$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3132302e3133312e3132382e302f31372d3137203d3e2030.roa File: 3132302e3133312e3132382e302f31372d3137203d3e2030.roa (raw, json) Hash identifier: 7W35xT/nsjYMoC1COBHCbbAK+VZGkoCL8aZ2w9lGC60= Subject key identifier: 49:46:25:49:30:4B:72:BA:DF:66:89:99:5F:14:AF:70:3C:BD:BB:47 Certificate issuer: /CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52 Certificate serial: 67A6B3F09D1D90FFAD56CF6976017B4DD6189512 Authority key identifier: 6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3132302e3133312e3132382e302f31372d3137203d3e2030.roa Signing time: Mon 11 May 2026 08:30:01 +0000 ROA not before: Mon 11 May 2026 08:25:01 +0000 ROA not after: Mon 10 May 2027 08:30:01 +0000 asID: 0 IP address blocks: 120.131.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:52:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a6:b3:f0:9d:1d:90:ff:ad:56:cf:69:76:01:7b:4d:d6:18:95:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52 Validity Not Before: May 11 08:25:01 2026 GMT Not After : May 10 08:30:01 2027 GMT Subject: CN=49462549304B72BADF6689995F14AF703CBDBB47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:02:42:48:39:48:a3:2e:93:91:b9:f3:1b:fc: 07:e1:8c:e7:f0:80:4e:00:1c:4d:e4:86:00:30:78: 79:fa:d8:ae:5a:d1:f1:2a:bc:13:39:58:b3:7c:43: 58:9c:3c:8d:3a:4b:b8:7d:64:65:65:10:9c:17:23: af:40:79:03:3b:c7:76:04:a7:96:10:ba:99:0c:32: 1c:d3:73:d9:e3:ff:e9:00:d4:87:81:5e:ff:d6:f9: d2:3d:87:2d:dc:90:28:74:07:b9:9c:10:4b:c9:3b: 1e:41:9d:91:9d:5b:e5:bc:d0:fb:55:8c:0a:c1:d9: 50:b9:0e:cb:05:31:a2:09:cd:c1:54:22:53:19:a1: 12:c7:4f:c0:cc:28:1c:77:37:3e:f0:76:29:2a:b2: fb:22:e4:ba:12:b4:d6:e4:19:aa:d4:f9:34:a0:91: 30:a8:bb:b8:f9:4e:fe:41:a8:39:67:54:4a:ed:46: d9:83:26:97:9f:52:ce:e0:5b:7e:75:bf:04:ec:07: fc:7f:ab:1d:c2:8c:87:24:01:39:3a:21:9a:8d:db: ac:35:e6:2b:16:34:c0:d8:3f:64:93:c4:23:9d:92: f7:4e:62:fd:78:bd:c1:22:e0:31:b4:39:13:5a:bc: 41:db:5d:b8:79:6d:1c:20:ae:1e:98:70:1d:84:2e: a3:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:46:25:49:30:4B:72:BA:DF:66:89:99:5F:14:AF:70:3C:BD:BB:47 X509v3 Authority Key Identifier: keyid:6B:23:1F:5D:F7:53:5B:F8:6C:FF:EB:85:A0:B2:8E:0A:44:7C:BD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B231F5DF7535BF86CFFEB85A0B28E0A447CBD52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106106457318752269/0/3132302e3133312e3132382e302f31372d3137203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 120.131.128.0/17 Signature Algorithm: sha256WithRSAEncryption 37:7b:ab:35:6b:5e:83:0b:48:c4:35:c6:3c:93:99:1a:84:86: aa:3e:5d:14:d9:75:71:f3:0f:b3:e6:34:4d:95:f3:fb:e9:1f: 5d:6e:a2:99:7c:ab:4a:00:6c:bc:cb:d0:d3:08:a5:52:98:d5: 9f:b3:ed:78:cf:07:e7:37:0e:ac:7d:52:f4:15:5f:89:f3:86: 47:10:38:a4:27:00:f5:31:7d:4b:fa:f3:c1:24:17:31:1b:8e: 89:2d:b5:8c:19:4a:b7:72:e2:26:86:02:42:f1:6c:8c:e6:40: 54:58:74:19:a0:1d:03:69:eb:94:ea:f4:fe:39:36:16:24:9c: 4c:3c:2f:5e:02:0b:d4:91:f6:1a:a4:17:5f:72:a2:87:eb:b2: 0f:04:24:f5:79:e7:a1:e2:ee:c8:92:f1:f5:07:5d:fc:42:7b: 20:2c:dd:85:ce:b4:a5:d9:9a:6f:52:ea:aa:5b:90:cb:91:5f: 78:ac:62:7c:34:17:cf:6a:f2:7c:7f:7e:ae:75:ed:b4:a6:2e: 13:31:b8:6d:43:20:fc:8a:e1:88:60:97:e9:14:10:69:9b:d1: b8:8f:9e:bc:84:32:b0:2d:ad:3f:f2:39:87:4c:b0:19:67:ea: 1e:ef:2a:97:7c:65:54:b0:00:53:e8:7b:b2:14:83:95:cd:88: 96:b4:1b:7f -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUZ6az8J0dkP+tVs9pdgF7TdYYlRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkIyMzFGNURGNzUzNUJGODZDRkZFQjg1QTBCMjhFMEE0 NDdDQkQ1MjAeFw0yNjA1MTEwODI1MDFaFw0yNzA1MTAwODMwMDFaMDMxMTAvBgNV BAMTKDQ5NDYyNTQ5MzA0QjcyQkFERjY2ODk5OTVGMTRBRjcwM0NCREJCNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAkJIOUijLpORufMb/AfhjOfw gE4AHE3khgAweHn62K5a0fEqvBM5WLN8Q1icPI06S7h9ZGVlEJwXI69AeQM7x3YE p5YQupkMMhzTc9nj/+kA1IeBXv/W+dI9hy3ckCh0B7mcEEvJOx5BnZGdW+W80PtV jArB2VC5DssFMaIJzcFUIlMZoRLHT8DMKBx3Nz7wdikqsvsi5LoStNbkGarU+TSg kTCou7j5Tv5BqDlnVErtRtmDJpefUs7gW351vwTsB/x/qx3CjIckATk6IZqN26w1 5isWNMDYP2STxCOdkvdOYv14vcEi4DG0ORNavEHbXbh5bRwgrh6YcB2ELqMHAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUSUYlSTBLcrrfZomZXxSvcDy9u0cwHwYDVR0j BBgwFoAUayMfXfdTW/hs/+uFoLKOCkR8vVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjEwNjQ1NzMxODc1MjI2OS8wLzZCMjMxRjVERjc1MzVCRjg2Q0ZGRUI4NUEwQjI4 RTBBNDQ3Q0JENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkIyMzFGNURGNzUzNUJGODZDRkZFQjg1QTBCMjhFMEE0NDdDQkQ1Mi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2MTA2NDU3MzE4NzUyMjY5LzAvMzEzMjMwMmUzMTMz MzEyZTMxMzIzODJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH eIOAMA0GCSqGSIb3DQEBCwUAA4IBAQA3e6s1a16DC0jENcY8k5kahIaqPl0U2XVx 8w+z5jRNlfP76R9dbqKZfKtKAGy8y9DTCKVSmNWfs+14zwfnNw6sfVL0FV+J84ZH EDikJwD1MX1L+vPBJBcxG46JLbWMGUq3cuImhgJC8WyM5kBUWHQZoB0DaeuU6vT+ OTYWJJxMPC9eAgvUkfYapBdfcqKH67IPBCT1eeeh4u7IkvH1B138QnsgLN2FzrSl 2ZpvUuqqW5DLkV94rGJ8NBfPavJ8f36ude20pi4TMbhtQyD8iuGIYJfpFBBpm9G4 j568hDKwLa0/8jmHTLAZZ+oe7yqXfGVUsABT6HuyFIOVzYiWtBt/ -----END CERTIFICATE-----Generated at Wed May 13 07:35:57 2026 by rpki-client