e:7d:6d:66:9f:4f:d6:df:3c: 9e:a4:89:16:74:3e:1e:56:2b:71:1b:89:7f:8e:81:21:4c:03: 7d:e7:84:45:f0:a2:13:39:35:50:b0:85:8e:40:7c:28:a9:34: 12:5b:c2:e8:a1:3a:a7:ac:7d:47:81:41:99:25:31:2a:74:ba: a6:81:69:1e:82:c1:15:16:f5:3b:22:d4:8b:d4:0e:d3:01:fa: bf:d2:e9:d1:8f:f0:6b:9f:a6:1a:fa:eb:f8:d9:39:78:e0:83: fd:22:ee:f1:af:7c:04:b1:b3:26:07:74:f8:51:88:a4:b0:56: bf:4b:02:86:08:87:07:6c:37:1c:94:71:c2:66:17:fe:9d:73: 91:92:f4:8f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQaPF1lllksV8oCPbBGSx39Q+u+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5 RjkzRjZGODAeFw0yNjA2MDgxMDE2NTVaFw0yNzA2MDcxMDIxNTVaMDMxMTAvBgNV BAMTKDA5MzYxMzNDRDc5NkJCOTZCMEQ5OUU1RjIyRkI0Rjg5NTczNDMxRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLJT8Tleanox8fEbQe4fkq4Yj ZFyQgOMLKlHLjV5nsoDvduHPs8GKLF6dJjxnsPKUxMFA+AqeAX2/26y9LsbfKf+r cFpW9Z9+GGRj1svSU3a/VeFCCC3xb9Gg5SZmuXptmFW1+AAutPCxyJLnUBpjX3bF QHEJK3J57ADYljSfZgPCawmORYfy4WUfzMQAYjGmQ5FKhDVNGGKKIJSHjSCAKgK4 pj/1NauS2Ecfyv92DUNZPqtiD7y24AYUU5aFoPMhZvu0PDx1pCq/ONKLwWsPRTnJ 5zsFv68oc15EVek3CPnsRKcggYX3y/xV7B5YrSoxbTRU0bl1FMGayBj+Rm1RAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUCTYTPNeWu5aw2Z5fIvtPiVc0MdEwHwYDVR0j BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwNzU3NTQzNzUzMTI4MzQ3Ny8wLzMyMzAzMjJlMzEz MzMwMmUzMjM0MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA8qC8DANBgkqhkiG9w0BAQsFAAOCAQEAWTjA7pm6kZabGa0N1nJuXYsO xQQ6h9mqDUeATRfPsbZpbrWEpmb8/+9xYjMI1m/xXrZIY3oVxeflNLgJMFmR0sOf W2xF9zJxYO5aNIm6ENxpKx6DzVj3gEyj1tRIwRjQXJjr3yBwgdbUyVmB8yjs0vrr gQNHfn1tZp9P1t88nqSJFnQ+HlYrcRuJf46BIUwDfeeERfCiEzk1ULCFjkB8KKk0 ElvC6KE6p6x9R4FBmSUxKnS6poFpHoLBFRb1OyLUi9QO0wH6v9Lp0Y/wa5+mGvrr +Nk5eOCD/SLu8a98BLGzJgd0+FGIpLBWv0sChgiHB2w3HJRxwmYX/p1zkZL0jw== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:22 2026 by rpki-client