$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38342e302f32342d3234203d3e20313436373732.roa File: 3130332e3231392e38342e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: xfHtUllvBPTAy6/27hVdOv327Oe+DuxYun8lGyDGb9E= Subject key identifier: 86:85:9D:72:26:1A:49:48:04:33:76:C3:9C:4A:30:46:10:21:8D:BD Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 573EAEFDEFD5D5723FDF58C1E0A991B985710484 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38342e302f32342d3234203d3e20313436373732.roa Signing time: Mon 27 Jul 2026 07:04:55 +0000 ROA not before: Mon 27 Jul 2026 06:59:55 +0000 ROA not after: Mon 26 Jul 2027 07:04:55 +0000 asID: 146772 IP address blocks: 103.219.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 21:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3e:ae:fd:ef:d5:d5:72:3f:df:58:c1:e0:a9:91:b9:85:71:04:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Jul 27 06:59:55 2026 GMT Not After : Jul 26 07:04:55 2027 GMT Subject: CN=86859D72261A4948043376C39C4A304610218DBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b9:72:22:1a:ba:68:98:51:f0:c5:cc:d0:b9: d9:24:70:35:d2:96:5d:90:49:95:4e:19:1b:0a:2f: 58:3e:ea:3c:b9:5e:ca:b9:ee:d4:91:66:f5:93:45: 50:b7:d6:b2:68:76:11:c1:cc:22:7f:26:ba:34:a6: 95:9d:e3:8f:af:60:7d:f3:15:0f:d0:c9:61:50:a3: 03:46:1d:84:c5:dc:b9:df:47:83:7b:75:7d:3a:19: b5:4c:ab:a8:c8:e2:d7:8d:f5:0c:01:ca:91:9c:2e: 55:7d:48:e9:b1:80:29:94:ad:49:09:36:bd:8e:5e: 54:f2:ec:9b:60:9e:76:f7:95:e3:f0:09:13:f8:8e: c5:bc:ea:36:74:29:51:b6:51:8d:93:c9:9e:37:d1: f3:c8:cb:de:50:e2:ac:66:24:e7:a5:53:3a:cc:88: 7c:e9:97:0c:b8:c3:6f:db:b4:eb:f6:c4:7d:a1:0f: f4:e1:3a:2e:d3:64:d8:a7:bc:9e:94:8d:2d:d3:5b: 3e:ab:c1:c1:b3:fe:f7:51:d0:26:a3:58:b8:c8:70: 7f:71:b4:33:26:5e:94:4d:9a:fe:fb:52:a8:b8:3b: 23:29:dd:a9:ab:b5:fd:c7:e2:a2:e6:59:f9:95:c2: a5:b2:ad:00:fc:60:c7:a0:1e:43:18:70:05:5c:52: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:85:9D:72:26:1A:49:48:04:33:76:C3:9C:4A:30:46:10:21:8D:BD X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38342e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.84.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:d5:8c:c1:e0:be:cf:e4:55:cd:78:94:11:e1:37:1c:d3:64: 97:47:3c:22:90:63:8e:a6:4c:e8:e7:06:0d:cc:44:e4:be:f2: 83:1d:a1:b1:c9:58:f3:e8:70:b0:3d:01:c2:3b:c2:60:85:0b: 9f:45:53:47:a1:0b:0e:6e:58:67:e0:3f:8e:4f:a2:64:b7:3d: 83:2c:31:0b:41:27:5c:02:3a:bd:19:44:32:cf:41:42:25:b0: fa:1c:be:6d:a5:98:e1:93:71:16:20:90:0b:6b:07:08:96:d8: 31:44:6a:bd:42:9b:c9:d6:58:24:1a:05:13:29:a9:31:24:d0: a5:50:9e:65:2a:06:e7:d7:2b:56:3d:3a:4a:af:4e:5d:8b:a8: 98:c7:57:b0:4c:6b:2c:16:a8:c7:38:79:18:39:ee:99:c7:7b: 0c:45:e5:32:ae:d2:85:5f:c5:30:1a:33:eb:80:02:ef:8a:2d: 4d:6b:87:d1:63:7c:95:32:c4:2c:d6:6c:cd:b3:37:bd:12:12: 29:7e:c2:49:fe:c6:dd:4d:a3:07:98:16:86:23:b0:cf:bf:63: f9:ba:0c:ce:66:be:6a:01:a2:b5:68:3b:31:38:ef:df:c6:49: ba:7c:ff:d9:5d:f9:00:4a:05:51:c5:3d:3d:50:3a:f3:ba:8b: 7d:b0:3d:ed -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUVz6u/e/V1XI/31jB4KmRuYVxBIQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA3MjcwNjU5NTVaFw0yNzA3MjYwNzA0NTVaMDMxMTAvBgNV BAMTKDg2ODU5RDcyMjYxQTQ5NDgwNDMzNzZDMzlDNEEzMDQ2MTAyMThEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxuXIiGrpomFHwxczQudkkcDXS ll2QSZVOGRsKL1g+6jy5Xsq57tSRZvWTRVC31rJodhHBzCJ/Jro0ppWd44+vYH3z FQ/QyWFQowNGHYTF3LnfR4N7dX06GbVMq6jI4teN9QwBypGcLlV9SOmxgCmUrUkJ Nr2OXlTy7Jtgnnb3lePwCRP4jsW86jZ0KVG2UY2TyZ430fPIy95Q4qxmJOelUzrM iHzplwy4w2/btOv2xH2hD/ThOi7TZNinvJ6UjS3TWz6rwcGz/vdR0CajWLjIcH9x tDMmXpRNmv77Uqi4OyMp3amrtf3H4qLmWfmVwqWyrQD8YMegHkMYcAVcUvULAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUhoWdciYaSUgEM3bDnEowRhAhjb0wHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zMTMwMzMyZTMy MzEzOTJlMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfbVDANBgkqhkiG9w0BAQsFAAOCAQEAftWMweC+z+RVzXiUEeE3 HNNkl0c8IpBjjqZM6OcGDcxE5L7ygx2hsclY8+hwsD0BwjvCYIULn0VTR6ELDm5Y Z+A/jk+iZLc9gywxC0EnXAI6vRlEMs9BQiWw+hy+baWY4ZNxFiCQC2sHCJbYMURq vUKbydZYJBoFEympMSTQpVCeZSoG59crVj06Sq9OXYuomMdXsExrLBaoxzh5GDnu mcd7DEXlMq7ShV/FMBoz64AC74otTWuH0WN8lTLELNZszbM3vRISKX7CSf7G3U2j B5gWhiOwz79j+boMzma+agGitWg7MTjv38ZJunz/2V35AEoFUcU9PVA687qLfbA9 7Q== -----END CERTIFICATE-----Generated at Wed Jul 29 07:36:52 2026 by rpki-client