$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3130332e33352e3138322e302f32332d3233203d3e2030.roa File: 3130332e33352e3138322e302f32332d3233203d3e2030.roa (raw, json) Hash identifier: kpDKPXbo2qavM/9Asvqfc84qinUNEiy1Asmc23+iN6U= Subject key identifier: 28:AF:54:48:63:6A:AE:BA:84:1E:82:76:A1:33:53:27:A9:D7:EF:CD Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 2D6196A4E79FCD63D2BA1E48D6433CF371F71127 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3130332e33352e3138322e302f32332d3233203d3e2030.roa Signing time: Mon 29 Jun 2026 06:49:31 +0000 ROA not before: Mon 29 Jun 2026 06:44:31 +0000 ROA not after: Mon 28 Jun 2027 06:49:31 +0000 asID: 0 IP address blocks: 103.35.182.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:61:96:a4:e7:9f:cd:63:d2:ba:1e:48:d6:43:3c:f3:71:f7:11:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jun 29 06:44:31 2026 GMT Not After : Jun 28 06:49:31 2027 GMT Subject: CN=28AF5448636AAEBA841E8276A1335327A9D7EFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:5b:19:d6:eb:14:68:da:d3:6a:7b:fd:1d: 29:22:68:1b:23:ef:b1:fb:c7:f2:b6:bb:dd:1f:32: b3:63:d6:09:29:75:e0:5e:b7:74:0e:67:d8:68:d5: 03:d8:fe:d9:59:aa:b6:66:99:bc:de:d3:f6:5f:7b: 23:f0:24:50:ad:de:d1:fb:60:aa:ea:d2:5e:b9:ee: b0:d8:7b:72:9d:69:53:11:87:46:ad:ce:f4:39:f1: 8c:93:8d:cc:1c:d9:3c:29:d3:69:fa:1c:e7:c7:72: 63:b2:45:da:aa:f5:86:33:3e:82:e4:b8:b9:b6:9d: f6:19:92:6c:67:a1:2f:8e:72:98:85:52:d5:5a:cd: 22:87:d7:45:a3:d7:8a:5c:3c:1b:94:5e:1a:2e:11: 59:cb:b4:db:06:6c:b3:09:f7:49:88:87:dc:21:96: b4:87:fc:39:a5:dc:15:e9:69:f5:7a:92:b0:bc:fc: b7:04:a9:07:51:6a:40:fe:e1:b7:53:93:0e:fa:15: 86:50:3c:1b:cf:08:19:12:db:79:d5:62:67:8d:51: 96:18:5e:ce:dd:21:dc:a4:9c:d0:25:18:c8:75:5a: c9:69:9f:31:f3:2a:6a:55:dc:11:ad:25:91:a9:4e: 10:29:42:9b:eb:6c:7b:5c:9e:88:3d:39:c5:20:a1: 89:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:AF:54:48:63:6A:AE:BA:84:1E:82:76:A1:33:53:27:A9:D7:EF:CD X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3130332e33352e3138322e302f32332d3233203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.35.182.0/23 Signature Algorithm: sha256WithRSAEncryption 54:32:4c:31:b9:0e:c3:57:1b:ad:56:76:4f:8a:e4:63:8d:1c: 71:e1:07:f4:88:83:aa:eb:a9:e7:2d:c9:9a:6b:67:de:b3:70: 10:42:9f:cc:0c:61:99:ef:13:40:bc:e5:cd:21:f5:64:58:51: f2:ab:2f:1e:38:c3:4b:fd:67:e1:46:ea:1e:f9:59:96:8c:d2: 7a:bb:e6:27:6f:8c:b6:64:63:3e:f2:ff:14:bf:1f:d6:e0:31: 4a:38:0b:e0:bd:a0:1e:37:b4:3a:e4:8a:85:43:81:d4:91:6a: 79:55:1f:e2:14:db:6a:15:d3:a4:9d:ba:02:23:9a:e1:d4:91: 6e:88:c1:20:b0:16:f5:6f:91:a2:c5:fd:0e:e3:4c:e9:03:28: cd:df:03:53:6d:a5:f4:20:da:4b:d2:58:24:82:35:86:e1:ef: 24:0d:60:17:20:80:fe:98:74:08:e1:64:41:f2:46:0c:b9:a5: d6:8e:76:13:5e:d1:d5:7b:ca:86:b1:2d:93:44:d3:f4:9e:22: 21:c9:7f:64:f3:15:c8:4d:45:2b:a3:4c:84:42:26:9e:49:10: fa:38:28:b7:66:95:d8:7f:50:1e:83:49:58:c9:1c:4a:42:47: ad:e0:06:3d:d2:dd:95:0b:e1:6a:5a:74:3e:ba:fb:a5:b2:e9: 68:b0:a4:af -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIULWGWpOefzWPSuh5I1kM883H3EScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA2MjkwNjQ0MzFaFw0yNzA2MjgwNjQ5MzFaMDMxMTAvBgNV BAMTKDI4QUY1NDQ4NjM2QUFFQkE4NDFFODI3NkExMzM1MzI3QTlEN0VGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx21sZ1usUaNrTanv9HSkiaBsj 77H7x/K2u90fMrNj1gkpdeBet3QOZ9ho1QPY/tlZqrZmmbze0/ZfeyPwJFCt3tH7 YKrq0l657rDYe3KdaVMRh0atzvQ58YyTjcwc2Twp02n6HOfHcmOyRdqq9YYzPoLk uLm2nfYZkmxnoS+OcpiFUtVazSKH10Wj14pcPBuUXhouEVnLtNsGbLMJ90mIh9wh lrSH/Dml3BXpafV6krC8/LcEqQdRakD+4bdTkw76FYZQPBvPCBkS23nVYmeNUZYY Xs7dIdyknNAlGMh1WslpnzHzKmpV3BGtJZGpThApQpvrbHtcnog9OcUgoYnvAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUKK9USGNqrrqEHoJ2oTNTJ6nX780wHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIzODY1NzgxNTk2MDYxNzMzLzAvMzEzMDMzMmUzMzM1 MmUzMTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcj tjANBgkqhkiG9w0BAQsFAAOCAQEAVDJMMbkOw1cbrVZ2T4rkY40cceEH9IiDquup 5y3Jmmtn3rNwEEKfzAxhme8TQLzlzSH1ZFhR8qsvHjjDS/1n4UbqHvlZlozServm J2+MtmRjPvL/FL8f1uAxSjgL4L2gHje0OuSKhUOB1JFqeVUf4hTbahXTpJ26AiOa 4dSRbojBILAW9W+RosX9DuNM6QMozd8DU22l9CDaS9JYJII1huHvJA1gFyCA/ph0 COFkQfJGDLml1o52E17R1XvKhrEtk0TT9J4iIcl/ZPMVyE1FK6NMhEImnkkQ+jgo t2aV2H9QHoNJWMkcSkJHreAGPdLdlQvhalp0Prr7pbLpaLCkrw== -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:29 2026 by rpki-client