$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203138313138.roa File: 3231392e37322e3230302e302f32322d3232203d3e203138313138.roa (raw, json) Hash identifier: 49jNOz7QU5k67QOeZNxAgx+0GfrlpqMbjaPnQGMO9ts= Subject key identifier: 71:E3:41:03:4A:86:54:F5:7D:B6:62:99:1F:0B:72:5F:DA:2A:E2:3F Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Certificate serial: 1758AB9EB7DA1B7FE9629F3E99990F24FB87C4FA Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203138313138.roa Signing time: Mon 29 Jun 2026 09:35:58 +0000 ROA not before: Mon 29 Jun 2026 09:30:58 +0000 ROA not after: Mon 28 Jun 2027 09:35:58 +0000 asID: 18118 IP address blocks: 219.72.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:58:ab:9e:b7:da:1b:7f:e9:62:9f:3e:99:99:0f:24:fb:87:c4:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5 Validity Not Before: Jun 29 09:30:58 2026 GMT Not After : Jun 28 09:35:58 2027 GMT Subject: CN=71E341034A8654F57DB662991F0B725FDA2AE23F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f6:34:8e:26:bc:65:a1:7f:e6:b1:00:38:fa: 3e:21:bb:b0:28:f7:87:c7:bf:30:b4:cb:fd:22:ee: 35:d8:91:f3:a9:6d:2a:9a:db:cd:45:38:32:56:66: de:84:be:3d:79:f5:6b:f1:b7:7a:9b:07:6d:6d:90: 10:fe:31:a2:d8:56:d5:2d:7c:6e:4a:31:71:e4:aa: d0:0c:47:0c:41:01:b3:69:44:40:68:d6:65:d2:52: fc:e5:65:f8:0c:05:53:3f:18:ba:ea:20:8b:26:9d: 6b:cd:6b:7d:7b:11:7a:ec:df:4b:b5:a6:37:75:c9: 7e:f8:e2:3a:47:5a:8b:a0:52:a4:bc:66:69:64:89: f5:d5:e1:6e:04:73:34:d5:72:21:e1:8b:ad:bd:96: ca:b0:e3:9a:01:6b:8c:e5:96:f7:69:71:27:ee:b3: 9f:93:16:b3:21:82:29:92:f3:d4:45:00:c7:ad:e1: 79:8a:4e:b3:a1:ef:03:f8:0f:e2:34:b0:1b:65:a0: f2:0f:b8:df:7d:48:4c:b7:72:68:3d:97:ba:15:2c: 78:7b:3c:ea:f5:6b:e4:73:55:7f:2d:c0:6a:61:60: ae:f1:58:a7:44:4b:a9:11:0e:5a:f1:c9:ef:60:97: 81:08:17:dd:16:78:64:67:bf:08:dd:f0:8c:4b:44: 2a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E3:41:03:4A:86:54:F5:7D:B6:62:99:1F:0B:72:5F:DA:2A:E2:3F X509v3 Authority Key Identifier: keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203138313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 219.72.200.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:44:b5:5e:e6:82:f8:59:1e:89:c6:e2:67:77:6f:aa:f8:7a: ab:90:9e:01:82:96:ca:11:bf:c4:b2:ea:9a:02:9f:47:4d:d1: 78:c1:a2:13:09:d8:5a:ff:f1:a7:86:73:8c:74:b3:cc:3b:51: 0e:ed:94:21:c9:5a:bc:77:94:2c:bf:65:bb:d2:be:26:b4:ea: 62:30:9d:47:52:3b:33:31:83:b8:04:fb:f1:05:73:dc:4c:4a: 7a:e7:69:c4:1f:ae:f2:39:00:ca:bc:a5:df:bc:d0:d3:73:f0: 36:12:8e:73:7e:26:f5:4d:91:b6:ef:ed:bd:04:73:75:1f:4d: ba:3d:d0:5f:95:19:94:92:60:10:04:e6:c8:b1:88:84:f0:ae: 34:59:cf:21:16:19:be:60:30:cd:7f:98:03:a0:84:76:40:0b: 5a:b6:0d:bd:fe:84:cf:23:fc:13:ec:a8:c3:87:4d:8f:eb:1a: d2:a3:52:92:65:e3:e5:cb:96:fb:b5:3b:95:e0:87:e3:55:77: e2:d3:a5:05:06:25:19:22:89:0d:40:6e:81:7c:d2:fc:cf:bc: 96:0b:77:44:cb:f8:5f:a5:24:6b:6c:f9:6f:0f:36:78:4b:d8: cc:6a:71:7a:50:34:84:dc:73:5e:79:e4:47:6d:f6:3f:d4:83: d6:7d:71:d6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUF1irnrfaG3/pYp8+mZkPJPuHxPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE MTQxRjVENTAeFw0yNjA2MjkwOTMwNThaFw0yNzA2MjgwOTM1NThaMDMxMTAvBgNV BAMTKDcxRTM0MTAzNEE4NjU0RjU3REI2NjI5OTFGMEI3MjVGREEyQUUyM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9jSOJrxloX/msQA4+j4hu7Ao 94fHvzC0y/0i7jXYkfOpbSqa281FODJWZt6Evj159Wvxt3qbB21tkBD+MaLYVtUt fG5KMXHkqtAMRwxBAbNpREBo1mXSUvzlZfgMBVM/GLrqIIsmnWvNa317EXrs30u1 pjd1yX744jpHWougUqS8ZmlkifXV4W4EczTVciHhi629lsqw45oBa4zllvdpcSfu s5+TFrMhgimS89RFAMet4XmKTrOh7wP4D+I0sBtloPIPuN99SEy3cmg9l7oVLHh7 POr1a+RzVX8twGphYK7xWKdES6kRDlrxye9gl4EIF90WeGRnvwjd8IxLRCp9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUceNBA0qGVPV9tmKZHwtyX9oq4j8wHwYDVR0j BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMyMzEzOTJlMzcz MjJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAttIyDANBgkqhkiG9w0BAQsFAAOCAQEATES1XuaC+FkeicbiZ3dvqvh6 q5CeAYKWyhG/xLLqmgKfR03ReMGiEwnYWv/xp4ZzjHSzzDtRDu2UIclavHeULL9l u9K+JrTqYjCdR1I7MzGDuAT78QVz3ExKeudpxB+u8jkAyryl37zQ03PwNhKOc34m 9U2Rtu/tvQRzdR9Nuj3QX5UZlJJgEATmyLGIhPCuNFnPIRYZvmAwzX+YA6CEdkAL WrYNvf6EzyP8E+yow4dNj+sa0qNSkmXj5cuW+7U7leCH41V34tOlBQYlGSKJDUBu gXzS/M+8lgt3RMv4X6Uka2z5bw82eEvYzGpxelA0hNxzXnnkR232P9SD1n1x1g== -----END CERTIFICATE-----Generated at Fri Jul 24 21:26:16 2026 by rpki-client