$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3230302e302f32322d3332203d3e203633353930.roa File: 3130332e38392e3230302e302f32322d3332203d3e203633353930.roa (raw, json) Hash identifier: /WciqUYn8kdU7BqgBJ/2piYXE2u5//OdgGrwZFgn8cc= Subject key identifier: D0:0D:FC:F5:31:39:B6:EA:63:CC:CC:8D:4D:7A:E6:88:38:3D:D5:0A Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 66A78755CED6FC336292EC9A8909D4B4AE443657 Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3230302e302f32322d3332203d3e203633353930.roa Signing time: Thu 23 Apr 2026 07:28:05 +0000 ROA not before: Thu 23 Apr 2026 07:23:05 +0000 ROA not after: Thu 22 Apr 2027 07:28:05 +0000 asID: 63590 IP address blocks: 103.89.200.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:a7:87:55:ce:d6:fc:33:62:92:ec:9a:89:09:d4:b4:ae:44:36:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 23 07:23:05 2026 GMT Not After : Apr 22 07:28:05 2027 GMT Subject: CN=D00DFCF53139B6EA63CCCC8D4D7AE688383DD50A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4d:eb:8e:68:05:b0:b2:38:40:e0:eb:1d:25: 5d:75:55:b4:db:ff:58:14:bf:e4:ac:17:c7:fc:54: 61:16:59:0d:d8:9a:4e:ab:ef:48:fa:35:05:58:ab: ea:73:9d:d3:95:30:e8:eb:c1:2a:c2:cd:e5:da:76: 4b:c1:f4:dd:5d:e4:9c:e8:f3:8a:dd:e4:89:25:0f: 9c:12:9d:08:e3:81:f4:5c:c4:a5:5d:29:09:65:23: 29:e2:64:27:4b:82:ed:db:84:26:7b:c7:c7:d4:72: 56:95:66:80:a8:dc:95:a3:00:64:60:a6:6a:16:55: d0:67:53:53:81:25:70:00:bc:d7:4c:be:f4:f1:48: 1a:d0:5e:d5:e2:51:73:b1:e7:cb:c2:d4:17:21:8a: 2a:42:89:e3:af:06:df:21:b6:3b:49:27:4c:d2:4d: b1:54:15:17:72:89:63:24:ec:38:36:13:65:7e:e4: ba:80:2d:c6:13:c0:4f:e9:0b:8c:bc:93:7f:42:85: 6b:a6:ac:d5:d1:e5:3b:3f:60:e8:6e:6a:81:58:26: bc:2d:36:ac:13:7c:b4:22:37:45:5e:82:05:3a:40: c1:62:9f:8d:f8:b7:3e:e9:6a:b4:8c:40:da:1f:1a: 0d:e8:8a:f8:cf:41:45:73:54:d6:68:1b:cf:12:11: e6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:0D:FC:F5:31:39:B6:EA:63:CC:CC:8D:4D:7A:E6:88:38:3D:D5:0A X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3230302e302f32322d3332203d3e203633353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.200.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:13:a4:cb:46:85:87:1a:30:ed:3e:c1:5c:48:5d:d5:39:90: 1b:21:5f:90:11:87:92:7f:15:86:e5:d2:48:16:53:aa:21:d5: cd:e4:ac:45:eb:74:e5:a0:25:7f:35:fb:56:e0:a2:15:d9:7d: b3:8f:ae:31:de:fd:e1:79:80:f6:58:67:e5:7b:5b:db:46:25: 9d:ca:98:52:4a:92:c1:d0:06:08:4d:d0:01:d5:48:d0:63:ce: f9:3c:65:cf:0d:81:9a:3d:16:b7:a3:88:27:c3:ff:a1:a3:41: 36:56:72:6c:ab:c4:5e:0b:4f:68:a9:dc:17:a6:71:9f:60:9e: 78:04:b5:1e:66:74:c5:85:80:0d:06:cb:28:05:81:9b:71:98: d7:09:73:e1:20:ed:17:b1:5a:6b:1f:e4:f6:94:26:af:b9:10: 32:c2:1d:61:84:24:5e:35:17:90:21:8b:cb:fc:a6:39:30:8c: dd:eb:07:75:87:46:04:63:8f:8c:b5:9b:33:dd:47:c0:d1:1f: fc:19:a2:d4:dc:42:33:d9:fe:3c:e9:2b:2a:30:3f:5b:4e:38: fa:bc:52:4b:c4:86:09:ff:31:e5:98:aa:5d:29:63:cb:4b:a6: bf:a6:ba:ee:71:06:ee:07:0a:8c:70:cf:3b:ee:6d:0d:bb:36: 89:7c:2b:7a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZqeHVc7W/DNikuyaiQnUtK5ENlcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MjMwNzIzMDVaFw0yNzA0MjIwNzI4MDVaMDMxMTAvBgNV BAMTKEQwMERGQ0Y1MzEzOUI2RUE2M0NDQ0M4RDREN0FFNjg4MzgzREQ1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTeuOaAWwsjhA4OsdJV11VbTb /1gUv+SsF8f8VGEWWQ3Ymk6r70j6NQVYq+pzndOVMOjrwSrCzeXadkvB9N1d5Jzo 84rd5IklD5wSnQjjgfRcxKVdKQllIyniZCdLgu3bhCZ7x8fUclaVZoCo3JWjAGRg pmoWVdBnU1OBJXAAvNdMvvTxSBrQXtXiUXOx58vC1BchiipCieOvBt8htjtJJ0zS TbFUFRdyiWMk7Dg2E2V+5LqALcYTwE/pC4y8k39ChWumrNXR5Ts/YOhuaoFYJrwt NqwTfLQiN0VeggU6QMFin434tz7parSMQNofGg3oivjPQUVzVNZoG88SEeYXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU0A389TE5tupjzMyNTXrmiDg91QowHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA4OTA2MjE0MDkyMjI5ODM3MC8wLzMxMzAzMzJlMzgz OTJlMzIzMDMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMzM1MzkzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmdZyDANBgkqhkiG9w0BAQsFAAOCAQEAmhOky0aFhxow7T7BXEhd1TmQ GyFfkBGHkn8VhuXSSBZTqiHVzeSsRet05aAlfzX7VuCiFdl9s4+uMd794XmA9lhn 5Xtb20YlncqYUkqSwdAGCE3QAdVI0GPO+Txlzw2Bmj0Wt6OIJ8P/oaNBNlZybKvE XgtPaKncF6Zxn2CeeAS1HmZ0xYWADQbLKAWBm3GY1wlz4SDtF7Faax/k9pQmr7kQ MsIdYYQkXjUXkCGLy/ymOTCM3esHdYdGBGOPjLWbM91HwNEf/Bmi1NxCM9n+POkr KjA/W044+rxSS8SGCf8x5ZiqXSljy0umv6a67nEG7gcKjHDPO+5tDbs2iXwreg== -----END CERTIFICATE-----Generated at Wed May 13 20:20:30 2026 by rpki-client