$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3232342e302f31392d3139203d3e203137393638.roa File: 36302e3235322e3232342e302f31392d3139203d3e203137393638.roa (raw, json) Hash identifier: 5xpSHJaaoJ6WQt+NLnYIgG7cxxOOUAHmtfw47JVA7GY= Subject key identifier: 29:1E:D6:D9:76:56:21:6F:0A:DD:34:C2:34:E5:13:45:16:F0:5A:83 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 5B49279622EA8F6B2E4CC48AFEA63700CF6AE0BF Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3232342e302f31392d3139203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:50:15 +0000 ROA not before: Mon 29 Jun 2026 02:45:15 +0000 ROA not after: Mon 28 Jun 2027 02:50:15 +0000 asID: 17968 IP address blocks: 60.252.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:49:27:96:22:ea:8f:6b:2e:4c:c4:8a:fe:a6:37:00:cf:6a:e0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:45:15 2026 GMT Not After : Jun 28 02:50:15 2027 GMT Subject: CN=291ED6D97656216F0ADD34C234E5134516F05A83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:0e:c3:63:f0:17:fd:84:6d:99:81:7a:56: d6:db:6b:b1:8d:49:e9:5c:b6:48:6e:f1:0d:51:a0: 14:bb:d1:65:f7:c3:ea:cd:b7:74:4d:2d:13:22:e6: 68:1e:9b:21:5b:e6:c6:30:62:07:5a:2a:1f:94:1e: 6d:30:dc:8b:f6:8a:1c:f6:ce:1e:b3:b4:54:ae:f2: 52:6c:4d:78:76:f4:b4:03:f1:d9:bf:f4:7f:b6:74: 7a:52:11:69:b7:94:4a:c0:d0:cf:c0:0d:2e:d6:c6: af:de:f0:0a:ff:8f:45:8c:6d:ef:a2:da:c0:55:d0: 54:b5:ff:35:da:c4:bb:3e:d9:ed:7d:4c:e6:81:b9: 10:13:ef:31:fc:6a:6d:65:6e:ca:cc:d5:3a:45:97: d8:11:5a:db:78:52:81:0f:3f:04:f4:b1:30:6f:98: a5:de:0e:b6:9d:3e:7a:d7:1b:37:2e:cc:a3:f4:29: b2:3d:00:90:52:1f:57:c1:c5:a8:8f:0b:5d:d1:42: 63:d7:c7:0c:d8:e2:09:48:b8:7f:e6:d6:f1:8c:bb: fa:96:94:2c:a9:a0:d9:ef:f7:d8:c8:43:c7:a0:d3: f6:44:f6:1c:f5:5b:5c:3f:af:95:20:f4:ec:46:a8: 80:37:50:74:77:1f:93:cd:49:4d:dc:fa:c1:cb:7b: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:1E:D6:D9:76:56:21:6F:0A:DD:34:C2:34:E5:13:45:16:F0:5A:83 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e3232342e302f31392d3139203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.252.224.0/19 Signature Algorithm: sha256WithRSAEncryption 02:2e:35:47:94:f5:39:2c:ca:1d:7b:3e:12:31:0d:41:43:12: b5:9c:98:73:5b:83:6c:fa:f6:be:83:0d:00:92:18:1d:6f:2b: c0:6d:29:d1:bc:2f:45:89:80:f4:56:66:5d:c9:bd:bf:2b:3c: e6:dd:a4:0f:5a:1e:e8:b2:9d:0f:ab:2e:3f:0c:7b:f1:54:e2: 83:93:33:09:08:27:39:4b:25:e5:40:b7:b1:6d:88:c4:af:1f: 0d:ea:27:a8:6d:a1:69:75:3c:f1:45:60:16:64:85:b1:08:35: cd:8e:8e:79:e7:64:e5:0a:fe:3c:6e:ff:f6:8c:43:98:77:e5: cd:80:58:2d:a1:14:50:fa:bb:97:fc:00:97:91:77:41:1e:23: cf:72:3e:a6:60:4d:a6:c7:42:da:93:f8:8d:51:94:dd:5c:cb: 08:2c:20:d2:0e:ac:fc:e7:7a:e5:6b:c9:d3:f0:fd:d6:25:d0: bb:9f:ed:75:2a:ad:84:65:84:9a:34:b0:de:c2:a5:03:64:93: 86:1d:ef:68:75:1d:43:2d:5f:07:ce:86:90:30:ca:5b:4f:23: 5d:a1:25:49:16:82:c9:e5:1a:2b:1f:20:c8:78:d3:25:60:b3: 4e:09:2b:37:3b:83:6f:9b:cc:30:41:1f:8a:ae:1d:0f:93:41: bc:bd:a3:73 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUW0knliLqj2suTMSK/qY3AM9q4L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQ1MTVaFw0yNzA2MjgwMjUwMTVaMDMxMTAvBgNV BAMTKDI5MUVENkQ5NzY1NjIxNkYwQUREMzRDMjM0RTUxMzQ1MTZGMDVBODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIkg7DY/AX/YRtmYF6Vtbba7GN Selctkhu8Q1RoBS70WX3w+rNt3RNLRMi5mgemyFb5sYwYgdaKh+UHm0w3Iv2ihz2 zh6ztFSu8lJsTXh29LQD8dm/9H+2dHpSEWm3lErA0M/ADS7Wxq/e8Ar/j0WMbe+i 2sBV0FS1/zXaxLs+2e19TOaBuRAT7zH8am1lbsrM1TpFl9gRWtt4UoEPPwT0sTBv mKXeDradPnrXGzcuzKP0KbI9AJBSH1fBxaiPC13RQmPXxwzY4glIuH/m1vGMu/qW lCypoNnv99jIQ8eg0/ZE9hz1W1w/r5Ug9OxGqIA3UHR3H5PNSU3c+sHLe+CdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUKR7W2XZWIW8K3TTCNOUTRRbwWoMwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEyMzc4NTQzNjE3MTMzNzc2NS8wLzM2MzAyZTMyMzUz MjJlMzIzMjM0MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM5MzYzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBTz84DANBgkqhkiG9w0BAQsFAAOCAQEAAi41R5T1OSzKHXs+EjENQUMS tZyYc1uDbPr2voMNAJIYHW8rwG0p0bwvRYmA9FZmXcm9vys85t2kD1oe6LKdD6su Pwx78VTig5MzCQgnOUsl5UC3sW2IxK8fDeonqG2haXU88UVgFmSFsQg1zY6Oeedk 5Qr+PG7/9oxDmHflzYBYLaEUUPq7l/wAl5F3QR4jz3I+pmBNpsdC2pP4jVGU3VzL CCwg0g6s/Od65WvJ0/D91iXQu5/tdSqthGWEmjSw3sKlA2SThh3vaHUdQy1fB86G kDDKW08jXaElSRaCyeUaKx8gyHjTJWCzTgkrNzuDb5vMMEEfiq4dD5NBvL2jcw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:28 2026 by rpki-client