$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32342d3234203d3e203538353432.roa File: 3130332e3139372e322e302f32342d3234203d3e203538353432.roa (raw, json) Hash identifier: V68aOo++ig/KheCMfkJ8QzJ9Qe88JAt7FcvODI22GsI= Subject key identifier: EF:D4:2B:F9:3A:33:13:95:60:81:5D:93:DF:EC:7B:A2:EB:29:D9:C0 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 2ED6069084478DC3D1843204C765E352DFFC2FB1 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32342d3234203d3e203538353432.roa Signing time: Thu 07 May 2026 16:03:42 +0000 ROA not before: Thu 07 May 2026 15:58:42 +0000 ROA not after: Thu 06 May 2027 16:03:42 +0000 asID: 58542 IP address blocks: 103.197.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d6:06:90:84:47:8d:c3:d1:84:32:04:c7:65:e3:52:df:fc:2f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: May 7 15:58:42 2026 GMT Not After : May 6 16:03:42 2027 GMT Subject: CN=EFD42BF93A33139560815D93DFEC7BA2EB29D9C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c1:31:16:c6:6d:47:73:0b:6f:c9:42:89:3b: 48:4a:98:00:f3:9c:32:a8:68:44:03:d4:e2:0b:74: 77:9d:f1:c6:14:0a:62:7a:6a:8b:bf:82:46:b6:3c: a2:05:f7:e6:d0:e4:3b:97:78:19:d4:96:91:70:e0: e1:ab:71:77:dd:18:0f:88:31:3d:84:61:eb:9e:b6: bc:f1:07:3a:39:e4:ef:44:04:aa:76:62:1c:8f:9c: 14:86:ee:26:68:ff:9a:8c:d7:91:d1:b6:33:17:28: 5a:fc:8f:48:5c:46:6f:00:7b:bd:93:ce:eb:7f:79: 56:b9:c9:33:5a:02:e3:7f:45:6e:15:41:76:7a:62: c3:ed:1d:df:85:9d:6c:a5:04:46:0d:3f:d6:f0:40: 17:90:6a:c0:29:6f:b8:ae:8f:e4:a2:21:1a:93:18: dc:0f:62:31:11:71:6b:a2:d1:e1:42:19:56:71:85: 99:e9:e7:69:f1:8e:5b:5b:25:a9:fb:f1:57:85:fc: 44:b9:6f:60:3b:c0:b5:ab:04:08:22:c5:6b:55:8f: ed:4c:be:ea:1c:ca:c8:b9:d4:6d:a3:82:1c:c2:86: c9:2d:97:9f:17:b0:85:e2:c1:04:86:bf:df:a7:4f: 29:5e:29:93:82:fa:4c:2e:19:d6:0e:4a:f8:2d:88: 30:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D4:2B:F9:3A:33:13:95:60:81:5D:93:DF:EC:7B:A2:EB:29:D9:C0 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e322e302f32342d3234203d3e203538353432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.2.0/24 Signature Algorithm: sha256WithRSAEncryption a3:d7:36:8e:ba:fb:51:8d:12:9a:d7:aa:b5:53:4b:f2:e6:26: 35:6f:ab:38:b0:1d:7d:e5:c7:2f:96:c0:d7:46:5a:8a:39:89: ac:bc:47:1b:eb:ea:17:03:f2:53:86:3f:15:2e:33:7a:8a:1e: 21:d2:65:ff:8f:4a:82:4e:30:90:de:ab:c1:0d:12:39:ab:11: af:9e:b3:21:67:4c:a7:b3:9d:66:65:d9:2d:a7:0a:12:34:df: 24:99:ca:45:bc:fa:ef:74:3b:73:57:ea:6b:d1:10:b6:1c:7f: c5:67:ce:13:76:05:aa:9a:06:6d:8b:8d:53:67:8e:cd:77:4e: f4:45:bf:76:57:24:d6:68:1d:6e:1b:05:d3:8b:cd:aa:0a:81: 02:5c:a4:9b:f2:e2:a2:1d:5c:e2:de:a2:20:29:53:6c:45:ae: b7:9d:15:06:89:ec:81:12:f8:5c:2c:c7:51:da:ca:ee:e5:5e: f9:13:e5:e3:56:e5:f9:94:ac:28:57:50:7f:6d:57:ec:12:fb: fa:5f:31:c9:1b:96:e2:6e:b9:3e:02:c4:7f:15:55:50:a5:0c: bb:73:9c:44:bf:7d:b5:f9:6d:c6:f3:5a:f6:a4:5c:e1:5c:ef: 1f:ce:c7:c4:97:74:a3:e1:da:1e:36:ed:f3:33:97:2a:8b:cd: d8:07:fe:1a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULtYGkIRHjcPRhDIEx2XjUt/8L7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA1MDcxNTU4NDJaFw0yNzA1MDYxNjAzNDJaMDMxMTAvBgNV BAMTKEVGRDQyQkY5M0EzMzEzOTU2MDgxNUQ5M0RGRUM3QkEyRUIyOUQ5QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4wTEWxm1HcwtvyUKJO0hKmADz nDKoaEQD1OILdHed8cYUCmJ6aou/gka2PKIF9+bQ5DuXeBnUlpFw4OGrcXfdGA+I MT2EYeuetrzxBzo55O9EBKp2YhyPnBSG7iZo/5qM15HRtjMXKFr8j0hcRm8Ae72T zut/eVa5yTNaAuN/RW4VQXZ6YsPtHd+FnWylBEYNP9bwQBeQasApb7iuj+SiIRqT GNwPYjERcWui0eFCGVZxhZnp52nxjltbJan78VeF/ES5b2A7wLWrBAgixWtVj+1M vuocysi51G2jghzChsktl58XsIXiwQSGv9+nTyleKZOC+kwuGdYOSvgtiDBNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU79Qr+TozE5VggV2T3+x7ousp2cAwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzEzMDMzMmUzMTM5 MzcyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM1MzQzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfFAjANBgkqhkiG9w0BAQsFAAOCAQEAo9c2jrr7UY0SmteqtVNL8uYmNW+r OLAdfeXHL5bA10ZaijmJrLxHG+vqFwPyU4Y/FS4zeooeIdJl/49Kgk4wkN6rwQ0S OasRr56zIWdMp7OdZmXZLacKEjTfJJnKRbz673Q7c1fqa9EQthx/xWfOE3YFqpoG bYuNU2eOzXdO9EW/dlck1mgdbhsF04vNqgqBAlykm/Lioh1c4t6iIClTbEWut50V BonsgRL4XCzHUdrK7uVe+RPl41bl+ZSsKFdQf21X7BL7+l8xyRuW4m65PgLEfxVV UKUMu3OcRL99tfltxvNa9qRc4VzvH87HxJd0o+HaHjbt8zOXKovN2Af+Gg== -----END CERTIFICATE-----Generated at Wed May 13 10:36:29 2026 by rpki-client