$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e36342e302f31382d3138203d3e2034383038.roa File: 36302e3139342e36342e302f31382d3138203d3e2034383038.roa (raw, json) Hash identifier: Dx4gXrgJ5A8zbXibcfygSbNanvPuYMUK/P7aNo83kc8= Subject key identifier: 95:46:01:4A:24:C8:38:36:27:64:3D:46:6C:8F:FA:AB:55:ED:3C:30 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 5A8BE749E5D0098A378BCE028E4E1990006E868D Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e36342e302f31382d3138203d3e2034383038.roa Signing time: Wed 13 May 2026 03:41:32 +0000 ROA not before: Wed 13 May 2026 03:36:32 +0000 ROA not after: Wed 12 May 2027 03:41:32 +0000 asID: 4808 IP address blocks: 60.194.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:8b:e7:49:e5:d0:09:8a:37:8b:ce:02:8e:4e:19:90:00:6e:86:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: May 13 03:36:32 2026 GMT Not After : May 12 03:41:32 2027 GMT Subject: CN=9546014A24C8383627643D466C8FFAAB55ED3C30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:a7:7a:7c:a2:c5:a6:ab:a7:8c:a1:bd:f5: ed:e1:75:c6:df:b8:52:bc:fa:68:1e:77:3a:08:2b: 59:b4:f4:e2:ba:ca:66:08:c8:7f:8b:f4:a1:b9:63: 26:29:ed:39:d1:f7:70:c3:52:13:4a:de:04:a9:e8: 77:1c:bd:13:9c:24:60:26:cc:60:6d:12:d3:94:03: a8:82:2b:e9:2a:00:6b:42:18:a6:9b:8a:95:57:cd: a8:77:11:f2:25:50:19:96:a3:73:b1:18:f6:bc:7f: 3e:22:34:71:f5:0f:fb:29:1d:68:d5:01:c2:f2:e0: 64:fd:c7:e2:47:69:8f:51:0a:96:4b:58:f5:6a:03: f7:72:7d:ee:a1:eb:74:70:12:c9:02:29:15:70:7d: 61:35:60:d5:eb:7c:e4:15:e8:5a:77:47:1c:d1:8c: a5:5a:b0:ba:67:44:9d:ee:74:b1:78:73:cc:23:ac: 7c:09:db:10:97:3f:e0:21:27:dc:b1:01:85:66:6f: 51:a8:f7:4f:a5:37:0f:dc:eb:7a:c5:77:6e:9c:0a: ac:49:74:c1:bd:d0:8b:fe:d8:7a:ca:15:02:ac:f6: d9:90:68:6a:29:4e:a2:1d:05:e8:fc:96:cb:31:c8: 21:0d:6c:fa:36:88:93:f2:b6:ca:1d:7d:44:36:b3: de:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:46:01:4A:24:C8:38:36:27:64:3D:46:6C:8F:FA:AB:55:ED:3C:30 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e36342e302f31382d3138203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 60.194.64.0/18 Signature Algorithm: sha256WithRSAEncryption 76:62:8a:35:8e:9b:1a:77:3b:bc:23:7e:7b:2a:b7:54:7e:9a: b1:67:e0:93:32:85:b3:c4:27:58:18:91:f6:87:b3:52:0e:39: 42:63:ab:9e:22:68:75:36:a8:9d:cf:c5:c1:a2:96:56:57:51: 42:c1:42:28:a6:cc:71:27:9b:90:62:54:65:84:ea:a9:d9:e0: 1a:1b:9d:c9:26:55:58:f7:96:57:ee:90:9b:d9:24:8d:db:d5: f6:8b:32:9c:65:66:f5:e3:4e:39:4e:62:b0:e5:af:c1:64:f5: bc:30:c6:87:60:3b:4e:cb:a6:fe:1c:be:aa:f5:0d:13:ca:a0: 27:55:2a:d5:a8:77:aa:71:d3:9f:c7:84:e0:9d:17:a6:d8:f5: 2e:65:d1:78:8d:46:f5:51:8a:17:b3:fe:34:0a:1d:4e:80:31: ed:15:3d:34:88:af:d1:68:a5:aa:93:4d:c4:1f:fb:b1:a8:59: e7:86:86:8c:48:6e:14:4f:c8:4d:36:d2:f8:3e:ee:5a:52:d0: 54:b8:66:4c:54:32:25:86:29:b2:d8:20:8e:18:d8:89:6e:76: 9a:a8:69:11:80:55:8d:ad:97:6b:e8:48:f7:cb:ab:05:4e:f4: 69:08:05:4c:da:e9:5e:9c:06:95:f2:0d:ac:11:cd:f7:d2:65: 9f:fb:47:91 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUWovnSeXQCYo3i84Cjk4ZkABuho0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA1MTMwMzM2MzJaFw0yNzA1MTIwMzQxMzJaMDMxMTAvBgNV BAMTKDk1NDYwMTRBMjRDODM4MzYyNzY0M0Q0NjZDOEZGQUFCNTVFRDNDMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE1Kd6fKLFpqunjKG99e3hdcbf uFK8+mgedzoIK1m09OK6ymYIyH+L9KG5YyYp7TnR93DDUhNK3gSp6HccvROcJGAm zGBtEtOUA6iCK+kqAGtCGKabipVXzah3EfIlUBmWo3OxGPa8fz4iNHH1D/spHWjV AcLy4GT9x+JHaY9RCpZLWPVqA/dyfe6h63RwEskCKRVwfWE1YNXrfOQV6Fp3RxzR jKVasLpnRJ3udLF4c8wjrHwJ2xCXP+AhJ9yxAYVmb1Go90+lNw/c63rFd26cCqxJ dMG90Iv+2HrKFQKs9tmQaGopTqIdBej8lssxyCENbPo2iJPytsodfUQ2s951AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUlUYBSiTIODYnZD1GbI/6q1XtPDAwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzYzMDJlMzEzOTM0 MmUzNjM0MmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAY8wkAwDQYJKoZIhvcNAQELBQADggEBAHZiijWOmxp3O7wjfnsqt1R+mrFn4JMy hbPEJ1gYkfaHs1IOOUJjq54iaHU2qJ3PxcGillZXUULBQiimzHEnm5BiVGWE6qnZ 4BobnckmVVj3llfukJvZJI3b1faLMpxlZvXjTjlOYrDlr8Fk9bwwxodgO07Lpv4c vqr1DRPKoCdVKtWod6px05/HhOCdF6bY9S5l0XiNRvVRihez/jQKHU6AMe0VPTSI r9FopaqTTcQf+7GoWeeGhoxIbhRPyE020vg+7lpS0FS4ZkxUMiWGKbLYII4Y2Ilu dpqoaRGAVY2tl2voSPfLqwVO9GkIBUza6V6cBpXyDawRzffSZZ/7R5E= -----END CERTIFICATE-----Generated at Wed May 13 16:15:16 2026 by rpki-client