$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3132382e302f32342d3234203d3e203138313138.roa File: 3231392e37322e3132382e302f32342d3234203d3e203138313138.roa (raw, json) Hash identifier: Nt8F7y2dmaZDts2GqYiq7++ka+zv/SU+ff/wahuhXjM= Subject key identifier: 39:8A:53:F6:4A:75:14:BD:B3:35:F3:9C:6B:0F:27:EF:F4:F5:2A:08 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 4B670639814809AAC3AE99F88F6D284BB8F2AE29 Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3132382e302f32342d3234203d3e203138313138.roa Signing time: Fri 26 Jun 2026 04:12:41 +0000 ROA not before: Fri 26 Jun 2026 04:07:41 +0000 ROA not after: Fri 25 Jun 2027 04:12:41 +0000 asID: 18118 IP address blocks: 219.72.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:67:06:39:81:48:09:aa:c3:ae:99:f8:8f:6d:28:4b:b8:f2:ae:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 26 04:07:41 2026 GMT Not After : Jun 25 04:12:41 2027 GMT Subject: CN=398A53F64A7514BDB335F39C6B0F27EFF4F52A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:33:a9:ff:ed:aa:07:6d:c0:1a:25:04:7c:86: e0:e3:99:e0:7c:7f:16:b8:d5:c1:29:66:d6:53:f3: f9:ff:0b:5f:06:11:14:3a:a5:33:a4:75:78:b0:13: c7:e6:b9:b7:fd:cd:80:55:c4:89:e2:11:75:8d:cb: 42:f3:c3:35:5e:d6:70:72:d1:17:f3:5b:53:32:bc: c3:1a:29:0e:93:14:ad:9c:b7:de:52:f1:9c:2b:ee: 30:96:a0:72:11:7a:da:b6:a0:6d:81:da:4a:2e:94: a3:77:0c:23:e1:36:88:47:ea:e2:3b:f5:26:27:30: ec:59:25:c7:89:98:0b:c6:23:2a:69:7b:5a:7f:34: b9:cc:29:18:8a:7e:e8:39:92:c3:1a:ce:35:e5:8d: 8a:af:c5:5f:fd:0c:62:a8:97:af:99:dc:f1:c7:e4: 39:93:bf:60:f2:09:b8:84:71:d9:13:6a:55:25:81: 01:e3:43:11:5a:fe:b7:d9:8c:a9:d0:8d:20:b4:b4: c8:c8:c6:2b:6e:92:6c:6c:88:d1:4f:be:63:8d:e8: 13:3f:79:31:90:37:0a:83:f0:b2:20:15:ed:e6:3c: 2f:6e:7b:d8:15:30:e9:24:43:ac:9f:70:b0:5e:e5: 4d:80:bd:73:44:92:1b:29:66:b3:dc:24:69:84:b4: 09:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:8A:53:F6:4A:75:14:BD:B3:35:F3:9C:6B:0F:27:EF:F4:F5:2A:08 X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3132382e302f32342d3234203d3e203138313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.72.128.0/24 Signature Algorithm: sha256WithRSAEncryption 81:91:25:7d:43:78:a9:8d:c1:c3:aa:14:c7:a4:36:55:a8:4c: ad:8a:c2:65:ba:91:25:e4:51:e2:f9:33:fc:70:cd:b6:e8:91: da:41:8c:c4:67:22:52:09:c2:bb:6f:50:9a:b6:fa:b4:44:aa: 17:c6:39:24:dd:9b:cd:90:8f:8b:08:d8:a8:95:9a:ad:55:f5: 1f:a0:de:1b:d3:4a:df:3c:dc:7b:6e:98:31:d9:82:5f:16:b7: f2:ad:f6:bf:fe:53:66:d1:99:25:ca:44:70:cd:30:8d:07:2c: cd:78:59:2d:a7:98:d6:5b:ef:6e:be:29:44:84:4e:48:1a:2a: 9b:28:a7:61:5a:95:0d:5e:e5:71:e6:e7:ce:2b:76:53:a4:36: e8:d1:13:1a:3a:db:5a:be:5a:53:eb:03:c3:f2:0f:7b:76:ac: 4e:85:03:ba:d8:2c:77:c0:c8:5f:3a:49:0a:d0:02:03:4e:7e: a2:cd:a0:2d:bc:b7:d2:ef:47:d5:7d:73:22:3f:22:5d:6c:cc: c2:8f:79:35:1b:48:99:aa:57:15:db:1d:23:9c:7e:1e:80:81: e4:dd:1b:dc:e7:88:aa:5c:f3:65:e1:76:55:b9:af:cb:86:c4: 23:99:0d:74:bb:ba:23:ef:24:ec:c5:9d:34:01:c3:15:b5:41: 8b:b3:0c:8e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUS2cGOYFICarDrpn4j20oS7jyrikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MjYwNDA3NDFaFw0yNzA2MjUwNDEyNDFaMDMxMTAvBgNV BAMTKDM5OEE1M0Y2NEE3NTE0QkRCMzM1RjM5QzZCMEYyN0VGRjRGNTJBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYM6n/7aoHbcAaJQR8huDjmeB8 fxa41cEpZtZT8/n/C18GERQ6pTOkdXiwE8fmubf9zYBVxIniEXWNy0LzwzVe1nBy 0RfzW1MyvMMaKQ6TFK2ct95S8Zwr7jCWoHIRetq2oG2B2koulKN3DCPhNohH6uI7 9SYnMOxZJceJmAvGIyppe1p/NLnMKRiKfug5ksMazjXljYqvxV/9DGKol6+Z3PHH 5DmTv2DyCbiEcdkTalUlgQHjQxFa/rfZjKnQjSC0tMjIxitukmxsiNFPvmON6BM/ eTGQNwqD8LIgFe3mPC9ue9gVMOkkQ6yfcLBe5U2AvXNEkhspZrPcJGmEtAmvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOYpT9kp1FL2zNfOcaw8n7/T1KggwHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMyMzEzOTJlMzcz MjJlMzEzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEANtIgDANBgkqhkiG9w0BAQsFAAOCAQEAgZElfUN4qY3Bw6oUx6Q2VahM rYrCZbqRJeRR4vkz/HDNtuiR2kGMxGciUgnCu29Qmrb6tESqF8Y5JN2bzZCPiwjY qJWarVX1H6DeG9NK3zzce26YMdmCXxa38q32v/5TZtGZJcpEcM0wjQcszXhZLaeY 1lvvbr4pRIROSBoqmyinYVqVDV7lcebnzit2U6Q26NETGjrbWr5aU+sDw/IPe3as ToUDutgsd8DIXzpJCtACA05+os2gLby30u9H1X1zIj8iXWzMwo95NRtImapXFdsd I5x+HoCB5N0b3OeIqlzzZeF2Vbmvy4bEI5kNdLu6I+8k7MWdNAHDFbVBi7MMjg== -----END CERTIFICATE-----Generated at Fri Jul 24 20:20:38 2026 by rpki-client