$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3234382e3130302e302f32322d3234203d3e203535393936.roa File: 3130332e3234382e3130302e302f32322d3234203d3e203535393936.roa (raw, json) Hash identifier: 53BN1IHrYsCo14XQiqjXMYD6MebivN8F1fBXb2lXy3Y= Subject key identifier: 78:CB:B2:1A:E1:D6:BF:99:D3:A2:B2:C2:B9:22:42:5C:BA:8A:73:55 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 28C801EA922B42C1E2B594BE6EA9BFF6007C8736 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3234382e3130302e302f32322d3234203d3e203535393936.roa Signing time: Tue 08 Sep 2026 03:01:50 +0000 ROA not before: Tue 08 Sep 2026 02:56:50 +0000 ROA not after: Tue 07 Sep 2027 03:01:50 +0000 asID: 55996 IP address blocks: 103.248.100.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 17:31:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c8:01:ea:92:2b:42:c1:e2:b5:94:be:6e:a9:bf:f6:00:7c:87:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Sep 8 02:56:50 2026 GMT Not After : Sep 7 03:01:50 2027 GMT Subject: CN=78CBB21AE1D6BF99D3A2B2C2B922425CBA8A7355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8c:27:03:8f:bf:1e:ea:2f:14:a2:e1:5f:5f: e3:e5:7d:fa:51:3e:2c:2b:a4:16:37:cb:02:6c:1d: df:4b:c0:12:e4:8e:be:1d:63:a7:5b:da:a7:3c:45: 2c:32:9e:ac:30:88:f5:af:a9:3a:a1:e3:ee:ae:5a: e5:05:5e:f0:c0:0a:57:4a:39:7b:b2:f0:83:22:34: 4c:62:0a:36:68:41:cb:c6:01:21:f4:a5:5a:3b:10: 8d:3f:4a:ce:11:e2:17:29:61:d6:3d:cc:ee:69:e2: 22:76:49:b7:b7:1c:69:5b:3f:22:5f:68:36:c1:4e: ac:4b:b6:2b:e4:29:6b:ff:8d:51:9b:70:48:48:a7: 29:fd:c6:8e:ab:15:df:76:fe:2c:b5:bf:ba:bf:1b: 6b:6c:71:a4:ea:e6:30:86:5d:dd:a8:04:7e:25:ca: be:1d:84:8e:a8:f4:cc:ea:ea:2c:41:54:0a:66:02: f1:92:8d:11:e0:2a:9d:90:16:76:5d:96:45:fc:cd: f3:b8:08:17:34:fb:c3:c3:a6:f4:14:fe:1a:2a:6a: c6:f6:44:0c:93:72:bb:72:a5:4c:e8:a5:e5:43:28: 03:5c:0a:02:3e:c5:07:75:01:ec:73:22:b5:5a:af: 86:15:bf:72:fa:d8:5b:75:8c:ec:44:8c:01:1c:c8: 93:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CB:B2:1A:E1:D6:BF:99:D3:A2:B2:C2:B9:22:42:5C:BA:8A:73:55 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3234382e3130302e302f32322d3234203d3e203535393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.100.0/22 Signature Algorithm: sha256WithRSAEncryption 57:09:6e:e1:2c:50:70:8b:8c:e8:2b:3c:08:c4:5a:52:78:5e: 06:23:45:e2:fa:8f:99:10:45:33:0f:22:cc:8f:28:d6:fe:03: 95:fa:6f:f4:50:79:23:80:38:24:60:ba:a1:d5:4b:39:a2:e1: 53:b2:9d:36:0f:b5:8a:54:83:39:85:5c:46:0c:d4:87:9c:a0: d5:79:8a:02:ab:de:93:bb:5b:7a:c9:c7:6f:cb:ec:eb:2d:19: e9:9f:82:9b:c6:a3:4b:82:3d:df:d8:0a:fd:f8:d4:c7:3e:01: 62:84:30:d2:24:71:47:e9:15:a8:28:af:98:8e:ba:0d:2b:6c: 06:08:f2:42:6f:12:9d:01:54:45:29:8f:3f:1f:56:30:46:5a: 02:83:3b:a0:c4:fb:75:e3:b2:2e:70:d0:6d:bd:d9:e3:8d:75: 39:6b:c0:e9:8c:71:2a:ce:f7:b7:9d:18:fc:da:6d:41:28:c6: 6e:88:3a:ee:7e:fe:ce:d0:b8:24:b5:4a:0f:cb:7b:e3:f4:ab: a1:3b:f7:e2:d3:55:3f:f8:49:1a:d2:64:fb:02:4d:53:cc:4e: 9b:b4:de:53:8c:90:bc:58:5b:9c:f7:55:a2:32:b3:56:26:73: 61:35:42:9a:a7:ea:35:9a:00:98:cc:0b:84:8e:05:a7:1c:36: 07:90:9f:02 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKMgB6pIrQsHitZS+bqm/9gB8hzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA5MDgwMjU2NTBaFw0yNzA5MDcwMzAxNTBaMDMxMTAvBgNV BAMTKDc4Q0JCMjFBRTFENkJGOTlEM0EyQjJDMkI5MjI0MjVDQkE4QTczNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEjCcDj78e6i8UouFfX+PlffpR PiwrpBY3ywJsHd9LwBLkjr4dY6db2qc8RSwynqwwiPWvqTqh4+6uWuUFXvDACldK OXuy8IMiNExiCjZoQcvGASH0pVo7EI0/Ss4R4hcpYdY9zO5p4iJ2Sbe3HGlbPyJf aDbBTqxLtivkKWv/jVGbcEhIpyn9xo6rFd92/iy1v7q/G2tscaTq5jCGXd2oBH4l yr4dhI6o9Mzq6ixBVApmAvGSjRHgKp2QFnZdlkX8zfO4CBc0+8PDpvQU/hoqasb2 RAyTcrtypUzopeVDKANcCgI+xQd1AexzIrVar4YVv3L62Ft1jOxEjAEcyJPnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUeMuyGuHWv5nTorLCuSJCXLqKc1UwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC8zMTMwMzMyZTMy MzQzODJlMzEzMDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmf4ZDANBgkqhkiG9w0BAQsFAAOCAQEAVwlu4SxQcIuM6Cs8CMRa UnheBiNF4vqPmRBFMw8izI8o1v4Dlfpv9FB5I4A4JGC6odVLOaLhU7KdNg+1ilSD OYVcRgzUh5yg1XmKAqvek7tbesnHb8vs6y0Z6Z+Cm8ajS4I939gK/fjUxz4BYoQw 0iRxR+kVqCivmI66DStsBgjyQm8SnQFURSmPPx9WMEZaAoM7oMT7deOyLnDQbb3Z 4411OWvA6YxxKs73t50Y/NptQSjGbog67n7+ztC4JLVKD8t74/SroTv34tNVP/hJ GtJk+wJNU8xOm7TeU4yQvFhbnPdVojKzViZzYTVCmqfqNZoAmMwLhI4Fpxw2B5Cf Ag== -----END CERTIFICATE-----Generated at Mon Sep 28 15:37:05 2026 by rpki-client