$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33342e302f32342d3234203d3e203535393936.roa File: 3130332e32302e33342e302f32342d3234203d3e203535393936.roa (raw, json) Hash identifier: StJv+3zFHRYPYW4IjgmTTCATmgOTw3A1fofeYQV1X1U= Subject key identifier: D2:B7:4A:F7:F6:1B:13:A2:63:0F:D8:AE:C4:21:B5:62:4F:E5:BB:DA Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 446765DB6AA8F3E744729457F8196E112D4AFFCB Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33342e302f32342d3234203d3e203535393936.roa Signing time: Fri 08 May 2026 01:05:32 +0000 ROA not before: Fri 08 May 2026 01:00:32 +0000 ROA not after: Fri 07 May 2027 01:05:32 +0000 asID: 55996 IP address blocks: 103.20.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:67:65:db:6a:a8:f3:e7:44:72:94:57:f8:19:6e:11:2d:4a:ff:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: May 8 01:00:32 2026 GMT Not After : May 7 01:05:32 2027 GMT Subject: CN=D2B74AF7F61B13A2630FD8AEC421B5624FE5BBDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ee:71:1a:4c:34:23:44:74:8f:68:b9:b4:c2: 48:76:74:b0:41:2f:f9:da:41:44:53:eb:33:02:f9: b6:86:dd:1f:53:c2:c3:77:69:38:f6:fa:ef:3c:1d: 5e:fb:30:de:a1:60:ab:d5:e6:7f:d1:cd:bc:25:ec: ca:77:14:e1:ed:8e:f1:07:64:e9:84:49:16:1c:3e: 1d:91:ec:8d:c7:4d:8d:40:7f:7b:4b:fa:66:6b:d0: a6:8b:e2:8c:f8:5a:6b:fd:6a:07:9f:4a:07:de:cc: 75:df:6e:03:dd:c1:e8:65:be:3c:a2:52:d3:ea:2d: 68:59:5e:ea:6a:90:d4:fb:16:38:c9:18:40:77:c8: 66:4b:42:57:56:73:b6:42:6c:13:f6:7e:4f:02:a2: 58:f3:65:98:06:92:8e:ce:9c:dd:b9:90:68:4a:a0: c5:48:23:2a:f3:9e:ba:9b:0a:83:be:2a:c1:6d:b7: 76:67:28:c0:73:52:43:0f:08:e6:25:db:46:31:ca: 69:34:c6:e0:78:b4:71:13:a0:ea:c3:92:77:17:aa: 3e:58:fb:a1:9a:b2:e2:17:95:75:a1:43:fd:21:f0: 59:9f:a7:30:5c:2b:f8:13:4a:07:51:4d:4a:30:fb: 6e:16:c3:a7:38:30:24:4a:d3:39:ac:9a:f8:35:f6: dd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:B7:4A:F7:F6:1B:13:A2:63:0F:D8:AE:C4:21:B5:62:4F:E5:BB:DA X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33342e302f32342d3234203d3e203535393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.34.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:65:fa:6e:97:34:25:17:40:cd:69:03:91:f5:19:4d:46:39: d0:71:87:e0:0d:18:54:5d:04:82:26:4b:3c:9f:2a:a5:46:ae: e8:ad:00:af:25:d7:b1:23:3e:96:76:52:90:25:fc:30:83:78: cb:c4:7b:05:d5:0f:7c:21:cd:c4:1e:79:f1:81:26:27:25:20: c5:ee:af:39:0e:32:7b:90:44:68:11:d0:23:98:9c:7f:6a:18: bc:2b:68:83:05:36:e0:ca:91:64:78:f6:33:50:2f:38:33:7b: fc:45:af:a3:65:82:fb:fa:69:eb:de:e1:e4:5b:36:69:bd:9f: 95:04:61:37:f9:5b:24:55:92:64:32:8e:43:a7:20:6c:ce:74: a8:c4:cd:b0:2a:93:e8:86:05:6a:1b:19:42:fd:85:02:8d:6a: 03:d3:ab:e5:ab:4f:82:a0:27:bb:27:10:7d:d7:18:c2:b1:d0: ae:8f:6a:1a:98:26:7d:3e:67:35:36:f4:14:87:40:ff:ad:50: 65:5d:00:8f:82:e0:db:d9:f7:17:5f:4d:86:84:7b:36:55:ab: 88:4f:ca:91:72:bd:6f:48:34:de:b8:6e:d2:a6:e6:0a:6e:39: 2f:06:51:59:d0:76:3d:06:92:21:be:1e:64:30:4f:1d:ac:11: e9:91:3a:3b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIURGdl22qo8+dEcpRX+BluES1K/8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA1MDgwMTAwMzJaFw0yNzA1MDcwMTA1MzJaMDMxMTAvBgNV BAMTKEQyQjc0QUY3RjYxQjEzQTI2MzBGRDhBRUM0MjFCNTYyNEZFNUJCREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv7nEaTDQjRHSPaLm0wkh2dLBB L/naQURT6zMC+baG3R9TwsN3aTj2+u88HV77MN6hYKvV5n/Rzbwl7Mp3FOHtjvEH ZOmESRYcPh2R7I3HTY1Af3tL+mZr0KaL4oz4Wmv9agefSgfezHXfbgPdwehlvjyi UtPqLWhZXupqkNT7FjjJGEB3yGZLQldWc7ZCbBP2fk8ColjzZZgGko7OnN25kGhK oMVIIyrznrqbCoO+KsFtt3ZnKMBzUkMPCOYl20Yxymk0xuB4tHEToOrDkncXqj5Y +6GasuIXlXWhQ/0h8FmfpzBcK/gTSgdRTUow+24Ww6c4MCRK0zmsmvg19t3ZAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU0rdK9/YbE6JjD9iuxCG1Yk/lu9owHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzEzMDMzMmUzMjMw MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcUIjANBgkqhkiG9w0BAQsFAAOCAQEAbmX6bpc0JRdAzWkDkfUZTUY50HGH 4A0YVF0EgiZLPJ8qpUau6K0AryXXsSM+lnZSkCX8MIN4y8R7BdUPfCHNxB558YEm JyUgxe6vOQ4ye5BEaBHQI5icf2oYvCtogwU24MqRZHj2M1AvODN7/EWvo2WC+/pp 697h5Fs2ab2flQRhN/lbJFWSZDKOQ6cgbM50qMTNsCqT6IYFahsZQv2FAo1qA9Or 5atPgqAnuycQfdcYwrHQro9qGpgmfT5nNTb0FIdA/61QZV0Aj4Lg29n3F19NhoR7 NlWriE/KkXK9b0g03rhu0qbmCm45LwZRWdB2PQaSIb4eZDBPHawR6ZE6Ow== -----END CERTIFICATE-----Generated at Wed May 13 06:38:14 2026 by rpki-client