$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232382e302f32342d3234203d3e203138313138.roa File: 3132302e34372e3232382e302f32342d3234203d3e203138313138.roa (raw, json) Hash identifier: aX6UAN8IptupsIco244oM8TQWVO6/uEIZgvKXYL1SlQ= Subject key identifier: 1D:9D:26:58:64:F5:9B:D0:6C:9C:DA:BE:8B:C3:0A:C9:B5:09:77:7B Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 547951ADB8ECC81A13CC0ADC641FC022D21FA1E3 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232382e302f32342d3234203d3e203138313138.roa Signing time: Fri 26 Jun 2026 04:09:53 +0000 ROA not before: Fri 26 Jun 2026 04:04:53 +0000 ROA not after: Fri 25 Jun 2027 04:09:53 +0000 asID: 18118 IP address blocks: 120.47.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:79:51:ad:b8:ec:c8:1a:13:cc:0a:dc:64:1f:c0:22:d2:1f:a1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 26 04:04:53 2026 GMT Not After : Jun 25 04:09:53 2027 GMT Subject: CN=1D9D265864F59BD06C9CDABE8BC30AC9B509777B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:0e:ba:f6:31:3d:36:fe:36:b7:0c:60:66: 67:c4:0b:e2:63:0a:b7:72:ff:14:0d:08:ac:73:3d: 2a:89:5b:b4:eb:69:17:91:c8:2c:e9:7d:50:27:2e: df:fc:8c:4e:5d:36:26:02:5d:4a:18:00:10:41:6e: 29:1a:d6:ab:ef:e8:ed:40:b5:85:66:fe:2b:f1:1d: e2:ca:a9:60:07:9d:f6:7a:25:85:fc:34:3a:91:44: 88:4f:cc:31:ab:c7:e0:ef:d9:35:5f:6d:11:71:fd: 3f:2b:f9:a5:b7:05:ea:2a:10:15:85:f8:18:f2:0b: fd:5e:d7:b0:8f:dc:c6:6e:8c:3c:84:97:42:45:b2: 6e:d7:85:bf:3d:88:4d:07:b7:60:3e:4e:c7:90:c0: fc:ed:f2:0e:fd:ae:7f:ff:29:dc:9b:10:5e:e8:48: 1c:37:4d:7a:3b:11:82:f5:69:28:75:37:cd:e8:ec: f8:cf:28:22:1b:87:17:a7:b0:8d:44:a1:37:62:29: f3:d9:2c:da:be:13:cf:4a:7a:9e:5e:59:ed:d1:39: 61:07:c4:c3:f6:e1:81:bc:c5:7d:79:69:50:e7:43: 74:10:18:d2:11:ab:fd:51:70:81:e8:59:8b:02:ee: 5b:8c:c5:1a:2e:f7:76:37:b7:f0:8d:84:17:59:fb: ec:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9D:26:58:64:F5:9B:D0:6C:9C:DA:BE:8B:C3:0A:C9:B5:09:77:7B X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232382e302f32342d3234203d3e203138313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.47.228.0/24 Signature Algorithm: sha256WithRSAEncryption 92:4d:2b:ce:31:49:4d:14:79:1f:58:5c:73:9d:92:5d:5c:52: b7:21:00:07:34:5e:a8:5c:2e:5d:d8:29:cc:47:7f:db:92:da: 4e:a9:71:17:0e:e2:80:53:9f:95:90:a8:b4:d3:b6:15:10:0e: d7:a6:ff:4f:89:63:47:0a:24:43:e2:79:61:7f:62:89:9c:d2: c4:0f:a7:11:65:36:50:6d:1f:40:d0:24:83:69:8a:b8:f0:3c: 21:80:dc:b0:9a:be:f7:68:a3:75:59:22:f8:6d:4b:9d:aa:0b: ae:d5:9f:b6:75:2b:0a:97:6f:69:f4:10:3a:20:e9:2c:7f:0d: 16:eb:c1:0f:ff:87:cf:82:bf:98:0f:0a:55:bb:af:ec:09:25: 9b:ed:ae:65:98:9c:00:fb:eb:db:af:aa:ed:0e:41:43:89:1d: 24:c2:f8:45:10:be:0f:5f:a2:e1:dc:2c:96:fa:a1:07:c1:23: 9e:77:d9:3f:2e:dc:35:57:44:9e:b8:e0:7f:66:3f:0f:d1:41: 77:60:27:6b:9d:03:e1:34:bb:9e:a2:9a:98:b9:ef:9a:67:72: a0:98:ce:f4:c8:e9:5e:15:98:df:16:97:0a:97:dd:89:62:19: 8d:20:79:1a:3f:48:7c:d8:d7:05:96:43:a4:57:44:81:f7:4f: 9c:3e:4c:10 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVHlRrbjsyBoTzArcZB/AItIfoeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MjYwNDA0NTNaFw0yNzA2MjUwNDA5NTNaMDMxMTAvBgNV BAMTKDFEOUQyNjU4NjRGNTlCRDA2QzlDREFCRThCQzMwQUM5QjUwOTc3N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63A669jE9Nv42twxgZmfEC+Jj Crdy/xQNCKxzPSqJW7TraReRyCzpfVAnLt/8jE5dNiYCXUoYABBBbika1qvv6O1A tYVm/ivxHeLKqWAHnfZ6JYX8NDqRRIhPzDGrx+Dv2TVfbRFx/T8r+aW3BeoqEBWF +BjyC/1e17CP3MZujDyEl0JFsm7Xhb89iE0Ht2A+TseQwPzt8g79rn//KdybEF7o SBw3TXo7EYL1aSh1N83o7PjPKCIbhxensI1EoTdiKfPZLNq+E89Kep5eWe3ROWEH xMP24YG8xX15aVDnQ3QQGNIRq/1RcIHoWYsC7luMxRou93Y3t/CNhBdZ++zJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUHZ0mWGT1m9BsnNq+i8MKybUJd3swHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMxMzIzMDJlMzQz NzJlMzIzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAHgv5DANBgkqhkiG9w0BAQsFAAOCAQEAkk0rzjFJTRR5H1hcc52SXVxS tyEABzReqFwuXdgpzEd/25LaTqlxFw7igFOflZCotNO2FRAO16b/T4ljRwokQ+J5 YX9iiZzSxA+nEWU2UG0fQNAkg2mKuPA8IYDcsJq+92ijdVki+G1LnaoLrtWftnUr CpdvafQQOiDpLH8NFuvBD/+Hz4K/mA8KVbuv7Aklm+2uZZicAPvr26+q7Q5BQ4kd JML4RRC+D1+i4dwslvqhB8EjnnfZPy7cNVdEnrjgf2Y/D9FBd2Ana50D4TS7nqKa mLnvmmdyoJjO9MjpXhWY3xaXCpfdiWIZjSB5Gj9IfNjXBZZDpFdEgfdPnD5MEA== -----END CERTIFICATE-----Generated at Fri Jul 24 21:26:16 2026 by rpki-client