$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e3234362e3137362e302f32302d3230203d3e203137393638.roa File: 3231382e3234362e3137362e302f32302d3230203d3e203137393638.roa (raw, json) Hash identifier: L2DsK3QYM1QLmaJ1Z8v00U1HOiTNbSfcBmLPyc1trpo= Subject key identifier: 84:B4:41:F0:67:33:EF:D9:7F:B2:C5:BF:23:43:1F:07:E8:2C:B2:9D Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 4329CAB525409D532E34F253C1C447BFC1E3D323 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e3234362e3137362e302f32302d3230203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:43:42 +0000 ROA not before: Mon 29 Jun 2026 02:38:42 +0000 ROA not after: Mon 28 Jun 2027 02:43:42 +0000 asID: 17968 IP address blocks: 218.246.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:29:ca:b5:25:40:9d:53:2e:34:f2:53:c1:c4:47:bf:c1:e3:d3:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:38:42 2026 GMT Not After : Jun 28 02:43:42 2027 GMT Subject: CN=84B441F06733EFD97FB2C5BF23431F07E82CB29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f4:6b:13:69:ea:39:36:20:b5:82:54:66:a2: a9:0a:f2:0e:a9:e2:84:80:b1:31:7d:03:e3:27:fa: 78:e6:42:6d:17:2d:fb:68:ef:a7:48:3a:f3:df:88: 68:0e:f8:4b:9f:b4:b4:d1:8f:76:e7:0e:f8:ed:c4: b5:41:6c:24:26:1d:e9:c5:9d:6c:1c:ab:5c:be:74: aa:34:e1:12:e1:76:33:5c:e4:d6:4d:ba:ea:58:4c: fa:ae:0c:6c:f2:bb:85:9b:bd:d6:23:40:34:0c:5f: 2e:dd:ec:47:6d:e2:a5:35:7f:f6:6a:d3:23:2d:1c: 85:42:da:08:bb:3f:cc:98:f0:2b:b1:7c:7f:25:cd: f3:e4:bb:ed:1b:69:64:8b:f7:05:79:65:f7:0c:7c: 12:92:02:79:cc:13:3e:39:f3:1a:3f:24:31:d6:ba: 99:e4:b2:33:af:23:2b:05:ae:80:6a:ce:c8:4b:8f: 8a:97:24:d5:f0:fc:3c:e9:03:ec:0d:f5:9e:ac:6e: 9e:d4:e2:75:98:4f:d7:8a:aa:bd:9a:d1:8f:f2:44: 6f:6c:10:d4:4d:76:76:62:70:ea:e3:2f:55:ae:bf: 4d:a0:b2:29:ec:6f:b4:60:07:0e:47:d4:ff:48:47: cf:49:a3:47:25:45:48:44:e6:5b:a7:63:2b:18:3e: 33:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B4:41:F0:67:33:EF:D9:7F:B2:C5:BF:23:43:1F:07:E8:2C:B2:9D X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231382e3234362e3137362e302f32302d3230203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 218.246.176.0/20 Signature Algorithm: sha256WithRSAEncryption 83:d1:6f:12:c0:89:75:26:e5:7d:6b:84:e7:11:25:37:a8:86: ae:17:a6:41:67:3f:30:e8:71:ab:4c:f0:1f:ab:50:eb:0e:48: 60:5f:88:aa:59:19:cd:a2:48:dd:99:c6:fc:68:90:ea:9c:16: 1c:99:df:3b:93:04:06:bd:28:11:94:e4:e8:41:25:fc:b8:d6: 48:f7:e6:0e:95:99:e0:4b:bb:c6:23:72:42:6d:b7:20:ce:dc: 24:d5:75:2a:90:19:9d:cf:aa:65:d0:d2:63:0a:54:27:d1:0d: f5:93:7c:28:12:73:1f:ad:0b:81:49:1b:40:85:23:78:ea:d5: 13:67:16:c7:81:98:51:ea:ec:51:32:c6:40:5a:37:76:9c:a3: 2f:93:60:3b:0c:b6:cc:66:e6:28:cc:91:5f:9e:54:d9:8d:25: e4:1d:a8:69:2d:45:4e:25:28:3c:a4:a9:00:fc:3c:f1:cf:b4: 4b:ed:a5:8d:16:a2:ab:3d:89:53:7c:a5:0e:fc:7b:b9:7a:be: c6:77:95:65:4b:80:a9:a8:c6:4b:58:6f:7c:aa:00:6a:f8:ad: 50:b5:2e:98:c3:b5:bb:d0:b2:03:b6:04:bc:95:3d:d4:89:e7: 26:d2:cd:61:0d:31:f4:4b:61:d6:b3:e1:17:9a:ef:65:9a:4b: aa:af:a3:bf -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQynKtSVAnVMuNPJTwcRHv8Hj0yMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjM4NDJaFw0yNzA2MjgwMjQzNDJaMDMxMTAvBgNV BAMTKDg0QjQ0MUYwNjczM0VGRDk3RkIyQzVCRjIzNDMxRjA3RTgyQ0IyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu9GsTaeo5NiC1glRmoqkK8g6p 4oSAsTF9A+Mn+njmQm0XLfto76dIOvPfiGgO+EuftLTRj3bnDvjtxLVBbCQmHenF nWwcq1y+dKo04RLhdjNc5NZNuupYTPquDGzyu4WbvdYjQDQMXy7d7Edt4qU1f/Zq 0yMtHIVC2gi7P8yY8CuxfH8lzfPku+0baWSL9wV5ZfcMfBKSAnnMEz458xo/JDHW upnksjOvIysFroBqzshLj4qXJNXw/DzpA+wN9Z6sbp7U4nWYT9eKqr2a0Y/yRG9s ENRNdnZicOrjL1Wuv02gsinsb7RgBw5H1P9IR89Jo0clRUhE5lunYysYPjOlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUhLRB8Gcz79l/ssW/I0MfB+gssp0wHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMjM3ODU0MzYxNzEzMzc3NjUvMC8zMjMxMzgyZTMy MzQzNjJlMzEzNzM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM5MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEBNr2sDANBgkqhkiG9w0BAQsFAAOCAQEAg9FvEsCJdSblfWuE5xEl N6iGrhemQWc/MOhxq0zwH6tQ6w5IYF+IqlkZzaJI3ZnG/GiQ6pwWHJnfO5MEBr0o EZTk6EEl/LjWSPfmDpWZ4Eu7xiNyQm23IM7cJNV1KpAZnc+qZdDSYwpUJ9EN9ZN8 KBJzH60LgUkbQIUjeOrVE2cWx4GYUersUTLGQFo3dpyjL5NgOwy2zGbmKMyRX55U 2Y0l5B2oaS1FTiUoPKSpAPw88c+0S+2ljRaiqz2JU3ylDvx7uXq+xneVZUuAqajG S1hvfKoAavitULUumMO1u9CyA7YEvJU91InnJtLNYQ0x9Eth1rPhF5rvZZpLqq+j vw== -----END CERTIFICATE-----Generated at Tue Jul 14 21:56:30 2026 by rpki-client