$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231392e3233352e39362e302f31392d3139203d3e203137393638.roa File: 3231392e3233352e39362e302f31392d3139203d3e203137393638.roa (raw, json) Hash identifier: QxGaNsj8Yd2myUvUmeZlLfvCfH3+1bhPtdeFQgRNznQ= Subject key identifier: 2A:0B:30:91:D1:D0:CF:D9:3F:37:B8:7E:16:B1:4A:94:D0:00:7F:81 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 302C363801CB060908BF04B2598FC8A2D54C0A22 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231392e3233352e39362e302f31392d3139203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:43:42 +0000 ROA not before: Mon 29 Jun 2026 02:38:42 +0000 ROA not after: Mon 28 Jun 2027 02:43:42 +0000 asID: 17968 IP address blocks: 219.235.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:2c:36:38:01:cb:06:09:08:bf:04:b2:59:8f:c8:a2:d5:4c:0a:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:38:42 2026 GMT Not After : Jun 28 02:43:42 2027 GMT Subject: CN=2A0B3091D1D0CFD93F37B87E16B14A94D0007F81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:d6:20:0c:90:56:c5:13:cc:9b:1b:38:16:fd: 7b:aa:a7:0a:e1:a2:e8:90:61:7f:5b:26:b5:b4:de: f8:20:52:67:8e:01:84:5f:f0:22:26:0f:b6:11:ca: b3:26:bc:50:60:ab:d8:8b:d5:61:d6:3b:fc:4c:fc: 39:83:4a:6e:f1:00:5e:c6:4a:23:2b:48:2b:83:67: 86:42:b9:c4:b4:67:dc:7f:90:e4:84:4f:89:24:ac: d8:33:ee:99:98:d0:1a:8e:3a:0d:50:79:5f:f7:e1: 08:71:42:ba:ef:63:5b:1b:66:98:59:b1:05:b9:9e: 58:94:b1:f1:5c:52:20:62:e2:92:28:64:c0:6a:ea: aa:09:38:63:dd:00:97:27:9c:bc:c1:45:94:10:42: c4:7f:9d:d0:e3:84:e1:3d:eb:1a:53:89:1b:73:42: fa:40:b7:74:f4:cd:f5:f1:e6:a0:55:23:c7:cb:8f: 6c:61:a7:70:7b:71:77:93:38:2f:55:53:3f:e7:fe: 20:22:00:74:53:16:a4:99:85:f4:8c:37:c7:c2:b1: 52:cf:5b:32:77:c7:54:2c:50:14:52:5b:cf:27:4a: 6a:f6:12:b1:a1:8b:3d:d2:82:59:90:91:a1:4c:74: c3:7b:7e:ff:e3:cb:40:48:4d:90:a1:d8:be:94:e9: 9f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0B:30:91:D1:D0:CF:D9:3F:37:B8:7E:16:B1:4A:94:D0:00:7F:81 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/3231392e3233352e39362e302f31392d3139203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.235.96.0/19 Signature Algorithm: sha256WithRSAEncryption 62:41:82:8e:97:ff:5f:e9:9a:93:e4:be:75:a2:61:be:6b:6b: 93:76:b3:d1:fc:56:92:25:7a:00:cb:af:9f:6c:01:c8:75:53: e0:47:c7:07:ed:3a:8f:3f:31:58:28:ee:2a:40:00:0e:da:d1: 3b:32:8f:4d:3d:ea:15:2a:20:7e:b9:01:c2:15:56:fd:4d:9b: a7:0e:a1:3b:c2:87:9c:7c:42:54:2a:d1:12:9d:1f:a3:e9:61: 48:6e:ec:0e:87:28:34:4b:13:5f:fb:f3:f7:5c:f8:72:e8:b9: 30:2b:9a:2e:d6:18:df:34:a9:87:53:fa:24:87:2c:b3:55:94: 88:71:b7:e2:7c:54:d7:80:d6:25:3e:ef:89:66:be:ed:e2:1a: f5:33:98:ee:5e:41:0b:bd:ef:2f:b6:41:ef:4a:d9:04:37:85: 85:51:22:1e:d1:50:03:77:be:90:ce:3f:f3:6c:1f:f3:c4:a1: 18:21:e5:f5:0f:65:39:d3:81:27:0b:04:47:1b:3f:fc:49:33: f4:37:0b:2b:85:43:1f:5b:11:bb:8f:92:8b:23:b8:a1:1b:ae: 33:14:74:0a:86:0f:4b:43:a2:48:e5:61:fe:ca:93:ac:d4:62: 51:be:bb:97:a9:17:96:5a:ca:86:31:3f:42:af:25:39:c7:97: 3f:d9:5b:34 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUMCw2OAHLBgkIvwSyWY/IotVMCiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjM4NDJaFw0yNzA2MjgwMjQzNDJaMDMxMTAvBgNV BAMTKDJBMEIzMDkxRDFEMENGRDkzRjM3Qjg3RTE2QjE0QTk0RDAwMDdGODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu1iAMkFbFE8ybGzgW/Xuqpwrh ouiQYX9bJrW03vggUmeOAYRf8CImD7YRyrMmvFBgq9iL1WHWO/xM/DmDSm7xAF7G SiMrSCuDZ4ZCucS0Z9x/kOSET4kkrNgz7pmY0BqOOg1QeV/34QhxQrrvY1sbZphZ sQW5nliUsfFcUiBi4pIoZMBq6qoJOGPdAJcnnLzBRZQQQsR/ndDjhOE96xpTiRtz QvpAt3T0zfXx5qBVI8fLj2xhp3B7cXeTOC9VUz/n/iAiAHRTFqSZhfSMN8fCsVLP WzJ3x1QsUBRSW88nSmr2ErGhiz3SglmQkaFMdMN7fv/jy0BITZCh2L6U6Z9dAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUKgswkdHQz9k/N7h+FrFKlNAAf4EwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzMyMzEzOTJlMzIz MzM1MmUzOTM2MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBdvrYDANBgkqhkiG9w0BAQsFAAOCAQEAYkGCjpf/X+mak+S+daJhvmtr k3az0fxWkiV6AMuvn2wByHVT4EfHB+06jz8xWCjuKkAADtrROzKPTT3qFSogfrkB whVW/U2bpw6hO8KHnHxCVCrREp0fo+lhSG7sDocoNEsTX/vz91z4cui5MCuaLtYY 3zSph1P6JIcss1WUiHG34nxU14DWJT7viWa+7eIa9TOY7l5BC73vL7ZB70rZBDeF hVEiHtFQA3e+kM4/82wf88ShGCHl9Q9lOdOBJwsERxs//Ekz9DcLK4VDH1sRu4+S iyO4oRuuMxR0CoYPS0OiSOVh/sqTrNRiUb67l6kXllrKhjE/Qq8lOceXP9lbNA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:49 2026 by rpki-client