$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3132382e302f31392d3139203d3e203137393638.roa File: 36302e3235322e3132382e302f31392d3139203d3e203137393638.roa (raw, json) Hash identifier: uQns/ETfAIfLgLE6nAWBkrleabVN44sFvlOZZ3MPOFU= Subject key identifier: 24:C9:B2:68:08:84:57:47:DA:3A:A1:D0:FD:E3:15:2B:FC:D6:74:8E Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 0286A8B806B30714D0EE7D2D52BDB3D68D029E06 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3132382e302f31392d3139203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:50:15 +0000 ROA not before: Mon 29 Jun 2026 02:45:15 +0000 ROA not after: Mon 28 Jun 2027 02:50:15 +0000 asID: 17968 IP address blocks: 60.252.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:86:a8:b8:06:b3:07:14:d0:ee:7d:2d:52:bd:b3:d6:8d:02:9e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:45:15 2026 GMT Not After : Jun 28 02:50:15 2027 GMT Subject: CN=24C9B26808845747DA3AA1D0FDE3152BFCD6748E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:0f:cd:c0:8f:85:bc:d5:91:78:ec:bf:10: 1f:49:8d:81:54:d2:b4:a8:6b:dd:fd:73:bf:ae:34: 2c:5d:3f:bb:4e:32:22:78:87:6f:9f:78:ec:ec:2c: 16:42:49:f1:54:57:9f:a0:c4:89:44:ca:af:7f:9c: c4:59:fd:46:f8:df:3f:83:4e:3f:ce:64:8f:b7:f0: 97:49:51:4a:f6:49:53:ea:a2:30:03:70:fe:e0:44: 42:8b:0d:36:ec:db:0b:6c:23:78:3a:1f:8d:da:51: b3:78:c6:55:8e:da:63:e5:8c:57:79:94:db:df:71: 83:76:6f:13:cf:57:86:72:1b:bd:c0:d2:0d:52:ea: d4:73:1c:98:df:27:00:0c:08:b9:9e:58:f6:c9:69: d9:71:e1:b4:08:07:e5:c1:95:6e:60:0b:67:21:fe: 0c:20:16:c0:38:cd:37:06:64:39:ed:82:f3:b2:59: 2a:fd:60:ab:f1:2b:1d:42:d8:c3:8b:1f:76:d3:9a: 1d:db:ec:bf:89:a7:4b:63:08:57:ae:8a:08:2e:ad: 11:7d:9c:37:4c:e5:7e:7f:8c:80:12:17:c7:52:93: 79:9b:0a:f6:e4:2e:f4:74:a6:8c:91:ae:91:e1:88: f7:8b:0c:de:01:48:92:39:fd:2a:fc:55:0b:ce:6c: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:C9:B2:68:08:84:57:47:DA:3A:A1:D0:FD:E3:15:2B:FC:D6:74:8E X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3132382e302f31392d3139203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.252.128.0/19 Signature Algorithm: sha256WithRSAEncryption 97:92:0a:e7:e6:e3:a6:f8:65:9e:a9:29:0a:51:5f:36:f6:2b: 59:f5:eb:53:16:4b:ae:11:9e:da:4e:73:2a:ea:a3:a0:98:33: c9:1e:76:b7:8b:b0:ec:73:cc:d4:6b:d1:20:20:52:a5:fa:92: ce:b3:08:d4:35:f0:2b:9a:f1:da:1d:be:fc:27:25:f6:e1:12: 47:77:7e:16:27:23:ec:c7:62:c5:70:3b:de:4f:08:6d:0c:11: 82:b0:dc:3d:d9:37:c2:56:1e:36:ca:11:f3:78:fb:bb:a9:9d: 13:08:0c:ff:1a:d4:04:2d:6c:d6:58:56:f9:e1:f6:1c:7c:34: 77:2f:1d:3e:eb:12:55:37:b6:0d:1f:a5:c5:7d:b6:01:c4:7f: 58:d4:3f:04:50:a0:02:d6:ed:1a:2d:6a:c4:41:81:5f:69:93: 4c:d0:79:6d:a3:0e:19:77:0b:b4:29:03:4c:ae:f1:f6:86:2c: ec:50:af:19:d9:c7:c5:7d:24:cc:83:c0:09:eb:87:49:2e:98: 1e:13:eb:d8:29:b9:3a:99:64:bc:32:7c:51:5e:83:de:f1:b8: ac:ef:6d:43:30:18:d9:c8:eb:33:0b:f1:b7:bd:19:e2:53:2c: 0e:c4:79:d8:40:78:8c:95:93:e7:9b:64:26:32:0f:d6:05:8a: ab:a8:15:1b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAoaouAazBxTQ7n0tUr2z1o0CngYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQ1MTVaFw0yNzA2MjgwMjUwMTVaMDMxMTAvBgNV BAMTKDI0QzlCMjY4MDg4NDU3NDdEQTNBQTFEMEZERTMxNTJCRkNENjc0OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZA/NwI+FvNWReOy/EB9JjYFU 0rSoa939c7+uNCxdP7tOMiJ4h2+feOzsLBZCSfFUV5+gxIlEyq9/nMRZ/Ub43z+D Tj/OZI+38JdJUUr2SVPqojADcP7gREKLDTbs2wtsI3g6H43aUbN4xlWO2mPljFd5 lNvfcYN2bxPPV4ZyG73A0g1S6tRzHJjfJwAMCLmeWPbJadlx4bQIB+XBlW5gC2ch /gwgFsA4zTcGZDntgvOyWSr9YKvxKx1C2MOLH3bTmh3b7L+Jp0tjCFeuiggurRF9 nDdM5X5/jIASF8dSk3mbCvbkLvR0poyRrpHhiPeLDN4BSJI5/Sr8VQvObEMtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUJMmyaAiEV0faOqHQ/eMVK/zWdI4wHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzM2MzAyZTMyMzUz MjJlMzEzMjM4MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBTz8gDANBgkqhkiG9w0BAQsFAAOCAQEAl5IK5+bjpvhlnqkpClFfNvYr WfXrUxZLrhGe2k5zKuqjoJgzyR52t4uw7HPM1GvRICBSpfqSzrMI1DXwK5rx2h2+ /Ccl9uESR3d+Ficj7MdixXA73k8IbQwRgrDcPdk3wlYeNsoR83j7u6mdEwgM/xrU BC1s1lhW+eH2HHw0dy8dPusSVTe2DR+lxX22AcR/WNQ/BFCgAtbtGi1qxEGBX2mT TNB5baMOGXcLtCkDTK7x9oYs7FCvGdnHxX0kzIPACeuHSS6YHhPr2Cm5OplkvDJ8 UV6D3vG4rO9tQzAY2cjrMwvxt70Z4lMsDsR52EB4jJWT55tkJjIP1gWKq6gVGw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:51 2026 by rpki-client