$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3132382e302f31382d3138203d3e203137393638.roa File: 3131342e3139372e3132382e302f31382d3138203d3e203137393638.roa (raw, json) Hash identifier: 54JSVqGBdM9Zn6LkYnKwkhYhKb1lvgQGJMwEO6u+LZI= Subject key identifier: 87:16:F2:49:C5:E7:26:6E:A6:D8:2F:3E:91:56:82:71:24:19:A1:EB Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 68C5F13A868300539926757D3311D86ADE24DFF1 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3132382e302f31382d3138203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:52:17 +0000 ROA not before: Mon 29 Jun 2026 02:47:17 +0000 ROA not after: Mon 28 Jun 2027 02:52:17 +0000 asID: 17968 IP address blocks: 114.197.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c5:f1:3a:86:83:00:53:99:26:75:7d:33:11:d8:6a:de:24:df:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:47:17 2026 GMT Not After : Jun 28 02:52:17 2027 GMT Subject: CN=8716F249C5E7266EA6D82F3E915682712419A1EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:47:16:3b:e3:3b:ae:c8:1a:b5:04:25:de:a5: 91:b6:b6:1d:54:33:17:f3:de:06:bb:c9:19:26:7c: 5d:3a:c7:da:1a:d6:59:81:e5:66:56:85:79:b7:f0: 28:e5:83:2d:f9:1e:e4:59:18:c1:ee:16:ae:88:fe: 1f:49:5a:cc:ff:fe:e6:4b:30:45:c0:77:42:de:b9: 61:76:cf:4b:be:ed:08:8a:ce:4f:6a:2c:af:92:c3: ae:9a:cd:f6:6c:87:88:2f:25:17:51:6b:5a:4f:17: c1:ea:19:e4:c9:f8:6a:16:60:4a:ce:2e:b4:51:e2: 3a:ee:b1:81:cf:2c:75:0d:21:c9:8b:8a:a9:6e:43: ec:67:da:51:1b:9b:4c:d9:ee:e9:46:f9:df:f3:c5: 70:71:24:5a:f8:77:90:88:83:3f:0b:82:fa:f1:02: 39:0d:8f:3f:9a:73:8c:8d:0a:02:3c:43:56:74:c4: 9b:74:6d:f3:77:58:8d:35:94:14:dd:ef:2b:22:1f: 83:b7:f6:11:7c:c1:be:b9:d5:3c:af:16:8a:35:00: 5f:63:05:b5:7c:29:06:a3:5c:ac:d5:d1:a7:ed:a0: 57:21:46:98:4c:5e:0f:6a:37:3b:7b:e5:1d:99:ff: 7e:0f:66:ed:e6:4c:83:0d:cd:fe:eb:1c:16:0a:26: 34:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:16:F2:49:C5:E7:26:6E:A6:D8:2F:3E:91:56:82:71:24:19:A1:EB X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3131342e3139372e3132382e302f31382d3138203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 114.197.128.0/18 Signature Algorithm: sha256WithRSAEncryption 9f:3d:f8:1e:67:d6:31:43:a1:81:89:f0:a8:b2:8a:dc:99:c0: ba:b0:3f:31:6d:ae:52:ac:e7:b6:43:c0:4e:e8:ed:9f:82:a3: 79:42:7c:19:e0:bc:1b:fa:84:f1:e1:55:e7:60:7b:c2:c2:ca: 6a:1c:2c:37:76:1d:71:df:b3:36:77:8f:7d:4a:82:d6:8a:ef: c6:e3:ff:31:66:0b:28:50:47:52:3b:9a:07:37:2b:14:cc:8a: 16:ee:00:16:d9:3d:2d:76:07:26:d3:df:78:e8:21:27:e6:02: b7:fd:86:c7:40:ee:ce:b8:26:6f:2a:c8:15:94:de:63:81:7e: 57:81:50:e8:61:9b:86:7d:b9:15:53:73:02:02:2e:cb:0f:96: cd:8d:7d:e4:d1:37:b2:3c:6d:97:53:7d:5e:48:42:0d:87:59: 87:b5:05:32:d2:ed:b9:0c:d2:e5:f8:d2:cd:0f:30:09:ec:82: 2c:75:63:b2:f7:c8:41:d3:16:da:cf:e9:6b:fa:b8:d3:62:6c: 07:63:31:1f:b2:ee:f9:b2:9c:6f:1b:8a:6d:99:47:53:b1:a4: 9f:53:eb:3c:0e:c2:2e:5e:84:3b:c0:1b:a2:aa:ed:ea:be:f8: ba:4b:4b:a2:ec:6a:f2:4a:f0:41:d6:25:8f:30:41:2c:cd:21: dd:4b:77:47 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaMXxOoaDAFOZJnV9MxHYat4k3/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQ3MTdaFw0yNzA2MjgwMjUyMTdaMDMxMTAvBgNV BAMTKDg3MTZGMjQ5QzVFNzI2NkVBNkQ4MkYzRTkxNTY4MjcxMjQxOUExRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRxY74zuuyBq1BCXepZG2th1U Mxfz3ga7yRkmfF06x9oa1lmB5WZWhXm38Cjlgy35HuRZGMHuFq6I/h9JWsz//uZL MEXAd0LeuWF2z0u+7QiKzk9qLK+Sw66azfZsh4gvJRdRa1pPF8HqGeTJ+GoWYErO LrRR4jrusYHPLHUNIcmLiqluQ+xn2lEbm0zZ7ulG+d/zxXBxJFr4d5CIgz8Lgvrx AjkNjz+ac4yNCgI8Q1Z0xJt0bfN3WI01lBTd7ysiH4O39hF8wb651TyvFoo1AF9j BbV8KQajXKzV0aftoFchRphMXg9qNzt75R2Z/34PZu3mTIMNzf7rHBYKJjSzAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUhxbyScXnJm6m2C8+kVaCcSQZoeswHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMjM3ODU0MzYxNzEzMzc3NjUvMC8zMTMxMzQyZTMx MzkzNzJlMzEzMjM4MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzEzNzM5MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBnLFgDANBgkqhkiG9w0BAQsFAAOCAQEAnz34HmfWMUOhgYnwqLKK 3JnAurA/MW2uUqzntkPATujtn4KjeUJ8GeC8G/qE8eFV52B7wsLKahwsN3Ydcd+z NnePfUqC1orvxuP/MWYLKFBHUjuaBzcrFMyKFu4AFtk9LXYHJtPfeOghJ+YCt/2G x0DuzrgmbyrIFZTeY4F+V4FQ6GGbhn25FVNzAgIuyw+WzY195NE3sjxtl1N9XkhC DYdZh7UFMtLtuQzS5fjSzQ8wCeyCLHVjsvfIQdMW2s/pa/q402JsB2MxH7Lu+bKc bxuKbZlHU7Gkn1PrPA7CLl6EO8Aboqrt6r74uktLouxq8krwQdYljzBBLM0h3Ut3 Rw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:17 2026 by rpki-client