$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37362e3232302e302f32322d3232203d3e2034383437.roa File: 3130332e37362e3232302e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: bVqfzO+arD4Um5tS69MlIDABilnX2cRx9SBb5y88I2A= Subject key identifier: 9A:AC:A1:48:85:60:28:DD:E9:B7:69:B9:85:19:5B:8C:B7:A1:6A:77 Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Certificate serial: 3E3711A510D634F51F5F5F6B3D35E4262CD31C3A Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37362e3232302e302f32322d3232203d3e2034383437.roa Signing time: Mon 15 Jun 2026 06:52:23 +0000 ROA not before: Mon 15 Jun 2026 06:47:23 +0000 ROA not after: Mon 14 Jun 2027 06:52:23 +0000 asID: 4847 IP address blocks: 103.76.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 09:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:37:11:a5:10:d6:34:f5:1f:5f:5f:6b:3d:35:e4:26:2c:d3:1c:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Validity Not Before: Jun 15 06:47:23 2026 GMT Not After : Jun 14 06:52:23 2027 GMT Subject: CN=9AACA148856028DDE9B769B985195B8CB7A16A77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e5:a3:74:63:77:9d:d6:bd:c5:1a:e1:ef:78: af:af:98:04:0e:0f:66:8d:62:ed:09:37:5f:1f:ee: 5f:9f:b5:76:4d:19:c3:dc:0a:7c:ad:42:ac:f6:0a: d9:17:74:31:a4:d7:37:e6:af:47:6c:c5:69:38:b1: 2b:20:63:5f:06:8d:a1:6d:74:50:3b:31:bc:88:1b: 3d:4d:33:e2:06:ab:c4:b7:49:15:cd:58:81:89:48: 4b:2a:76:11:ed:c5:5c:b9:a5:8e:bf:ad:63:da:12: 0a:39:36:31:6e:5b:9a:d6:cf:57:88:52:10:6c:52: f0:65:9a:93:3e:f3:7b:3a:52:f7:8f:f8:c9:11:4f: c9:32:37:19:48:2d:fd:ff:45:5b:f2:65:51:30:0a: 92:13:07:8d:45:8f:7e:1c:67:f6:75:0d:66:1c:84: 4c:93:ab:84:b6:0b:c6:f1:60:7b:e0:71:25:ea:cc: c1:bd:f2:f5:48:1b:10:6a:54:56:04:51:3f:41:39: ef:cb:c8:79:9b:b4:33:c5:ee:76:1f:14:1d:ef:56: 1e:89:8e:09:c1:e7:e9:20:b2:c4:9e:a9:bc:05:7b: 6f:9a:a3:5d:db:03:c3:5d:ea:a0:93:29:ad:06:d5: 26:32:3f:31:14:9e:b5:4a:0a:42:3b:51:6d:07:ac: 98:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:AC:A1:48:85:60:28:DD:E9:B7:69:B9:85:19:5B:8C:B7:A1:6A:77 X509v3 Authority Key Identifier: keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/3130332e37362e3232302e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.76.220.0/22 Signature Algorithm: sha256WithRSAEncryption ab:43:52:91:c6:89:97:5f:ca:c0:74:4b:43:3b:a4:2c:7f:3c: 0a:b6:47:e5:00:c8:05:ab:e9:c7:8b:3f:1b:23:9d:a4:d9:83: a9:18:25:3f:7a:00:ce:a7:ff:b9:3a:03:c1:c9:40:35:e5:3f: 34:36:88:d9:b0:bf:59:9e:94:14:04:c9:95:8e:30:1a:64:35: 7a:10:fb:83:58:59:a5:b7:38:58:d2:89:92:f1:54:fd:e1:a3: 1b:37:fc:41:20:87:5a:ab:26:94:95:99:23:65:f4:74:e5:60: 8e:3e:99:2f:f9:50:c7:24:91:dd:db:a5:03:e1:dc:ad:4d:60: 9d:23:2d:65:33:10:71:76:f4:ce:2f:26:78:a6:46:d0:c2:7d: 0b:3d:90:9f:4e:94:fc:f2:e9:b9:fe:ac:9d:94:e4:84:1b:16: 56:8e:1f:ff:b7:01:4e:e1:d7:c6:77:ca:e2:fd:ca:f7:c3:db: c8:0b:c1:7c:58:77:67:c2:ee:8b:dd:f9:2b:86:fe:28:b7:d8: 70:5b:6f:d1:3b:de:f4:1d:fa:04:65:cb:0c:6f:b1:85:51:0b: 34:7f:a1:05:7d:1a:d6:ef:4a:1c:dc:f0:34:a7:b0:c4:9f:6c: b5:14:19:e2:43:c9:49:54:66:2d:cf:2f:6c:c4:00:b5:26:d7: a4:24:2c:58 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPjcRpRDWNPUfX19rPTXkJizTHDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYw QjYwRDA0QTAeFw0yNjA2MTUwNjQ3MjNaFw0yNzA2MTQwNjUyMjNaMDMxMTAvBgNV BAMTKDlBQUNBMTQ4ODU2MDI4RERFOUI3NjlCOTg1MTk1QjhDQjdBMTZBNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa5aN0Y3ed1r3FGuHveK+vmAQO D2aNYu0JN18f7l+ftXZNGcPcCnytQqz2CtkXdDGk1zfmr0dsxWk4sSsgY18GjaFt dFA7MbyIGz1NM+IGq8S3SRXNWIGJSEsqdhHtxVy5pY6/rWPaEgo5NjFuW5rWz1eI UhBsUvBlmpM+83s6UveP+MkRT8kyNxlILf3/RVvyZVEwCpITB41Fj34cZ/Z1DWYc hEyTq4S2C8bxYHvgcSXqzMG98vVIGxBqVFYEUT9BOe/LyHmbtDPF7nYfFB3vVh6J jgnB5+kgssSeqbwFe2+ao13bA8Nd6qCTKa0G1SYyPzEUnrVKCkI7UW0HrJhhAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUmqyhSIVgKN3pt2m5hRlbjLehancwHwYDVR0j BBgwFoAUnfpdRM9Q7fVuk7t/r4Y+tgtg0EowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODcyODcyMDI2NjM2MjkwNy8wLzlERkE1RDQ0Q0Y1MEVERjU2RTkzQkI3RkFGODYz RUI2MEI2MEQwNEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYwQjYwRDA0QS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzI4NzIwMjY2MzYyOTA3LzAvMzEzMDMzMmUzNzM2 MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmdM3DANBgkqhkiG9w0BAQsFAAOCAQEAq0NSkcaJl1/KwHRLQzukLH88CrZH 5QDIBavpx4s/GyOdpNmDqRglP3oAzqf/uToDwclANeU/NDaI2bC/WZ6UFATJlY4w GmQ1ehD7g1hZpbc4WNKJkvFU/eGjGzf8QSCHWqsmlJWZI2X0dOVgjj6ZL/lQxySR 3dulA+HcrU1gnSMtZTMQcXb0zi8meKZG0MJ9Cz2Qn06U/PLpuf6snZTkhBsWVo4f /7cBTuHXxnfK4v3K98PbyAvBfFh3Z8Lui935K4b+KLfYcFtv0Tve9B36BGXLDG+x hVELNH+hBX0a1u9KHNzwNKewxJ9stRQZ4kPJSVRmLc8vbMQAtSbXpCQsWA== -----END CERTIFICATE-----Generated at Wed Jun 24 18:15:13 2026 by rpki-client