$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32322d3232203d3e203138313138.roa File: 3231392e37322e3135322e302f32322d3232203d3e203138313138.roa (raw, json) Hash identifier: 6JVIEmlPrr5av/oM7SI8AOQMkw8+QcjqvJKRrG+vqpM= Subject key identifier: 38:27:0E:47:C3:52:35:2F:0F:24:7C:70:5B:A2:ED:8C:54:AF:34:89 Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: F7E0186471950B32D2F556F3E1B0FDA625853F Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32322d3232203d3e203138313138.roa Signing time: Mon 29 Jun 2026 09:35:58 +0000 ROA not before: Mon 29 Jun 2026 09:30:58 +0000 ROA not after: Mon 28 Jun 2027 09:35:58 +0000 asID: 18118 IP address blocks: 219.72.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f7:e0:18:64:71:95:0b:32:d2:f5:56:f3:e1:b0:fd:a6:25:85:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 29 09:30:58 2026 GMT Not After : Jun 28 09:35:58 2027 GMT Subject: CN=38270E47C352352F0F247C705BA2ED8C54AF3489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:83:2d:ef:81:64:90:02:b7:aa:90:69:28:10: cf:f8:97:66:25:f9:ed:81:11:7d:5a:7d:69:75:84: 98:0a:e1:1b:d3:c1:5c:ff:7c:56:a0:14:46:da:66: cd:ad:e0:0f:0e:fe:a9:e8:20:25:af:2a:b3:f2:0d: 36:28:27:e9:d6:0d:8f:c4:51:65:a7:76:16:7a:6c: e8:2e:22:f0:94:e4:a5:ef:6e:ae:31:1d:e9:39:77: d1:e2:81:30:f8:01:25:c8:85:7a:90:8e:79:a8:cf: 78:24:c7:08:5c:14:96:74:f8:e4:61:14:07:7a:5f: 54:4c:43:36:ed:3b:6f:92:ff:4f:a2:ec:b2:fd:bd: c3:d0:1e:d9:2c:ea:66:1d:17:48:f2:3c:4b:68:16: 69:02:76:01:54:a9:32:cd:92:b9:4e:11:dd:30:11: e4:a1:d9:a2:02:7b:61:10:99:28:af:6e:76:d7:fb: d4:d2:85:51:3e:df:04:9f:44:42:2d:c2:ea:47:0c: df:21:46:b6:9f:59:df:4c:15:06:72:3f:f5:b5:4e: 50:68:e4:7c:39:c0:5a:65:8e:80:29:9d:1c:7d:0e: 87:f3:70:da:ed:7f:17:06:cd:94:e9:32:52:12:30: 60:69:69:7e:43:79:fe:b6:44:18:7a:d0:12:af:fe: d9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:27:0E:47:C3:52:35:2F:0F:24:7C:70:5B:A2:ED:8C:54:AF:34:89 X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32322d3232203d3e203138313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.72.152.0/22 Signature Algorithm: sha256WithRSAEncryption bb:cb:a1:83:09:7e:a2:5c:17:e0:4f:4a:82:2c:a7:c0:33:ea: 31:92:c8:6f:81:67:45:13:2b:26:1b:7d:ac:95:93:01:46:9c: 4d:31:ad:18:6b:8e:35:16:df:0e:d2:5c:c4:d4:97:87:54:70: 6e:c2:eb:f9:51:4c:8e:68:40:4e:6d:2e:b9:5a:48:bb:75:5f: 5b:ac:fb:be:c5:6f:0d:37:b0:f8:15:09:3f:bb:63:cf:03:09: 87:71:1d:fc:bc:d0:92:d8:42:07:4f:bb:ab:81:ad:fa:4b:94: 75:0e:79:eb:e0:c7:e2:d8:bf:26:c2:c9:8f:40:07:a4:3a:97: 93:34:26:99:6c:42:17:d6:d0:79:ce:33:a3:d6:5d:d4:7b:f3: 09:00:33:01:95:2e:7b:d2:94:4a:76:a2:59:0a:e8:18:92:6d: ec:06:b0:0f:73:1f:9d:63:ef:36:58:4c:fb:f9:31:31:c4:af: 67:12:50:c5:97:a8:bb:28:06:8c:3f:da:c8:e3:42:c3:e6:af: 3c:aa:22:18:eb:cd:09:fe:f6:11:4c:c7:1e:c4:f3:49:32:9b: 50:8c:18:70:7f:ad:0f:61:01:bd:81:3a:18:1c:a6:2e:1e:79: c7:35:8e:e5:80:08:91:24:31:b4:35:1a:67:4f:53:b6:5a:a6: f8:f9:d4:13 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAPfgGGRxlQsy0vVW8+Gw/aYlhT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MjkwOTMwNThaFw0yNzA2MjgwOTM1NThaMDMxMTAvBgNV BAMTKDM4MjcwRTQ3QzM1MjM1MkYwRjI0N0M3MDVCQTJFRDhDNTRBRjM0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdgy3vgWSQAreqkGkoEM/4l2Yl +e2BEX1afWl1hJgK4RvTwVz/fFagFEbaZs2t4A8O/qnoICWvKrPyDTYoJ+nWDY/E UWWndhZ6bOguIvCU5KXvbq4xHek5d9HigTD4ASXIhXqQjnmoz3gkxwhcFJZ0+ORh FAd6X1RMQzbtO2+S/0+i7LL9vcPQHtks6mYdF0jyPEtoFmkCdgFUqTLNkrlOEd0w EeSh2aICe2EQmSivbnbX+9TShVE+3wSfREItwupHDN8hRrafWd9MFQZyP/W1TlBo 5Hw5wFpljoApnRx9DofzcNrtfxcGzZTpMlISMGBpaX5Def62RBh60BKv/tnFAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOCcOR8NSNS8PJHxwW6LtjFSvNIkwHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMyMzEzOTJlMzcz MjJlMzEzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAttImDANBgkqhkiG9w0BAQsFAAOCAQEAu8uhgwl+olwX4E9KgiynwDPq MZLIb4FnRRMrJht9rJWTAUacTTGtGGuONRbfDtJcxNSXh1RwbsLr+VFMjmhATm0u uVpIu3VfW6z7vsVvDTew+BUJP7tjzwMJh3Ed/LzQkthCB0+7q4Gt+kuUdQ556+DH 4ti/JsLJj0AHpDqXkzQmmWxCF9bQec4zo9Zd1HvzCQAzAZUue9KUSnaiWQroGJJt 7AawD3MfnWPvNlhM+/kxMcSvZxJQxZeouygGjD/ayONCw+avPKoiGOvNCf72EUzH HsTzSTKbUIwYcH+tD2EBvYE6GBymLh55xzWO5YAIkSQxtDUaZ09Ttlqm+PnUEw== -----END CERTIFICATE-----Generated at Fri Jul 24 20:20:43 2026 by rpki-client