$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130312e3130342e3136302e302f32302d3230203d3e2034383437.roa File: 3130312e3130342e3136302e302f32302d3230203d3e2034383437.roa (raw, json) Hash identifier: 9B1woNiD0W8Gr6bU2EX2vea/FjgZ8ncnIdPIROrbH9E= Subject key identifier: 4A:3F:92:FB:2D:FD:14:FE:6A:C2:4B:8E:0A:1A:E5:53:F7:6A:F1:95 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 0E247BA07B0448B2BC3E01DB35C5B87B1D7235EC Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130312e3130342e3136302e302f32302d3230203d3e2034383437.roa Signing time: Wed 13 May 2026 01:56:49 +0000 ROA not before: Wed 13 May 2026 01:51:49 +0000 ROA not after: Wed 12 May 2027 01:56:49 +0000 asID: 4847 IP address blocks: 101.104.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:24:7b:a0:7b:04:48:b2:bc:3e:01:db:35:c5:b8:7b:1d:72:35:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: May 13 01:51:49 2026 GMT Not After : May 12 01:56:49 2027 GMT Subject: CN=4A3F92FB2DFD14FE6AC24B8E0A1AE553F76AF195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5f:8f:ff:c0:02:46:d2:20:02:4c:a5:93:33: 16:fa:a5:58:16:40:6d:c9:04:6f:b3:7a:3b:c9:a0: 30:a8:8c:74:2a:36:9b:de:00:78:9a:da:c6:f7:88: f1:18:41:b1:4a:ef:2e:0b:ae:9c:aa:24:7a:4b:34: 16:16:f3:3f:e5:2a:94:d0:01:70:51:13:0d:ce:d1: 28:ad:08:bf:a6:ac:dd:42:23:32:bf:8c:04:48:b4: 5e:ba:4b:b5:90:15:89:eb:e2:29:9b:30:06:cf:ff: 7d:e5:c2:8e:39:c6:f3:72:11:9e:fe:1f:54:19:6b: 5e:e4:d3:f5:b1:de:d3:d5:57:ce:df:4b:bf:40:2c: 76:62:6e:b4:45:25:36:72:ca:e9:0d:b6:6e:fa:86: 57:9e:44:f5:16:e2:5f:c4:a3:a7:6d:30:76:ea:83: 73:62:0e:83:09:e8:00:96:f3:2f:b3:f3:2a:3f:8c: 89:da:12:6e:85:6d:08:e8:4d:1a:44:0c:c2:21:87: 55:f5:0e:c1:5f:f6:aa:6d:28:e9:85:3a:9f:31:b1: f1:ef:a1:72:1f:9c:73:b3:74:27:3b:b2:e3:f9:ed: 5e:7d:87:ad:28:9b:27:95:0c:ad:81:82:3b:19:0c: 16:cf:52:ee:b0:cb:75:c9:0e:0a:71:ec:b3:3f:5a: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3F:92:FB:2D:FD:14:FE:6A:C2:4B:8E:0A:1A:E5:53:F7:6A:F1:95 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130312e3130342e3136302e302f32302d3230203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.104.160.0/20 Signature Algorithm: sha256WithRSAEncryption a4:1a:da:f3:fa:be:f9:d5:a7:66:03:45:9a:a9:19:8c:5b:61: 76:7e:18:6c:55:fb:24:34:2d:34:91:37:33:62:cc:ae:9c:b9: 5d:9e:15:37:56:d8:4c:dd:2a:6a:37:a0:fa:52:de:2f:31:2e: 23:62:24:fd:b1:9a:80:99:24:06:a7:8e:f6:95:38:10:f8:21: d8:32:ce:a3:b8:30:94:29:e0:25:ed:cd:a5:0c:34:c9:78:00: e5:be:97:26:7e:d9:2c:e6:38:32:ee:08:5d:63:58:86:a3:e8: 72:24:55:d0:68:74:ce:19:32:8c:2e:5b:e3:1e:ac:5d:65:49: 93:bc:91:f8:f2:e6:96:e5:06:97:14:00:ec:a2:96:ef:24:62: 30:7f:9d:1b:d9:5f:a2:6c:d8:3b:8b:f7:ce:9c:81:ea:30:40: ce:c6:2e:08:cd:2c:45:65:f5:30:9f:f7:49:b8:1a:a7:d1:94: c7:e6:82:36:5d:49:14:51:4d:cd:46:fb:48:5e:5b:2a:2d:9b: 74:5d:03:3a:1d:13:6d:87:29:3b:90:cd:f7:07:d5:d9:1c:62: 0e:2c:7a:6a:b0:c4:f0:79:ca:c3:7f:c7:e4:23:17:1e:57:ac: 78:df:77:b7:f8:20:4b:fb:3d:fe:0d:09:0b:82:37:25:d7:e3: 51:bd:84:e4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDiR7oHsESLK8PgHbNcW4ex1yNewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA1MTMwMTUxNDlaFw0yNzA1MTIwMTU2NDlaMDMxMTAvBgNV BAMTKDRBM0Y5MkZCMkRGRDE0RkU2QUMyNEI4RTBBMUFFNTUzRjc2QUYxOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnX4//wAJG0iACTKWTMxb6pVgW QG3JBG+zejvJoDCojHQqNpveAHia2sb3iPEYQbFK7y4LrpyqJHpLNBYW8z/lKpTQ AXBREw3O0SitCL+mrN1CIzK/jARItF66S7WQFYnr4imbMAbP/33lwo45xvNyEZ7+ H1QZa17k0/Wx3tPVV87fS79ALHZibrRFJTZyyukNtm76hleeRPUW4l/Eo6dtMHbq g3NiDoMJ6ACW8y+z8yo/jInaEm6FbQjoTRpEDMIhh1X1DsFf9qptKOmFOp8xsfHv oXIfnHOzdCc7suP57V59h60omyeVDK2BgjsZDBbPUu6wy3XJDgpx7LM/WlchAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSj+S+y39FP5qwkuOChrlU/dq8ZUwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzk0MzkzOS8wLzMxMzAzMTJlMzEz MDM0MmUzMTM2MzAyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBGVooDANBgkqhkiG9w0BAQsFAAOCAQEApBra8/q++dWnZgNFmqkZjFth dn4YbFX7JDQtNJE3M2LMrpy5XZ4VN1bYTN0qajeg+lLeLzEuI2Ik/bGagJkkBqeO 9pU4EPgh2DLOo7gwlCngJe3NpQw0yXgA5b6XJn7ZLOY4Mu4IXWNYhqPociRV0Gh0 zhkyjC5b4x6sXWVJk7yR+PLmluUGlxQA7KKW7yRiMH+dG9lfomzYO4v3zpyB6jBA zsYuCM0sRWX1MJ/3Sbgap9GUx+aCNl1JFFFNzUb7SF5bKi2bdF0DOh0TbYcpO5DN 9wfV2RxiDix6arDE8HnKw3/H5CMXHleseN93t/ggS/s9/g0JC4I3JdfjUb2E5A== -----END CERTIFICATE-----Generated at Wed May 13 16:15:11 2026 by rpki-client