$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3231322e302f32322d3332203d3e203633353930.roa File: 3130332e38392e3231322e302f32322d3332203d3e203633353930.roa (raw, json) Hash identifier: XfQ90sm0h9AY/a9oxgAnwABs9fDSSrZNhWBBrTxZXW8= Subject key identifier: 41:98:F9:EE:A3:B3:27:55:88:DF:36:41:86:20:4E:EC:AD:F3:49:FA Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 292F127884FCFE4393E74DAE3FDCFCCB3F69262E Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3231322e302f32322d3332203d3e203633353930.roa Signing time: Thu 23 Apr 2026 07:28:06 +0000 ROA not before: Thu 23 Apr 2026 07:23:06 +0000 ROA not after: Thu 22 Apr 2027 07:28:06 +0000 asID: 63590 IP address blocks: 103.89.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:2f:12:78:84:fc:fe:43:93:e7:4d:ae:3f:dc:fc:cb:3f:69:26:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 23 07:23:06 2026 GMT Not After : Apr 22 07:28:06 2027 GMT Subject: CN=4198F9EEA3B3275588DF364186204EECADF349FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:50:8a:7d:77:43:11:11:78:bc:d3:b8:4d:eb: a5:74:36:ca:af:92:15:cd:05:c1:2a:25:ad:30:ae: 04:a4:e7:f5:ee:a0:5c:c8:81:5f:b1:51:14:a1:ec: 50:6a:a2:0c:8c:a8:02:30:75:80:53:c2:24:91:27: ce:d4:ec:b8:3d:ec:72:ac:93:5a:0c:24:12:25:32: 74:b4:4e:b7:c2:cd:7e:90:a7:7e:05:c9:9e:3d:eb: e2:ca:92:47:37:23:bd:ac:a6:97:8d:dc:8a:b2:a7: a9:d8:74:f5:93:81:f6:57:3f:67:05:6a:a1:c3:10: 4d:14:78:44:e3:cd:1a:26:68:bf:a1:83:a7:33:d5: 5b:20:62:a8:6f:09:27:0e:3d:8c:f3:e8:5f:5f:fb: 3a:94:54:1d:e0:dd:70:7d:ea:4a:f1:3c:1e:90:a7: 86:13:b1:de:a1:1b:a2:91:d2:20:3d:87:d6:cd:26: 7c:5a:41:a4:56:36:64:59:b0:13:86:fe:c6:55:b4: 09:cd:e1:b8:17:39:4c:cf:63:a1:2a:6d:88:4d:28: e0:21:7b:6e:38:a6:9f:cb:98:a8:e7:0a:15:7e:b9: 2d:33:e2:48:22:bf:35:1b:94:5f:1a:7b:2f:9d:4d: 3e:f4:aa:08:ac:17:30:b3:db:02:98:99:73:0c:f0: f3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:98:F9:EE:A3:B3:27:55:88:DF:36:41:86:20:4E:EC:AD:F3:49:FA X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/3130332e38392e3231322e302f32322d3332203d3e203633353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.212.0/22 Signature Algorithm: sha256WithRSAEncryption 00:a9:84:79:93:0f:8d:ea:2c:e8:3c:9c:d2:cd:aa:40:bb:d5: a2:95:39:eb:09:7c:7a:ca:9a:ab:f9:cb:3c:bb:aa:45:d0:bb: b0:51:23:11:b4:64:f2:ce:0a:b1:a4:ee:d2:56:93:28:2f:9a: d0:5c:ff:72:1d:d8:66:8e:ef:81:69:2b:5d:61:1c:b8:1a:42: d1:2d:e1:42:c6:63:b7:9a:6f:32:8d:09:03:e2:c1:de:ca:a5: d0:8c:3f:07:0b:89:d7:45:33:bd:2e:fa:85:b2:57:9b:0a:83: 1c:81:b5:b7:26:29:b1:33:6f:e6:24:23:27:fc:48:d4:f6:85: 6a:8b:f5:45:fb:60:92:04:2a:3d:f6:dc:52:21:b1:6c:d8:79: da:ee:e8:42:a6:99:8f:50:94:2f:4a:3b:93:9f:3f:02:37:e1: 61:7b:4b:c9:ca:69:eb:c3:df:dd:ab:3e:64:15:56:da:a6:d0: 29:9b:30:02:8e:48:90:97:6c:92:8f:df:1e:e6:59:93:9b:5d: f3:2c:a9:a1:fd:05:ac:6d:eb:4f:e4:6d:e1:88:eb:e7:91:58: 20:d4:20:8b:2c:b0:64:99:58:7c:15:95:14:78:49:f8:49:54: 9e:10:ba:c5:06:10:90:97:eb:5a:11:a2:cc:10:e6:8f:6e:55: 67:5c:fa:27 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKS8SeIT8/kOT502uP9z8yz9pJi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MjMwNzIzMDZaFw0yNzA0MjIwNzI4MDZaMDMxMTAvBgNV BAMTKDQxOThGOUVFQTNCMzI3NTU4OERGMzY0MTg2MjA0RUVDQURGMzQ5RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UIp9d0MREXi807hN66V0Nsqv khXNBcEqJa0wrgSk5/XuoFzIgV+xURSh7FBqogyMqAIwdYBTwiSRJ87U7Lg97HKs k1oMJBIlMnS0TrfCzX6Qp34FyZ496+LKkkc3I72sppeN3Iqyp6nYdPWTgfZXP2cF aqHDEE0UeETjzRomaL+hg6cz1VsgYqhvCScOPYzz6F9f+zqUVB3g3XB96krxPB6Q p4YTsd6hG6KR0iA9h9bNJnxaQaRWNmRZsBOG/sZVtAnN4bgXOUzPY6EqbYhNKOAh e244pp/LmKjnChV+uS0z4kgivzUblF8aey+dTT70qgisFzCz2wKYmXMM8PPFAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQZj57qOzJ1WI3zZBhiBO7K3zSfowHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA4OTA2MjE0MDkyMjI5ODM3MC8wLzMxMzAzMzJlMzgz OTJlMzIzMTMyMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzYzMzM1MzkzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmdZ1DANBgkqhkiG9w0BAQsFAAOCAQEAAKmEeZMPjeos6Dyc0s2qQLvV opU56wl8esqaq/nLPLuqRdC7sFEjEbRk8s4KsaTu0laTKC+a0Fz/ch3YZo7vgWkr XWEcuBpC0S3hQsZjt5pvMo0JA+LB3sql0Iw/BwuJ10UzvS76hbJXmwqDHIG1tyYp sTNv5iQjJ/xI1PaFaov1RftgkgQqPfbcUiGxbNh52u7oQqaZj1CUL0o7k58/Ajfh YXtLycpp68Pf3as+ZBVW2qbQKZswAo5IkJdsko/fHuZZk5td8yypof0FrG3rT+Rt 4Yjr55FYINQgiyywZJlYfBWVFHhJ+ElUnhC6xQYQkJfrWhGizBDmj25VZ1z6Jw== -----END CERTIFICATE-----Generated at Wed May 13 20:20:28 2026 by rpki-client