$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e3234362e3136302e302f32302d3230203d3e203137393638.roa File: 3231382e3234362e3136302e302f32302d3230203d3e203137393638.roa (raw, json) Hash identifier: 9B+984A7vRn6Tj9mIvMY7j0pw0HBvtY3M84w9yrL3Ng= Subject key identifier: 9C:12:38:A9:04:52:E3:92:C0:1A:B6:6B:7C:E2:9F:EB:56:FA:25:D6 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 3F0667BB1FAE3BEE2C7FA7F97AE2DC8A09AA9A3A Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e3234362e3136302e302f32302d3230203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:43:42 +0000 ROA not before: Mon 29 Jun 2026 02:38:42 +0000 ROA not after: Mon 28 Jun 2027 02:43:42 +0000 asID: 17968 IP address blocks: 218.246.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:06:67:bb:1f:ae:3b:ee:2c:7f:a7:f9:7a:e2:dc:8a:09:aa:9a:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:38:42 2026 GMT Not After : Jun 28 02:43:42 2027 GMT Subject: CN=9C1238A90452E392C01AB66B7CE29FEB56FA25D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:73:34:38:75:1c:dd:a4:ae:2f:db:66:c5:32: 14:4a:a7:c7:f9:af:4d:12:0d:82:23:23:71:fe:af: 8a:7f:d8:b1:72:b1:30:76:3f:6c:75:ae:4d:44:15: 84:fb:f7:75:fe:87:52:37:3a:66:15:a1:09:a0:50: 5a:72:2c:7a:34:63:76:e7:15:4b:09:ed:6b:d9:77: b1:71:0c:b9:c5:79:19:c6:a5:85:ba:98:43:af:52: bb:1c:8d:62:dd:f8:0e:96:60:6b:d6:41:0c:84:42: db:33:41:8c:f8:31:ff:43:bc:db:29:70:47:80:b8: b6:f1:aa:53:b2:2c:c8:40:b3:10:a8:b0:1b:c0:c0: 12:4a:5d:85:54:63:f8:59:e2:79:b4:7d:fc:3d:20: 29:2a:f3:07:cc:9a:f9:3e:fe:ba:36:8e:7f:cb:fa: de:4d:90:8c:52:60:48:0b:44:4a:b3:6c:b4:43:d0: c9:06:65:47:57:97:47:ff:3a:b8:4b:22:ad:72:ee: b2:1d:e4:ac:3c:b8:b5:20:22:3e:7a:74:c4:10:77: ae:68:01:7d:82:5c:a6:09:5f:ca:29:73:fa:5c:33: d5:f0:d8:81:84:8c:08:6e:8a:5f:b1:a0:1c:6c:82: 0a:4d:fb:58:a3:cf:db:d5:58:3e:0a:5e:93:df:4d: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:12:38:A9:04:52:E3:92:C0:1A:B6:6B:7C:E2:9F:EB:56:FA:25:D6 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e3234362e3136302e302f32302d3230203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.246.160.0/20 Signature Algorithm: sha256WithRSAEncryption 45:b3:a8:68:97:7d:5d:2e:09:e7:d2:1d:74:11:bc:ba:32:d4: be:9f:6f:b3:33:66:b1:60:7b:e9:e7:8d:a6:bb:ef:83:f3:d1: 87:c1:48:fa:f8:f4:2d:ba:25:16:7e:5e:97:fd:c6:ed:af:e5: d2:30:f3:0b:7c:6f:74:59:93:db:4b:42:e9:b9:82:a3:82:60: c8:2e:1a:9a:54:b0:1b:b1:11:fa:9a:c8:aa:f8:ad:20:f1:c8: de:a2:ae:a9:35:67:7c:ea:d5:38:0b:a2:59:51:a1:7f:b3:0c: 42:0e:11:fb:5f:a7:89:98:2b:3a:aa:a7:e0:e8:cc:8a:19:18: f3:ce:eb:f4:b4:d5:c3:e9:84:ed:cd:db:81:2e:51:9c:a8:7a: 32:f0:91:1e:20:2f:c1:f2:ce:b1:5d:86:3c:26:2e:46:1b:55: e8:3b:68:7f:e8:9d:13:9c:2c:91:21:a4:61:cf:47:98:f7:39: ca:a1:6f:19:93:57:f0:37:9b:f7:41:eb:d0:5c:d7:29:62:23: f4:72:8f:6a:cc:e3:e3:a0:cd:6d:6d:d5:d9:98:1b:71:3f:5c: 30:fa:f3:d7:d1:1c:4d:60:f2:03:f8:88:99:03:4f:6b:5a:05: a4:f7:ba:fd:07:c4:d2:87:b4:bd:4d:38:af:69:c6:56:ee:ec: 8a:04:5a:5c -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPwZnux+uO+4sf6f5euLcigmqmjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjM4NDJaFw0yNzA2MjgwMjQzNDJaMDMxMTAvBgNV BAMTKDlDMTIzOEE5MDQ1MkUzOTJDMDFBQjY2QjdDRTI5RkVCNTZGQTI1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxczQ4dRzdpK4v22bFMhRKp8f5 r00SDYIjI3H+r4p/2LFysTB2P2x1rk1EFYT793X+h1I3OmYVoQmgUFpyLHo0Y3bn FUsJ7WvZd7FxDLnFeRnGpYW6mEOvUrscjWLd+A6WYGvWQQyEQtszQYz4Mf9DvNsp cEeAuLbxqlOyLMhAsxCosBvAwBJKXYVUY/hZ4nm0ffw9ICkq8wfMmvk+/ro2jn/L +t5NkIxSYEgLREqzbLRD0MkGZUdXl0f/OrhLIq1y7rId5Kw8uLUgIj56dMQQd65o AX2CXKYJX8opc/pcM9Xw2IGEjAhuil+xoBxsggpN+1ijz9vVWD4KXpPfTYt/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUnBI4qQRS45LAGrZrfOKf61b6JdYwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMjM3ODU0MzYxNzEzMzc3NjUvMC8zMjMxMzgyZTMy MzQzNjJlMzEzNjMwMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM5MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBNr2oDANBgkqhkiG9w0BAQsFAAOCAQEARbOoaJd9XS4J59IddBG8 ujLUvp9vszNmsWB76eeNprvvg/PRh8FI+vj0LbolFn5el/3G7a/l0jDzC3xvdFmT 20tC6bmCo4JgyC4amlSwG7ER+prIqvitIPHI3qKuqTVnfOrVOAuiWVGhf7MMQg4R +1+niZgrOqqn4OjMihkY887r9LTVw+mE7c3bgS5RnKh6MvCRHiAvwfLOsV2GPCYu RhtV6Dtof+idE5wskSGkYc9HmPc5yqFvGZNX8Deb90Hr0FzXKWIj9HKPaszj46DN bW3V2ZgbcT9cMPrz19EcTWDyA/iImQNPa1oFpPe6/QfE0oe0vU04r2nGVu7sigRa XA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:46 2026 by rpki-client