$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33332e302f32342d3234203d3e2034383131.roa File: 3130332e3232322e33332e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: Ec1WbF7g8EDNH+1HyXcOkVcoHbvBzB1GFixAnE54ujc= Subject key identifier: D9:A1:81:B6:D9:62:C3:72:4F:0F:A0:07:D4:81:34:05:66:0E:CE:6E Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 71406DA4E66F9D6591DC0204D527A9828EA5CE3D Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33332e302f32342d3234203d3e2034383131.roa Signing time: Mon 11 May 2026 07:00:48 +0000 ROA not before: Mon 11 May 2026 06:55:48 +0000 ROA not after: Mon 10 May 2027 07:00:48 +0000 asID: 4811 IP address blocks: 103.222.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:40:6d:a4:e6:6f:9d:65:91:dc:02:04:d5:27:a9:82:8e:a5:ce:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:48 2026 GMT Not After : May 10 07:00:48 2027 GMT Subject: CN=D9A181B6D962C3724F0FA007D4813405660ECE6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:84:38:02:53:25:52:4b:d6:87:e6:5c:2a:e8: b0:b4:c9:6c:36:f8:34:d2:36:a2:75:4b:4a:71:46: 8c:70:64:be:00:c1:3d:c8:62:6c:e2:c8:37:73:f3: ae:e3:3c:9b:60:79:62:3f:71:07:0c:e9:cd:ad:45: 19:b1:2a:21:da:78:46:d3:7f:b9:e4:4b:cc:ef:7f: a7:06:ad:43:42:28:20:8a:36:90:80:35:62:8c:8b: d8:ee:14:46:ca:11:36:59:08:72:e9:52:05:b6:dd: bd:4a:82:b7:18:06:0d:63:b9:ef:77:3c:dc:27:5a: 33:ab:b9:8b:da:4c:a1:0f:7c:ca:8a:9c:b6:84:74: 42:8f:76:a3:04:53:c4:da:f8:a0:ea:69:e4:a0:89: aa:00:b6:2e:a0:92:72:7a:55:4b:a0:4d:2f:5f:35: 07:d4:c3:06:c8:57:5e:69:ca:40:a9:81:d4:5b:7f: ba:1d:24:82:ad:6c:85:02:07:44:01:e0:0b:e0:3f: 4b:45:2d:ba:8d:fa:59:2c:d2:27:1b:de:17:d3:c1: 81:97:5d:00:16:cf:8e:89:34:d6:da:fa:9d:9e:8d: f5:27:31:c5:f1:24:87:35:89:eb:85:a6:5e:a1:7c: 5b:22:99:d6:49:5b:a8:bb:f1:a3:de:76:80:7d:6c: ab:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:A1:81:B6:D9:62:C3:72:4F:0F:A0:07:D4:81:34:05:66:0E:CE:6E X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e33332e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.222.33.0/24 Signature Algorithm: sha256WithRSAEncryption 51:55:5b:8c:50:9a:ef:cb:9d:70:75:d7:bc:6a:57:d1:dc:00: ba:9c:b1:e7:97:41:c9:f8:5a:23:24:b1:76:33:2a:47:da:cf: 7b:94:c3:6e:e6:63:8e:ba:30:70:e2:94:19:83:e6:ac:fa:6c: ad:d4:88:ba:9f:a7:5a:c5:9f:2a:df:c2:74:10:34:29:e8:97: b2:d8:f9:e9:99:43:00:b8:5d:8a:89:48:67:a3:5f:af:07:27: 9f:f1:03:ea:15:9d:46:10:09:3d:8c:2d:10:61:7b:a5:83:ea: 85:16:4b:cb:1d:d3:f1:8d:c3:15:02:81:a7:8d:c2:6a:33:84: be:55:ff:14:e5:ff:a8:7d:b3:51:da:14:47:0b:db:1d:c2:f9: 15:e0:ad:79:3d:b6:9a:9d:f6:1d:42:95:c7:7f:fd:73:75:c7: 73:26:75:6e:55:55:4c:d3:36:99:d8:9f:a9:3b:b6:42:75:bc: 91:3e:3f:0d:8b:b8:23:94:6f:e2:d2:6f:37:de:6b:09:a5:ed: 26:52:ca:8e:67:1e:b6:a0:59:a4:83:c4:e6:91:0f:49:f8:cd: b2:f3:bd:7a:45:1f:d1:9c:ee:ab:6b:c2:e0:a5:96:85:36:20: b0:f1:de:7b:c4:b2:9d:52:37:1a:9f:57:03:ba:8e:65:07:74: 10:ae:05:32 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUcUBtpOZvnWWR3AIE1Sepgo6lzj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDhaFw0yNzA1MTAwNzAwNDhaMDMxMTAvBgNV BAMTKEQ5QTE4MUI2RDk2MkMzNzI0RjBGQTAwN0Q0ODEzNDA1NjYwRUNFNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyhDgCUyVSS9aH5lwq6LC0yWw2 +DTSNqJ1S0pxRoxwZL4AwT3IYmziyDdz867jPJtgeWI/cQcM6c2tRRmxKiHaeEbT f7nkS8zvf6cGrUNCKCCKNpCANWKMi9juFEbKETZZCHLpUgW23b1KgrcYBg1jue93 PNwnWjOruYvaTKEPfMqKnLaEdEKPdqMEU8Ta+KDqaeSgiaoAti6gknJ6VUugTS9f NQfUwwbIV15pykCpgdRbf7odJIKtbIUCB0QB4AvgP0tFLbqN+lks0icb3hfTwYGX XQAWz46JNNba+p2ejfUnMcXxJIc1ieuFpl6hfFsimdZJW6i78aPedoB9bKsPAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU2aGBttliw3JPD6AH1IE0BWYOzm4wHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcxLzAvMzEzMDMzMmUzMjMy MzIyZTMzMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfeITANBgkqhkiG9w0BAQsFAAOCAQEAUVVbjFCa78udcHXXvGpX0dwAupyx 55dByfhaIySxdjMqR9rPe5TDbuZjjrowcOKUGYPmrPpsrdSIup+nWsWfKt/CdBA0 KeiXstj56ZlDALhdiolIZ6Nfrwcnn/ED6hWdRhAJPYwtEGF7pYPqhRZLyx3T8Y3D FQKBp43CajOEvlX/FOX/qH2zUdoURwvbHcL5FeCteT22mp32HUKVx3/9c3XHcyZ1 blVVTNM2mdifqTu2QnW8kT4/DYu4I5Rv4tJvN95rCaXtJlLKjmcetqBZpIPE5pEP SfjNsvO9ekUf0Zzuq2vC4KWWhTYgsPHee8SynVI3Gp9XA7qOZQd0EK4FMg== -----END CERTIFICATE-----Generated at Wed May 13 12:46:16 2026 by rpki-client