$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e3139322e302f31382d3138203d3e203137393638.roa File: 3131342e3139362e3139322e302f31382d3138203d3e203137393638.roa (raw, json) Hash identifier: W7kKtY6vtW25fGYV171jaDv8V0ny3TDQ6hzo6xvzI2A= Subject key identifier: 54:C0:73:1D:E1:53:35:AE:4F:79:91:35:94:ED:F7:DD:E7:1F:B1:68 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 2B7BBB2746255FE7133464A2BDC22381AC2FB302 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e3139322e302f31382d3138203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:52:17 +0000 ROA not before: Mon 29 Jun 2026 02:47:17 +0000 ROA not after: Mon 28 Jun 2027 02:52:17 +0000 asID: 17968 IP address blocks: 114.196.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:7b:bb:27:46:25:5f:e7:13:34:64:a2:bd:c2:23:81:ac:2f:b3:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:47:17 2026 GMT Not After : Jun 28 02:52:17 2027 GMT Subject: CN=54C0731DE15335AE4F79913594EDF7DDE71FB168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bf:97:72:f0:cc:d1:26:6f:d6:30:5b:1d:e8: 66:4d:0b:c6:cc:62:95:dc:2f:3a:66:03:fa:33:95: 50:f5:7e:05:5b:9d:0b:76:97:b4:c7:fa:ad:18:b1: 21:65:5f:33:84:e1:12:d4:75:2e:ea:79:cc:e6:8d: 6a:13:27:db:53:33:5b:2c:96:82:1f:79:62:db:bd: f4:e1:38:76:0f:e3:3b:b2:7e:bc:2f:9e:1a:79:1e: 0c:f9:06:5f:55:e3:14:8e:e9:23:4a:6e:91:c4:26: 9f:4e:ff:94:18:5b:13:2d:92:71:2b:5f:62:2d:3e: 50:12:cd:33:ff:6a:e2:83:cc:6f:b0:12:9d:f2:cb: 61:31:0c:9a:1c:66:6c:e7:30:fc:35:38:68:fc:19: 07:35:52:94:f3:ed:76:ce:cd:42:46:a7:e3:2b:7e: bf:60:ba:cc:e7:db:9b:36:0e:ad:d2:13:7b:e3:04: 9c:7b:66:01:5e:45:1e:de:6c:2a:41:19:47:3f:99: 59:38:38:c4:4e:ee:4e:62:0a:d4:c8:11:c6:62:95: b5:01:77:c0:5a:c2:dd:ea:48:fb:28:15:ce:0b:65: c2:88:32:49:fc:c5:18:e2:b7:af:de:c7:5b:44:41: eb:3a:7a:36:ff:c8:ef:72:55:38:f6:b8:9b:ad:cb: fa:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C0:73:1D:E1:53:35:AE:4F:79:91:35:94:ED:F7:DD:E7:1F:B1:68 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139362e3139322e302f31382d3138203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.196.192.0/18 Signature Algorithm: sha256WithRSAEncryption 9c:ee:8c:81:57:22:d3:54:d0:7b:16:3d:a5:33:00:2d:64:6a: be:6c:1b:02:3c:03:d2:9e:ad:78:53:8c:97:0f:e8:43:6f:69: 7d:cd:e5:f4:e3:a9:54:5f:ff:11:d0:18:ab:53:cd:f3:8e:e0: 84:7a:2c:67:39:99:6d:5a:95:93:03:f1:e1:66:99:74:fd:ad: 68:cd:ee:28:94:49:0d:34:60:01:74:4d:ab:ae:21:1b:ed:fb: f2:30:d9:02:9f:bd:13:8c:62:eb:87:22:7d:f2:92:bd:09:c5: 97:60:5e:f1:fd:42:13:95:1b:fe:92:c3:59:4b:a7:85:ec:56: b6:87:92:d8:9f:a0:0d:dc:2d:61:bf:f7:ee:9f:7d:7e:bf:79: 70:60:ee:80:27:84:08:8e:4f:42:9c:34:44:e3:72:07:bb:86: 64:98:99:92:e2:fe:93:b1:60:82:53:7d:72:33:ba:81:e8:de: e6:be:f3:7d:09:e9:24:12:3c:64:68:b5:f5:40:72:df:06:63: 95:7c:6e:80:38:63:1b:01:cd:0d:0e:97:5a:2a:df:83:d7:9c: 63:59:1e:f2:3a:08:f5:98:12:64:29:ce:b3:f7:6d:3a:f9:40: 7b:93:51:83:93:43:aa:55:73:52:a6:7a:df:94:aa:67:cf:14: 71:59:33:f5 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUK3u7J0YlX+cTNGSivcIjgawvswIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQ3MTdaFw0yNzA2MjgwMjUyMTdaMDMxMTAvBgNV BAMTKDU0QzA3MzFERTE1MzM1QUU0Rjc5OTEzNTk0RURGN0RERTcxRkIxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiv5dy8MzRJm/WMFsd6GZNC8bM YpXcLzpmA/ozlVD1fgVbnQt2l7TH+q0YsSFlXzOE4RLUdS7qeczmjWoTJ9tTM1ss loIfeWLbvfThOHYP4zuyfrwvnhp5Hgz5Bl9V4xSO6SNKbpHEJp9O/5QYWxMtknEr X2ItPlASzTP/auKDzG+wEp3yy2ExDJocZmznMPw1OGj8GQc1UpTz7XbOzUJGp+Mr fr9guszn25s2Dq3SE3vjBJx7ZgFeRR7ebCpBGUc/mVk4OMRO7k5iCtTIEcZilbUB d8Bawt3qSPsoFc4LZcKIMkn8xRjit6/ex1tEQes6ejb/yO9yVTj2uJuty/o1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUVMBzHeFTNa5PeZE1lO333ecfsWgwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMjM3ODU0MzYxNzEzMzc3NjUvMC8zMTMxMzQyZTMx MzkzNjJlMzEzOTMyMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzEzNzM5MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBnLEwDANBgkqhkiG9w0BAQsFAAOCAQEAnO6MgVci01TQexY9pTMA LWRqvmwbAjwD0p6teFOMlw/oQ29pfc3l9OOpVF//EdAYq1PN847ghHosZzmZbVqV kwPx4WaZdP2taM3uKJRJDTRgAXRNq64hG+378jDZAp+9E4xi64ciffKSvQnFl2Be 8f1CE5Ub/pLDWUunhexWtoeS2J+gDdwtYb/37p99fr95cGDugCeECI5PQpw0RONy B7uGZJiZkuL+k7FgglN9cjO6geje5r7zfQnpJBI8ZGi19UBy3wZjlXxugDhjGwHN DQ6XWirfg9ecY1ke8joI9ZgSZCnOs/dtOvlAe5NRg5NDqlVzUqZ635SqZ88UcVkz 9Q== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:13 2026 by rpki-client