$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e203233373234.roa File: 3130312e3233362e33322e302f32312d3231203d3e203233373234.roa (raw, json) Hash identifier: NB9lpQhiI+MQlgBMiQIueQcvq0VsycT6eUWkQsj9Q4U= Subject key identifier: A0:F3:7B:B9:52:03:B5:03:48:98:0C:1E:4A:23:71:C5:54:E2:04:C6 Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 651D600C804BE1976FEB337CAD4F6019618CBF6E Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e203233373234.roa Signing time: Thu 11 Jun 2026 15:42:46 +0000 ROA not before: Thu 11 Jun 2026 15:37:46 +0000 ROA not after: Thu 10 Jun 2027 15:42:46 +0000 asID: 23724 IP address blocks: 101.236.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 18:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1d:60:0c:80:4b:e1:97:6f:eb:33:7c:ad:4f:60:19:61:8c:bf:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 11 15:37:46 2026 GMT Not After : Jun 10 15:42:46 2027 GMT Subject: CN=A0F37BB95203B50348980C1E4A2371C554E204C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:af:6e:b6:3c:96:44:d7:01:02:90:75:dd:3d: 08:a6:50:c6:ad:57:ca:e8:a3:d0:70:ca:d4:e0:b3: e8:7d:ba:ba:0f:a5:f2:77:41:53:f0:08:3f:21:36: 68:c9:d1:d2:18:61:94:06:0b:8a:7c:33:78:d3:3b: e3:01:6e:36:25:28:8f:23:1e:27:13:5a:4e:cb:6a: 62:a7:0e:80:d0:32:0d:b9:31:09:e2:11:bb:ee:26: 8c:ce:52:66:41:da:ab:fc:48:4b:1f:7f:02:ab:06: ae:bc:69:66:23:fb:7c:63:9d:38:96:bd:46:c9:80: c5:8e:50:7f:28:b9:61:42:59:77:ef:d0:c3:45:bb: 39:d2:85:2a:22:92:ee:16:74:81:ec:04:11:a9:ed: 4e:36:9c:43:ac:9f:d6:24:7a:2a:7c:82:b3:04:8a: fd:13:e4:71:4b:2f:ff:73:d0:31:13:23:ca:c5:70: 01:c3:9e:5a:dc:1f:cb:b1:09:33:fd:a3:c4:f4:f7: 26:3b:01:c6:ea:aa:e6:1e:eb:69:74:06:39:11:98: 16:95:bb:97:c4:d0:f1:c0:c2:c2:7f:f9:da:8e:a8: 51:e2:5f:82:55:e1:37:84:70:f6:06:21:0b:1c:a2: b0:a3:bd:b5:f3:b5:ec:26:5d:ad:8f:62:00:c6:ce: 15:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F3:7B:B9:52:03:B5:03:48:98:0C:1E:4A:23:71:C5:54:E2:04:C6 X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/3130312e3233362e33322e302f32312d3231203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.236.32.0/21 Signature Algorithm: sha256WithRSAEncryption 5a:db:0d:77:29:5a:15:09:15:5a:39:bf:45:39:ab:c9:2b:91: be:e3:fd:a2:de:59:cf:27:42:32:dd:9a:6f:20:7e:47:bc:ab: 89:33:7b:2d:72:fe:3b:57:e3:b8:f3:da:86:66:9f:fb:da:fd: 35:fb:2f:7c:d8:7c:b6:5f:f8:cd:7f:5b:02:94:6d:ba:16:16: c3:08:e2:ab:18:e4:07:c6:c4:8b:be:97:d6:9e:cc:88:11:d7: 4f:bc:1f:70:8f:06:ac:25:c4:d0:2c:ec:e6:3b:f6:15:66:48: 9c:05:2f:2d:92:d5:83:d2:7b:b4:98:de:db:df:a6:a4:38:d4: 77:ea:69:4a:4b:d5:2e:3f:36:73:e0:90:a7:05:f6:1a:4b:ef: 27:e1:01:cd:2e:b0:98:a1:9c:4b:55:19:c0:19:d6:ef:0f:40: 26:15:87:ab:72:bb:7d:d4:dc:f5:5f:7e:8e:34:46:64:29:03: 25:7b:21:a5:39:81:7e:2c:89:83:bd:b5:41:bf:71:51:4d:7a: 60:a2:cf:51:3d:a6:b5:38:8c:a4:85:46:27:7e:d1:7b:49:60: ae:c3:75:02:3a:5b:ac:b0:37:87:d2:92:a9:02:71:57:38:eb: ca:01:dc:62:86:36:70:af:ed:18:34:12:e4:3c:64:fe:0e:a7: 17:7d:98:b0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZR1gDIBL4Zdv6zN8rU9gGWGMv24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MTExNTM3NDZaFw0yNzA2MTAxNTQyNDZaMDMxMTAvBgNV BAMTKEEwRjM3QkI5NTIwM0I1MDM0ODk4MEMxRTRBMjM3MUM1NTRFMjA0QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZr262PJZE1wECkHXdPQimUMat V8roo9BwytTgs+h9uroPpfJ3QVPwCD8hNmjJ0dIYYZQGC4p8M3jTO+MBbjYlKI8j HicTWk7LamKnDoDQMg25MQniEbvuJozOUmZB2qv8SEsffwKrBq68aWYj+3xjnTiW vUbJgMWOUH8ouWFCWXfv0MNFuznShSoiku4WdIHsBBGp7U42nEOsn9Ykeip8grME iv0T5HFLL/9z0DETI8rFcAHDnlrcH8uxCTP9o8T09yY7AcbqquYe62l0BjkRmBaV u5fE0PHAwsJ/+dqOqFHiX4JV4TeEcPYGIQscorCjvbXztewmXa2PYgDGzhXtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUoPN7uVIDtQNImAweSiNxxVTiBMYwHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNzQ3MjY1MzE0MjE5NjI1MS8wLzMxMzAzMTJlMzIz MzM2MmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMzM3MzIzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEA2XsIDANBgkqhkiG9w0BAQsFAAOCAQEAWtsNdylaFQkVWjm/RTmrySuR vuP9ot5ZzydCMt2abyB+R7yriTN7LXL+O1fjuPPahmaf+9r9NfsvfNh8tl/4zX9b ApRtuhYWwwjiqxjkB8bEi76X1p7MiBHXT7wfcI8GrCXE0Czs5jv2FWZInAUvLZLV g9J7tJje29+mpDjUd+ppSkvVLj82c+CQpwX2GkvvJ+EBzS6wmKGcS1UZwBnW7w9A JhWHq3K7fdTc9V9+jjRGZCkDJXshpTmBfiyJg721Qb9xUU16YKLPUT2mtTiMpIVG J37Re0lgrsN1AjpbrLA3h9KSqQJxVzjrygHcYoY2cK/tGDQS5Dxk/g6nF32YsA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:57 2026 by rpki-client