$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38392e302f32342d3234203d3e20313531323730.roa File: 3130332e3233362e38392e302f32342d3234203d3e20313531323730.roa (raw, json) Hash identifier: BR4gpWXDnyFKoUmDxhf+lvNB0rW+sSaRgH6XFoxPXJ0= Subject key identifier: CC:BD:C9:5B:4A:6E:94:1D:B9:B5:6A:D7:94:F3:62:6D:AE:C3:DF:AE Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 5A7304C175843585139740461CAA3F558CE4316B Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38392e302f32342d3234203d3e20313531323730.roa Signing time: Sun 31 May 2026 08:20:44 +0000 ROA not before: Sun 31 May 2026 08:15:44 +0000 ROA not after: Sun 30 May 2027 08:20:44 +0000 asID: 151270 IP address blocks: 103.236.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:73:04:c1:75:84:35:85:13:97:40:46:1c:aa:3f:55:8c:e4:31:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: May 31 08:15:44 2026 GMT Not After : May 30 08:20:44 2027 GMT Subject: CN=CCBDC95B4A6E941DB9B56AD794F3626DAEC3DFAE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4e:1d:ea:5c:56:5b:42:0e:c6:96:4a:38:8c: b0:b9:67:20:54:fc:ec:d1:a7:e0:8b:ea:5c:05:1a: 30:e8:fd:ac:af:6d:c4:a6:ba:b4:eb:39:c2:e0:00: 79:e3:ca:34:02:14:a1:87:dd:d1:3c:c6:62:40:8b: b7:63:34:ab:23:d6:cd:69:2b:b2:7d:f4:6a:a9:c5: 7d:f3:28:78:cb:1e:b3:93:06:26:81:4f:44:17:f4: c2:d6:ce:8e:dc:2f:61:74:da:47:7e:e4:4c:69:91: 19:4f:07:3a:d5:2a:6f:89:fe:d9:29:f1:bb:7a:da: a6:2a:52:0c:18:fd:02:1b:22:df:0e:67:bd:14:25: be:1a:88:53:b1:66:48:dd:6c:33:50:aa:68:39:f8: 87:8f:56:89:dd:a5:ca:00:8a:0c:a1:e1:3a:c8:61: f1:d4:01:2b:81:aa:0d:53:28:0a:f3:b8:bb:77:68: a1:d4:e2:a0:d7:ef:05:31:25:9f:32:ac:f0:b6:0f: e7:f8:ff:74:89:4a:10:e2:65:c5:3c:06:7e:8b:47: 54:40:16:73:ad:55:51:5f:23:06:6b:d9:e8:42:36: e7:a8:fe:c6:da:bd:90:ef:64:d6:60:45:03:d5:f5: fc:2e:cc:3f:7e:6a:d0:26:2b:b1:40:19:03:f5:fb: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:BD:C9:5B:4A:6E:94:1D:B9:B5:6A:D7:94:F3:62:6D:AE:C3:DF:AE X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e38392e302f32342d3234203d3e20313531323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.89.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:be:00:4c:2b:eb:02:22:60:de:32:64:34:15:29:ba:25:bf: 12:ce:09:97:f9:c7:b4:50:00:26:64:5f:e0:d8:84:00:ab:c1: 46:12:e8:ed:d1:7b:07:8e:b5:bf:32:df:e4:ac:bc:2a:2c:97: aa:d0:c1:44:e7:8a:0a:1d:19:f1:63:91:e8:71:9e:a6:fb:be: a4:1d:11:2f:ee:dc:93:27:7b:09:ed:cb:b1:d5:67:9b:e5:1a: fa:92:8e:2d:2c:42:d6:b1:30:c2:cf:4c:43:72:e1:fd:02:c0: 83:57:0c:6e:3b:6d:e8:94:91:e4:2e:ad:57:45:e8:f7:2b:65: c0:5a:44:72:6d:2b:d7:8c:9e:0c:49:48:78:61:61:14:1a:f0: e2:18:3a:f7:51:b8:7b:06:a6:67:bb:c5:1b:7d:80:b1:48:a7: f0:f3:9b:0a:f1:f0:79:1c:28:bd:8d:7e:b9:eb:b6:1a:54:14: bd:16:2a:75:42:1e:ee:62:4d:64:02:5d:f4:7a:bb:33:61:84: ba:40:27:64:54:72:77:e7:fb:75:d7:fd:3b:14:c4:46:c5:3d: c7:a7:d7:e0:e8:13:e4:a0:74:8c:d0:39:d9:2c:61:d6:0c:2d: 0e:2d:4d:dd:1e:9e:61:1f:96:d1:85:9c:70:7d:3f:6c:1d:a9: aa:99:d4:8d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWnMEwXWENYUTl0BGHKo/VYzkMWswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjA1MzEwODE1NDRaFw0yNzA1MzAwODIwNDRaMDMxMTAvBgNV BAMTKENDQkRDOTVCNEE2RTk0MURCOUI1NkFENzk0RjM2MjZEQUVDM0RGQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsTh3qXFZbQg7Glko4jLC5ZyBU /OzRp+CL6lwFGjDo/ayvbcSmurTrOcLgAHnjyjQCFKGH3dE8xmJAi7djNKsj1s1p K7J99GqpxX3zKHjLHrOTBiaBT0QX9MLWzo7cL2F02kd+5ExpkRlPBzrVKm+J/tkp 8bt62qYqUgwY/QIbIt8OZ70UJb4aiFOxZkjdbDNQqmg5+IePVondpcoAigyh4TrI YfHUASuBqg1TKArzuLt3aKHU4qDX7wUxJZ8yrPC2D+f4/3SJShDiZcU8Bn6LR1RA FnOtVVFfIwZr2ehCNueo/sbavZDvZNZgRQPV9fwuzD9+atAmK7FAGQP1+ylxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUzL3JW0pulB25tWrXlPNiba7D364wHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsWTANBgkqhkiG9w0BAQsFAAOCAQEAL74ATCvrAiJg3jJkNBUp uiW/Es4Jl/nHtFAAJmRf4NiEAKvBRhLo7dF7B461vzLf5Ky8KiyXqtDBROeKCh0Z 8WOR6HGepvu+pB0RL+7ckyd7Ce3LsdVnm+Ua+pKOLSxC1rEwws9MQ3Lh/QLAg1cM bjtt6JSR5C6tV0Xo9ytlwFpEcm0r14yeDElIeGFhFBrw4hg691G4ewamZ7vFG32A sUin8PObCvHweRwovY1+ueu2GlQUvRYqdUIe7mJNZAJd9Hq7M2GEukAnZFRyd+f7 ddf9OxTERsU9x6fX4OgT5KB0jNA52Sxh1gwtDi1N3R6eYR+W0YWccH0/bB2pqpnU jQ== -----END CERTIFICATE-----Generated at Sun Jun 14 00:59:47 2026 by rpki-client