$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e34302e302f32322d3234203d3e203539303438.roa File: 3130332e3232322e34302e302f32322d3234203d3e203539303438.roa (raw, json) Hash identifier: ThhjwGDqoU6gTdpn/bPAzjiGBU/6D1m+wv5nJvPMS8g= Subject key identifier: A8:A3:68:E3:07:7E:B5:CF:A5:68:45:CD:F9:00:A2:BD:47:A2:23:F5 Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 09661023896AD5D774D4F6212B1333A361B5427B Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e34302e302f32322d3234203d3e203539303438.roa Signing time: Mon 11 May 2026 07:00:48 +0000 ROA not before: Mon 11 May 2026 06:55:48 +0000 ROA not after: Mon 10 May 2027 07:00:48 +0000 asID: 59048 IP address blocks: 103.222.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:66:10:23:89:6a:d5:d7:74:d4:f6:21:2b:13:33:a3:61:b5:42:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:48 2026 GMT Not After : May 10 07:00:48 2027 GMT Subject: CN=A8A368E3077EB5CFA56845CDF900A2BD47A223F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:8f:44:b5:ab:d2:c1:a1:be:5a:a9:21:b4: 36:a6:1a:78:e8:39:20:28:5c:85:fa:19:ce:ab:3d: 4a:80:1b:90:fd:15:f5:2a:2a:46:0a:d5:7d:ce:97: 74:e4:a2:0b:13:3e:6b:a0:82:a1:8e:22:1b:00:db: ed:45:b4:21:e1:b7:ba:a9:9d:5a:a6:3c:1f:8f:7f: 22:0d:c9:60:f2:cb:c0:3b:9c:ee:c1:d5:3e:44:b8: 27:b2:b5:82:cd:8c:ab:5c:81:cb:35:6c:15:bf:11: 58:f5:8f:07:b1:85:9d:e3:e1:ae:1a:5d:33:94:6a: b9:d7:1b:ca:86:f5:3f:5f:8b:dc:75:34:8a:21:82: 47:8a:1e:1b:0a:18:29:55:01:5c:44:83:3d:b1:2d: c0:91:e3:5c:95:ef:45:67:6a:69:f5:af:28:e1:ab: 87:ac:1d:de:2b:25:c8:c8:3a:da:fc:df:84:66:ae: 2b:85:3e:e4:e5:46:6d:7b:ba:9f:9c:bd:1c:7d:8e: de:97:e5:e0:5d:b3:f3:d0:a8:11:00:4f:92:03:7f: a6:c8:65:99:c3:4c:ff:f0:ad:b1:76:cf:78:30:26: 3c:a9:ee:10:2b:db:bf:78:7f:4d:56:4c:18:58:0a: 98:b5:3a:7c:ec:91:f9:fe:10:35:28:70:95:72:ed: ec:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:A3:68:E3:07:7E:B5:CF:A5:68:45:CD:F9:00:A2:BD:47:A2:23:F5 X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3232322e34302e302f32322d3234203d3e203539303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.222.40.0/22 Signature Algorithm: sha256WithRSAEncryption b2:61:98:ed:df:f1:8a:5d:0c:6a:b6:f6:b2:c0:8d:66:ec:5b: b3:43:88:7d:3a:2c:b2:e2:7a:78:fb:da:f7:c7:38:a9:72:e7: 50:39:96:87:3d:5d:4a:b1:83:50:fe:03:04:9e:f3:39:45:96: 58:55:fc:57:e8:c6:d5:58:70:bd:a3:5c:3d:24:85:f4:22:0d: 65:47:1b:e1:01:40:a7:0c:52:65:d3:4f:1b:07:2c:38:52:87: b4:ec:00:a3:e0:4b:29:fa:6d:ad:12:83:0e:53:39:bb:d4:4e: 47:f7:37:2a:31:0e:79:5b:ca:d0:07:69:2e:86:46:85:39:10: 44:76:31:ce:32:58:62:6f:0a:ed:b2:32:82:28:32:c5:14:89: 36:75:65:b9:b6:18:e1:ad:11:8a:79:89:a4:2a:8f:d3:34:37: 3f:b6:59:ab:f7:76:3e:0d:a5:8c:de:9e:6a:bd:76:46:73:b2: 4b:f2:f2:4d:50:26:e7:df:ca:b1:06:00:ba:75:10:65:5a:17: bc:55:f9:43:ff:6e:d0:8f:2d:db:3f:4c:bd:b4:41:e1:28:f1: 09:b7:f0:de:1c:0c:38:51:da:d7:09:18:0a:99:ad:42:73:42: 90:be:67:66:8f:a2:6d:09:b8:da:95:53:2b:08:89:3b:d7:26: 7c:4e:93:a4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCWYQI4lq1dd01PYhKxMzo2G1QnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDhaFw0yNzA1MTAwNzAwNDhaMDMxMTAvBgNV BAMTKEE4QTM2OEUzMDc3RUI1Q0ZBNTY4NDVDREY5MDBBMkJENDdBMjIzRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSo9EtavSwaG+WqkhtDamGnjo OSAoXIX6Gc6rPUqAG5D9FfUqKkYK1X3Ol3TkogsTPmuggqGOIhsA2+1FtCHht7qp nVqmPB+PfyINyWDyy8A7nO7B1T5EuCeytYLNjKtcgcs1bBW/EVj1jwexhZ3j4a4a XTOUarnXG8qG9T9fi9x1NIohgkeKHhsKGClVAVxEgz2xLcCR41yV70Vnamn1ryjh q4esHd4rJcjIOtr834RmriuFPuTlRm17up+cvRx9jt6X5eBds/PQqBEAT5IDf6bI ZZnDTP/wrbF2z3gwJjyp7hAr2794f01WTBhYCpi1Onzskfn+EDUocJVy7ewlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUqKNo4wd+tc+laEXN+QCivUeiI/UwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTkxMjQxMDg1OTk2MjM3MS8wLzMxMzAzMzJlMzIz MjMyMmUzNDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfeKDANBgkqhkiG9w0BAQsFAAOCAQEAsmGY7d/xil0Marb2ssCNZuxb s0OIfTossuJ6ePva98c4qXLnUDmWhz1dSrGDUP4DBJ7zOUWWWFX8V+jG1VhwvaNc PSSF9CINZUcb4QFApwxSZdNPGwcsOFKHtOwAo+BLKfptrRKDDlM5u9ROR/c3KjEO eVvK0AdpLoZGhTkQRHYxzjJYYm8K7bIygigyxRSJNnVlubYY4a0RinmJpCqP0zQ3 P7ZZq/d2Pg2ljN6ear12RnOyS/LyTVAm59/KsQYAunUQZVoXvFX5Q/9u0I8t2z9M vbRB4SjxCbfw3hwMOFHa1wkYCpmtQnNCkL5nZo+ibQm42pVTKwiJO9cmfE6TpA== -----END CERTIFICATE-----Generated at Wed May 13 14:59:43 2026 by rpki-client