$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32332d3234203d3e203535393936.roa File: 3130332e3139372e322e302f32332d3234203d3e203535393936.roa (raw, json) Hash identifier: Rpn+gNy+he+8SJE20cyLGBhiBa1UGUN2Q187SKTzfOU= Subject key identifier: 65:21:AD:1C:B6:1E:90:6B:1F:12:AA:96:8B:C4:40:44:BE:76:6B:EC Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 6488748DF6FAC3D82E2C56C0EB1BB9B49D717650 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32332d3234203d3e203535393936.roa Signing time: Thu 07 May 2026 16:03:41 +0000 ROA not before: Thu 07 May 2026 15:58:41 +0000 ROA not after: Thu 06 May 2027 16:03:41 +0000 asID: 55996 IP address blocks: 103.197.2.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:88:74:8d:f6:fa:c3:d8:2e:2c:56:c0:eb:1b:b9:b4:9d:71:76:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: May 7 15:58:41 2026 GMT Not After : May 6 16:03:41 2027 GMT Subject: CN=6521AD1CB61E906B1F12AA968BC44044BE766BEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:50:04:f0:e7:50:79:1d:7c:93:74:21:48:77: 99:83:6d:f6:a2:ff:fd:33:c0:87:5b:b3:37:69:d0: e4:c0:7b:c6:30:22:d4:59:23:de:4b:6d:a1:27:eb: 58:d0:cf:c2:a9:37:17:b9:79:79:de:a8:c8:1c:c4: f7:2a:2a:19:47:92:ad:1f:03:eb:bc:98:e3:d7:8f: fb:a8:57:99:59:4f:9e:a0:07:92:2e:c0:31:16:c5: 7e:e9:32:9e:b8:f1:46:a5:d1:3e:f4:3e:01:58:4a: b4:a5:70:2f:d2:28:8a:45:db:6f:83:55:15:62:c7: 92:7e:6e:a9:ea:77:fb:c9:cc:ea:1c:f1:9e:ad:57: 0d:c9:9c:0d:13:e1:7f:11:44:1a:d0:54:af:6f:11: 4c:f1:f8:4f:1b:a5:12:12:a8:9e:20:5c:77:86:30: 5e:65:87:51:8c:a9:be:c6:a1:d5:04:c5:30:0e:4c: dc:e3:86:ce:42:d2:83:37:f4:4a:eb:55:ab:40:3c: e5:ae:9f:e4:52:f0:31:bc:89:d2:8f:5a:31:72:a7: 1e:6a:73:5d:5a:7b:ba:05:39:70:2f:02:f6:84:d7: 6e:e0:96:a5:db:01:db:fa:93:c1:5d:a4:8e:4e:43: a3:43:fe:d5:a6:80:4b:bc:55:25:82:11:52:a4:3c: 8b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:21:AD:1C:B6:1E:90:6B:1F:12:AA:96:8B:C4:40:44:BE:76:6B:EC X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32332d3234203d3e203535393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.2.0/23 Signature Algorithm: sha256WithRSAEncryption 74:6b:24:8b:86:a5:9b:3b:14:62:01:22:26:3f:97:ab:30:e5: 55:e7:f2:ef:4a:07:2d:b4:48:c8:f9:31:48:7f:57:f4:e2:0d: ed:fa:90:9f:74:5b:b6:aa:17:fa:ed:e4:78:bc:dc:04:68:4f: 02:a1:9f:e6:83:da:2b:73:8e:bd:04:e1:04:4c:ff:81:e4:e4: 6b:80:73:73:43:f4:c6:9d:86:1d:a0:c2:94:49:35:fc:76:ff: 99:1c:83:58:9f:11:a5:e2:e1:16:f0:3c:d3:2c:f1:b3:9d:20: 2d:ea:95:75:90:07:e4:92:59:b2:e9:32:a0:3b:42:6c:c3:0a: 1d:5d:41:78:00:10:0a:6c:e0:05:ee:02:49:70:da:50:b7:ec: 7b:e2:b0:4e:b6:c7:e3:d7:62:1a:df:07:c9:ae:c6:af:b3:6a: 35:6a:a8:44:0c:da:6d:25:fe:6f:37:7e:97:5d:1f:d8:87:61: 9b:7a:78:b3:6d:77:c3:71:a2:95:ca:5c:de:83:55:8e:f5:b7: f3:aa:14:5d:4e:dd:be:5d:d9:5f:3b:47:19:bf:25:ad:4f:5d: 81:37:95:97:af:dd:e2:6f:31:36:8d:02:5e:9c:08:45:3f:e3: cb:a4:51:d2:e5:9c:1d:26:b4:64:7d:6f:f2:44:58:3d:3d:f2: f5:0d:1f:25 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUZIh0jfb6w9guLFbA6xu5tJ1xdlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA1MDcxNTU4NDFaFw0yNzA1MDYxNjAzNDFaMDMxMTAvBgNV BAMTKDY1MjFBRDFDQjYxRTkwNkIxRjEyQUE5NjhCQzQ0MDQ0QkU3NjZCRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMUATw51B5HXyTdCFId5mDbfai //0zwIdbszdp0OTAe8YwItRZI95LbaEn61jQz8KpNxe5eXneqMgcxPcqKhlHkq0f A+u8mOPXj/uoV5lZT56gB5IuwDEWxX7pMp648Ual0T70PgFYSrSlcC/SKIpF22+D VRVix5J+bqnqd/vJzOoc8Z6tVw3JnA0T4X8RRBrQVK9vEUzx+E8bpRISqJ4gXHeG MF5lh1GMqb7GodUExTAOTNzjhs5C0oM39ErrVatAPOWun+RS8DG8idKPWjFypx5q c11ae7oFOXAvAvaE127glqXbAdv6k8FdpI5OQ6ND/tWmgEu8VSWCEVKkPIuhAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZSGtHLYekGsfEqqWi8RARL52a+wwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzEzMDMzMmUzMTM5 MzcyZTMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWfFAjANBgkqhkiG9w0BAQsFAAOCAQEAdGski4almzsUYgEiJj+XqzDlVefy 70oHLbRIyPkxSH9X9OIN7fqQn3RbtqoX+u3keLzcBGhPAqGf5oPaK3OOvQThBEz/ geTka4Bzc0P0xp2GHaDClEk1/Hb/mRyDWJ8RpeLhFvA80yzxs50gLeqVdZAH5JJZ sukyoDtCbMMKHV1BeAAQCmzgBe4CSXDaULfse+KwTrbH49diGt8Hya7Gr7NqNWqo RAzabSX+bzd+l10f2Idhm3p4s213w3Gilcpc3oNVjvW386oUXU7dvl3ZXztHGb8l rU9dgTeVl6/d4m8xNo0CXpwIRT/jy6RR0uWcHSa0ZH1v8kRYPT3y9Q0fJQ== -----END CERTIFICATE-----Generated at Wed May 13 10:33:14 2026 by rpki-client