$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230322e302f32342d3332203d3e203633363231.roa File: 3136332e36312e3230322e302f32342d3332203d3e203633363231.roa (raw, json) Hash identifier: ApQCXLXL3XJhWka3Z1g+Qu/NsXedEEeRtRCG3Twids4= Subject key identifier: 09:43:0D:0D:E8:56:9D:3D:CD:D5:2D:CB:D3:91:9E:09:2F:06:B2:60 Certificate issuer: /CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Certificate serial: 31D81923F812006A8399948B3B0C13148E9243B9 Authority key identifier: BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230322e302f32342d3332203d3e203633363231.roa Signing time: Tue 23 Jun 2026 08:06:30 +0000 ROA not before: Tue 23 Jun 2026 08:01:30 +0000 ROA not after: Tue 22 Jun 2027 08:06:30 +0000 asID: 63621 IP address blocks: 163.61.202.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 15:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d8:19:23:f8:12:00:6a:83:99:94:8b:3b:0c:13:14:8e:92:43:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C Validity Not Before: Jun 23 08:01:30 2026 GMT Not After : Jun 22 08:06:30 2027 GMT Subject: CN=09430D0DE8569D3DCDD52DCBD3919E092F06B260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fb:20:84:6f:a9:34:cf:d7:7f:6c:85:16:24: 9c:04:6e:3c:8c:49:64:8a:18:d2:3a:ec:56:d0:60: 62:1d:7b:94:a2:8c:23:c0:cf:69:db:08:49:3a:f6: d3:b1:dc:a7:00:3d:b1:1e:b7:ba:0b:fa:9e:f5:e5: 43:a8:2a:b9:96:00:69:d0:7b:e8:48:ba:8d:05:09: 0d:ca:95:58:82:b2:7d:8e:17:77:ca:7a:3b:67:d7: af:df:8e:35:e5:3e:77:19:2f:3f:b0:2f:c8:f1:ca: 12:56:09:3c:9f:c6:e0:be:21:fb:bd:3e:c7:e1:22: 1d:08:69:23:c0:b3:ba:d4:8d:85:a4:4a:e8:7e:04: f6:30:3c:64:d9:cf:5c:db:94:fc:0a:60:93:aa:83: 8f:91:be:5c:09:09:8e:51:af:67:5f:cc:8b:96:50: fe:91:96:f3:61:b1:1a:71:69:0f:dd:44:25:a0:86: a8:e7:3d:f7:9e:d4:9d:96:86:d0:9e:50:68:90:48: 03:4a:f4:1b:7e:5f:e1:91:f0:18:3b:9a:99:9d:e3: 62:91:67:5e:68:ff:74:55:6d:25:3f:1f:1a:67:dd: 8f:93:67:59:dd:b3:84:fa:2c:e8:5d:f2:c2:95:b1: 22:f1:63:d0:8e:76:fa:af:56:21:b3:b9:5a:65:b5: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:43:0D:0D:E8:56:9D:3D:CD:D5:2D:CB:D3:91:9E:09:2F:06:B2:60 X509v3 Authority Key Identifier: keyid:BF:85:79:65:C9:23:1C:5E:F5:7C:BB:E7:A0:9D:87:C2:FC:6E:8C:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF857965C9231C5EF57CBBE7A09D87C2FC6E8C7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121692552068595751/0/3136332e36312e3230322e302f32342d3332203d3e203633363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.61.202.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:c2:7c:d5:bb:55:67:ff:80:04:2b:4c:0c:c3:0b:f9:9f:ed: e5:2a:6d:70:7a:4c:de:5e:dd:2e:6b:17:60:ee:97:a7:be:81: 8c:dc:ac:6c:de:b8:51:48:79:77:a1:a5:91:46:51:56:71:e2: fe:e1:9d:c6:77:3a:67:dd:65:64:33:78:1e:68:fc:47:13:a2: a8:28:b9:eb:50:a1:37:98:ae:32:7e:ba:62:69:8b:80:2f:91: 13:e4:9f:f5:4f:18:0b:4c:7a:3e:4f:18:45:33:86:92:90:e2: 49:b5:89:49:b8:19:dc:2b:35:f1:50:07:3b:72:cf:74:cf:e0: bc:7b:43:f7:bf:7c:17:fa:80:fa:cc:1c:68:e9:e1:2d:2f:67: af:50:94:c3:1a:d9:24:8d:b8:77:db:d7:aa:3b:eb:f8:01:1e: 78:f8:d8:8a:6c:b5:5e:d4:5b:60:53:24:f0:11:4e:22:c7:8b: c5:33:ec:da:55:03:34:da:6e:a1:50:4b:10:13:ca:81:c7:9a: c6:34:13:5c:a9:db:5b:11:ad:9c:3c:70:43:54:e0:27:cf:67: 3c:02:06:cc:d3:ca:f8:15:3d:45:f4:65:64:4e:bc:7f:62:13: 49:f0:80:23:d7:d8:a9:15:31:ef:af:c3:cc:a3:77:3b:cc:f8: 4a:c9:77:47 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMdgZI/gSAGqDmZSLOwwTFI6SQ7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJG QzZFOEM3QzAeFw0yNjA2MjMwODAxMzBaFw0yNzA2MjIwODA2MzBaMDMxMTAvBgNV BAMTKDA5NDMwRDBERTg1NjlEM0RDREQ1MkRDQkQzOTE5RTA5MkYwNkIyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+yCEb6k0z9d/bIUWJJwEbjyM SWSKGNI67FbQYGIde5SijCPAz2nbCEk69tOx3KcAPbEet7oL+p715UOoKrmWAGnQ e+hIuo0FCQ3KlViCsn2OF3fKejtn16/fjjXlPncZLz+wL8jxyhJWCTyfxuC+Ifu9 PsfhIh0IaSPAs7rUjYWkSuh+BPYwPGTZz1zblPwKYJOqg4+RvlwJCY5Rr2dfzIuW UP6RlvNhsRpxaQ/dRCWghqjnPfee1J2WhtCeUGiQSANK9Bt+X+GR8Bg7mpmd42KR Z15o/3RVbSU/Hxpn3Y+TZ1nds4T6LOhd8sKVsSLxY9COdvqvViGzuVpltYUBAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUCUMNDehWnT3N1S3L05GeCS8GsmAwHwYDVR0j BBgwFoAUv4V5ZckjHF71fLvnoJ2HwvxujHwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MjU1MjA2ODU5NTc1MS8wL0JGODU3OTY1QzkyMzFDNUVGNTdDQkJFN0EwOUQ4 N0MyRkM2RThDN0MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkY4NTc5NjVDOTIzMUM1RUY1N0NCQkU3QTA5RDg3QzJGQzZFOEM3Qy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMTY5MjU1MjA2ODU5NTc1MS8wLzMxMzYzMzJlMzYz MTJlMzIzMDMyMmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzYzMzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAKM9yjANBgkqhkiG9w0BAQsFAAOCAQEAnsJ81btVZ/+ABCtMDMML+Z/t 5SptcHpM3l7dLmsXYO6Xp76BjNysbN64UUh5d6GlkUZRVnHi/uGdxnc6Z91lZDN4 Hmj8RxOiqCi561ChN5iuMn66YmmLgC+RE+Sf9U8YC0x6Pk8YRTOGkpDiSbWJSbgZ 3Cs18VAHO3LPdM/gvHtD9798F/qA+swcaOnhLS9nr1CUwxrZJI24d9vXqjvr+AEe ePjYimy1XtRbYFMk8BFOIseLxTPs2lUDNNpuoVBLEBPKgceaxjQTXKnbWxGtnDxw Q1TgJ89nPAIGzNPK+BU9RfRlZE68f2ITSfCAI9fYqRUx76/DzKN3O8z4Ssl3Rw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:18 2026 by rpki-client