$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e302e302f31392d3139203d3e203137393638.roa File: 36302e3235322e302e302f31392d3139203d3e203137393638.roa (raw, json) Hash identifier: bU/+Rdh5La5zffH3F9VR5LKQ6TmR6u1ooJW7f/Su/KQ= Subject key identifier: 1A:5C:54:54:32:8B:ED:D8:34:45:DF:73:02:98:49:38:BA:64:06:55 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 0186099D617FC53DCA068D83AF45F3C7414DA45D Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e302e302f31392d3139203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:50:15 +0000 ROA not before: Mon 29 Jun 2026 02:45:15 +0000 ROA not after: Mon 28 Jun 2027 02:50:15 +0000 asID: 17968 IP address blocks: 60.252.0.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:86:09:9d:61:7f:c5:3d:ca:06:8d:83:af:45:f3:c7:41:4d:a4:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:45:15 2026 GMT Not After : Jun 28 02:50:15 2027 GMT Subject: CN=1A5C5454328BEDD83445DF7302984938BA640655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:57:e0:29:df:12:f8:d6:8c:5a:56:98:8b: 77:98:12:99:ce:4c:aa:7a:9b:3c:a8:e2:af:ee:a5: 11:5e:48:9f:7d:2b:eb:7d:9d:61:15:d7:88:96:3a: 4e:c4:eb:f3:fc:2a:8b:27:2b:f3:35:86:b7:d7:e0: 77:8a:5e:ed:4b:61:f6:ea:da:5d:24:79:42:c2:81: 36:36:69:fd:9f:b5:35:0d:b8:ab:0c:a4:db:67:25: 8c:ba:cb:82:37:8f:d1:02:09:97:a6:4e:9c:84:00: 16:5e:50:90:d7:db:54:6d:0a:11:66:44:bb:0b:90: 94:6c:68:43:a7:f7:a0:b3:c2:cc:3c:71:96:c3:45: 16:23:ce:c7:f1:d8:35:b0:48:24:04:b5:6b:9d:ec: 6b:3c:19:5b:54:1c:53:33:69:8d:cb:ac:2f:2b:1c: 83:05:99:a5:ee:08:94:2c:11:bc:56:d5:fd:de:b8: f2:cd:1d:b6:f9:78:fa:fa:3b:ef:28:08:47:ca:b8: 09:fa:da:c8:74:5f:89:bb:6b:7f:2c:d5:f4:d9:ca: 63:9e:6e:24:18:0a:a1:3a:ad:1f:b0:fc:84:e7:76: 2a:41:7a:dc:8e:46:8d:11:67:ac:b1:7a:7b:7b:25: 88:df:2c:e6:fc:51:66:8d:a1:03:91:ec:32:cf:23: b7:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5C:54:54:32:8B:ED:D8:34:45:DF:73:02:98:49:38:BA:64:06:55 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e302e302f31392d3139203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.252.0.0/19 Signature Algorithm: sha256WithRSAEncryption 56:45:3d:97:7c:5d:fc:9f:b5:63:22:01:f6:09:8a:a1:27:c1: 26:1f:16:ad:9f:1c:0e:b6:5c:48:a5:40:fa:97:a6:5a:3a:f0: e9:ea:df:e4:7f:26:49:70:5a:fb:8f:70:76:eb:38:2a:42:36: c1:8e:2d:99:fd:ef:5f:ae:7e:f0:fa:0b:db:96:cb:d6:6e:d8: 56:2d:9c:c3:65:46:22:f3:5a:eb:ed:31:cf:fb:8e:93:b9:9a: b9:aa:89:52:c3:d6:9d:a1:c2:d6:e3:9d:89:df:c0:46:21:38: 1c:42:f1:65:f0:16:a8:56:51:d6:0d:b2:2f:72:ea:f4:24:ac: c1:d9:4d:f3:73:4d:0f:e4:ad:fe:cf:27:5d:5a:63:c1:68:82: 79:9e:50:08:03:d3:e9:1c:d4:87:5e:01:34:cb:8d:4e:24:f6: d1:99:18:58:eb:40:b9:b4:fa:91:51:e9:41:6c:d7:0a:c0:b0: 3e:29:7c:b7:7c:12:e8:21:44:ba:67:23:61:ab:1b:42:36:97: 16:ae:5a:ef:fd:d1:3f:d7:c4:b7:42:db:b8:4c:0a:e3:ca:65: c6:a8:e1:59:6e:64:ee:74:52:fe:5f:de:94:a8:90:01:9d:ac: 3f:79:5e:e6:fb:5c:94:82:76:2c:7f:cb:55:8c:99:f2:6e:9f: 2a:52:3f:db -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUAYYJnWF/xT3KBo2Dr0Xzx0FNpF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQ1MTVaFw0yNzA2MjgwMjUwMTVaMDMxMTAvBgNV BAMTKDFBNUM1NDU0MzI4QkVERDgzNDQ1REY3MzAyOTg0OTM4QkE2NDA2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEI1fgKd8S+NaMWlaYi3eYEpnO TKp6mzyo4q/upRFeSJ99K+t9nWEV14iWOk7E6/P8KosnK/M1hrfX4HeKXu1LYfbq 2l0keULCgTY2af2ftTUNuKsMpNtnJYy6y4I3j9ECCZemTpyEABZeUJDX21RtChFm RLsLkJRsaEOn96Czwsw8cZbDRRYjzsfx2DWwSCQEtWud7Gs8GVtUHFMzaY3LrC8r HIMFmaXuCJQsEbxW1f3euPLNHbb5ePr6O+8oCEfKuAn62sh0X4m7a38s1fTZymOe biQYCqE6rR+w/ITndipBetyORo0RZ6yxent7JYjfLOb8UWaNoQOR7DLPI7fTAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUGlxUVDKL7dg0Rd9zAphJOLpkBlUwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzYzMDJlMzIzNTMy MmUzMDJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDMxMzczOTM2Mzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAU8/AAwDQYJKoZIhvcNAQELBQADggEBAFZFPZd8XfyftWMiAfYJiqEnwSYfFq2f HA62XEilQPqXplo68Onq3+R/JklwWvuPcHbrOCpCNsGOLZn971+ufvD6C9uWy9Zu 2FYtnMNlRiLzWuvtMc/7jpO5mrmqiVLD1p2hwtbjnYnfwEYhOBxC8WXwFqhWUdYN si9y6vQkrMHZTfNzTQ/krf7PJ11aY8FognmeUAgD0+kc1IdeATTLjU4k9tGZGFjr QLm0+pFR6UFs1wrAsD4pfLd8EughRLpnI2GrG0I2lxauWu/90T/XxLdC27hMCuPK Zcao4VluZO50Uv5f3pSokAGdrD95Xub7XJSCdix/y1WMmfJunypSP9s= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:19 2026 by rpki-client