$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38302e302f32342d3234203d3e20313531323730.roa File: 3130332e3233362e38302e302f32342d3234203d3e20313531323730.roa (raw, json) Hash identifier: wqtWcIxgfnqa1uZRs+WtnmUlAEXbvWuj9lo/jF73UzQ= Subject key identifier: A1:9E:C0:B4:23:59:BD:1D:3B:13:91:49:E6:4F:1C:1E:7B:D0:E8:52 Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 2762A0E8FCEE84023000293A3DE2037E5C02481C Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38302e302f32342d3234203d3e20313531323730.roa Signing time: Sun 31 May 2026 08:19:49 +0000 ROA not before: Sun 31 May 2026 08:14:49 +0000 ROA not after: Sun 30 May 2027 08:19:49 +0000 asID: 151270 IP address blocks: 103.236.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:62:a0:e8:fc:ee:84:02:30:00:29:3a:3d:e2:03:7e:5c:02:48:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: May 31 08:14:49 2026 GMT Not After : May 30 08:19:49 2027 GMT Subject: CN=A19EC0B42359BD1D3B139149E64F1C1E7BD0E852 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6d:2e:79:41:f4:f4:ec:28:90:97:9b:0d:20: fc:56:fa:03:b5:0d:e5:03:40:30:70:4e:ea:ad:f6: 05:1c:69:88:be:5c:5b:cb:d9:1d:29:4e:3f:7e:58: 84:a7:75:a4:44:4d:27:63:67:db:12:aa:b6:f9:fe: 9e:c6:48:6e:fb:5d:f9:ce:a2:4e:98:dd:fb:0a:5f: e3:08:35:bc:86:ad:41:07:0b:af:d1:2e:ac:65:52: 6c:22:e3:98:94:9a:09:0a:75:71:29:00:5e:61:12: 30:58:35:4b:1d:05:12:ce:c3:af:16:1b:8c:80:22: b9:99:27:9f:d1:f8:65:90:8f:80:d5:85:26:c5:ef: 26:e5:a8:6c:33:73:39:fc:4f:96:c1:19:e6:9c:af: ef:72:9d:f2:92:3f:e6:6f:84:31:41:1c:c3:e5:10: 61:3f:e5:32:3d:72:1f:1c:94:ab:36:37:d7:20:19: ee:42:53:0d:a2:54:ab:dd:5d:54:28:70:8e:f7:8c: 3b:66:d3:c3:0b:a2:f2:3f:67:73:c1:b9:ce:f5:3d: 44:3a:84:1e:2c:e6:6e:e6:e1:82:9a:bc:d2:7d:3d: cc:18:7a:d7:4b:12:66:8d:23:e0:aa:12:b4:28:aa: 76:1d:41:2c:05:fc:c1:83:3d:40:90:c5:ee:31:98: 6c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9E:C0:B4:23:59:BD:1D:3B:13:91:49:E6:4F:1C:1E:7B:D0:E8:52 X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38302e302f32342d3234203d3e20313531323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.80.0/24 Signature Algorithm: sha256WithRSAEncryption 45:8c:88:a2:00:8b:8d:02:d8:76:29:44:a2:28:9c:0b:0e:42: ac:cf:f9:41:69:cc:e3:ba:28:31:3d:a7:eb:33:7d:39:e8:9c: 4b:8e:94:ce:85:5c:83:59:06:2c:3f:e1:22:f5:d0:37:e2:f8: c5:35:ef:7d:3a:15:0b:bc:91:4a:82:57:5c:13:d4:e2:28:46: 39:0b:d1:55:d9:35:2d:24:fd:af:16:0e:1b:b7:66:ea:d9:4b: 32:12:81:e4:f4:00:4f:01:8c:eb:a9:0c:e4:79:df:1b:ce:17: 87:ab:b8:72:5b:54:83:79:bd:c9:25:1a:b5:36:d7:a9:4c:af: 3d:06:37:73:5f:00:ee:d8:2b:59:09:a0:55:9b:4d:43:91:e7: 5c:a7:85:6f:d1:c9:58:fa:ca:7b:18:7b:aa:09:88:4f:5e:09: d1:31:a0:fc:c0:12:39:66:5e:ac:3d:ea:c8:45:9c:d4:4b:d0: 78:6e:c4:70:a3:35:42:f1:10:5e:05:5e:cb:8f:33:49:0b:97: ab:08:d1:6f:de:9c:51:cb:71:e9:61:37:08:60:b0:73:fe:41: 91:cf:31:42:9c:ef:56:28:a6:5e:37:22:10:a2:61:09:bb:94: 48:50:64:63:c6:d5:a4:7b:9a:f9:28:4a:40:61:2f:e0:1b:12: 17:c9:25:24 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJ2Kg6PzuhAIwACk6PeIDflwCSBwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjA1MzEwODE0NDlaFw0yNzA1MzAwODE5NDlaMDMxMTAvBgNV BAMTKEExOUVDMEI0MjM1OUJEMUQzQjEzOTE0OUU2NEYxQzFFN0JEMEU4NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bS55QfT07CiQl5sNIPxW+gO1 DeUDQDBwTuqt9gUcaYi+XFvL2R0pTj9+WISndaRETSdjZ9sSqrb5/p7GSG77XfnO ok6Y3fsKX+MINbyGrUEHC6/RLqxlUmwi45iUmgkKdXEpAF5hEjBYNUsdBRLOw68W G4yAIrmZJ5/R+GWQj4DVhSbF7yblqGwzczn8T5bBGeacr+9ynfKSP+ZvhDFBHMPl EGE/5TI9ch8clKs2N9cgGe5CUw2iVKvdXVQocI73jDtm08MLovI/Z3PBuc71PUQ6 hB4s5m7m4YKavNJ9PcwYetdLEmaNI+CqErQoqnYdQSwF/MGDPUCQxe4xmGyLAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUoZ7AtCNZvR07E5FJ5k8cHnvQ6FIwHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsUDANBgkqhkiG9w0BAQsFAAOCAQEARYyIogCLjQLYdilEoiic Cw5CrM/5QWnM47ooMT2n6zN9OeicS46UzoVcg1kGLD/hIvXQN+L4xTXvfToVC7yR SoJXXBPU4ihGOQvRVdk1LST9rxYOG7dm6tlLMhKB5PQATwGM66kM5HnfG84Xh6u4 cltUg3m9ySUatTbXqUyvPQY3c18A7tgrWQmgVZtNQ5HnXKeFb9HJWPrKexh7qgmI T14J0TGg/MASOWZerD3qyEWc1EvQeG7EcKM1QvEQXgVey48zSQuXqwjRb96cUctx 6WE3CGCwc/5Bkc8xQpzvViimXjciEKJhCbuUSFBkY8bVpHua+ShKQGEv4BsSF8kl JA== -----END CERTIFICATE-----Generated at Sun Jun 14 03:24:26 2026 by rpki-client