$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa File: 3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa (raw, json) Hash identifier: OFN0/HSCxNGj5m2gdLpfpQA9epBLP+waALaE3vyBbiU= Subject key identifier: 20:84:2F:0B:99:3A:89:0B:18:5C:8E:E7:4C:82:97:63:68:13:48:2A Certificate issuer: /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Certificate serial: 4688C1613BA0F9D0478A31085AE08E68C4912026 Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa Signing time: Tue 23 Jun 2026 06:53:46 +0000 ROA not before: Tue 23 Jun 2026 06:48:46 +0000 ROA not after: Tue 22 Jun 2027 06:53:46 +0000 asID: 23724 IP address blocks: 103.102.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:88:c1:61:3b:a0:f9:d0:47:8a:31:08:5a:e0:8e:68:c4:91:20:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Validity Not Before: Jun 23 06:48:46 2026 GMT Not After : Jun 22 06:53:46 2027 GMT Subject: CN=20842F0B993A890B185C8EE74C8297636813482A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:55:c7:41:02:3c:e4:f2:92:82:49:ce:bc:18: 8d:25:94:57:bc:35:c1:c8:d2:01:b8:70:4a:35:2a: 20:b5:2e:f9:85:59:bd:74:7f:27:cd:8b:e1:b7:fb: bb:3e:5d:31:05:4d:02:b1:e1:94:ce:3a:b5:85:df: 56:8b:b9:0d:2d:ce:2d:eb:e3:7f:76:cc:bf:9b:73: 20:25:3d:7b:79:a8:a6:4a:b1:ef:ee:41:0c:e8:9a: 80:34:c4:e5:2a:0a:b6:fc:be:cb:62:86:28:2b:f1: 12:bf:c1:dc:ab:d3:1a:5a:62:72:fb:5b:f2:a4:39: 67:61:88:81:4a:cf:92:01:73:6b:a3:13:7e:4d:ce: 56:1a:c4:43:f6:ba:53:57:31:30:ad:c1:a4:ab:c0: 0c:03:0e:44:29:61:28:af:5a:88:3b:86:6f:2e:65: c3:8a:8d:45:c1:61:e8:25:28:6f:71:a6:5b:8d:34: 05:3d:06:37:63:ef:c1:22:fe:d9:80:03:b7:46:68: ba:5f:97:e5:9a:ad:1b:20:e9:56:a7:8b:a9:10:72: 11:ac:ad:f9:c8:4e:61:b5:4b:29:8f:24:01:00:d2: 0a:92:7c:08:59:b1:f7:09:a1:6d:0e:a0:58:d2:e7: b2:9d:42:26:fe:35:b5:21:2c:4e:d3:45:e0:b9:eb: 31:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:84:2F:0B:99:3A:89:0B:18:5C:8E:E7:4C:82:97:63:68:13:48:2A X509v3 Authority Key Identifier: keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/3130332e3130322e3230302e302f32322d3232203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.102.200.0/22 Signature Algorithm: sha256WithRSAEncryption 58:75:c5:ac:18:17:64:8e:3e:d8:53:b4:da:d4:ba:bb:65:20: 6d:2b:cc:d6:c2:65:79:1a:6a:f4:6d:5e:44:53:be:ee:1f:45: 54:c6:61:37:a5:44:d2:52:24:68:11:6a:56:6a:14:74:79:1f: 37:cb:65:33:0a:06:11:5f:a0:b3:9a:8f:eb:24:36:0a:91:39: 34:62:44:49:56:e0:fb:d9:a3:04:06:65:fa:2e:ab:68:91:ef: 3a:21:e3:7f:29:a6:87:f3:d3:1b:a8:04:43:49:e3:63:b3:f2: 4c:74:85:2e:9b:0a:7f:85:b0:f5:17:63:cf:a2:0c:5b:79:ff: 35:12:ef:09:06:5d:d2:cc:fc:51:b5:c0:6f:d7:dd:a5:7d:ea: 10:5b:48:92:07:5d:dc:41:f1:88:c1:5b:5f:cb:fe:c1:b7:e0: b4:f7:7c:0a:ae:b2:a7:3c:f6:54:fb:62:3d:9b:d5:3e:5c:80: 29:be:a7:7d:4c:36:6d:c1:20:e4:bd:22:b3:de:33:08:a8:a3: 8a:1f:0c:7f:13:6e:c8:a3:a5:5c:f3:4e:38:5b:cb:c7:05:18: 4c:ac:30:f0:20:b6:41:a2:c3:00:ba:b3:58:bb:58:59:4b:6f: f2:b0:41:89:2c:74:d2:29:80:d0:28:f8:de:d7:1e:7d:14:31: a3:3a:05:53 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIURojBYTug+dBHijEIWuCOaMSRICYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1 NTJCNkEwNDAeFw0yNjA2MjMwNjQ4NDZaFw0yNzA2MjIwNjUzNDZaMDMxMTAvBgNV BAMTKDIwODQyRjBCOTkzQTg5MEIxODVDOEVFNzRDODI5NzYzNjgxMzQ4MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVcdBAjzk8pKCSc68GI0llFe8 NcHI0gG4cEo1KiC1LvmFWb10fyfNi+G3+7s+XTEFTQKx4ZTOOrWF31aLuQ0tzi3r 4392zL+bcyAlPXt5qKZKse/uQQzomoA0xOUqCrb8vstihigr8RK/wdyr0xpaYnL7 W/KkOWdhiIFKz5IBc2ujE35NzlYaxEP2ulNXMTCtwaSrwAwDDkQpYSivWog7hm8u ZcOKjUXBYeglKG9xpluNNAU9Bjdj78Ei/tmAA7dGaLpfl+WarRsg6Vani6kQchGs rfnITmG1SymPJAEA0gqSfAhZsfcJoW0OoFjS57KdQib+NbUhLE7TReC56zHRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUIIQvC5k6iQsYXI7nTIKXY2gTSCowHwYDVR0j BBgwFoAU81T5Ff1qDCDJ5iXCjTbEvFUragQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MzI1NzYwOTI0ODgwMy8wL0YzNTRGOTE1RkQ2QTBDMjBDOUU2MjVDMjhEMzZD NEJDNTUyQjZBMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMjE2OTMyNTc2MDkyNDg4MDMvMC8zMTMwMzMyZTMx MzAzMjJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdmyDANBgkqhkiG9w0BAQsFAAOCAQEAWHXFrBgXZI4+2FO02tS6 u2UgbSvM1sJleRpq9G1eRFO+7h9FVMZhN6VE0lIkaBFqVmoUdHkfN8tlMwoGEV+g s5qP6yQ2CpE5NGJESVbg+9mjBAZl+i6raJHvOiHjfymmh/PTG6gEQ0njY7PyTHSF LpsKf4Ww9Rdjz6IMW3n/NRLvCQZd0sz8UbXAb9fdpX3qEFtIkgdd3EHxiMFbX8v+ wbfgtPd8Cq6ypzz2VPtiPZvVPlyAKb6nfUw2bcEg5L0is94zCKijih8MfxNuyKOl XPNOOFvLxwUYTKww8CC2QaLDALqzWLtYWUtv8rBBiSx00imA0Cj43tcefRQxozoF Uw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:52 2026 by rpki-client