$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa File: 3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa (raw, json) Hash identifier: vOquNH4VnD80Y8AHIyXScHrOKadUzEyE9z/gEIEtGGM= Subject key identifier: 93:C9:A4:69:00:DF:C1:4F:E8:B9:8D:31:D7:87:58:C5:20:37:17:22 Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Certificate serial: 5BB1685E6AC49C2D0AABCC24DC2FCBA602D534D2 Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa Signing time: Wed 06 May 2026 06:44:18 +0000 ROA not before: Wed 06 May 2026 06:39:18 +0000 ROA not after: Wed 05 May 2027 06:44:18 +0000 asID: 204765 IP address blocks: 101.232.208.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b1:68:5e:6a:c4:9c:2d:0a:ab:cc:24:dc:2f:cb:a6:02:d5:34:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E Validity Not Before: May 6 06:39:18 2026 GMT Not After : May 5 06:44:18 2027 GMT Subject: CN=93C9A46900DFC14FE8B98D31D78758C520371722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a4:c0:f8:26:ab:3d:03:1c:d2:1d:c2:63:0c: e8:3a:51:d1:ee:95:c5:6e:82:e2:26:34:b9:5b:a1: 94:31:a4:0c:ad:bb:cc:a6:e0:d8:e5:dc:c8:a1:89: d6:29:c3:52:25:96:fc:0e:44:1e:29:e0:06:b4:fc: ce:e5:f6:cd:84:c4:f2:7f:c6:0e:99:aa:3f:2c:51: 42:ce:b0:aa:2b:54:81:96:b6:bf:40:51:db:30:1d: 5b:f7:33:10:0f:da:14:43:93:54:b1:d6:d8:56:40: 16:f8:53:32:e0:69:b5:c7:52:2b:e9:39:9e:1f:21: c5:4d:50:97:4f:3a:0d:cd:13:99:08:8f:93:ea:ea: 5d:62:95:0b:55:d0:35:6a:91:99:ae:57:3b:81:97: a2:11:7e:fc:c0:81:0d:eb:6f:8d:3a:00:40:5c:10: 10:bd:21:90:33:55:31:01:69:83:5c:e0:4c:cc:14: 7d:58:0b:c5:a6:de:f0:3d:6e:83:6a:61:4c:38:be: f1:c7:91:0c:c6:3b:05:f7:2a:c3:08:0e:5a:b1:eb: 31:c5:36:3d:08:03:36:c6:ed:99:cc:61:27:5d:04: c9:8f:36:89:a0:34:6b:6b:f5:2b:74:f8:8e:53:85: 8d:53:5f:c2:57:65:ce:25:ff:fe:52:e7:3e:b9:18: 84:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:C9:A4:69:00:DF:C1:4F:E8:B9:8D:31:D7:87:58:C5:20:37:17:22 X509v3 Authority Key Identifier: keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3130312e3233322e3230382e302f32322d3234203d3e20323034373635.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.232.208.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:c7:10:dc:8f:35:6a:2d:fe:2c:be:7b:31:b3:d1:64:2e:d0: 8d:c8:ba:ca:f0:e7:a4:a2:28:4f:e2:d3:8a:b7:f7:f6:42:ca: 39:21:e4:6c:97:1f:32:ea:32:63:3b:3b:11:0a:5a:ea:71:cd: 94:6c:e9:3f:1a:ec:9f:8a:5e:e5:ae:1f:9e:83:a7:20:13:1f: 8d:0f:4d:4e:d0:93:58:f7:09:e1:f8:0f:2c:f0:36:02:de:eb: 6f:3c:ab:44:e0:b6:92:df:e2:c8:43:38:1b:3a:c3:ef:59:06: 88:8b:1b:be:ed:b8:ee:3c:68:49:dc:8f:99:b9:99:71:d5:95: ed:49:1d:83:9e:2c:d1:a1:27:75:41:7b:af:c6:35:b5:9f:2c: b8:35:b3:fa:e6:e3:62:50:07:3b:13:72:52:98:2b:6b:fb:19: 3c:18:d4:eb:5e:6c:99:9c:ec:9d:c7:b3:65:9e:35:34:3f:35: 22:f6:39:8e:ef:cb:3e:15:9b:58:f6:53:f0:b6:12:d1:b2:87: 82:48:9f:bd:ac:b0:76:3a:f8:3d:b5:b9:8f:89:bb:e7:ac:01: 63:ac:a3:a7:a7:b0:4b:29:e1:d3:77:7c:03:2a:f9:70:40:4c: 43:2a:20:81:f3:3e:e6:d2:11:e7:b0:c9:17:4b:47:b3:75:cd: df:f4:f7:34 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUW7FoXmrEnC0Kq8wk3C/LpgLVNNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0 NEM5RUY4RTAeFw0yNjA1MDYwNjM5MThaFw0yNzA1MDUwNjQ0MThaMDMxMTAvBgNV BAMTKDkzQzlBNDY5MDBERkMxNEZFOEI5OEQzMUQ3ODc1OEM1MjAzNzE3MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxpMD4Jqs9AxzSHcJjDOg6UdHu lcVuguImNLlboZQxpAytu8ym4Njl3MihidYpw1IllvwORB4p4Aa0/M7l9s2ExPJ/ xg6Zqj8sUULOsKorVIGWtr9AUdswHVv3MxAP2hRDk1Sx1thWQBb4UzLgabXHUivp OZ4fIcVNUJdPOg3NE5kIj5Pq6l1ilQtV0DVqkZmuVzuBl6IRfvzAgQ3rb406AEBc EBC9IZAzVTEBaYNc4EzMFH1YC8Wm3vA9boNqYUw4vvHHkQzGOwX3KsMIDlqx6zHF Nj0IAzbG7ZnMYSddBMmPNomgNGtr9St0+I5ThY1TX8JXZc4l//5S5z65GITnAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUk8mkaQDfwU/ouY0x14dYxSA3FyIwHwYDVR0j BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2 NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMDMxMmUz MjMzMzIyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMyMzAzNDM3MzYz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmXo0DANBgkqhkiG9w0BAQsFAAOCAQEATscQ3I81ai3+LL57 MbPRZC7Qjci6yvDnpKIoT+LTirf39kLKOSHkbJcfMuoyYzs7EQpa6nHNlGzpPxrs n4pe5a4fnoOnIBMfjQ9NTtCTWPcJ4fgPLPA2At7rbzyrROC2kt/iyEM4GzrD71kG iIsbvu247jxoSdyPmbmZcdWV7Ukdg54s0aEndUF7r8Y1tZ8suDWz+ubjYlAHOxNy Upgra/sZPBjU615smZzsncezZZ41ND81IvY5ju/LPhWbWPZT8LYS0bKHgkifvayw djr4PbW5j4m756wBY6yjp6ewSynh03d8Ayr5cEBMQyoggfM+5tIR57DJF0tHs3XN 3/T3NA== -----END CERTIFICATE-----Generated at Wed May 13 13:42:02 2026 by rpki-client