$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3138382e302f32322d3332203d3e203633353930.roa File: 3130332e38392e3138382e302f32322d3332203d3e203633353930.roa (raw, json) Hash identifier: 7sElvkZeZx3hI0ORSorK0Y27EG5kUQxX14BBuxWG8ro= Subject key identifier: 88:EA:3E:1C:36:B0:B1:ED:61:A6:5C:BF:89:6C:50:A7:0A:B6:FC:63 Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 39571B3F581EEA40CD3AAA9108C077392208C8D8 Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3138382e302f32322d3332203d3e203633353930.roa Signing time: Thu 23 Apr 2026 07:28:05 +0000 ROA not before: Thu 23 Apr 2026 07:23:05 +0000 ROA not after: Thu 22 Apr 2027 07:28:05 +0000 asID: 63590 IP address blocks: 103.89.188.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:57:1b:3f:58:1e:ea:40:cd:3a:aa:91:08:c0:77:39:22:08:c8:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 23 07:23:05 2026 GMT Not After : Apr 22 07:28:05 2027 GMT Subject: CN=88EA3E1C36B0B1ED61A65CBF896C50A70AB6FC63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c4:1b:d7:94:bf:bb:a4:3f:85:86:e0:dc:a6: 97:2e:27:f8:4e:b1:db:ba:f5:cc:85:db:69:ee:f0: c2:3e:e7:2f:a0:30:cd:f0:df:e7:86:e9:69:0d:ae: b5:e8:5a:1b:f1:a6:f7:3f:41:aa:c3:9b:64:72:d7: 4d:93:fd:de:8f:35:d4:8b:16:4a:d0:09:29:88:8e: 85:9d:f8:0c:9d:66:96:1d:00:22:2d:7e:ab:4b:9c: b7:6c:b7:15:3f:d8:8b:86:d1:00:e6:d3:73:de:db: da:fa:94:08:76:aa:c5:74:4f:73:5a:38:42:4b:c7: ec:d5:db:2d:e8:8d:c5:bd:f4:82:ef:5f:8a:e2:87: 0e:bc:46:f8:47:ae:79:8d:23:d3:34:6d:4d:00:03: c4:d2:46:b8:2d:6a:ef:7f:17:b9:bf:00:56:ca:c8: fa:0a:12:c0:56:9b:5b:62:90:77:d9:32:a0:cb:14: be:3c:36:eb:a7:ad:51:ba:a0:89:a9:a1:8b:5a:2c: 1a:97:c0:53:95:df:d3:84:bd:04:10:c5:87:d6:41: ba:37:2f:47:df:fe:bb:97:41:44:af:20:18:ac:d8: 2e:5d:f1:c6:9d:06:ef:f8:5e:25:f1:c6:47:0e:3e: 8e:96:dc:3e:02:d3:7e:dc:ec:13:33:56:c9:98:81: d9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:EA:3E:1C:36:B0:B1:ED:61:A6:5C:BF:89:6C:50:A7:0A:B6:FC:63 X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3138382e302f32322d3332203d3e203633353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.188.0/22 Signature Algorithm: sha256WithRSAEncryption 72:e6:0c:f3:b7:75:92:4e:a1:80:dc:31:a3:94:6b:33:ae:f5: 39:08:b0:63:c0:e9:9d:bc:c3:cd:15:1e:60:14:31:8a:6a:cf: fc:a2:7a:fe:b7:2b:74:f9:3f:69:80:0f:ae:bb:97:2e:7a:fa: ba:ac:b5:00:0b:d1:48:b6:b7:33:e2:52:62:a8:b6:18:13:85: e7:86:f0:12:b1:1a:9b:c4:01:ca:ae:22:fe:46:a5:08:82:65: 4b:ae:a9:5c:d5:14:ac:ab:6e:75:de:0d:08:a7:51:49:55:74: 93:d3:7e:15:be:db:ba:a5:89:90:68:d8:c4:db:7c:f7:73:cc: b6:63:c7:43:90:63:fc:94:2c:f7:40:da:43:6b:bf:c6:1f:fd: 5b:fd:6a:8b:1b:b3:35:0e:15:ca:e4:88:36:51:13:25:c7:3e: 90:6d:f5:42:df:6e:3a:06:ad:6a:6d:f3:7c:15:3e:83:c4:37: 2e:11:3f:43:8f:1f:0e:9e:37:d8:b4:b0:6e:f7:37:6e:fc:55: e8:d3:a8:ec:d4:86:f2:b3:6e:fa:60:f6:44:1d:53:93:3d:34: 92:2c:42:56:a4:b0:95:31:3c:85:9c:dc:85:4a:d4:71:a8:ac: 87:34:15:12:51:d0:91:4a:2d:aa:ee:75:e2:8c:4b:d7:0f:06: 58:9b:7c:7f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOVcbP1ge6kDNOqqRCMB3OSIIyNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MjMwNzIzMDVaFw0yNzA0MjIwNzI4MDVaMDMxMTAvBgNV BAMTKDg4RUEzRTFDMzZCMEIxRUQ2MUE2NUNCRjg5NkM1MEE3MEFCNkZDNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYxBvXlL+7pD+FhuDcppcuJ/hO sdu69cyF22nu8MI+5y+gMM3w3+eG6WkNrrXoWhvxpvc/QarDm2Ry102T/d6PNdSL FkrQCSmIjoWd+AydZpYdACItfqtLnLdstxU/2IuG0QDm03Pe29r6lAh2qsV0T3Na OEJLx+zV2y3ojcW99ILvX4rihw68RvhHrnmNI9M0bU0AA8TSRrgtau9/F7m/AFbK yPoKEsBWm1tikHfZMqDLFL48NuunrVG6oImpoYtaLBqXwFOV39OEvQQQxYfWQbo3 L0ff/ruXQUSvIBis2C5d8cadBu/4XiXxxkcOPo6W3D4C037c7BMzVsmYgdkLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUiOo+HDawse1hply/iWxQpwq2/GMwHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA4OTA2MjE0MDkyMjI5ODM3MC8wLzMxMzAzMzJlMzgz OTJlMzEzODM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMzM1MzkzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmdZvDANBgkqhkiG9w0BAQsFAAOCAQEAcuYM87d1kk6hgNwxo5RrM671 OQiwY8DpnbzDzRUeYBQximrP/KJ6/rcrdPk/aYAPrruXLnr6uqy1AAvRSLa3M+JS Yqi2GBOF54bwErEam8QByq4i/kalCIJlS66pXNUUrKtudd4NCKdRSVV0k9N+Fb7b uqWJkGjYxNt893PMtmPHQ5Bj/JQs90DaQ2u/xh/9W/1qixuzNQ4VyuSINlETJcc+ kG31Qt9uOgatam3zfBU+g8Q3LhE/Q48fDp432LSwbvc3bvxV6NOo7NSG8rNu+mD2 RB1Tkz00kixCVqSwlTE8hZzchUrUcaishzQVElHQkUotqu514oxL1w8GWJt8fw== -----END CERTIFICATE-----Generated at Wed May 13 20:20:27 2026 by rpki-client