$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39382e302f32342d3234203d3e20313531323730.roa File: 3130332e3233362e39382e302f32342d3234203d3e20313531323730.roa (raw, json) Hash identifier: 6Et6Kx0BtTVve7qIZEmWDOGStMBty3atpo0QZyIgaJs= Subject key identifier: 67:0A:2A:A4:DC:D8:9A:86:A7:01:45:CE:B5:E8:E3:73:1E:B4:6C:5A Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 7D7575A283340566DFAEFF01B001780126E183F0 Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39382e302f32342d3234203d3e20313531323730.roa Signing time: Sun 31 May 2026 08:20:43 +0000 ROA not before: Sun 31 May 2026 08:15:43 +0000 ROA not after: Sun 30 May 2027 08:20:43 +0000 asID: 151270 IP address blocks: 103.236.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 07:22:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:75:75:a2:83:34:05:66:df:ae:ff:01:b0:01:78:01:26:e1:83:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: May 31 08:15:43 2026 GMT Not After : May 30 08:20:43 2027 GMT Subject: CN=670A2AA4DCD89A86A70145CEB5E8E3731EB46C5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:00:ed:29:fe:53:ab:b6:bd:49:ce:1b:a6:f0: f2:c4:09:44:5c:d1:de:24:09:16:bd:26:3f:4f:bc: 62:9d:0e:1a:cf:75:86:30:04:ca:7d:39:f5:54:10: 9d:03:3f:43:e3:cc:db:c7:a8:39:3f:ae:bd:0a:80: d3:36:53:ae:3f:09:29:b3:7c:2d:e1:e1:f7:f7:ad: 33:16:e2:b7:3f:7c:20:5a:4d:ad:2c:ab:4f:c9:40: ca:3a:0e:e6:fc:00:52:c7:49:34:22:f5:33:fe:6f: 1f:87:4b:d8:e2:0c:ec:99:4e:a1:31:9d:5c:e5:d9: d0:c6:a3:94:22:e9:8d:96:0e:61:fe:11:94:08:a8: 37:f9:67:fa:b9:12:46:fe:56:2b:55:46:6e:59:62: 1b:df:45:2a:3a:7b:13:a9:8d:df:aa:67:88:20:bd: 72:ab:3c:d6:c3:85:7a:7e:2b:aa:1d:26:06:59:0d: 3f:b5:7f:4b:0a:ca:85:9f:7a:c6:08:05:fc:82:8e: b9:29:b5:0c:f5:10:68:4a:80:44:50:4e:08:10:a8: e7:a1:6e:46:60:20:8d:46:6c:aa:7b:ad:34:b7:bc: 95:ee:a3:2e:44:58:f6:da:22:a9:20:26:6d:54:5a: 18:9f:d7:2b:da:ef:1f:f3:a5:73:a0:5d:6f:9e:ed: ec:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:0A:2A:A4:DC:D8:9A:86:A7:01:45:CE:B5:E8:E3:73:1E:B4:6C:5A X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e39382e302f32342d3234203d3e20313531323730.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.98.0/24 Signature Algorithm: sha256WithRSAEncryption 53:82:83:c1:fb:d0:f8:08:67:06:7d:91:5c:5d:b0:82:79:82: 43:15:9c:4b:dc:98:48:67:7b:b4:a4:3e:e8:ac:c9:37:40:3c: a3:45:43:7c:20:a4:1f:5e:4d:89:63:29:d5:f8:86:92:aa:45: 07:e7:78:a5:bb:89:41:ad:8a:cc:22:82:52:cd:49:25:1e:9d: 4c:70:31:00:68:22:b4:10:b3:5c:f0:43:dc:66:07:6d:67:72: fe:72:4b:88:70:66:ec:78:8a:94:29:0c:95:f7:16:37:35:d0: 14:ef:86:5f:0b:87:26:e4:b3:d2:81:27:8b:f0:f7:de:10:36: 09:5d:55:f6:32:09:73:15:a8:d2:16:c8:2c:53:86:a9:a6:fe: aa:2b:2f:d3:64:47:2a:2b:13:b1:15:25:6f:0e:c6:f1:c0:b5: e6:b6:f4:2d:f4:f4:59:e7:4c:b1:8b:a6:ae:ba:51:34:24:c9: 7e:a9:56:83:14:cb:96:93:f6:be:cd:c7:fa:c0:d3:26:e4:cf: 4a:3e:1b:72:8d:59:30:17:54:1e:02:c1:b5:64:bd:4c:d9:ae: dd:3e:77:eb:38:ac:d7:ab:28:0a:20:ba:48:52:63:b4:80:e0: b4:99:f6:46:be:56:a6:1a:22:7f:69:0c:71:f7:c5:ab:1d:de: d5:74:1d:55 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfXV1ooM0BWbfrv8BsAF4ASbhg/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjA1MzEwODE1NDNaFw0yNzA1MzAwODIwNDNaMDMxMTAvBgNV BAMTKDY3MEEyQUE0RENEODlBODZBNzAxNDVDRUI1RThFMzczMUVCNDZDNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkAO0p/lOrtr1Jzhum8PLECURc 0d4kCRa9Jj9PvGKdDhrPdYYwBMp9OfVUEJ0DP0PjzNvHqDk/rr0KgNM2U64/CSmz fC3h4ff3rTMW4rc/fCBaTa0sq0/JQMo6Dub8AFLHSTQi9TP+bx+HS9jiDOyZTqEx nVzl2dDGo5Qi6Y2WDmH+EZQIqDf5Z/q5Ekb+VitVRm5ZYhvfRSo6exOpjd+qZ4gg vXKrPNbDhXp+K6odJgZZDT+1f0sKyoWfesYIBfyCjrkptQz1EGhKgERQTggQqOeh bkZgII1GbKp7rTS3vJXuoy5EWPbaIqkgJm1UWhif1yva7x/zpXOgXW+e7eyrAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUZwoqpNzYmoanAUXOtejjcx60bFowHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzkzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzczMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfsYjANBgkqhkiG9w0BAQsFAAOCAQEAU4KDwfvQ+AhnBn2RXF2w gnmCQxWcS9yYSGd7tKQ+6KzJN0A8o0VDfCCkH15NiWMp1fiGkqpFB+d4pbuJQa2K zCKCUs1JJR6dTHAxAGgitBCzXPBD3GYHbWdy/nJLiHBm7HiKlCkMlfcWNzXQFO+G XwuHJuSz0oEni/D33hA2CV1V9jIJcxWo0hbILFOGqab+qisv02RHKisTsRUlbw7G 8cC15rb0LfT0WedMsYumrrpRNCTJfqlWgxTLlpP2vs3H+sDTJuTPSj4bco1ZMBdU HgLBtWS9TNmu3T536zis16soCiC6SFJjtIDgtJn2Rr5Wphoif2kMcffFqx3e1XQd VQ== -----END CERTIFICATE-----Generated at Sun Jun 14 00:59:52 2026 by rpki-client