$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e20313331353433.roa File: 3130332e3130372e3231362e302f32322d3232203d3e20313331353433.roa (raw, json) Hash identifier: fr4V+UC1gKdqzEAWUW8IkDhaRWpdWsDOLx/87SdlnLM= Subject key identifier: 99:BE:9F:36:66:CB:26:A1:6D:60:CD:AE:82:BD:71:4B:A1:1C:04:47 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 664D7CD332682E319E7181149930D1240E62FAD9 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 07:53:29 +0000 ROA not before: Mon 29 Jun 2026 07:48:29 +0000 ROA not after: Mon 28 Jun 2027 07:53:29 +0000 asID: 131543 IP address blocks: 103.107.216.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:4d:7c:d3:32:68:2e:31:9e:71:81:14:99:30:d1:24:0e:62:fa:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:48:29 2026 GMT Not After : Jun 28 07:53:29 2027 GMT Subject: CN=99BE9F3666CB26A16D60CDAE82BD714BA11C0447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1d:09:bc:11:74:35:6b:84:7f:cf:bc:8f:fc: 48:78:de:71:13:85:8b:e9:4d:5d:88:3d:ef:2c:b4: d3:91:84:b3:c1:8d:03:16:5b:8b:07:77:ad:b7:e3: a9:0c:81:23:ea:c0:ae:24:be:11:8d:08:53:e5:c5: 69:cf:be:90:95:4f:05:6c:93:b0:d4:96:50:9f:c2: 05:6c:ee:e3:64:8c:53:16:7e:e8:8f:50:53:5b:3b: e1:39:df:d2:8c:5c:e4:4e:92:29:a0:20:0e:c8:37: c2:c6:4a:e0:d9:05:4b:21:40:a2:3b:65:2f:f9:cb: bf:67:5c:4d:a0:2c:53:4b:da:8c:bb:47:b3:63:0b: 84:12:fe:a7:0b:76:94:b3:02:00:8c:b0:2a:5e:d1: b1:fb:91:eb:af:89:25:0f:50:2d:9d:4a:cb:1b:1f: 12:d6:2e:7e:39:53:59:12:e3:c5:58:dc:39:f1:a1: 3d:40:39:e0:ed:da:82:57:c6:9e:92:99:ed:4a:c9: 9d:11:74:34:6a:1d:05:72:eb:2a:3f:7a:49:fa:46: ed:eb:3b:dd:59:0a:39:3a:19:99:f1:52:5c:53:1c: f1:b2:86:e0:72:48:67:3b:cd:e9:33:1c:db:f6:9e: 45:4c:db:0e:85:d4:de:59:40:d3:b7:f9:eb:53:77: cc:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BE:9F:36:66:CB:26:A1:6D:60:CD:AE:82:BD:71:4B:A1:1C:04:47 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/3130332e3130372e3231362e302f32322d3232203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.216.0/22 Signature Algorithm: sha256WithRSAEncryption 98:2a:1d:67:5f:30:50:c9:40:f1:a2:12:c0:8d:4e:cd:33:08: be:3a:dc:68:1a:86:cc:a2:04:4a:46:1f:b7:11:5a:fd:93:41: 6a:27:e9:bf:7d:26:d5:d0:ff:56:20:3c:e1:37:9f:24:05:3f: 32:42:48:e8:6e:7b:80:76:62:ef:64:25:08:4d:2f:f7:39:22: 1e:7a:37:a8:3e:c0:6a:eb:d6:62:15:97:30:32:a9:be:dc:71: f3:af:1b:5b:cc:3d:e7:66:88:cc:12:6c:53:6b:86:25:e1:5b: 0f:c4:88:77:ef:3b:95:e6:2a:8b:8d:62:f0:15:25:77:6b:b1: 38:fc:38:32:61:e0:58:2a:e5:f1:7c:a3:d0:12:c5:9f:65:e9: ca:c6:fe:df:6c:50:99:c7:8f:86:b3:9b:25:fd:7c:d0:25:94: b5:c1:49:29:f8:07:30:f8:2f:c5:8c:c6:f4:ce:87:4f:3c:b2: 07:c0:30:f3:0c:e0:ce:dc:aa:9b:ba:2d:4d:f5:ac:3d:d1:70: ab:34:2d:ec:64:cf:62:15:27:56:ad:49:2e:e1:ac:05:5b:cc: 91:4a:f8:de:a2:38:5d:cf:02:b6:6a:52:42:ed:45:df:98:64: ca:bc:93:97:91:9d:50:41:42:ba:da:e0:c3:0a:24:67:6f:37: 7e:88:88:3f -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUZk180zJoLjGecYEUmTDRJA5i+tkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzQ4MjlaFw0yNzA2MjgwNzUzMjlaMDMxMTAvBgNV BAMTKDk5QkU5RjM2NjZDQjI2QTE2RDYwQ0RBRTgyQkQ3MTRCQTExQzA0NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHQm8EXQ1a4R/z7yP/Eh43nET hYvpTV2IPe8stNORhLPBjQMWW4sHd62346kMgSPqwK4kvhGNCFPlxWnPvpCVTwVs k7DUllCfwgVs7uNkjFMWfuiPUFNbO+E539KMXOROkimgIA7IN8LGSuDZBUshQKI7 ZS/5y79nXE2gLFNL2oy7R7NjC4QS/qcLdpSzAgCMsCpe0bH7keuviSUPUC2dSssb HxLWLn45U1kS48VY3DnxoT1AOeDt2oJXxp6Sme1KyZ0RdDRqHQVy6yo/ekn6Ru3r O91ZCjk6GZnxUlxTHPGyhuBySGc7zekzHNv2nkVM2w6F1N5ZQNO3+etTd8x5AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUmb6fNmbLJqFtYM2ugr1xS6EcBEcwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzEzMDMzMmUz MTMwMzcyZTMyMzEzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMTM1MzQz My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmdr2DANBgkqhkiG9w0BAQsFAAOCAQEAmCodZ18wUMlA8aIS wI1OzTMIvjrcaBqGzKIESkYftxFa/ZNBaifpv30m1dD/ViA84TefJAU/MkJI6G57 gHZi72QlCE0v9zkiHno3qD7AauvWYhWXMDKpvtxx868bW8w952aIzBJsU2uGJeFb D8SId+87leYqi41i8BUld2uxOPw4MmHgWCrl8Xyj0BLFn2Xpysb+32xQmcePhrOb Jf180CWUtcFJKfgHMPgvxYzG9M6HTzyyB8Aw8wzgztyqm7otTfWsPdFwqzQt7GTP YhUnVq1JLuGsBVvMkUr43qI4Xc8CtmpSQu1F35hkyryTl5GdUEFCutrgwwokZ283 foiIPw== -----END CERTIFICATE-----Generated at Tue Jul 14 21:56:45 2026 by rpki-client