$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130312e3130342e3134342e302f32302d3230203d3e2034383437.roa File: 3130312e3130342e3134342e302f32302d3230203d3e2034383437.roa (raw, json) Hash identifier: K7KlitBfiy7ZEWlTKdOFY7g8c3Q6Z8kGWI5+zK2q0fg= Subject key identifier: C2:F5:CB:E7:72:55:ED:62:D6:48:2C:9B:45:07:F3:EC:83:6F:F7:E3 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 6A1BB84972816C2578973CF209A9688A86BEE8D8 Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130312e3130342e3134342e302f32302d3230203d3e2034383437.roa Signing time: Wed 13 May 2026 01:56:49 +0000 ROA not before: Wed 13 May 2026 01:51:49 +0000 ROA not after: Wed 12 May 2027 01:56:49 +0000 asID: 4847 IP address blocks: 101.104.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:1b:b8:49:72:81:6c:25:78:97:3c:f2:09:a9:68:8a:86:be:e8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: May 13 01:51:49 2026 GMT Not After : May 12 01:56:49 2027 GMT Subject: CN=C2F5CBE77255ED62D6482C9B4507F3EC836FF7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8c:d5:08:b4:0e:00:d1:81:65:d7:72:9f:a2: 67:fe:10:87:23:25:1a:b9:4d:0b:54:14:de:42:c9: 9b:97:03:93:fe:84:6c:69:e6:48:85:c5:b8:2d:50: e7:e1:d7:5b:ac:5e:c5:42:17:b0:55:c7:98:b0:d5: c1:14:a0:cd:04:42:d9:5c:6c:bb:61:c4:cb:02:50: 74:5c:7d:52:04:a6:88:72:2d:e0:4f:27:4f:0f:aa: 60:56:9e:ff:f1:c7:ff:ac:ff:6b:2b:cb:b5:87:78: 1b:ef:89:f6:17:26:a2:c6:88:f3:82:0f:01:cf:6b: ab:6c:6c:9c:ef:6e:81:30:4c:6a:c3:8b:57:df:90: 25:70:ff:2c:fa:89:f6:07:8d:ee:da:f8:7f:b3:36: 27:3f:55:11:d1:b8:db:2b:de:95:9e:39:07:b6:cd: 5a:f0:64:d8:99:a6:bd:0c:04:90:73:e4:29:db:81: 4d:5d:f2:52:59:a9:0c:cf:59:3e:44:25:fd:3a:1d: 16:f1:eb:bd:36:50:8b:ff:b5:8c:81:63:7c:ca:35: f5:d0:6e:36:ee:c9:41:ec:cc:7f:3d:44:4b:d0:d2: 80:d2:9b:41:77:8d:40:88:44:fa:e9:f5:7a:5a:55: 0f:c0:7e:4a:fa:00:d1:f3:bf:e3:ce:0c:12:54:f6: 3c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F5:CB:E7:72:55:ED:62:D6:48:2C:9B:45:07:F3:EC:83:6F:F7:E3 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130312e3130342e3134342e302f32302d3230203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.104.144.0/20 Signature Algorithm: sha256WithRSAEncryption 1a:0b:05:ef:28:bc:91:36:5b:ef:54:50:a2:4b:f6:69:ad:5b: ab:3e:17:1b:91:f2:9c:4a:12:e6:24:d2:80:cb:f4:be:11:1e: ac:9f:04:d5:c3:dd:6d:b6:ad:87:a7:62:97:2b:bb:66:65:78: 82:b7:ae:49:1c:b4:c9:b2:8c:d9:1a:82:64:d4:0f:36:f3:7e: c6:90:b9:49:9d:7c:95:3a:e0:8b:cd:09:5e:28:07:96:13:b9: 5a:2e:37:b4:7b:7b:85:31:2c:b8:fd:8f:00:3a:03:99:48:0c: 7c:8f:0e:c3:13:88:06:a0:12:64:3c:a3:d2:86:d5:ed:b8:c7: 5e:1e:8f:7a:e4:96:3f:2e:4c:c0:c8:06:a6:09:39:c7:bf:9d: 17:47:e0:c0:c2:3e:da:7c:53:44:06:12:6b:ca:be:e8:81:a7: 91:8e:6f:2d:39:e9:3c:a7:8c:2f:da:a1:79:44:f0:b6:6d:c2: 15:85:43:12:27:d3:7c:89:23:ea:76:11:de:42:95:de:68:f2: 8f:f1:61:83:f4:12:74:72:c0:a7:07:d7:9d:f6:05:29:b9:9a: 32:49:a8:fb:9f:af:f1:8c:96:76:03:65:6c:37:04:4e:d7:ef: f7:1b:bb:ce:1e:5e:56:04:be:09:87:f4:6a:07:e2:88:25:64: 87:91:ce:30 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUahu4SXKBbCV4lzzyCaloioa+6NgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA1MTMwMTUxNDlaFw0yNzA1MTIwMTU2NDlaMDMxMTAvBgNV BAMTKEMyRjVDQkU3NzI1NUVENjJENjQ4MkM5QjQ1MDdGM0VDODM2RkY3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcjNUItA4A0YFl13Kfomf+EIcj JRq5TQtUFN5CyZuXA5P+hGxp5kiFxbgtUOfh11usXsVCF7BVx5iw1cEUoM0EQtlc bLthxMsCUHRcfVIEpohyLeBPJ08PqmBWnv/xx/+s/2sry7WHeBvvifYXJqLGiPOC DwHPa6tsbJzvboEwTGrDi1ffkCVw/yz6ifYHje7a+H+zNic/VRHRuNsr3pWeOQe2 zVrwZNiZpr0MBJBz5CnbgU1d8lJZqQzPWT5EJf06HRbx6702UIv/tYyBY3zKNfXQ bjbuyUHszH89REvQ0oDSm0F3jUCIRPrp9XpaVQ/Afkr6ANHzv+PODBJU9jwzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUwvXL53JV7WLWSCybRQfz7INv9+MwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMxMzAzMTJlMzEz MDM0MmUzMTM0MzQyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBGVokDANBgkqhkiG9w0BAQsFAAOCAQEAGgsF7yi8kTZb71RQokv2aa1b qz4XG5HynEoS5iTSgMv0vhEerJ8E1cPdbbath6dilyu7ZmV4greuSRy0ybKM2RqC ZNQPNvN+xpC5SZ18lTrgi80JXigHlhO5Wi43tHt7hTEsuP2PADoDmUgMfI8OwxOI BqASZDyj0obV7bjHXh6PeuSWPy5MwMgGpgk5x7+dF0fgwMI+2nxTRAYSa8q+6IGn kY5vLTnpPKeML9qheUTwtm3CFYVDEifTfIkj6nYR3kKV3mjyj/Fhg/QSdHLApwfX nfYFKbmaMkmo+5+v8YyWdgNlbDcETtfv9xu7zh5eVgS+CYf0agfiiCVkh5HOMA== -----END CERTIFICATE-----Generated at Wed May 13 16:15:09 2026 by rpki-client