$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130332e3230322e3135322e302f32322d3232203d3e2030.roa File: 3130332e3230322e3135322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: 68rqkA0Dd/TDndF3fhljeqfsPimGIk/CfpvC9jlUQ6E= Subject key identifier: 3B:9E:76:25:66:69:EA:A1:9C:E9:05:35:E4:A7:B0:BD:3E:93:23:B6 Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Certificate serial: 1C0A8278C4098502378D114EAC850C3DE3F0E8EB Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130332e3230322e3135322e302f32322d3232203d3e2030.roa Signing time: Tue 12 May 2026 05:39:46 +0000 ROA not before: Tue 12 May 2026 05:34:46 +0000 ROA not after: Tue 11 May 2027 05:39:46 +0000 asID: 0 IP address blocks: 103.202.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:0a:82:78:c4:09:85:02:37:8d:11:4e:ac:85:0c:3d:e3:f0:e8:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515 Validity Not Before: May 12 05:34:46 2026 GMT Not After : May 11 05:39:46 2027 GMT Subject: CN=3B9E76256669EAA19CE90535E4A7B0BD3E9323B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:3d:7b:fe:e4:56:42:b8:91:59:ea:cf:3b:51: 11:0d:e7:7b:04:d1:da:51:3f:55:70:f1:07:47:d0: a8:85:99:34:9a:88:2e:c6:51:99:fe:0c:20:42:0a: c7:f6:04:4a:a6:fb:78:3f:2b:54:22:c1:93:7c:93: 30:b8:3a:90:2b:13:07:47:ea:ad:95:9f:8c:80:b7: 56:d0:51:f2:0e:e5:11:a1:b7:e5:c5:17:c8:b5:e7: 29:dc:1d:e2:93:80:b0:85:47:f2:43:07:51:bb:41: e1:80:07:60:e2:f5:78:4b:50:3d:de:02:ba:5c:4d: 71:74:66:cb:37:19:00:9c:79:e2:8a:24:f0:3d:01: b1:f6:5a:c7:7e:c2:c1:aa:0f:3f:75:e0:6c:b2:82: d6:81:57:a6:5c:c2:6c:ef:1b:68:86:d0:3c:8c:30: 98:7e:b9:be:0b:36:f4:db:f0:b8:72:d8:1d:01:a2: 38:bf:7f:8e:81:0a:74:2b:1e:b3:5e:ac:df:d8:ac: 83:f2:4b:07:a0:d4:3e:0e:09:e8:50:8e:08:d1:53: 04:f5:41:5d:58:63:ab:47:6f:80:6c:2e:63:79:d4: 18:bb:60:1a:9a:ba:a3:e1:bd:ca:c0:9a:d7:50:df: ac:98:13:67:d2:27:1c:68:c6:b2:18:bc:f8:92:f7: 25:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9E:76:25:66:69:EA:A1:9C:E9:05:35:E4:A7:B0:BD:3E:93:23:B6 X509v3 Authority Key Identifier: keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3130332e3230322e3135322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.202.152.0/22 Signature Algorithm: sha256WithRSAEncryption 04:21:1b:27:35:b9:28:65:3c:88:16:49:82:e1:43:c6:1c:c4: b8:b3:e1:d6:d5:f5:ca:e0:96:c6:06:2d:05:a6:b6:01:40:36: 84:1d:d0:00:3f:dc:58:6e:ec:17:75:2a:47:3d:d0:ad:53:96: 43:e3:44:c9:25:d4:4b:93:a6:93:b5:ce:b3:f5:13:e2:02:fa: f8:bc:7f:52:98:46:51:5c:b3:b3:46:d4:7c:06:c8:0f:c0:92: 7b:97:ae:a9:ae:26:43:41:c6:a6:24:d7:99:de:ef:71:ce:ff: ac:61:9f:53:c4:e7:57:d3:07:14:6b:ee:06:ac:a3:cc:36:07: bb:bf:92:41:4f:9f:db:3d:5a:fd:52:67:a8:82:7e:2b:52:17: 4c:74:50:d0:66:17:a2:df:8d:5b:52:9c:e7:61:8a:be:26:86: 8c:71:b8:2f:ee:d6:32:07:12:d5:75:a5:84:86:4a:a1:d9:7f: 7b:5d:e4:bf:93:8f:12:a4:62:76:1f:15:eb:30:6b:f7:d8:a5: 7c:24:57:b5:a7:f0:35:5e:78:c9:c9:37:73:67:bc:7c:9e:cc: 6d:74:25:60:30:a2:00:4f:ec:df:74:6f:54:71:88:94:69:1a: b5:ff:e0:ce:77:44:e5:3b:5d:e8:67:3c:91:35:21:c9:8f:f6: f5:8e:82:79 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUHAqCeMQJhQI3jRFOrIUMPePw6OswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw NUJEOTUxNTAeFw0yNjA1MTIwNTM0NDZaFw0yNzA1MTEwNTM5NDZaMDMxMTAvBgNV BAMTKDNCOUU3NjI1NjY2OUVBQTE5Q0U5MDUzNUU0QTdCMEJEM0U5MzIzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFPXv+5FZCuJFZ6s87UREN53sE 0dpRP1Vw8QdH0KiFmTSaiC7GUZn+DCBCCsf2BEqm+3g/K1QiwZN8kzC4OpArEwdH 6q2Vn4yAt1bQUfIO5RGht+XFF8i15yncHeKTgLCFR/JDB1G7QeGAB2Di9XhLUD3e ArpcTXF0Zss3GQCceeKKJPA9AbH2Wsd+wsGqDz914GyygtaBV6ZcwmzvG2iG0DyM MJh+ub4LNvTb8Lhy2B0Boji/f46BCnQrHrNerN/YrIPySweg1D4OCehQjgjRUwT1 QV1YY6tHb4BsLmN51Bi7YBqauqPhvcrAmtdQ36yYE2fSJxxoxrIYvPiS9yWzAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUO552JWZp6qGc6QU15KewvT6TI7YwHwYDVR0j BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3 NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzEzMDMzMmUzMjMw MzIyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z8qYMA0GCSqGSIb3DQEBCwUAA4IBAQAEIRsnNbkoZTyIFkmC4UPGHMS4s+HW1fXK 4JbGBi0FprYBQDaEHdAAP9xYbuwXdSpHPdCtU5ZD40TJJdRLk6aTtc6z9RPiAvr4 vH9SmEZRXLOzRtR8BsgPwJJ7l66priZDQcamJNeZ3u9xzv+sYZ9TxOdX0wcUa+4G rKPMNge7v5JBT5/bPVr9Umeogn4rUhdMdFDQZhei341bUpznYYq+JoaMcbgv7tYy BxLVdaWEhkqh2X97XeS/k48SpGJ2HxXrMGv32KV8JFe1p/A1XnjJyTdzZ7x8nsxt dCVgMKIAT+zfdG9UcYiUaRq1/+DOd0TlO13oZzyRNSHJj/b1joJ5 -----END CERTIFICATE-----Generated at Wed May 13 10:43:51 2026 by rpki-client