$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa File: 3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa (raw, json) Hash identifier: xmJpASv6f6muagMJ4cJj94OGQ9aSvhbvGuyic71zQKQ= Subject key identifier: 85:A1:62:D3:FF:24:33:29:D9:DC:55:26:37:28:49:A7:8E:0C:C9:0D Certificate issuer: /CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Certificate serial: 3CE7E9AE32A0AD911683062E668F722A9F14CDC8 Authority key identifier: 35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa Signing time: Sat 09 May 2026 06:21:27 +0000 ROA not before: Sat 09 May 2026 06:16:27 +0000 ROA not after: Sat 08 May 2027 06:21:27 +0000 asID: 4808 IP address blocks: 103.131.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e7:e9:ae:32:a0:ad:91:16:83:06:2e:66:8f:72:2a:9f:14:cd:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3518C1E70B30D501EC0803B85E52F5905EE82052 Validity Not Before: May 9 06:16:27 2026 GMT Not After : May 8 06:21:27 2027 GMT Subject: CN=85A162D3FF243329D9DC5526372849A78E0CC90D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:6a:96:0c:d4:fa:ec:93:af:7c:f5:be:04: 33:64:00:32:ed:da:d6:f9:95:92:26:e4:e3:aa:89: 0b:62:7a:03:63:63:fb:34:da:d1:da:3e:57:97:86: be:e8:92:ae:b3:0c:7a:f2:9a:4e:e2:42:fd:b9:8a: 72:f1:1f:dd:26:b3:6d:91:1b:ca:14:a3:34:81:56: 31:c3:42:30:ec:82:01:80:0b:91:c1:85:46:8b:46: b2:14:42:89:d3:1c:cf:ba:8f:3b:1d:b1:55:c5:b1: 25:eb:c9:94:65:d1:bc:f9:29:97:7f:3d:12:2f:50: 39:bc:21:ce:d0:73:ba:f2:4e:e3:b7:20:67:df:ad: d7:24:f9:2e:c3:e5:22:09:4b:62:29:b5:75:75:fe: d1:a6:3d:80:74:eb:9f:1a:42:d1:27:12:69:cf:22: 47:64:b6:85:07:fd:de:a8:85:98:2d:7a:98:ae:83: ee:19:fd:83:17:df:fc:df:c9:39:b5:5a:5a:ff:a5: 4d:f5:e0:ff:1c:be:1e:22:83:fb:60:b6:92:97:49: 72:9f:b8:1f:0c:e8:98:cc:f2:1e:0b:46:5b:42:c7: 36:4b:ec:a0:12:79:0d:ab:28:26:5b:be:07:f4:34: f7:90:e0:0e:a7:05:d6:87:42:ff:db:a9:54:92:d7: 05:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A1:62:D3:FF:24:33:29:D9:DC:55:26:37:28:49:A7:8E:0C:C9:0D X509v3 Authority Key Identifier: keyid:35:18:C1:E7:0B:30:D5:01:EC:08:03:B8:5E:52:F5:90:5E:E8:20:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3518C1E70B30D501EC0803B85E52F5905EE82052.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3518C1E70B30D501EC0803B85E52F5905EE82052.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095958018182348801/0/3130332e3133312e3135322e302f32322d3234203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.131.152.0/22 Signature Algorithm: sha256WithRSAEncryption 46:ef:ad:a3:83:04:d2:3b:50:ab:4a:c0:3b:66:95:8d:28:03: f2:04:90:42:b2:f1:22:f1:66:73:a1:94:cb:de:51:0a:7f:5f: 36:96:87:6b:a0:5f:34:8c:84:57:47:36:f6:39:97:67:f7:f0: 8e:94:e0:ca:16:52:7c:0c:7e:42:ba:79:26:c3:2b:57:b0:69: 11:81:8a:c3:2e:76:2b:84:ba:ff:31:e2:f3:7e:dd:42:4a:bf: 1b:0f:57:53:c5:cf:c1:4f:dc:bc:1e:a8:1f:32:fe:40:01:3c: 87:79:5b:f8:a9:ad:77:75:dd:be:25:d9:41:5b:3a:a9:69:b3: 65:5c:4c:9d:a2:33:ad:f0:91:a6:c1:5d:26:81:7d:67:f0:7b: fd:1c:35:99:74:58:8c:f2:2f:a8:d3:3c:84:90:fd:3c:e1:d6: 8b:40:f0:39:8f:7a:f6:dd:4e:43:46:b4:a9:84:1b:cc:c0:5a: 50:e2:29:d7:9c:cc:ed:ff:8d:1f:29:a2:87:19:60:79:02:dc: ba:d8:bd:67:80:33:e7:08:b9:9f:1c:ff:dd:4b:5a:1f:98:2c: 1d:54:ec:f7:37:31:e6:9b:d2:d2:e7:32:6b:96:d1:7d:19:7d: e0:76:31:8a:e7:fb:92:81:b1:86:d9:4d:8f:1a:d3:38:79:cd: f9:75:6b:33 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPOfprjKgrZEWgwYuZo9yKp8UzcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1 RUU4MjA1MjAeFw0yNjA1MDkwNjE2MjdaFw0yNzA1MDgwNjIxMjdaMDMxMTAvBgNV BAMTKDg1QTE2MkQzRkYyNDMzMjlEOURDNTUyNjM3Mjg0OUE3OEUwQ0M5MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgmqWDNT67JOvfPW+BDNkADLt 2tb5lZIm5OOqiQtiegNjY/s02tHaPleXhr7okq6zDHrymk7iQv25inLxH90ms22R G8oUozSBVjHDQjDsggGAC5HBhUaLRrIUQonTHM+6jzsdsVXFsSXryZRl0bz5KZd/ PRIvUDm8Ic7Qc7ryTuO3IGffrdck+S7D5SIJS2IptXV1/tGmPYB0658aQtEnEmnP IkdktoUH/d6ohZgtepiug+4Z/YMX3/zfyTm1Wlr/pU314P8cvh4ig/tgtpKXSXKf uB8M6JjM8h4LRltCxzZL7KASeQ2rKCZbvgf0NPeQ4A6nBdaHQv/bqVSS1wVrAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUhaFi0/8kMynZ3FUmNyhJp44MyQ0wHwYDVR0j BBgwFoAUNRjB5wsw1QHsCAO4XlL1kF7oIFIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk1ODAxODE4MjM0ODgwMS8wLzM1MThDMUU3MEIzMEQ1MDFFQzA4MDNCODVFNTJG NTkwNUVFODIwNTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzUxOEMxRTcwQjMwRDUwMUVDMDgwM0I4NUU1MkY1OTA1RUU4MjA1Mi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NTk1ODAxODE4MjM0ODgwMS8wLzMxMzAzMzJlMzEz MzMxMmUzMTM1MzIyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmeDmDANBgkqhkiG9w0BAQsFAAOCAQEARu+to4ME0jtQq0rAO2aVjSgD 8gSQQrLxIvFmc6GUy95RCn9fNpaHa6BfNIyEV0c29jmXZ/fwjpTgyhZSfAx+Qrp5 JsMrV7BpEYGKwy52K4S6/zHi837dQkq/Gw9XU8XPwU/cvB6oHzL+QAE8h3lb+Kmt d3XdviXZQVs6qWmzZVxMnaIzrfCRpsFdJoF9Z/B7/Rw1mXRYjPIvqNM8hJD9POHW i0DwOY969t1OQ0a0qYQbzMBaUOIp15zM7f+NHymihxlgeQLcuti9Z4Az5wi5nxz/ 3UtaH5gsHVTs9zcx5pvS0ucya5bRfRl94HYxiuf7koGxhtlNjxrTOHnN+XVrMw== -----END CERTIFICATE-----Generated at Wed May 13 13:04:22 2026 by rpki-client