$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3136332e3132382e3135322e302f32332d3233203d3e2030.roa File: 3136332e3132382e3135322e302f32332d3233203d3e2030.roa (raw, json) Hash identifier: eG2V3L8ngZytOIhFBaE+6vNlrSGpXtrAmShn5ATKyk0= Subject key identifier: F6:CA:3A:24:72:17:5F:C6:67:98:53:F0:CF:88:4A:62:6A:32:60:B4 Certificate issuer: /CN=3201C4351814E52EC594B407C57D52285AA52E6D Certificate serial: 3A01499AC61F6ACB2AF4930E36462DED850E8D13 Authority key identifier: 32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3136332e3132382e3135322e302f32332d3233203d3e2030.roa Signing time: Thu 04 Jun 2026 09:43:24 +0000 ROA not before: Thu 04 Jun 2026 09:38:24 +0000 ROA not after: Thu 03 Jun 2027 09:43:24 +0000 asID: 0 IP address blocks: 163.128.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:01:49:9a:c6:1f:6a:cb:2a:f4:93:0e:36:46:2d:ed:85:0e:8d:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3201C4351814E52EC594B407C57D52285AA52E6D Validity Not Before: Jun 4 09:38:24 2026 GMT Not After : Jun 3 09:43:24 2027 GMT Subject: CN=F6CA3A2472175FC6679853F0CF884A626A3260B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b3:61:9d:8c:4f:91:1f:f0:7f:74:0d:4f:0d: 5a:eb:f0:b0:f0:15:27:52:53:c4:d4:ae:c1:d5:fc: 96:59:d7:a4:1f:44:6e:71:db:9d:cd:33:ad:fb:58: 56:f8:62:15:55:08:40:1a:76:1d:ab:0c:30:99:03: 18:a2:1c:03:5d:fe:ec:ed:80:36:20:53:1a:34:80: 8e:f8:36:2d:53:11:1f:83:51:34:00:0d:55:eb:94: c9:77:3d:88:d7:f8:70:e6:cc:6c:fb:9c:97:39:fe: 87:21:8b:e4:7f:15:45:df:70:dd:50:1d:1f:51:be: 9b:47:cb:c3:c7:0b:dc:dd:31:f1:0f:91:25:4c:7a: e1:ab:3a:70:ac:5d:da:a7:8a:1c:21:df:07:b2:1b: 79:f4:fc:f3:6a:f0:67:61:60:64:86:01:05:e9:6b: 76:8d:08:23:d6:1a:a2:1c:d1:7a:f0:73:93:71:04: aa:b9:82:08:7b:e7:6e:29:79:c0:2f:9c:da:d6:53: 85:20:a5:95:08:14:35:29:52:01:70:51:88:75:41: dc:e2:87:aa:40:c1:a0:e0:a0:67:a7:eb:d8:16:54: 66:5a:52:5a:c9:25:ff:c3:a6:37:89:62:af:b9:de: ed:6a:fe:e1:74:34:90:14:00:34:31:1c:3c:18:8d: e4:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CA:3A:24:72:17:5F:C6:67:98:53:F0:CF:88:4A:62:6A:32:60:B4 X509v3 Authority Key Identifier: keyid:32:01:C4:35:18:14:E5:2E:C5:94:B4:07:C5:7D:52:28:5A:A5:2E:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3201C4351814E52EC594B407C57D52285AA52E6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3201C4351814E52EC594B407C57D52285AA52E6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114849273658277913/0/3136332e3132382e3135322e302f32332d3233203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 163.128.152.0/23 Signature Algorithm: sha256WithRSAEncryption 67:6f:5d:a3:e5:34:80:df:d9:db:40:fa:32:36:52:19:59:2c: 67:0e:06:e1:2e:4c:7f:f1:a4:ea:26:34:83:53:f1:d8:03:c5: f5:3b:f4:b7:eb:3e:d5:c7:c0:5a:f5:63:95:7c:49:45:29:3a: 79:18:da:ec:3f:dd:d6:9a:b5:ec:13:64:4e:58:a6:78:66:fd: 1e:42:b6:c1:3d:27:ee:f7:90:60:2c:36:f6:f9:61:47:72:24: 13:39:ee:3c:e7:11:8f:1b:3d:c3:d9:81:6a:95:85:01:8a:11: 2f:9a:b9:4f:60:70:46:3d:20:e4:3d:5e:c2:cd:36:e1:b7:7f: 27:bd:fe:33:87:f7:b6:c9:36:00:66:1e:1c:47:53:11:d6:82: e3:17:57:fd:cb:5e:1e:23:dc:1f:1f:e3:3b:1c:ee:af:26:71: 3e:e5:40:ec:72:f9:d8:60:ed:fa:69:0c:6e:02:dc:d5:61:42: cc:49:12:71:d1:9f:f4:b3:5c:19:6e:80:08:b1:b7:6a:8f:11: a0:74:ed:01:66:dd:df:68:74:03:26:a3:ee:7c:75:52:31:ce: 51:29:4c:b8:fe:de:86:33:38:48:72:81:c5:93:a3:08:31:59: 72:d3:f7:29:68:de:4e:f1:3a:b5:7e:22:50:a5:b1:35:9e:41: 04:d3:f0:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUOgFJmsYfassq9JMONkYt7YUOjRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1 QUE1MkU2RDAeFw0yNjA2MDQwOTM4MjRaFw0yNzA2MDMwOTQzMjRaMDMxMTAvBgNV BAMTKEY2Q0EzQTI0NzIxNzVGQzY2Nzk4NTNGMENGODg0QTYyNkEzMjYwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIs2GdjE+RH/B/dA1PDVrr8LDw FSdSU8TUrsHV/JZZ16QfRG5x253NM637WFb4YhVVCEAadh2rDDCZAxiiHANd/uzt gDYgUxo0gI74Ni1TER+DUTQADVXrlMl3PYjX+HDmzGz7nJc5/ochi+R/FUXfcN1Q HR9RvptHy8PHC9zdMfEPkSVMeuGrOnCsXdqnihwh3weyG3n0/PNq8GdhYGSGAQXp a3aNCCPWGqIc0Xrwc5NxBKq5ggh7524pecAvnNrWU4UgpZUIFDUpUgFwUYh1Qdzi h6pAwaDgoGen69gWVGZaUlrJJf/DpjeJYq+53u1q/uF0NJAUADQxHDwYjeTvAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU9so6JHIXX8ZnmFPwz4hKYmoyYLQwHwYDVR0j BBgwFoAUMgHENRgU5S7FlLQHxX1SKFqlLm0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDg0OTI3MzY1ODI3NzkxMy8wLzMyMDFDNDM1MTgxNEU1MkVDNTk0QjQwN0M1N0Q1 MjI4NUFBNTJFNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMUM0MzUxODE0RTUyRUM1OTRCNDA3QzU3RDUyMjg1QUE1MkU2RC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0ODQ5MjczNjU4Mjc3OTEzLzAvMzEzNjMzMmUzMTMy MzgyZTMxMzUzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB o4CYMA0GCSqGSIb3DQEBCwUAA4IBAQBnb12j5TSA39nbQPoyNlIZWSxnDgbhLkx/ 8aTqJjSDU/HYA8X1O/S36z7Vx8Ba9WOVfElFKTp5GNrsP93WmrXsE2ROWKZ4Zv0e QrbBPSfu95BgLDb2+WFHciQTOe485xGPGz3D2YFqlYUBihEvmrlPYHBGPSDkPV7C zTbht38nvf4zh/e2yTYAZh4cR1MR1oLjF1f9y14eI9wfH+M7HO6vJnE+5UDscvnY YO36aQxuAtzVYULMSRJx0Z/0s1wZboAIsbdqjxGgdO0BZt3faHQDJqPufHVSMc5R KUy4/t6GMzhIcoHFk6MIMVly0/cpaN5O8Tq1fiJQpbE1nkEE0/CU -----END CERTIFICATE-----Generated at Sat Jun 13 14:45:33 2026 by rpki-client