$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e2034383038.roa File: 3130332e3233382e302e302f32322d3332203d3e2034383038.roa (raw, json) Hash identifier: F5An/Ut6sPTdTDchjvauI8c+cH9mTLnAPBuANoIQPcs= Subject key identifier: 5C:83:0F:32:8A:87:EB:A5:ED:6C:21:C0:2D:D4:75:51:32:F6:F4:A1 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 298CA77C3EF268B452E10F75E362B419F075D678 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e2034383038.roa Signing time: Mon 11 May 2026 02:43:29 +0000 ROA not before: Mon 11 May 2026 02:38:29 +0000 ROA not after: Mon 10 May 2027 02:43:29 +0000 asID: 4808 IP address blocks: 103.238.0.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8c:a7:7c:3e:f2:68:b4:52:e1:0f:75:e3:62:b4:19:f0:75:d6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: May 11 02:38:29 2026 GMT Not After : May 10 02:43:29 2027 GMT Subject: CN=5C830F328A87EBA5ED6C21C02DD4755132F6F4A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f6:24:72:3a:9d:d9:d7:95:c9:17:1a:9f:fa: 24:de:fe:39:bc:55:5b:82:bf:04:80:f3:8e:a4:90: ec:ba:da:96:21:c3:82:7a:c3:db:84:06:9a:04:15: 9d:55:40:df:ba:45:cc:01:8c:b1:f5:66:c6:f7:15: dd:72:e8:be:51:28:ef:cd:f9:95:f8:25:0f:4c:aa: 6d:b7:8d:51:0d:14:08:f2:1a:2a:08:fb:10:96:a3: e7:38:e9:f3:97:ea:cf:09:2f:a9:77:12:88:4d:c5: 52:8d:0f:ef:07:c0:d1:92:f8:7a:ea:0d:7e:6d:53: 20:39:e8:dc:16:2c:49:b0:76:88:bd:53:07:cb:8f: 86:e1:7d:04:2e:11:1c:8f:35:14:c5:dc:23:ce:64: 30:3d:40:f0:fd:ce:57:17:37:f5:62:f2:eb:3a:29: da:1b:0c:28:ed:8c:2c:4f:d1:24:b6:de:c2:eb:33: 5f:5c:fa:c6:36:b5:34:2a:58:c4:ed:3b:66:52:0f: 0a:8c:94:5b:f8:8e:87:d7:df:26:5f:a9:4c:51:75: 95:92:51:39:ae:d1:bc:4a:be:00:7b:b8:cf:0d:62: 07:8a:54:4c:4e:0e:c1:9c:bf:bb:38:20:d6:34:f4: 65:e4:fd:85:cc:46:40:a3:81:c1:bf:dc:21:24:28: ee:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:83:0F:32:8A:87:EB:A5:ED:6C:21:C0:2D:D4:75:51:32:F6:F4:A1 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.0.0/22 Signature Algorithm: sha256WithRSAEncryption 49:e4:41:18:a8:39:bb:89:8a:d3:66:53:4d:de:f3:54:19:69: 97:a7:45:42:10:49:59:33:fd:6f:66:d0:2f:ca:48:14:5a:03: d4:a5:18:6b:9a:08:e5:a3:55:8b:6f:9b:36:cf:f6:30:58:b3: e9:f6:f0:92:85:39:b4:16:d3:ad:8e:f6:af:f7:0d:12:5c:14: 97:7e:e6:fe:c1:36:40:2b:14:47:83:83:58:c1:2c:aa:1d:b2: 2f:27:74:c8:27:07:be:ab:af:e1:e7:2f:7a:57:e1:b3:19:92: b2:b6:5f:4d:e7:90:68:ba:ac:03:e2:60:35:ca:ae:52:a6:c0: ca:a2:cc:bb:57:a6:1f:ed:e3:a9:9e:aa:e5:fe:01:3c:bd:d9: 65:04:99:c3:9d:35:81:61:a1:34:5c:3b:42:da:73:ad:0e:5b: a4:b6:a6:0a:57:ff:24:bd:52:2c:d3:f6:5e:cc:33:c3:8f:71: e5:55:71:b1:ac:01:32:9d:b1:41:5d:c1:02:84:4d:d5:86:95: 6b:02:fc:bf:f6:0e:53:2c:10:8b:a0:5e:2a:c7:d4:cd:30:b6: 89:e5:28:dd:58:f5:a0:00:5c:74:7c:30:44:74:52:47:c6:43: b2:36:c7:9e:a9:9b:0a:2d:88:74:3f:b3:03:de:96:f1:8c:ed: d8:be:9d:11 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUKYynfD7yaLRS4Q9142K0GfB11ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA1MTEwMjM4MjlaFw0yNzA1MTAwMjQzMjlaMDMxMTAvBgNV BAMTKDVDODMwRjMyOEE4N0VCQTVFRDZDMjFDMDJERDQ3NTUxMzJGNkY0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9iRyOp3Z15XJFxqf+iTe/jm8 VVuCvwSA846kkOy62pYhw4J6w9uEBpoEFZ1VQN+6RcwBjLH1Zsb3Fd1y6L5RKO/N +ZX4JQ9Mqm23jVENFAjyGioI+xCWo+c46fOX6s8JL6l3EohNxVKND+8HwNGS+Hrq DX5tUyA56NwWLEmwdoi9UwfLj4bhfQQuERyPNRTF3CPOZDA9QPD9zlcXN/Vi8us6 KdobDCjtjCxP0SS23sLrM19c+sY2tTQqWMTtO2ZSDwqMlFv4jofX3yZfqUxRdZWS UTmu0bxKvgB7uM8NYgeKVExODsGcv7s4INY09GXk/YXMRkCjgcG/3CEkKO5TAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUXIMPMoqH66XtbCHALdR1UTL29KEwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTg0Mjk0NzY3MDk5OTA1LzAvMzEzMDMzMmUzMjMz MzgyZTMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7gAwDQYJKoZIhvcNAQELBQADggEBAEnkQRioObuJitNmU03e81QZaZenRUIQ SVkz/W9m0C/KSBRaA9SlGGuaCOWjVYtvmzbP9jBYs+n28JKFObQW062O9q/3DRJc FJd+5v7BNkArFEeDg1jBLKodsi8ndMgnB76rr+HnL3pX4bMZkrK2X03nkGi6rAPi YDXKrlKmwMqizLtXph/t46mequX+ATy92WUEmcOdNYFhoTRcO0Lac60OW6S2pgpX /yS9UizT9l7MM8OPceVVcbGsATKdsUFdwQKETdWGlWsC/L/2DlMsEIugXirH1M0w tonlKN1Y9aAAXHR8MER0UkfGQ7I2x56pmwotiHQ/swPelvGM7di+nRE= -----END CERTIFICATE-----Generated at Wed May 13 14:41:06 2026 by rpki-client