$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/3130332e3232302e3130382e302f32322d3232203d3e2030.roa File: 3130332e3232302e3130382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: eweMT2DqhbhsogWgs3Ls5JTkhPjH5PVagqQGefKB424= Subject key identifier: 59:5E:B2:58:48:53:1D:E2:D9:59:32:20:C5:15:34:35:F7:6D:C1:D8 Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Certificate serial: 1D7EC58FB72CFA2F124D8D2B12884D27029F3EBF Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/3130332e3232302e3130382e302f32322d3232203d3e2030.roa Signing time: Wed 22 Apr 2026 07:03:32 +0000 ROA not before: Wed 22 Apr 2026 06:58:32 +0000 ROA not after: Wed 21 Apr 2027 07:03:32 +0000 asID: 0 IP address blocks: 103.220.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7e:c5:8f:b7:2c:fa:2f:12:4d:8d:2b:12:88:4d:27:02:9f:3e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Validity Not Before: Apr 22 06:58:32 2026 GMT Not After : Apr 21 07:03:32 2027 GMT Subject: CN=595EB25848531DE2D9593220C5153435F76DC1D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:83:4c:a6:dc:47:40:b4:b4:16:3b:8b:44:ac: 5a:4f:d4:82:1e:3d:39:99:1a:e9:e7:33:d4:f1:f8: 92:fd:7f:d3:9c:fd:19:eb:1c:90:11:9f:5a:9f:75: cf:45:f9:24:ce:e0:97:2a:39:0d:35:a1:c6:f3:15: 40:0d:5e:d6:3d:a3:60:c7:a1:11:39:b2:e7:85:c6: 51:8f:34:2c:c7:7e:b3:6e:fe:2b:07:97:7d:a5:c3: 87:be:30:08:47:f5:3b:d8:fd:aa:a0:82:09:2c:34: 72:94:34:28:85:22:73:70:f0:bb:b2:2d:19:f3:37: 5f:9a:8f:2e:a7:00:5b:a5:9a:34:8a:ff:da:ce:25: 50:e1:12:02:1d:72:02:3e:2f:e6:d3:35:75:21:ad: 4a:75:be:1f:2c:83:87:e9:cc:32:88:1a:c5:f1:ea: 60:a6:68:3f:29:0d:95:58:b8:75:95:36:68:62:51: 7c:9b:f4:bd:b6:83:52:df:49:fd:e1:ff:66:ca:fd: c4:6e:55:39:69:8a:d6:2c:70:1c:77:17:bf:b4:a2: 4a:e0:f7:82:6e:72:f6:ea:c7:4f:3f:51:22:88:28: 25:07:5b:bc:fe:f5:13:f8:42:f4:c0:ad:b1:a3:3d: a0:4f:08:ab:de:6e:f7:d7:76:a3:d3:97:0a:8d:49: 2e:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5E:B2:58:48:53:1D:E2:D9:59:32:20:C5:15:34:35:F7:6D:C1:D8 X509v3 Authority Key Identifier: keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/3130332e3232302e3130382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.108.0/22 Signature Algorithm: sha256WithRSAEncryption 94:bf:81:a4:a3:e2:22:4d:61:a1:a1:af:94:03:24:36:df:67: 29:67:db:7f:81:00:6c:3e:0d:c9:bb:3c:b0:a8:ff:af:47:7e: ec:b9:33:ef:bf:8b:0b:89:08:08:ed:25:e2:cc:7e:31:71:7c: 5d:25:5c:6e:96:ac:a1:4f:23:6d:45:52:c0:e7:16:3b:d5:aa: b2:2f:cf:29:e2:4b:8d:79:60:83:53:d4:4b:1c:f8:8b:f8:99: 54:cb:07:e8:d1:19:4c:d2:5d:45:11:33:51:a0:cf:9b:b9:27: 01:1d:31:d7:d2:b2:15:1e:de:1e:01:fa:08:46:37:08:fc:54: 23:a5:b3:f0:f5:30:08:b2:2f:c8:80:41:0f:71:67:50:73:a9: d4:7e:01:a7:ca:9c:07:e8:6a:1a:bd:7c:35:38:ba:29:0a:3b: fb:af:5d:21:f4:6d:8d:43:3f:c8:1d:d3:b1:05:a1:58:d8:dd: f5:0b:92:80:80:72:35:17:cf:cd:72:b0:e9:e0:88:58:6d:44: 80:54:a4:cb:8d:9f:7f:64:8e:60:b8:22:67:5e:92:ac:3f:28: 1f:2a:76:54:f9:cd:b8:53:4b:9c:b6:04:af:0b:0a:22:6a:9f: fc:ff:e9:0e:79:c0:cd:eb:07:f2:99:7a:46:e2:29:7a:cf:c9: 06:9a:b7:c5 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUHX7Fj7cs+i8STY0rEohNJwKfPr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZG NTRFREM0RTAeFw0yNjA0MjIwNjU4MzJaFw0yNzA0MjEwNzAzMzJaMDMxMTAvBgNV BAMTKDU5NUVCMjU4NDg1MzFERTJEOTU5MzIyMEM1MTUzNDM1Rjc2REMxRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5g0ym3EdAtLQWO4tErFpP1IIe PTmZGunnM9Tx+JL9f9Oc/RnrHJARn1qfdc9F+STO4JcqOQ01ocbzFUANXtY9o2DH oRE5sueFxlGPNCzHfrNu/isHl32lw4e+MAhH9TvY/aqgggksNHKUNCiFInNw8Luy LRnzN1+ajy6nAFulmjSK/9rOJVDhEgIdcgI+L+bTNXUhrUp1vh8sg4fpzDKIGsXx 6mCmaD8pDZVYuHWVNmhiUXyb9L22g1LfSf3h/2bK/cRuVTlpitYscBx3F7+0okrg 94Jucvbqx08/USKIKCUHW7z+9RP4QvTArbGjPaBPCKvebvfXdqPTlwqNSS5fAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUWV6yWEhTHeLZWTIgxRU0NfdtwdgwHwYDVR0j BBgwFoAUYBqaijtQWl7iKDJD96vnpvVO3E4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ5ODg2MzYwMDg5Mzk1NC8wLzYwMUE5QThBM0I1MDVBNUVFMjI4MzI0M0Y3QUJF N0E2RjU0RURDNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZGNTRFREM0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0NDk4ODYzNjAwODkzOTU0LzAvMzEzMDMzMmUzMjMy MzAyZTMxMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z9xsMA0GCSqGSIb3DQEBCwUAA4IBAQCUv4Gko+IiTWGhoa+UAyQ232cpZ9t/gQBs Pg3JuzywqP+vR37suTPvv4sLiQgI7SXizH4xcXxdJVxulqyhTyNtRVLA5xY71aqy L88p4kuNeWCDU9RLHPiL+JlUywfo0RlM0l1FETNRoM+buScBHTHX0rIVHt4eAfoI RjcI/FQjpbPw9TAIsi/IgEEPcWdQc6nUfgGnypwH6GoavXw1OLopCjv7r10h9G2N Qz/IHdOxBaFY2N31C5KAgHI1F8/NcrDp4IhYbUSAVKTLjZ9/ZI5guCJnXpKsPygf KnZU+c24U0uctgSvCwoiap/8/+kOecDN6wfymXpG4il6z8kGmrfF -----END CERTIFICATE-----Generated at Wed May 13 08:02:53 2026 by rpki-client