$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3234382e3130302e302f32322d3232203d3e2030.roa File: 3130332e3234382e3130302e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: 4w1d4wlsq6lUtXfpCxdJqTU97i+wynzVpBk0KmYrvjA= Subject key identifier: 6C:42:67:39:83:9D:83:77:86:60:2C:14:E1:3D:26:BC:8A:2A:81:59 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 6951BFD10B05738E386C192A43D35B813907648C Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3234382e3130302e302f32322d3232203d3e2030.roa Signing time: Fri 08 May 2026 00:58:46 +0000 ROA not before: Fri 08 May 2026 00:53:46 +0000 ROA not after: Fri 07 May 2027 00:58:46 +0000 asID: 0 IP address blocks: 103.248.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:51:bf:d1:0b:05:73:8e:38:6c:19:2a:43:d3:5b:81:39:07:64:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: May 8 00:53:46 2026 GMT Not After : May 7 00:58:46 2027 GMT Subject: CN=6C426739839D837786602C14E13D26BC8A2A8159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f6:0a:b4:a0:b7:4e:34:ac:f2:e6:d1:ec:87: fc:93:36:38:a0:93:70:79:b3:c9:e3:5d:95:8f:db: 87:58:0c:7d:00:26:a6:b1:e5:87:7d:98:da:0e:c5: 6b:76:1f:35:bc:b4:19:10:08:a0:ef:57:e8:86:32: 4e:2b:0a:52:34:ab:eb:61:e9:fa:67:5c:de:3c:ec: f3:73:60:eb:a4:72:23:2e:c3:16:e6:e7:0b:16:b2: ac:17:81:03:a6:3d:2b:d8:fb:58:f7:de:51:dd:67: ea:99:2d:88:6b:5b:08:dc:bd:5e:87:18:9d:4a:dd: 32:36:f8:09:1d:e9:de:cf:c1:bd:9f:e6:ad:e4:9d: 35:2c:c6:d1:ad:25:93:d8:c5:da:2d:f8:dd:41:3e: 27:b1:49:0e:c7:d0:be:89:05:44:eb:6f:af:2d:17: 63:31:e0:54:06:73:07:8f:f6:70:02:77:1e:fd:5a: 9f:a7:69:76:19:b0:45:f2:d5:99:2d:c0:86:71:63: bc:db:92:b4:85:fd:47:27:e9:88:ef:0f:a4:fd:75: 30:90:8b:50:22:95:b6:00:9f:28:35:24:3c:c9:8e: b5:77:95:ff:7d:be:1d:44:22:3d:25:49:c0:fa:1f: a7:e4:02:f7:f6:e4:bf:a4:d1:fe:02:70:6d:dd:fe: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:42:67:39:83:9D:83:77:86:60:2C:14:E1:3D:26:BC:8A:2A:81:59 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3234382e3130302e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.100.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:5b:66:1b:10:aa:f8:8b:cc:f3:66:eb:68:52:6c:d2:a5:8e: 50:88:aa:27:80:77:22:f5:e0:8c:e0:8a:b3:ee:8f:77:a0:68: 89:c5:ac:26:e7:3a:26:24:60:d0:94:04:44:ac:e6:70:9d:6d: ed:2d:8e:5d:2f:d5:a9:69:3b:6e:d1:65:68:22:d6:b4:81:31: 4e:fc:55:08:f6:a2:c5:01:3d:45:66:61:c8:87:29:b1:0e:f0: b2:2c:c4:c0:98:58:c2:82:4f:ac:dc:09:3e:77:23:b6:80:28: 72:7d:33:3c:18:5c:e7:4e:8d:66:8a:d3:09:75:6d:d1:2f:a1: 86:24:92:4a:77:8e:71:96:f2:d5:bd:b4:83:13:2f:99:a3:c4: 51:55:ac:63:f7:b1:20:b1:0c:c6:36:0e:fe:36:a9:07:33:43: ff:cf:5d:36:17:b8:f1:e0:3d:dd:c3:f4:43:c6:f0:2d:69:39: 56:fc:b2:e6:65:64:3a:6d:8c:54:0a:39:a3:d4:35:fe:10:3c: 47:85:84:28:81:0f:d3:05:55:73:9e:81:14:d8:16:77:94:bb: 71:b1:73:6e:73:99:89:36:48:b4:b3:bb:17:c2:18:4a:0f:be: 12:87:e0:7a:13:1f:f2:d6:78:9b:7b:2b:9e:51:f3:09:e0:27: 72:29:64:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUaVG/0QsFc444bBkqQ9NbgTkHZIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA1MDgwMDUzNDZaFw0yNzA1MDcwMDU4NDZaMDMxMTAvBgNV BAMTKDZDNDI2NzM5ODM5RDgzNzc4NjYwMkMxNEUxM0QyNkJDOEEyQTgxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/9gq0oLdONKzy5tHsh/yTNjig k3B5s8njXZWP24dYDH0AJqax5Yd9mNoOxWt2HzW8tBkQCKDvV+iGMk4rClI0q+th 6fpnXN487PNzYOukciMuwxbm5wsWsqwXgQOmPSvY+1j33lHdZ+qZLYhrWwjcvV6H GJ1K3TI2+Akd6d7Pwb2f5q3knTUsxtGtJZPYxdot+N1BPiexSQ7H0L6JBUTrb68t F2Mx4FQGcweP9nACdx79Wp+naXYZsEXy1ZktwIZxY7zbkrSF/Ucn6YjvD6T9dTCQ i1AilbYAnyg1JDzJjrV3lf99vh1EIj0lScD6H6fkAvf25L+k0f4CcG3d/o0fAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUbEJnOYOdg3eGYCwU4T0mvIoqgVkwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzEzMDMzMmUzMjM0 MzgyZTMxMzAzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z/hkMA0GCSqGSIb3DQEBCwUAA4IBAQArW2YbEKr4i8zzZutoUmzSpY5QiKongHci 9eCM4Iqz7o93oGiJxawm5zomJGDQlARErOZwnW3tLY5dL9WpaTtu0WVoIta0gTFO /FUI9qLFAT1FZmHIhymxDvCyLMTAmFjCgk+s3Ak+dyO2gChyfTM8GFznTo1mitMJ dW3RL6GGJJJKd45xlvLVvbSDEy+Zo8RRVaxj97EgsQzGNg7+NqkHM0P/z102F7jx 4D3dw/RDxvAtaTlW/LLmZWQ6bYxUCjmj1DX+EDxHhYQogQ/TBVVznoEU2BZ3lLtx sXNuc5mJNki0s7sXwhhKD74Sh+B6Ex/y1nibeyueUfMJ4CdyKWRi -----END CERTIFICATE-----Generated at Wed May 13 05:54:54 2026 by rpki-client