$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa File: 3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: qUAO3ZXvrs6Ni1pqdH2ge5CJVivXLjqQtHIkW+3Z7d0= Subject key identifier: DC:F8:7E:53:85:E4:CB:AF:E8:CA:02:D2:FA:5E:A9:FD:A1:89:09:43 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 3273263A7359D619AD653088A12AB3AA3CEBE492 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa Signing time: Wed 06 May 2026 06:43:34 +0000 ROA not before: Wed 06 May 2026 06:38:34 +0000 ROA not after: Wed 05 May 2027 06:43:34 +0000 asID: 204765 IP address blocks: 101.232.192.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:73:26:3a:73:59:d6:19:ad:65:30:88:a1:2a:b3:aa:3c:eb:e4:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: May 6 06:38:34 2026 GMT Not After : May 5 06:43:34 2027 GMT Subject: CN=DCF87E5385E4CBAFE8CA02D2FA5EA9FDA1890943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:8c:e9:d1:8e:7e:50:27:3f:1a:40:20:a7: 1f:9c:3f:c8:41:2c:e2:68:b2:f9:07:c4:a1:9b:72: 22:58:cc:9e:76:a2:54:62:44:3c:01:b2:27:d9:8b: 89:f9:67:ce:e1:77:92:41:22:c0:b8:d9:c4:57:7b: 64:1f:13:b3:2b:99:de:bd:8a:b6:22:06:fd:0d:e4: ce:ef:8a:a3:9b:ee:ae:90:39:10:85:d2:c4:74:fb: b9:61:46:a2:64:78:f2:a8:36:b2:b6:de:dd:5e:59: 33:25:26:90:9c:a9:d9:9e:c7:58:21:06:41:10:8f: a4:ae:6f:9e:dd:5c:ad:e6:88:c8:74:a8:c5:9f:02: cf:97:1f:78:6b:ce:66:56:72:4f:1b:ed:60:6d:07: 7a:51:58:53:5b:ed:f6:ef:ce:52:fc:72:5f:ed:10: 96:cf:29:b8:19:32:1f:af:a5:01:96:63:61:6b:90: 63:46:4f:61:06:86:e5:32:ed:df:b9:37:2b:5e:83: d4:d5:58:93:e8:9c:34:64:cd:fc:b8:0c:1c:6b:bf: 76:46:e4:34:83:3b:6a:32:e5:3f:06:57:82:ee:15: 2d:84:4f:d1:08:32:58:1d:30:3b:1f:06:46:e9:db: 5a:85:fb:53:8b:05:d6:d0:b8:36:b8:5a:03:52:92: f3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:F8:7E:53:85:E4:CB:AF:E8:CA:02:D2:FA:5E:A9:FD:A1:89:09:43 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3139322e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.192.0/22 Signature Algorithm: sha256WithRSAEncryption 03:2c:37:ee:8b:e0:05:78:6b:51:83:9b:f1:8c:71:b3:80:ae: 7c:eb:ce:1d:f7:25:bc:59:04:9d:13:56:2a:88:b1:19:ce:3a: cb:41:b8:f3:86:03:8e:38:8e:b8:e9:3e:43:fa:6a:f7:40:33: 3a:9b:71:a3:c4:8c:29:4c:c2:bb:9a:d5:57:14:1b:42:ed:3f: 7c:60:39:e6:cb:c8:b5:4b:36:e2:e3:2a:3f:f1:53:83:da:ca: 0f:d5:9a:83:ed:1d:fb:f5:ee:94:b6:1e:6b:23:89:ed:34:b5: d2:4a:aa:4c:14:6c:f7:09:6f:75:cb:5c:f0:80:f2:82:39:c6: 54:a2:15:3a:f3:1d:19:4c:86:e8:71:20:36:a7:5d:8c:57:40: ea:fc:39:c5:d6:98:75:03:87:4c:b6:bb:60:29:c8:76:5e:ea: 10:af:3a:e4:83:31:d2:aa:8b:16:38:87:33:f5:df:27:e5:78: 96:86:68:35:f5:49:35:25:c6:e0:53:4e:a8:4e:af:b8:98:2e: 38:d6:97:e8:93:fc:60:c1:8a:7f:a5:6e:2f:09:63:95:a2:8e: 6b:35:13:3c:19:06:43:62:f0:9c:f0:0f:95:7f:65:ae:91:93: 33:2f:d3:eb:5e:71:f1:91:a8:60:56:14:54:8b:6f:b7:19:bb: d6:a3:31:af -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUMnMmOnNZ1hmtZTCIoSqzqjzr5JIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA1MDYwNjM4MzRaFw0yNzA1MDUwNjQzMzRaMDMxMTAvBgNV BAMTKERDRjg3RTUzODVFNENCQUZFOENBMDJEMkZBNUVBOUZEQTE4OTA5NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQxozp0Y5+UCc/GkAgpx+cP8hB LOJosvkHxKGbciJYzJ52olRiRDwBsifZi4n5Z87hd5JBIsC42cRXe2QfE7Mrmd69 irYiBv0N5M7viqOb7q6QORCF0sR0+7lhRqJkePKoNrK23t1eWTMlJpCcqdmex1gh BkEQj6Sub57dXK3miMh0qMWfAs+XH3hrzmZWck8b7WBtB3pRWFNb7fbvzlL8cl/t EJbPKbgZMh+vpQGWY2FrkGNGT2EGhuUy7d+5Nyteg9TVWJPonDRkzfy4DBxrv3ZG 5DSDO2oy5T8GV4LuFS2ET9EIMlgdMDsfBkbp21qF+1OLBdbQuDa4WgNSkvPhAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU3Ph+U4Xky6/oygLS+l6p/aGJCUMwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz MjMzMzIyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmXowDANBgkqhkiG9w0BAQsFAAOCAQEAAyw37ovgBXhrUYOb 8Yxxs4CufOvOHfclvFkEnRNWKoixGc46y0G484YDjjiOuOk+Q/pq90AzOptxo8SM KUzCu5rVVxQbQu0/fGA55svItUs24uMqP/FTg9rKD9Wag+0d+/XulLYeayOJ7TS1 0kqqTBRs9wlvdctc8IDygjnGVKIVOvMdGUyG6HEgNqddjFdA6vw5xdaYdQOHTLa7 YCnIdl7qEK865IMx0qqLFjiHM/XfJ+V4loZoNfVJNSXG4FNOqE6vuJguONaX6JP8 YMGKf6VuLwljlaKOazUTPBkGQ2LwnPAPlX9lrpGTMy/T615x8ZGoYFYUVItvtxm7 1qMxrw== -----END CERTIFICATE-----Generated at Wed May 13 14:59:20 2026 by rpki-client