$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e20313336393538.roa File: 3130332e3233392e3230342e302f32322d3232203d3e20313336393538.roa (raw, json) Hash identifier: 4SGQGDTeifTEL2nRET1HkWeR1h7ix/qM7mgDVuxLyuU= Subject key identifier: 75:89:E1:2B:19:80:28:34:C6:91:FD:BF:6C:95:A3:CB:2C:93:12:2D Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 5689DD5958DDF67E2D5F15E6FCD1108F4E85D72A Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e20313336393538.roa Signing time: Sat 09 May 2026 01:42:55 +0000 ROA not before: Sat 09 May 2026 01:37:55 +0000 ROA not after: Sat 08 May 2027 01:42:55 +0000 asID: 136958 IP address blocks: 103.239.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:89:dd:59:58:dd:f6:7e:2d:5f:15:e6:fc:d1:10:8f:4e:85:d7:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: May 9 01:37:55 2026 GMT Not After : May 8 01:42:55 2027 GMT Subject: CN=7589E12B19802834C691FDBF6C95A3CB2C93122D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:40:ae:cc:3c:74:98:1c:55:70:72:64:13:04: 03:bd:e3:37:f2:0b:e2:fd:be:67:28:bc:75:03:1c: 38:06:3e:70:c9:ab:0a:c7:e3:7a:cb:bb:6f:4e:23: 14:40:ae:b3:75:c0:f6:a9:80:6d:9f:8e:f8:e4:09: b5:b5:2c:6e:7a:a2:da:e5:8d:2e:54:38:e1:4e:21: 98:2c:1d:29:8e:9d:ac:15:a1:11:12:6a:f1:e4:0e: 80:f0:2e:3a:cf:a0:89:61:de:be:99:95:ac:af:13: b1:5f:0b:50:e0:c2:48:78:09:ff:1f:88:ae:46:ca: 29:50:fb:e3:92:a7:72:aa:d2:26:ef:f7:97:cc:00: 15:26:71:ec:2f:ae:73:08:fa:13:07:d6:2c:a6:e3: de:e2:1f:81:d8:de:17:20:82:69:62:59:51:c9:10: d7:30:55:2c:85:fe:e5:b2:21:89:3a:45:4d:85:b0: f1:51:0e:87:9c:b2:72:be:84:fb:2a:a8:37:25:d5: 13:32:16:d0:3b:0f:9e:ac:4e:7c:19:3e:e7:27:52: c5:3c:3d:83:0f:82:90:a2:a6:24:3e:54:01:be:31: 05:0e:0f:d5:28:e4:62:13:8e:3d:6f:d3:cb:87:c2: 8b:f0:87:35:f3:70:a6:ac:d0:d0:9a:f9:03:38:12: 35:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:89:E1:2B:19:80:28:34:C6:91:FD:BF:6C:95:A3:CB:2C:93:12:2D X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e20313336393538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.204.0/22 Signature Algorithm: sha256WithRSAEncryption 00:d6:33:68:56:53:a8:f1:1a:ff:5e:e9:a3:5b:24:74:27:67: 5d:6d:3b:31:20:aa:ba:c6:ed:a7:00:16:fa:6c:8b:68:54:80: 0e:b7:2f:ad:75:18:06:db:29:b8:67:7e:8b:8a:b1:82:05:2d: cf:d7:5e:51:33:66:f3:51:fc:77:29:c0:9c:34:a2:e1:aa:aa: 49:5b:87:a7:e4:5a:f9:ff:41:57:d1:34:3b:9d:68:cf:d6:07: 01:f9:a5:2f:ba:88:67:b3:f0:04:c2:b5:5e:bf:a6:ca:2b:d4: 04:26:35:c8:fe:de:3b:33:0b:e0:52:2a:5d:af:cf:69:ba:61: 6a:39:34:6b:14:fc:78:70:3f:1b:67:1e:5e:dd:8f:8d:60:1c: 07:e7:01:08:96:8a:9f:37:be:c5:bb:8f:3c:39:9f:8f:1f:89: ee:f3:17:f3:dc:38:cc:91:6e:b2:f3:9c:09:63:6e:be:7a:1e: 6e:b9:b7:61:41:bd:a1:86:51:bc:46:40:0f:96:8d:e3:7f:48: 3b:72:57:ed:24:97:f3:18:3e:77:ca:2c:dd:c4:9a:4a:63:f5: 63:15:fc:f0:ea:3b:9f:0f:3d:d6:e9:65:c8:26:7a:69:bd:84: d7:00:b7:a1:74:6e:6f:aa:70:32:85:43:6a:f6:df:50:d5:e6: a9:b2:6a:a3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUVondWVjd9n4tXxXm/NEQj06F1yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA1MDkwMTM3NTVaFw0yNzA1MDgwMTQyNTVaMDMxMTAvBgNV BAMTKDc1ODlFMTJCMTk4MDI4MzRDNjkxRkRCRjZDOTVBM0NCMkM5MzEyMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQK7MPHSYHFVwcmQTBAO94zfy C+L9vmcovHUDHDgGPnDJqwrH43rLu29OIxRArrN1wPapgG2fjvjkCbW1LG56otrl jS5UOOFOIZgsHSmOnawVoRESavHkDoDwLjrPoIlh3r6ZlayvE7FfC1Dgwkh4Cf8f iK5GyilQ++OSp3Kq0ibv95fMABUmcewvrnMI+hMH1iym497iH4HY3hcggmliWVHJ ENcwVSyF/uWyIYk6RU2FsPFRDoecsnK+hPsqqDcl1RMyFtA7D56sTnwZPucnUsU8 PYMPgpCipiQ+VAG+MQUOD9Uo5GITjj1v08uHwovwhzXzcKas0NCa+QM4EjUXAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUdYnhKxmAKDTGkf2/bJWjyyyTEi0wHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NzIwMjU5LzAvMzEzMDMzMmUz MjMzMzkyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNjM5MzUz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfvzDANBgkqhkiG9w0BAQsFAAOCAQEAANYzaFZTqPEa/17p o1skdCdnXW07MSCqusbtpwAW+myLaFSADrcvrXUYBtspuGd+i4qxggUtz9deUTNm 81H8dynAnDSi4aqqSVuHp+Ra+f9BV9E0O51oz9YHAfmlL7qIZ7PwBMK1Xr+myivU BCY1yP7eOzML4FIqXa/Pabphajk0axT8eHA/G2ceXt2PjWAcB+cBCJaKnze+xbuP PDmfjx+J7vMX89w4zJFusvOcCWNuvnoebrm3YUG9oYZRvEZAD5aN439IO3JX7SSX 8xg+d8os3cSaSmP1YxX88Oo7nw891ullyCZ6ab2E1wC3oXRub6pwMoVDavbfUNXm qbJqow== -----END CERTIFICATE-----Generated at Wed May 13 15:24:26 2026 by rpki-client