$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/3130332e3235322e3130342e302f32322d3232203d3e2030.roa File: 3130332e3235322e3130342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: LbvUNBbkkW0aewjviCw2bvPKR6Kgliws3ypDPVSBx14= Subject key identifier: 2B:2C:83:4D:8A:96:33:3D:49:2C:56:C3:83:C8:94:B9:8E:67:12:32 Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Certificate serial: 58EA7D9F65653357FF45B766751AE0AA82E0FA92 Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/3130332e3235322e3130342e302f32322d3232203d3e2030.roa Signing time: Wed 22 Apr 2026 07:03:32 +0000 ROA not before: Wed 22 Apr 2026 06:58:32 +0000 ROA not after: Wed 21 Apr 2027 07:03:32 +0000 asID: 0 IP address blocks: 103.252.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ea:7d:9f:65:65:33:57:ff:45:b7:66:75:1a:e0:aa:82:e0:fa:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Validity Not Before: Apr 22 06:58:32 2026 GMT Not After : Apr 21 07:03:32 2027 GMT Subject: CN=2B2C834D8A96333D492C56C383C894B98E671232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9c:66:3b:d9:34:db:03:a9:96:bc:40:86:97: 82:95:a8:f3:79:85:cb:00:6f:34:18:61:e1:2d:2c: 93:15:26:5b:95:e9:3b:cd:27:37:7a:41:45:c7:c6: a0:16:52:ce:12:f5:49:6e:22:1f:9d:b1:dd:47:d1: b3:de:65:3f:e9:ba:0f:85:ed:a2:b6:6c:70:2d:f9: 58:76:aa:68:92:07:0d:65:14:18:82:89:13:24:4f: 49:29:50:f5:4e:1c:a5:38:3e:51:37:9b:0b:5d:ef: 2b:d7:ef:82:d2:14:d6:9c:14:bc:ef:ca:e3:ef:b8: 6f:f6:58:26:c4:1e:90:dd:57:aa:b4:db:93:37:ed: 3a:2c:01:05:bc:0d:11:d8:a8:de:e5:9e:1c:1c:fd: f8:6f:35:8e:74:c0:43:3c:12:60:e9:45:a6:ff:12: 54:fe:9f:a1:63:10:de:ad:b7:d9:5a:4d:92:da:95: 46:f1:c6:e7:67:a4:80:22:70:85:c9:27:21:0b:79: 3c:85:6d:a9:f2:a2:ec:12:2f:0c:20:09:c6:c7:15: 30:89:29:f7:29:9c:e5:13:53:4e:09:78:b3:26:39: eb:4b:12:a6:b5:62:b6:ef:d9:01:58:78:7e:d9:fa: c5:ee:f9:de:8c:ae:bd:10:47:da:ba:ed:da:63:ad: d6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:2C:83:4D:8A:96:33:3D:49:2C:56:C3:83:C8:94:B9:8E:67:12:32 X509v3 Authority Key Identifier: keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/3130332e3235322e3130342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.252.104.0/22 Signature Algorithm: sha256WithRSAEncryption 99:e9:9c:58:27:a6:d8:7b:f3:0c:45:dd:83:b3:f9:80:14:59: e9:29:19:81:14:72:b8:45:da:01:9a:6c:38:d6:d4:86:bf:7c: 60:5b:fb:ed:2d:49:30:38:00:b3:d4:c0:e4:24:c1:8c:0c:a2: 7e:57:b9:28:58:88:14:a9:4f:2c:ec:99:81:0f:54:da:21:f2: 56:8c:33:08:d2:c2:2e:12:b4:e3:02:5c:ee:fb:ca:79:f1:31: 89:44:b4:ad:64:b7:f9:bd:b0:bd:20:c8:0f:1e:70:5e:37:78: 46:ec:a9:75:27:f7:e6:ec:69:e9:03:36:1f:0a:43:24:fa:7b: df:20:2c:a6:7f:eb:01:97:d9:3c:6e:4f:b0:30:db:73:6d:95: 52:2d:fa:78:71:0e:1c:46:a3:ab:68:db:79:c9:04:72:2f:59: 35:4c:ab:fa:67:3a:4c:b2:96:8c:27:a2:12:9c:d4:d8:01:67: 10:ba:91:f3:b6:13:ce:85:fa:b9:ce:6c:27:cf:c7:f6:ae:82: b2:bf:2e:02:58:e9:a6:8e:a7:9f:01:6c:b5:ee:00:dc:ee:74: fb:f5:18:25:71:e3:74:be:4d:0c:d8:9a:ed:b0:df:89:41:61: db:4d:30:d6:6a:25:61:cf:68:bc:e2:71:83:b9:e2:66:f5:81: f0:d1:99:c4 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUWOp9n2VlM1f/RbdmdRrgqoLg+pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZG NTRFREM0RTAeFw0yNjA0MjIwNjU4MzJaFw0yNzA0MjEwNzAzMzJaMDMxMTAvBgNV BAMTKDJCMkM4MzREOEE5NjMzM0Q0OTJDNTZDMzgzQzg5NEI5OEU2NzEyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nGY72TTbA6mWvECGl4KVqPN5 hcsAbzQYYeEtLJMVJluV6TvNJzd6QUXHxqAWUs4S9UluIh+dsd1H0bPeZT/pug+F 7aK2bHAt+Vh2qmiSBw1lFBiCiRMkT0kpUPVOHKU4PlE3mwtd7yvX74LSFNacFLzv yuPvuG/2WCbEHpDdV6q025M37TosAQW8DRHYqN7lnhwc/fhvNY50wEM8EmDpRab/ ElT+n6FjEN6tt9laTZLalUbxxudnpIAicIXJJyELeTyFbanyouwSLwwgCcbHFTCJ KfcpnOUTU04JeLMmOetLEqa1Yrbv2QFYeH7Z+sXu+d6Mrr0QR9q67dpjrdYfAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUKyyDTYqWMz1JLFbDg8iUuY5nEjIwHwYDVR0j BBgwFoAUYBqaijtQWl7iKDJD96vnpvVO3E4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ5ODg2MzYwMDg5Mzk1NC8wLzYwMUE5QThBM0I1MDVBNUVFMjI4MzI0M0Y3QUJF N0E2RjU0RURDNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZGNTRFREM0RS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0NDk4ODYzNjAwODkzOTU0LzAvMzEzMDMzMmUzMjM1 MzIyZTMxMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z/xoMA0GCSqGSIb3DQEBCwUAA4IBAQCZ6ZxYJ6bYe/MMRd2Ds/mAFFnpKRmBFHK4 RdoBmmw41tSGv3xgW/vtLUkwOACz1MDkJMGMDKJ+V7koWIgUqU8s7JmBD1TaIfJW jDMI0sIuErTjAlzu+8p58TGJRLStZLf5vbC9IMgPHnBeN3hG7Kl1J/fm7GnpAzYf CkMk+nvfICymf+sBl9k8bk+wMNtzbZVSLfp4cQ4cRqOraNt5yQRyL1k1TKv6ZzpM spaMJ6ISnNTYAWcQupHzthPOhfq5zmwnz8f2roKyvy4CWOmmjqefAWy17gDc7nT7 9RglceN0vk0M2JrtsN+JQWHbTTDWaiVhz2i84nGDueJm9YHw0ZnE -----END CERTIFICATE-----Generated at Wed May 13 09:55:04 2026 by rpki-client