$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e31362e302f32312d3231203d3e203539303235.roa File: 3130312e3233362e31362e302f32312d3231203d3e203539303235.roa (raw, json) Hash identifier: 3mWiQgO1+3U7jYJYD3DS+Acv1HJZaFR2MPaAaa3Abgc= Subject key identifier: 8B:63:19:D3:AE:B7:10:45:75:1C:95:73:E9:04:A7:0D:FF:9A:58:2E Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 67723A71AB10675214006CF538E3ACDFB223FD3B Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e31362e302f32312d3231203d3e203539303235.roa Signing time: Thu 11 Jun 2026 15:41:09 +0000 ROA not before: Thu 11 Jun 2026 15:36:09 +0000 ROA not after: Thu 10 Jun 2027 15:41:09 +0000 asID: 59025 IP address blocks: 101.236.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:72:3a:71:ab:10:67:52:14:00:6c:f5:38:e3:ac:df:b2:23:fd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 11 15:36:09 2026 GMT Not After : Jun 10 15:41:09 2027 GMT Subject: CN=8B6319D3AEB71045751C9573E904A70DFF9A582E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:08:f4:a5:6e:e9:d5:2e:da:c4:10:9b:bd:1a: de:fe:7d:28:4d:cc:2f:28:1f:12:3d:93:a3:91:1d: 22:fc:89:7f:5a:b7:92:5b:86:55:68:74:97:d3:28: 98:8f:07:b7:07:cf:0b:4d:98:ec:b9:7e:43:15:68: 35:01:5f:b0:b7:45:f5:38:e1:73:24:1f:32:60:83: 53:31:db:cc:ff:a5:84:0f:a2:7c:3b:a2:3f:b6:a7: 0c:51:e3:00:ac:e9:e4:e6:09:44:9c:07:7d:29:89: 4f:14:a2:3a:be:d4:37:ed:e3:9a:4c:33:a1:c7:7f: 05:4e:e4:9f:fa:41:bd:c1:fc:a7:b5:a8:fc:86:b5: 02:9c:b6:77:aa:ae:9f:c7:c8:0c:ee:ed:8f:08:ff: 3b:3a:f8:96:f0:b1:84:3b:94:c6:37:1a:77:dd:62: 20:69:d0:ae:ef:4e:c0:b4:8d:f7:32:26:8a:b5:98: 37:eb:e9:35:a8:65:90:ec:dd:f0:90:2e:31:31:7a: a6:f0:9d:c7:8e:e2:05:14:ff:c1:12:32:c7:54:81: 5f:87:fe:c1:0b:a1:9b:a8:b1:b5:ce:7a:c9:de:fc: 12:77:e7:d2:ce:4f:f0:1a:b3:7f:75:51:db:55:80: 7b:58:0a:e4:79:d1:48:a3:56:c5:58:32:83:76:b5: 90:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:63:19:D3:AE:B7:10:45:75:1C:95:73:E9:04:A7:0D:FF:9A:58:2E X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e31362e302f32312d3231203d3e203539303235.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.236.16.0/21 Signature Algorithm: sha256WithRSAEncryption 58:89:5f:53:0c:f4:e9:79:36:d0:ec:94:1f:d1:73:a8:ba:f8: 1f:0d:29:10:b0:f0:f3:96:4d:43:4a:e6:5b:3a:ac:37:d3:27: 45:5e:e2:17:9c:eb:13:82:86:2d:55:e7:4c:18:3d:ca:7d:fe: 85:30:09:97:45:f4:10:a7:22:10:47:96:3b:2d:49:bc:39:5d: b4:da:fb:9e:d2:15:8a:6e:5b:2c:eb:37:78:2f:7d:f4:f4:47: 19:75:29:46:d4:f1:05:be:bc:b1:68:8a:75:69:ec:28:dd:ce: 1e:cf:ca:94:46:6b:79:87:b4:4b:07:4d:94:39:ce:b1:0a:7d: d2:eb:6f:90:83:8a:f7:a5:40:bc:59:7d:09:6d:8f:29:26:50: 47:7d:7d:2b:b9:61:4b:6f:8c:dc:85:b8:2a:93:77:f4:e1:aa: a8:cd:dd:16:e5:4d:80:ac:97:cc:cc:ab:b3:9b:35:f4:83:50: 12:af:73:16:97:10:e4:3c:3e:2f:d0:ef:39:3a:13:71:84:4e: 33:99:55:f5:1a:9b:77:8a:40:df:92:8a:19:bc:a5:64:64:a1: 52:1d:c2:f7:3b:df:43:0d:03:c1:a8:e7:69:5a:94:03:6b:1d: 43:42:31:82:2c:b3:72:e2:4d:20:13:c1:84:61:31:99:1a:7e: 5f:5b:66:70 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZ3I6casQZ1IUAGz1OOOs37Ij/TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MTExNTM2MDlaFw0yNzA2MTAxNTQxMDlaMDMxMTAvBgNV BAMTKDhCNjMxOUQzQUVCNzEwNDU3NTFDOTU3M0U5MDRBNzBERkY5QTU4MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfCPSlbunVLtrEEJu9Gt7+fShN zC8oHxI9k6ORHSL8iX9at5JbhlVodJfTKJiPB7cHzwtNmOy5fkMVaDUBX7C3RfU4 4XMkHzJgg1Mx28z/pYQPonw7oj+2pwxR4wCs6eTmCUScB30piU8Uojq+1Dft45pM M6HHfwVO5J/6Qb3B/Ke1qPyGtQKctneqrp/HyAzu7Y8I/zs6+JbwsYQ7lMY3Gnfd YiBp0K7vTsC0jfcyJoq1mDfr6TWoZZDs3fCQLjExeqbwnceO4gUU/8ESMsdUgV+H /sELoZuosbXOesne/BJ359LOT/Aas391UdtVgHtYCuR50UijVsVYMoN2tZAdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUi2MZ0663EEV1HJVz6QSnDf+aWC4wHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNzQ3MjY1MzE0MjE5NjI1MS8wLzMxMzAzMTJlMzIz MzM2MmUzMTM2MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzOTMwMzIzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA2XsEDANBgkqhkiG9w0BAQsFAAOCAQEAWIlfUwz06Xk20OyUH9FzqLr4 Hw0pELDw85ZNQ0rmWzqsN9MnRV7iF5zrE4KGLVXnTBg9yn3+hTAJl0X0EKciEEeW Oy1JvDldtNr7ntIVim5bLOs3eC999PRHGXUpRtTxBb68sWiKdWnsKN3OHs/KlEZr eYe0SwdNlDnOsQp90utvkIOK96VAvFl9CW2PKSZQR319K7lhS2+M3IW4KpN39OGq qM3dFuVNgKyXzMyrs5s19INQEq9zFpcQ5Dw+L9DvOToTcYROM5lV9Rqbd4pA35KK GbylZGShUh3C9zvfQw0DwajnaVqUA2sdQ0IxgiyzcuJNIBPBhGExmRp+X1tmcA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:57 2026 by rpki-client