$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1146998263128260653/0/3132332e3130332e32342e302f32322d3232203d3e2034383038.roa File: 3132332e3130332e32342e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: FZPXOuuaRRXPhHCFo0zBvRgZoP26kE1/D9UKHQehW7I= Subject key identifier: F2:B7:F4:6C:AF:42:70:C0:47:2C:E6:24:CB:8F:9D:6F:1E:DF:2F:97 Certificate issuer: /CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Certificate serial: 74689927475F7685DD8B691CF6EA77E64CD0500D Authority key identifier: 15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/3132332e3130332e32342e302f32322d3232203d3e2034383038.roa Signing time: Tue 01 Sep 2026 02:45:54 +0000 ROA not before: Tue 01 Sep 2026 02:40:54 +0000 ROA not after: Tue 31 Aug 2027 02:45:54 +0000 asID: 4808 IP address blocks: 123.103.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Sep 2026 00:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:68:99:27:47:5f:76:85:dd:8b:69:1c:f6:ea:77:e6:4c:d0:50:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1557B2F78A0F8ACA63B4BED7564D19B79B69FFED Validity Not Before: Sep 1 02:40:54 2026 GMT Not After : Aug 31 02:45:54 2027 GMT Subject: CN=F2B7F46CAF4270C0472CE624CB8F9D6F1EDF2F97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:66:e7:77:45:d5:c8:41:88:2e:98:88:d0:73: 23:0c:89:1f:97:bb:f2:4e:a7:a2:7c:d4:6d:f2:4c: dd:bf:f7:1b:86:6e:8c:18:3c:7d:fd:03:de:5e:9a: 50:09:b6:c8:03:f5:10:c4:4e:0c:9b:6a:62:77:e9: 44:15:46:b6:1e:a2:e5:25:67:9a:49:14:df:ab:8e: 6c:5c:b7:42:c3:09:7a:f7:89:d1:fd:55:da:51:5d: 2f:c9:93:a1:e1:d8:ef:ba:5d:af:f0:5a:d8:b8:b8: bd:32:b8:0d:0b:c5:a9:b9:c9:19:dd:75:1a:f9:af: e6:1e:55:2b:aa:b6:be:08:be:9a:5e:a8:c6:ab:b8: 0a:9b:6c:6a:e0:58:66:68:f4:5c:65:f7:1f:7b:09: 8f:9c:1b:28:0b:27:b2:c8:6e:5a:f9:2b:9e:47:67: 45:19:1e:5e:69:8c:a0:b2:01:9c:c2:a0:4a:d1:94: c7:45:85:a7:25:a5:77:bf:ed:ae:1c:37:20:3a:0f: 42:13:24:33:66:fd:48:cc:5d:ff:c2:c6:f3:8d:85: 39:90:db:ce:19:df:c4:c3:f3:0a:72:4f:97:08:7e: 65:f3:47:91:ab:70:0e:cf:2e:4b:ff:ca:e0:bc:55: 7d:60:f3:91:6a:86:34:a8:46:8f:24:eb:d4:ed:63: a7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B7:F4:6C:AF:42:70:C0:47:2C:E6:24:CB:8F:9D:6F:1E:DF:2F:97 X509v3 Authority Key Identifier: keyid:15:57:B2:F7:8A:0F:8A:CA:63:B4:BE:D7:56:4D:19:B7:9B:69:FF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1557B2F78A0F8ACA63B4BED7564D19B79B69FFED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1146998263128260653/0/3132332e3130332e32342e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 123.103.24.0/22 Signature Algorithm: sha256WithRSAEncryption 0e:12:6b:45:45:7c:6a:e9:ce:99:76:9c:ed:0c:9a:99:32:ff: d8:11:90:d1:5b:be:20:b2:aa:6b:40:b5:7a:84:24:b3:3a:e2: 5b:d6:ba:68:33:c7:d5:78:3a:8b:3f:61:15:dc:f6:63:ef:51: 05:bc:52:35:fa:ed:d0:8b:c9:30:5a:47:ae:4c:e7:32:6b:57: 73:bd:a8:8b:a6:d9:f4:8e:94:e5:76:64:b8:0f:d0:71:5d:99: 76:ee:af:bb:e4:27:33:e7:21:ae:68:fd:33:1b:bc:aa:03:63: f5:5f:6f:84:a1:ef:cc:27:a2:26:43:75:5d:89:25:1d:22:01: 5b:ae:f0:ba:e0:c4:ca:88:11:e6:74:d2:d2:f3:2e:8a:07:b3: 39:83:37:c5:22:ec:37:f2:d9:fc:d4:dd:da:5a:f7:d8:57:87: 55:de:48:e3:68:68:0a:a3:f4:0e:7c:91:21:3d:00:78:a7:d6: e1:00:aa:c1:ca:ee:32:6d:1f:a2:78:61:f2:a6:97:74:47:1f: 85:d4:22:57:54:85:7e:e5:05:de:9c:6d:5d:79:6b:9f:0f:5a: 42:ff:58:53:11:d6:9a:af:2f:5c:0e:b5:44:3d:f2:fc:f5:17: e3:d4:2c:a4:a1:e7:84:66:83:40:77:0e:dc:59:32:f3:9d:43: 70:60:3a:39 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdGiZJ0dfdoXdi2kc9up35kzQUA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5 QjY5RkZFRDAeFw0yNjA5MDEwMjQwNTRaFw0yNzA4MzEwMjQ1NTRaMDMxMTAvBgNV BAMTKEYyQjdGNDZDQUY0MjcwQzA0NzJDRTYyNENCOEY5RDZGMUVERjJGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRZud3RdXIQYgumIjQcyMMiR+X u/JOp6J81G3yTN2/9xuGbowYPH39A95emlAJtsgD9RDETgybamJ36UQVRrYeouUl Z5pJFN+rjmxct0LDCXr3idH9VdpRXS/Jk6Hh2O+6Xa/wWti4uL0yuA0Lxam5yRnd dRr5r+YeVSuqtr4IvppeqMaruAqbbGrgWGZo9Fxl9x97CY+cGygLJ7LIblr5K55H Z0UZHl5pjKCyAZzCoErRlMdFhaclpXe/7a4cNyA6D0ITJDNm/UjMXf/CxvONhTmQ 284Z38TD8wpyT5cIfmXzR5GrcA7PLkv/yuC8VX1g85FqhjSoRo8k69TtY6dPAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU8rf0bK9CcMBHLOYky4+dbx7fL5cwHwYDVR0j BBgwFoAUFVey94oPispjtL7XVk0Zt5tp/+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTE0 Njk5ODI2MzEyODI2MDY1My8wLzE1NTdCMkY3OEEwRjhBQ0E2M0I0QkVENzU2NEQx OUI3OUI2OUZGRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU1N0IyRjc4QTBGOEFDQTYzQjRCRUQ3NTY0RDE5Qjc5QjY5RkZFRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTQ2OTk4MjYzMTI4MjYwNjUzLzAvMzEzMjMzMmUzMTMw MzMyZTMyMzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAntnGDANBgkqhkiG9w0BAQsFAAOCAQEADhJrRUV8aunOmXac7QyamTL/2BGQ 0Vu+ILKqa0C1eoQkszriW9a6aDPH1Xg6iz9hFdz2Y+9RBbxSNfrt0IvJMFpHrkzn MmtXc72oi6bZ9I6U5XZkuA/QcV2Zdu6vu+QnM+chrmj9Mxu8qgNj9V9vhKHvzCei JkN1XYklHSIBW67wuuDEyogR5nTS0vMuigezOYM3xSLsN/LZ/NTd2lr32FeHVd5I 42hoCqP0DnyRIT0AeKfW4QCqwcruMm0fonhh8qaXdEcfhdQiV1SFfuUF3pxtXXlr nw9aQv9YUxHWmq8vXA61RD3y/PUX49QspKHnhGaDQHcO3Fky851DcGA6OQ== -----END CERTIFICATE-----Generated at Thu Sep 10 13:03:10 2026 by rpki-client