$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3139322e302f31392d3139203d3e203137393638.roa File: 3132352e35382e3139322e302f31392d3139203d3e203137393638.roa (raw, json) Hash identifier: OHB02xK2hpimcs4dMYYpxB41JL1vTyg3NPWbBWS9f1A= Subject key identifier: D1:B1:67:99:D8:FF:95:22:89:46:AB:10:D3:46:3A:C8:6C:53:81:06 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 25A83E8284F17998C0F5B7B4B5AA10CB5AB6A947 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3139322e302f31392d3139203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:53:33 +0000 ROA not before: Mon 29 Jun 2026 02:48:33 +0000 ROA not after: Mon 28 Jun 2027 02:53:33 +0000 asID: 17968 IP address blocks: 125.58.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a8:3e:82:84:f1:79:98:c0:f5:b7:b4:b5:aa:10:cb:5a:b6:a9:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:48:33 2026 GMT Not After : Jun 28 02:53:33 2027 GMT Subject: CN=D1B16799D8FF95228946AB10D3463AC86C538106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7a:2d:1f:ab:0b:20:9a:c6:b0:1f:86:d4:be: fe:e3:df:65:6b:9b:2c:d9:ca:49:c1:94:2b:7f:02: b8:ae:cd:b9:36:85:e6:18:2f:69:a2:57:ca:55:93: ed:fd:62:f4:76:73:08:10:9d:55:99:65:6d:ea:25: 4b:51:ed:40:0e:bb:8f:e4:98:d0:e1:85:3b:e1:d8: c2:ef:55:bc:21:b2:19:93:76:2b:40:6d:5b:f8:62: 80:e6:7d:9b:2f:f2:08:1b:31:7d:8e:41:dc:1e:39: 4b:e6:f7:04:13:ac:5f:94:9f:56:34:4c:32:ad:fc: 3a:11:d1:aa:96:11:36:1a:76:05:31:af:ba:95:cb: b2:61:60:47:86:7c:a0:7f:7b:11:1a:c3:0d:be:e0: 5a:5b:5e:ef:72:0a:0f:5f:28:e2:ba:4a:c5:62:5a: 3b:12:dd:1c:cf:64:f5:69:2c:f3:8a:25:0d:bf:1a: 56:91:90:46:fc:53:3a:8e:17:a0:09:ab:8c:94:81: 4c:7c:69:c9:2a:de:54:57:8f:b2:17:b7:fb:35:c7: 7b:34:79:48:0f:c7:aa:fe:75:e4:36:f1:7e:57:4f: 82:d8:76:d6:4f:a0:ef:71:0c:b5:7c:1d:8b:76:7c: 9f:39:4e:fd:5a:94:46:4b:76:53:f8:84:e4:6b:a7: 02:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B1:67:99:D8:FF:95:22:89:46:AB:10:D3:46:3A:C8:6C:53:81:06 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3132352e35382e3139322e302f31392d3139203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 125.58.192.0/19 Signature Algorithm: sha256WithRSAEncryption 89:1d:51:45:23:0c:4a:53:1b:3b:87:96:4c:2c:c9:ae:b7:72: 8a:cc:00:0b:25:a4:4e:76:09:a3:96:fc:51:7e:e1:55:88:81: d8:c0:79:8b:21:60:ca:6f:ef:33:4c:69:67:fb:2a:ff:70:90: 79:b0:c8:cf:2c:b7:9f:22:88:41:3e:4c:d4:4c:fd:c9:a2:e3: b2:f0:40:89:4e:25:ec:c6:f8:20:c2:cf:8b:05:8c:3a:05:c6: a5:fd:3c:f1:e5:73:a3:a6:cc:7c:fb:19:6d:69:df:a7:e3:67: 22:42:2d:c9:af:8b:2e:82:33:04:d1:65:b0:5f:c1:74:da:2b: 79:46:34:cc:34:9f:c8:0c:e3:6d:e0:aa:5a:73:e8:98:06:fb: d3:d2:df:59:da:e3:e6:dc:64:8d:89:99:be:80:ea:59:c3:ab: 26:5e:c9:fc:e6:7e:b8:c5:44:3a:f7:d7:09:01:b7:cb:c0:1a: ad:30:f3:49:24:67:5b:b4:e1:f4:1e:5a:e8:d4:e4:6a:b1:57: e7:5d:a2:54:35:60:73:62:34:70:e5:d1:42:ed:8e:3b:66:4a: c3:1b:82:7f:71:15:9b:7e:12:54:3a:d8:7d:0f:a9:31:04:35: 0c:24:35:7a:87:e0:b5:f9:7a:81:6f:7b:63:3b:46:61:63:40: 00:c1:e1:0b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUJag+goTxeZjA9be0taoQy1q2qUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQ4MzNaFw0yNzA2MjgwMjUzMzNaMDMxMTAvBgNV BAMTKEQxQjE2Nzk5RDhGRjk1MjI4OTQ2QUIxMEQzNDYzQUM4NkM1MzgxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSei0fqwsgmsawH4bUvv7j32Vr myzZyknBlCt/Ariuzbk2heYYL2miV8pVk+39YvR2cwgQnVWZZW3qJUtR7UAOu4/k mNDhhTvh2MLvVbwhshmTditAbVv4YoDmfZsv8ggbMX2OQdweOUvm9wQTrF+Un1Y0 TDKt/DoR0aqWETYadgUxr7qVy7JhYEeGfKB/exEaww2+4FpbXu9yCg9fKOK6SsVi WjsS3RzPZPVpLPOKJQ2/GlaRkEb8UzqOF6AJq4yUgUx8ackq3lRXj7IXt/s1x3s0 eUgPx6r+deQ28X5XT4LYdtZPoO9xDLV8HYt2fJ85Tv1alEZLdlP4hORrpwLnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU0bFnmdj/lSKJRqsQ00Y6yGxTgQYwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMxMzIzNTJlMzUz ODJlMzEzOTMyMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBX06wDANBgkqhkiG9w0BAQsFAAOCAQEAiR1RRSMMSlMbO4eWTCzJrrdy iswACyWkTnYJo5b8UX7hVYiB2MB5iyFgym/vM0xpZ/sq/3CQebDIzyy3nyKIQT5M 1Ez9yaLjsvBAiU4l7Mb4IMLPiwWMOgXGpf088eVzo6bMfPsZbWnfp+NnIkItya+L LoIzBNFlsF/BdNoreUY0zDSfyAzjbeCqWnPomAb709LfWdrj5txkjYmZvoDqWcOr Jl7J/OZ+uMVEOvfXCQG3y8AarTDzSSRnW7Th9B5a6NTkarFX512iVDVgc2I0cOXR Qu2OO2ZKwxuCf3EVm34SVDrYfQ+pMQQ1DCQ1eofgtfl6gW97YztGYWNAAMHhCw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:43 2026 by rpki-client