$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3139322e3231322e302f32322d3234203d3e20313338343231.roa File: 3130332e3139322e3231322e302f32322d3234203d3e20313338343231.roa (raw, json) Hash identifier: lf5r6PPVxy2I2tpwqIpaftUjZwrQeOgUaigxXzPG6yQ= Subject key identifier: 10:EF:7D:C9:8A:4F:2F:34:B1:06:3E:0B:DD:A9:49:CC:96:5D:E2:EC Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 5A051D281D36765A1998FB0E05D7A507D6E62A4C Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3139322e3231322e302f32322d3234203d3e20313338343231.roa Signing time: Mon 11 May 2026 07:00:49 +0000 ROA not before: Mon 11 May 2026 06:55:49 +0000 ROA not after: Mon 10 May 2027 07:00:49 +0000 asID: 138421 IP address blocks: 103.192.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:05:1d:28:1d:36:76:5a:19:98:fb:0e:05:d7:a5:07:d6:e6:2a:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:49 2026 GMT Not After : May 10 07:00:49 2027 GMT Subject: CN=10EF7DC98A4F2F34B1063E0BDDA949CC965DE2EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9f:14:61:12:aa:d8:ab:09:74:82:8a:75:c2: 08:a4:f9:40:43:1b:34:74:6e:44:ff:52:c3:4c:09: 0e:db:fa:ff:2a:00:36:69:54:b9:bd:ea:20:c9:27: 17:7a:b2:f0:3b:fc:31:d9:f2:26:e3:f7:fd:14:80: 63:91:9d:37:55:65:24:ee:01:0f:48:e8:54:b8:6e: 6f:da:bf:4c:a8:72:5e:5f:ea:f2:5d:3d:76:e7:64: 52:49:33:0d:cf:a2:ca:be:6d:f2:3d:0b:09:0a:fc: 61:a3:9a:24:49:74:25:86:2d:96:ab:07:1b:f9:95: d3:d9:13:65:77:0c:70:07:f2:87:b8:f0:1b:d3:1a: 1b:48:97:c6:33:c1:98:5f:4b:8c:39:51:60:47:f4: e9:99:f2:7e:1c:a8:c1:45:c6:49:6d:95:cc:95:d2: 20:13:cb:22:e5:9d:98:67:2f:56:6d:a4:c9:a7:54: 8d:3c:b2:8b:ae:4e:cf:5c:d7:8b:fd:f5:09:78:9c: 1c:10:76:50:0d:1e:e8:5b:ce:44:7b:ce:9d:71:71: 0b:e4:a7:b1:32:d6:07:55:2d:8a:5b:ff:94:62:8c: 35:17:af:d3:d3:12:7b:32:23:df:af:e4:e6:ab:92: 7a:cf:1a:bf:30:48:9c:ff:43:d2:86:17:cf:7d:cd: f7:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:EF:7D:C9:8A:4F:2F:34:B1:06:3E:0B:DD:A9:49:CC:96:5D:E2:EC X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3139322e3231322e302f32322d3234203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.212.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:bd:03:05:ef:d5:29:56:31:92:87:f9:c1:57:f9:98:7f:62: d2:d8:c8:b7:54:ce:71:a4:4d:d7:49:61:f0:16:97:49:30:6a: bc:38:a7:af:84:a1:d2:34:b1:62:a1:ea:af:fa:c7:cd:ff:07: ab:16:59:ce:7c:f6:20:25:34:56:2d:48:42:57:04:85:fc:a7: 12:6e:1a:e2:71:34:5d:d6:5b:19:88:8b:3f:8e:19:44:7f:1b: 9f:ba:82:0d:65:6b:fc:cf:14:0e:8d:15:49:22:51:6a:0e:fd: b8:a5:bf:8b:76:17:7b:80:25:7a:96:05:1f:72:75:1e:61:09: 81:ae:22:9b:8e:4c:8c:d5:ba:a9:3d:95:e8:8e:cd:87:42:c3: 25:6a:3a:35:15:64:95:88:4d:58:d5:95:52:89:c8:49:89:e6: 87:fa:b3:7e:37:b5:b1:cb:ef:9f:9d:af:4a:01:e1:19:ae:f3: c5:13:c1:40:71:54:3d:16:1f:ed:7e:38:93:7c:49:46:df:e1: 60:7b:cd:0b:6c:0e:cf:b8:4c:92:fb:3e:7f:b9:f8:c8:ec:26: e4:a5:ad:c6:cc:68:57:63:ab:a8:54:18:b5:48:16:cd:2f:0d: f9:dd:ff:13:d9:97:fd:62:0a:a6:34:33:ab:5a:b9:a6:f3:39: 12:97:d7:ff -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUWgUdKB02dloZmPsOBdelB9bmKkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDlaFw0yNzA1MTAwNzAwNDlaMDMxMTAvBgNV BAMTKDEwRUY3REM5OEE0RjJGMzRCMTA2M0UwQkREQTk0OUNDOTY1REUyRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTnxRhEqrYqwl0gop1wgik+UBD GzR0bkT/UsNMCQ7b+v8qADZpVLm96iDJJxd6svA7/DHZ8ibj9/0UgGORnTdVZSTu AQ9I6FS4bm/av0yocl5f6vJdPXbnZFJJMw3Posq+bfI9CwkK/GGjmiRJdCWGLZar Bxv5ldPZE2V3DHAH8oe48BvTGhtIl8YzwZhfS4w5UWBH9OmZ8n4cqMFFxkltlcyV 0iATyyLlnZhnL1ZtpMmnVI08souuTs9c14v99Ql4nBwQdlANHuhbzkR7zp1xcQvk p7Ey1gdVLYpb/5RijDUXr9PTEnsyI9+v5OarknrPGr8wSJz/Q9KGF899zfcbAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUEO99yYpPLzSxBj4L3alJzJZd4uwwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcxLzAvMzEzMDMzMmUz MTM5MzIyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfA1DANBgkqhkiG9w0BAQsFAAOCAQEAe70DBe/VKVYxkof5 wVf5mH9i0tjIt1TOcaRN10lh8BaXSTBqvDinr4Sh0jSxYqHqr/rHzf8HqxZZznz2 ICU0Vi1IQlcEhfynEm4a4nE0XdZbGYiLP44ZRH8bn7qCDWVr/M8UDo0VSSJRag79 uKW/i3YXe4AlepYFH3J1HmEJga4im45MjNW6qT2V6I7Nh0LDJWo6NRVklYhNWNWV UonISYnmh/qzfje1scvvn52vSgHhGa7zxRPBQHFUPRYf7X44k3xJRt/hYHvNC2wO z7hMkvs+f7n4yOwm5KWtxsxoV2OrqFQYtUgWzS8N+d3/E9mX/WIKpjQzq1q5pvM5 EpfX/w== -----END CERTIFICATE-----Generated at Wed May 13 17:05:11 2026 by rpki-client