$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3130332e33362e32382e302f32322d3232203d3e2030.roa File: 3130332e33362e32382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: dZhmLOnlmSDCjxQMx8exT12WjKrgqD7Q38CZTFsMrC8= Subject key identifier: 1D:6F:BC:BC:15:6E:16:4F:B4:B1:C0:63:18:6C:AF:8E:57:6F:38:3B Certificate issuer: /CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Certificate serial: 575224FCDFF25152B5C214C3370636C9BEE727D3 Authority key identifier: C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3130332e33362e32382e302f32322d3232203d3e2030.roa Signing time: Mon 29 Jun 2026 06:50:20 +0000 ROA not before: Mon 29 Jun 2026 06:45:20 +0000 ROA not after: Mon 28 Jun 2027 06:50:20 +0000 asID: 0 IP address blocks: 103.36.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Jul 2026 22:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:52:24:fc:df:f2:51:52:b5:c2:14:c3:37:06:36:c9:be:e7:27:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4676B3058F5B3F9BFB658BBED8F5E76C87614EB Validity Not Before: Jun 29 06:45:20 2026 GMT Not After : Jun 28 06:50:20 2027 GMT Subject: CN=1D6FBCBC156E164FB4B1C063186CAF8E576F383B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:30:da:0a:02:99:48:06:11:78:8a:7c:97:c1: 7a:88:bb:73:2d:e5:18:54:93:4e:8e:fc:e0:29:49: e4:c5:f5:74:32:d9:e1:89:7b:a5:0d:f5:53:bb:e7: 3d:e5:0a:a2:f9:ed:8e:66:82:ce:28:ab:4f:12:b5: bf:6b:c9:31:2a:16:dd:70:09:86:81:5f:6c:2a:f2: e4:e1:b8:81:3a:9c:23:86:e8:0f:cc:9b:40:40:20: 9f:31:63:a0:9b:49:e1:2f:28:fc:61:4c:77:29:41: 69:ef:17:04:2e:b9:5f:7b:a3:ba:03:90:be:22:13: 00:03:7a:2b:14:35:c4:39:4b:ac:6f:48:de:8c:79: e7:86:1a:ab:94:34:03:80:97:95:d4:70:01:64:35: ce:6a:87:f6:1b:a5:f8:76:da:47:c3:7b:e8:f6:d2: bb:ab:0b:c5:b9:f8:a8:db:22:d7:2c:89:f5:e3:6f: 9b:e0:60:13:a0:a9:e6:14:fd:68:2b:0b:1f:54:98: c5:99:2a:6f:0b:3d:46:dd:41:7a:e1:79:ad:4d:0a: e2:1f:46:95:55:de:2e:69:fb:f0:92:43:51:b2:f0: 8f:7a:4f:fc:f0:05:96:a0:eb:fc:46:37:ea:58:25: af:a0:06:7d:e5:b7:e0:f3:c3:0c:ed:c7:4c:d8:56: 3b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:6F:BC:BC:15:6E:16:4F:B4:B1:C0:63:18:6C:AF:8E:57:6F:38:3B X509v3 Authority Key Identifier: keyid:C4:67:6B:30:58:F5:B3:F9:BF:B6:58:BB:ED:8F:5E:76:C8:76:14:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C4676B3058F5B3F9BFB658BBED8F5E76C87614EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123865781596061733/0/3130332e33362e32382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.28.0/22 Signature Algorithm: sha256WithRSAEncryption 18:93:e3:b1:e5:00:55:5f:db:49:05:ac:91:8f:17:cf:65:75: 09:8d:d6:9b:43:76:14:69:39:63:fc:6f:5c:5e:1c:e5:7b:00: 8b:85:57:73:d8:4f:fd:2b:b3:87:ea:ae:ea:fd:68:23:64:91: f3:73:b0:83:76:99:a2:cd:5a:51:b3:66:d3:90:d9:f5:32:bc: f5:65:10:cd:5d:bc:27:3f:81:0e:f4:67:65:f8:d0:94:1b:42: 91:e8:ad:e0:ad:ac:4c:f4:a4:27:6d:c2:d6:76:dd:d4:54:84: f1:e5:c7:bd:d2:e1:55:5a:3c:06:42:58:76:62:05:8a:c7:cc: e5:a7:a0:3d:46:f1:e6:2f:9d:ff:8d:af:39:fb:48:74:96:6d: bb:14:6c:10:d8:74:62:e2:fd:87:69:d6:b9:5e:7f:0c:1c:8f: 1d:e3:21:a5:d4:3c:47:c0:97:10:f5:58:a4:97:7b:50:a9:dd: f7:6e:f6:41:64:ef:5e:bc:6e:3e:47:38:93:c5:42:83:a6:de: b6:01:3f:fe:2b:8e:be:36:34:76:f1:70:a1:ad:75:7f:13:e1: 88:dd:6b:56:98:44:eb:e0:1d:c5:90:ed:2f:52:ae:87:62:7b: c2:c6:b0:63:49:c6:60:1a:5e:a7:f0:2a:28:f5:13:72:1b:cd: 76:2d:2b:8e -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUV1Ik/N/yUVK1whTDNwY2yb7nJ9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZD ODc2MTRFQjAeFw0yNjA2MjkwNjQ1MjBaFw0yNzA2MjgwNjUwMjBaMDMxMTAvBgNV BAMTKDFENkZCQ0JDMTU2RTE2NEZCNEIxQzA2MzE4NkNBRjhFNTc2RjM4M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBMNoKAplIBhF4inyXwXqIu3Mt 5RhUk06O/OApSeTF9XQy2eGJe6UN9VO75z3lCqL57Y5mgs4oq08Stb9ryTEqFt1w CYaBX2wq8uThuIE6nCOG6A/Mm0BAIJ8xY6CbSeEvKPxhTHcpQWnvFwQuuV97o7oD kL4iEwADeisUNcQ5S6xvSN6MeeeGGquUNAOAl5XUcAFkNc5qh/Ybpfh22kfDe+j2 0rurC8W5+KjbItcsifXjb5vgYBOgqeYU/WgrCx9UmMWZKm8LPUbdQXrhea1NCuIf RpVV3i5p+/CSQ1Gy8I96T/zwBZag6/xGN+pYJa+gBn3lt+Dzwwztx0zYVjsfAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUHW+8vBVuFk+0scBjGGyvjldvODswHwYDVR0j BBgwFoAUxGdrMFj1s/m/tli77Y9edsh2FOswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg2NTc4MTU5NjA2MTczMy8wL0M0Njc2QjMwNThGNUIzRjlCRkI2NThCQkVEOEY1 RTc2Qzg3NjE0RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzQ2NzZCMzA1OEY1QjNGOUJGQjY1OEJCRUQ4RjVFNzZDODc2MTRFQi5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIzODY1NzgxNTk2MDYxNzMzLzAvMzEzMDMzMmUzMzM2 MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnJBww DQYJKoZIhvcNAQELBQADggEBABiT47HlAFVf20kFrJGPF89ldQmN1ptDdhRpOWP8 b1xeHOV7AIuFV3PYT/0rs4fqrur9aCNkkfNzsIN2maLNWlGzZtOQ2fUyvPVlEM1d vCc/gQ70Z2X40JQbQpHoreCtrEz0pCdtwtZ23dRUhPHlx73S4VVaPAZCWHZiBYrH zOWnoD1G8eYvnf+Nrzn7SHSWbbsUbBDYdGLi/Ydp1rlefwwcjx3jIaXUPEfAlxD1 WKSXe1Cp3fdu9kFk7168bj5HOJPFQoOm3rYBP/4rjr42NHbxcKGtdX8T4Yjda1aY ROvgHcWQ7S9Srodie8LGsGNJxmAaXqfwKij1E3IbzXYtK44= -----END CERTIFICATE-----Generated at Tue Jul 7 09:43:27 2026 by rpki-client