$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232332e302f32342d3234203d3e203138313138.roa File: 3132302e34372e3232332e302f32342d3234203d3e203138313138.roa (raw, json) Hash identifier: 5hyGrWO/TFMZNEs33D8pHROVP/AuviVPbpaZsn6dgXE= Subject key identifier: 0F:76:3E:0F:A7:E0:F7:CD:5C:0D:8E:48:0A:3C:1C:58:FA:65:F4:E2 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 6483EAC36BBE53F7B7E2405E6640C6D69ED2181F Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232332e302f32342d3234203d3e203138313138.roa Signing time: Fri 26 Jun 2026 04:09:54 +0000 ROA not before: Fri 26 Jun 2026 04:04:54 +0000 ROA not after: Fri 25 Jun 2027 04:09:54 +0000 asID: 18118 IP address blocks: 120.47.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:83:ea:c3:6b:be:53:f7:b7:e2:40:5e:66:40:c6:d6:9e:d2:18:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 26 04:04:54 2026 GMT Not After : Jun 25 04:09:54 2027 GMT Subject: CN=0F763E0FA7E0F7CD5C0D8E480A3C1C58FA65F4E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f7:36:82:1e:20:15:2f:99:e6:90:3e:a3:b3: e0:b7:4a:21:ff:fd:36:9c:23:3a:4e:66:d7:40:8a: 4d:50:07:cc:61:28:5f:f5:41:83:66:ea:4a:cd:94: fb:e5:f9:98:2a:97:ad:eb:f0:a7:50:c3:ac:ad:30: 4e:c7:0f:0a:a8:e4:06:26:32:9e:41:76:89:81:16: b5:0c:06:1c:ae:b0:f9:8b:ae:14:2b:1d:fa:53:50: 2e:b5:6a:1a:ef:be:db:6e:3c:3c:27:4e:17:61:1c: 9c:b4:2c:30:1a:a4:23:5a:a2:64:ca:86:b5:74:74: d2:48:2e:fc:5c:b7:70:4d:aa:f4:37:21:3c:dd:d7: 2e:d1:da:bf:ef:e9:33:35:44:c3:a6:37:ab:88:41: 9e:3b:48:e9:d1:aa:0f:02:58:7f:f9:b0:29:fc:5c: 25:30:12:b2:47:76:e5:fd:3b:a4:b3:b8:80:b6:0a: 7b:bd:06:17:7f:45:60:04:65:c2:ab:74:fb:1e:3d: 09:25:4e:e8:7c:19:d7:f1:b3:e4:e6:7e:36:c4:9e: d0:9f:ba:7c:c6:28:fb:af:f2:e5:f8:d4:8d:0a:a6: 83:5b:92:b1:b3:a2:d5:6a:98:e3:9e:bb:7b:d2:80: cf:52:7a:b7:db:a2:06:50:dd:21:0f:74:ad:e7:65: 12:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:76:3E:0F:A7:E0:F7:CD:5C:0D:8E:48:0A:3C:1C:58:FA:65:F4:E2 X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232332e302f32342d3234203d3e203138313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.47.223.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:66:25:00:f0:c4:4f:cc:36:21:d0:a2:b4:f6:97:87:91:06: ef:29:37:11:9e:b1:8f:ab:06:05:04:99:a9:9a:91:ff:8c:b5: 98:98:b2:7f:9c:29:4e:9e:0e:98:5b:7f:ea:54:7a:29:83:fa: b2:68:53:b9:3a:5f:b8:b2:f0:41:cd:78:d6:4f:c8:22:f5:10: 62:dd:81:5e:99:4a:5d:8f:08:55:01:18:c0:7e:d2:08:d9:30: 3e:63:c7:db:3e:46:d3:1e:16:ac:d6:36:9f:bf:ed:ef:b5:28: 13:dd:73:24:5d:8c:08:fa:39:50:a6:02:27:37:0d:ce:cf:c0: 46:c7:08:be:d4:b8:f4:8b:c9:f6:89:5e:d6:41:c3:6e:2a:09: b1:a7:9b:df:ab:a6:0e:df:6e:d3:e3:c1:98:5c:1b:92:1f:71: 75:ff:4f:bc:a3:8b:84:f2:6b:ad:dd:e5:9d:3e:7c:96:70:c3: b1:48:68:49:e7:3c:02:dc:11:86:c2:e8:b4:93:70:0b:ee:20: af:8a:0d:75:48:7a:a1:6c:37:48:db:2f:a2:77:e6:46:b4:c9: 54:6c:b7:f2:da:7f:9f:a4:cb:11:56:5b:a0:4b:2f:e2:c2:f1: 26:bf:39:4a:4a:4b:b8:00:0d:47:71:1e:ca:d4:2b:b0:38:72: 93:cf:3f:2a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZIPqw2u+U/e34kBeZkDG1p7SGB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MjYwNDA0NTRaFw0yNzA2MjUwNDA5NTRaMDMxMTAvBgNV BAMTKDBGNzYzRTBGQTdFMEY3Q0Q1QzBEOEU0ODBBM0MxQzU4RkE2NUY0RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC49zaCHiAVL5nmkD6js+C3SiH/ /TacIzpOZtdAik1QB8xhKF/1QYNm6krNlPvl+Zgql63r8KdQw6ytME7HDwqo5AYm Mp5BdomBFrUMBhyusPmLrhQrHfpTUC61ahrvvttuPDwnThdhHJy0LDAapCNaomTK hrV0dNJILvxct3BNqvQ3ITzd1y7R2r/v6TM1RMOmN6uIQZ47SOnRqg8CWH/5sCn8 XCUwErJHduX9O6SzuIC2Cnu9Bhd/RWAEZcKrdPsePQklTuh8Gdfxs+TmfjbEntCf unzGKPuv8uX41I0KpoNbkrGzotVqmOOeu3vSgM9SerfbogZQ3SEPdK3nZRJJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUD3Y+D6fg981cDY5ICjwcWPpl9OIwHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMxMzIzMDJlMzQz NzJlMzIzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHgv3zANBgkqhkiG9w0BAQsFAAOCAQEAOmYlAPDET8w2IdCitPaXh5EG 7yk3EZ6xj6sGBQSZqZqR/4y1mJiyf5wpTp4OmFt/6lR6KYP6smhTuTpfuLLwQc14 1k/IIvUQYt2BXplKXY8IVQEYwH7SCNkwPmPH2z5G0x4WrNY2n7/t77UoE91zJF2M CPo5UKYCJzcNzs/ARscIvtS49IvJ9ole1kHDbioJsaeb36umDt9u0+PBmFwbkh9x df9PvKOLhPJrrd3lnT58lnDDsUhoSec8AtwRhsLotJNwC+4gr4oNdUh6oWw3SNsv onfmRrTJVGy38tp/n6TLEVZboEsv4sLxJr85SkpLuAANR3EeytQrsDhyk88/Kg== -----END CERTIFICATE-----Generated at Fri Jul 24 21:26:18 2026 by rpki-client