$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3230382e302f32302d3230203d3e203137393638.roa File: 3230332e39302e3230382e302f32302d3230203d3e203137393638.roa (raw, json) Hash identifier: G5e4P0x1OcG+mB1gCCR6XqDzY4OscMUvwHXmRDaBhQ0= Subject key identifier: 54:A9:CA:44:14:5F:6A:C3:B0:5D:88:04:89:0C:E3:AC:6C:3C:8F:0D Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 4F0AD3FA33A65B685922F46FCAAA70704B4A1B29 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3230382e302f32302d3230203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:39:44 +0000 ROA not before: Mon 29 Jun 2026 02:34:44 +0000 ROA not after: Mon 28 Jun 2027 02:39:44 +0000 asID: 17968 IP address blocks: 203.90.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0a:d3:fa:33:a6:5b:68:59:22:f4:6f:ca:aa:70:70:4b:4a:1b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:34:44 2026 GMT Not After : Jun 28 02:39:44 2027 GMT Subject: CN=54A9CA44145F6AC3B05D8804890CE3AC6C3C8F0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b8:88:c5:26:ed:4d:36:4e:d4:e5:d1:91:be: f5:2c:2b:20:c3:6a:df:de:84:70:0a:cb:0c:70:7a: 86:b1:1a:d4:29:9c:e4:44:fc:eb:4f:8f:ae:0a:2f: a6:38:f7:21:c2:ef:ab:20:2d:39:02:b5:c9:47:a4: 22:2a:ac:06:12:13:b3:bb:da:ce:6b:e3:49:08:df: 62:e1:84:09:b1:85:a4:77:d8:be:d0:a3:d5:10:df: 06:95:25:24:ac:ea:4b:99:37:d1:e8:9b:1d:33:c4: a2:89:e9:d6:41:21:1c:b0:46:ab:1a:91:d6:a0:e8: 36:f9:76:34:3d:54:d7:be:2d:32:ad:07:97:68:19: 7b:7f:16:cc:5c:d5:5e:c9:12:94:15:f8:2f:df:1c: 0f:8a:2b:9c:9c:15:73:19:b0:cb:ce:14:29:d5:1c: 40:47:c7:2f:1c:64:b9:97:3f:af:d2:31:13:a7:cc: 62:38:9e:5c:f2:88:45:e5:ea:36:c2:3e:91:24:3a: da:56:36:26:a4:d4:48:7d:5e:b1:45:b8:70:a2:5d: 1e:9a:66:70:12:34:ab:4a:1d:42:63:d5:ac:8c:14: f0:d0:87:d4:aa:52:7c:9d:c9:be:d9:8f:1b:9f:5c: 96:a4:99:b4:7e:03:32:0d:3e:08:98:68:56:c7:f5: 4a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:A9:CA:44:14:5F:6A:C3:B0:5D:88:04:89:0C:E3:AC:6C:3C:8F:0D X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3230332e39302e3230382e302f32302d3230203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 203.90.208.0/20 Signature Algorithm: sha256WithRSAEncryption a5:5c:05:cf:08:1f:4c:b0:1c:af:35:72:ad:e6:15:b2:0d:11: f9:88:0a:69:a2:0d:67:69:bc:2e:10:ad:fb:e5:e5:90:b9:98: a6:81:e5:44:cc:92:cf:5a:19:44:b7:28:fc:84:ce:7d:00:a8: 7f:bc:60:a2:65:ef:b8:81:53:3d:e5:8c:b4:b0:16:9a:dd:06: b1:58:da:ff:5b:33:64:96:14:14:d9:d1:e9:44:ac:94:02:db: 13:fc:df:65:64:d1:be:32:d3:ba:c9:b4:d8:75:47:37:73:ed: 71:76:fc:93:8e:06:63:bc:e6:c9:84:ef:08:1f:1d:9f:8f:63: 75:24:39:24:2f:52:46:11:06:ba:e7:48:37:a8:05:ba:aa:00: bc:cd:2f:8f:dd:4a:bb:dd:58:ac:2d:23:76:86:de:f4:e3:2f: f3:2f:13:e6:42:71:ef:12:de:66:6a:39:e3:67:83:9d:f1:3d: 73:77:c9:13:64:15:2d:13:f6:68:bc:13:19:dd:9f:ff:60:68: 58:86:28:b0:80:62:5e:57:19:ca:68:67:b3:67:eb:41:31:c6: f7:cf:71:44:ea:60:11:05:3b:61:44:a9:7f:82:b5:1d:c7:c4: 95:a4:43:f8:29:eb:e1:ed:22:83:59:b8:a2:4a:ed:01:43:ee: 72:a6:9f:84 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUTwrT+jOmW2hZIvRvyqpwcEtKGykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjM0NDRaFw0yNzA2MjgwMjM5NDRaMDMxMTAvBgNV BAMTKDU0QTlDQTQ0MTQ1RjZBQzNCMDVEODgwNDg5MENFM0FDNkMzQzhGMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDquIjFJu1NNk7U5dGRvvUsKyDD at/ehHAKywxweoaxGtQpnORE/OtPj64KL6Y49yHC76sgLTkCtclHpCIqrAYSE7O7 2s5r40kI32LhhAmxhaR32L7Qo9UQ3waVJSSs6kuZN9Homx0zxKKJ6dZBIRywRqsa kdag6Db5djQ9VNe+LTKtB5doGXt/Fsxc1V7JEpQV+C/fHA+KK5ycFXMZsMvOFCnV HEBHxy8cZLmXP6/SMROnzGI4nlzyiEXl6jbCPpEkOtpWNiak1Eh9XrFFuHCiXR6a ZnASNKtKHUJj1ayMFPDQh9SqUnydyb7ZjxufXJakmbR+AzINPgiYaFbH9UrdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUVKnKRBRfasOwXYgEiQzjrGw8jw0wHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMyMzAzMzJlMzkz MDJlMzIzMDM4MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBMta0DANBgkqhkiG9w0BAQsFAAOCAQEApVwFzwgfTLAcrzVyreYVsg0R +YgKaaINZ2m8LhCt++XlkLmYpoHlRMySz1oZRLco/ITOfQCof7xgomXvuIFTPeWM tLAWmt0GsVja/1szZJYUFNnR6USslALbE/zfZWTRvjLTusm02HVHN3PtcXb8k44G Y7zmyYTvCB8dn49jdSQ5JC9SRhEGuudIN6gFuqoAvM0vj91Ku91YrC0jdobe9OMv 8y8T5kJx7xLeZmo542eDnfE9c3fJE2QVLRP2aLwTGd2f/2BoWIYosIBiXlcZymhn s2frQTHG989xROpgEQU7YUSpf4K1HcfElaRD+Cnr4e0ig1m4okrtAUPucqafhA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:25 2026 by rpki-client