$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e39362e302f31392d3139203d3e203137393638.roa File: 36302e3235322e39362e302f31392d3139203d3e203137393638.roa (raw, json) Hash identifier: JFsEegxxsGpEM7YNTgqioW3tzuKr3hsWJY2864ej1Ng= Subject key identifier: BA:35:0E:0D:FB:AF:B7:97:CD:D5:2B:5E:B2:BC:FF:16:90:E2:3E:83 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 4AC70A081A78B8FD41C91544E81421C8FB5EE576 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e39362e302f31392d3139203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:50:15 +0000 ROA not before: Mon 29 Jun 2026 02:45:15 +0000 ROA not after: Mon 28 Jun 2027 02:50:15 +0000 asID: 17968 IP address blocks: 60.252.96.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c7:0a:08:1a:78:b8:fd:41:c9:15:44:e8:14:21:c8:fb:5e:e5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:45:15 2026 GMT Not After : Jun 28 02:50:15 2027 GMT Subject: CN=BA350E0DFBAFB797CDD52B5EB2BCFF1690E23E83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ca:9e:20:7f:bb:49:43:5b:6d:8b:a5:ad:f2: 9c:86:22:0c:6d:7d:88:6d:b4:b4:12:31:80:e4:91: 6e:6a:88:97:ff:02:91:6e:f0:2c:f8:20:f4:f2:74: c9:8e:6a:0b:56:5a:46:ef:77:e0:f4:fb:82:81:60: da:9e:18:45:e0:04:e2:7c:99:a1:c5:d6:a9:41:2e: 61:09:b8:8b:77:09:a1:83:89:7d:d2:9e:d7:d1:93: 78:30:77:3f:9f:2f:96:31:ed:1d:cb:a3:93:00:c4: 7b:23:0f:75:2c:7f:75:5b:41:7b:18:79:d2:a3:20: ee:ab:e0:7f:b7:aa:a4:05:0e:d6:f4:fd:a9:4d:8d: 87:2f:f8:a1:53:25:28:aa:b0:04:4e:eb:2a:49:91: e7:0a:6d:d0:85:d4:56:ad:29:03:b4:2b:a1:4d:f7: 32:e5:66:29:1a:7c:68:36:2b:75:3f:14:dc:10:84: fe:81:67:ee:ba:07:68:7f:48:2f:b6:cd:4b:a9:5b: 96:63:14:72:17:4a:72:f0:73:3e:63:4e:b4:bd:10: 9b:95:c2:42:31:be:6c:c5:3b:a1:be:93:2c:51:3a: a9:ad:9e:15:60:08:40:03:c7:9e:1d:c5:57:e1:e3: 08:1d:36:80:e8:a1:aa:03:13:1e:41:ab:cb:59:ac: 2d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:35:0E:0D:FB:AF:B7:97:CD:D5:2B:5E:B2:BC:FF:16:90:E2:3E:83 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/36302e3235322e39362e302f31392d3139203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.252.96.0/19 Signature Algorithm: sha256WithRSAEncryption af:a3:c4:7b:f8:f8:d4:37:48:d7:96:0a:62:6d:76:d3:d9:c0: d6:40:16:e5:95:4e:f8:cf:5e:7c:5a:59:70:85:f8:44:1f:d0: 58:13:4f:c8:1e:c0:c1:ae:97:c4:f7:6b:44:11:f1:42:fc:64: 79:bc:b8:bf:89:f7:68:35:1f:9f:20:18:74:ef:8c:f9:ab:d5: c6:cf:2d:8f:ff:18:0c:de:fa:73:19:89:5d:fb:4c:42:cd:ac: 49:89:63:9e:c6:a1:cb:71:0f:6e:8e:51:ff:22:7c:ea:6c:38: ab:8f:fa:56:c2:58:9f:49:bf:11:ee:44:a4:c8:02:bd:5b:82: 89:53:a3:15:ee:c9:1b:13:52:26:c1:25:c9:f4:66:55:27:6d: db:1d:77:e8:02:d7:29:c6:df:7a:f3:45:92:a5:d0:23:60:32: 95:1a:1a:8f:fd:72:bb:1f:09:92:0a:39:a9:ab:71:b2:91:db: a9:50:1d:7f:2e:4a:f2:ee:92:82:cd:1c:bd:58:d5:46:4f:33: 31:e4:e2:e9:f6:91:8f:ff:52:d7:e2:f1:d8:f2:ba:d3:0e:24: 52:fd:f5:c0:78:17:ce:cc:29:81:81:60:11:0c:68:03:63:0e: 19:27:70:d7:6c:5e:c2:b2:2e:5a:4e:31:1b:9b:ce:2b:11:8d: 72:80:1b:f5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUSscKCBp4uP1ByRVE6BQhyPte5XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQ1MTVaFw0yNzA2MjgwMjUwMTVaMDMxMTAvBgNV BAMTKEJBMzUwRTBERkJBRkI3OTdDREQ1MkI1RUIyQkNGRjE2OTBFMjNFODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCryp4gf7tJQ1tti6Wt8pyGIgxt fYhttLQSMYDkkW5qiJf/ApFu8Cz4IPTydMmOagtWWkbvd+D0+4KBYNqeGEXgBOJ8 maHF1qlBLmEJuIt3CaGDiX3SntfRk3gwdz+fL5Yx7R3Lo5MAxHsjD3Usf3VbQXsY edKjIO6r4H+3qqQFDtb0/alNjYcv+KFTJSiqsARO6ypJkecKbdCF1FatKQO0K6FN 9zLlZikafGg2K3U/FNwQhP6BZ+66B2h/SC+2zUupW5ZjFHIXSnLwcz5jTrS9EJuV wkIxvmzFO6G+kyxROqmtnhVgCEADx54dxVfh4wgdNoDooaoDEx5Bq8tZrC2LAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUujUODfuvt5fN1Stesrz/FpDiPoMwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzYzMDJlMzIzNTMy MmUzOTM2MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzNzM5MzYzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBTz8YDANBgkqhkiG9w0BAQsFAAOCAQEAr6PEe/j41DdI15YKYm1209nA1kAW 5ZVO+M9efFpZcIX4RB/QWBNPyB7Awa6XxPdrRBHxQvxkeby4v4n3aDUfnyAYdO+M +avVxs8tj/8YDN76cxmJXftMQs2sSYljnsahy3EPbo5R/yJ86mw4q4/6VsJYn0m/ Ee5EpMgCvVuCiVOjFe7JGxNSJsElyfRmVSdt2x136ALXKcbfevNFkqXQI2AylRoa j/1yux8Jkgo5qatxspHbqVAdfy5K8u6Sgs0cvVjVRk8zMeTi6faRj/9S1+Lx2PK6 0w4kUv31wHgXzswpgYFgEQxoA2MOGSdw12xewrIuWk4xG5vOKxGNcoAb9Q== -----END CERTIFICATE-----Generated at Tue Jul 14 21:55:21 2026 by rpki-client