$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3132382e302f32302d3230203d3e203137393638.roa File: 3230332e39302e3132382e302f32302d3230203d3e203137393638.roa (raw, json) Hash identifier: zv1nEXr3eBwbIvTaTQCyA29TGSciE0J5btavgti0oBo= Subject key identifier: 54:F7:53:89:D0:DC:1D:A8:8D:8C:47:FB:0C:EF:0F:BC:12:FF:07:52 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 40B31966BA8CD3B3744C956E676F875BE413F2AF Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3132382e302f32302d3230203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:39:44 +0000 ROA not before: Mon 29 Jun 2026 02:34:44 +0000 ROA not after: Mon 28 Jun 2027 02:39:44 +0000 asID: 17968 IP address blocks: 203.90.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b3:19:66:ba:8c:d3:b3:74:4c:95:6e:67:6f:87:5b:e4:13:f2:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:34:44 2026 GMT Not After : Jun 28 02:39:44 2027 GMT Subject: CN=54F75389D0DC1DA88D8C47FB0CEF0FBC12FF0752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:37:b1:7a:59:df:3a:54:a1:ed:4d:7b:d4:4c: a4:eb:c1:a6:f6:ee:3a:78:28:56:b0:65:08:a9:c4: dc:5f:cf:20:e6:af:91:9c:f6:99:44:55:b7:cb:aa: 47:5b:66:c5:7f:c1:89:bd:dc:9a:5f:eb:21:7c:b6: 6d:97:67:e9:9c:66:c6:d0:b5:dd:e2:51:bb:cb:18: d1:e8:9d:e2:c2:60:d3:b9:45:bb:12:67:bb:34:59: 2d:69:59:58:7e:77:3c:df:a6:d7:00:37:68:8b:f5: dd:3b:2a:41:6a:01:4c:52:9e:65:1f:5c:a5:eb:25: fb:d9:b3:4c:10:22:3c:fe:b1:4a:11:19:0c:c5:1f: 0d:c3:d0:60:0a:e8:58:2f:92:82:54:8e:b0:6c:68: 8d:72:0d:a8:3e:f6:9f:d1:90:c8:36:d5:40:22:08: 74:20:5a:83:d6:e2:72:3c:b1:19:98:d4:68:f3:47: 57:63:de:4e:ca:99:00:f2:27:c7:66:eb:d5:ba:ef: 8d:32:35:25:e5:22:c8:28:d9:53:c2:53:0b:aa:43: aa:98:a4:61:76:f1:d5:8a:e8:67:81:40:55:29:4b: 48:1d:a1:9a:6a:b2:3b:76:84:37:bb:61:bd:61:19: cf:0b:64:db:d3:e9:12:91:13:f6:54:b4:40:f9:02: 81:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:F7:53:89:D0:DC:1D:A8:8D:8C:47:FB:0C:EF:0F:BC:12:FF:07:52 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3132382e302f32302d3230203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.90.128.0/20 Signature Algorithm: sha256WithRSAEncryption 2e:3a:81:57:20:e5:e3:0a:c0:54:3c:66:b7:1e:cb:9c:05:21: 0f:57:fc:1b:f2:78:0a:d6:7f:78:06:8a:23:4d:c0:04:87:71: 63:89:59:5c:90:cd:84:50:1c:38:a3:fe:28:cc:c0:21:69:81: ef:50:5a:12:c2:64:12:ef:c7:3e:95:6d:74:71:73:e0:5c:b7: ac:90:6f:dc:30:08:b2:4f:6b:48:b9:69:8e:dc:8c:2f:25:53: be:fd:e9:b0:11:0d:17:92:bc:2c:76:db:02:a0:de:34:19:36: bf:0f:09:5c:5c:42:76:cd:c0:54:2e:a1:56:06:66:5f:4e:5b: a2:99:18:03:cb:a2:d0:6e:4a:01:e6:47:04:39:6f:6d:11:a7: d7:9b:35:ee:26:36:33:b7:38:d0:e3:44:d1:7b:4e:d5:53:73: fd:d8:b4:aa:a6:ee:83:b5:16:85:5e:39:e6:12:49:b7:f3:1a: 44:f6:b7:69:b3:97:43:63:00:a8:db:17:aa:bb:ac:91:99:3a: f9:86:69:c9:e0:f7:76:e0:ea:f8:0c:13:6f:b1:c2:23:2d:73: 01:ff:a2:c9:7a:56:fb:78:8e:6b:59:23:76:85:76:fd:60:3d: 37:e4:cc:bd:67:7b:4a:d3:ce:26:8c:89:8d:18:81:be:c5:47: 38:02:e6:12 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUQLMZZrqM07N0TJVuZ2+HW+QT8q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjM0NDRaFw0yNzA2MjgwMjM5NDRaMDMxMTAvBgNV BAMTKDU0Rjc1Mzg5RDBEQzFEQTg4RDhDNDdGQjBDRUYwRkJDMTJGRjA3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6N7F6Wd86VKHtTXvUTKTrwab2 7jp4KFawZQipxNxfzyDmr5Gc9plEVbfLqkdbZsV/wYm93Jpf6yF8tm2XZ+mcZsbQ td3iUbvLGNHoneLCYNO5RbsSZ7s0WS1pWVh+dzzfptcAN2iL9d07KkFqAUxSnmUf XKXrJfvZs0wQIjz+sUoRGQzFHw3D0GAK6FgvkoJUjrBsaI1yDag+9p/RkMg21UAi CHQgWoPW4nI8sRmY1GjzR1dj3k7KmQDyJ8dm69W6740yNSXlIsgo2VPCUwuqQ6qY pGF28dWK6GeBQFUpS0gdoZpqsjt2hDe7Yb1hGc8LZNvT6RKRE/ZUtED5AoFhAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUVPdTidDcHaiNjEf7DO8PvBL/B1IwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMyMzAzMzJlMzkz MDJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBMtagDANBgkqhkiG9w0BAQsFAAOCAQEALjqBVyDl4wrAVDxmtx7LnAUh D1f8G/J4CtZ/eAaKI03ABIdxY4lZXJDNhFAcOKP+KMzAIWmB71BaEsJkEu/HPpVt dHFz4Fy3rJBv3DAIsk9rSLlpjtyMLyVTvv3psBENF5K8LHbbAqDeNBk2vw8JXFxC ds3AVC6hVgZmX05bopkYA8ui0G5KAeZHBDlvbRGn15s17iY2M7c40ONE0XtO1VNz /di0qqbug7UWhV455hJJt/MaRPa3abOXQ2MAqNsXqruskZk6+YZpyeD3duDq+AwT b7HCIy1zAf+iyXpW+3iOa1kjdoV2/WA9N+TMvWd7StPOJoyJjRiBvsVHOALmEg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:23 2026 by rpki-client