$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/3130332e33362e3137362e302f32322d3234203d3e203535393939.roa File: 3130332e33362e3137362e302f32322d3234203d3e203535393939.roa (raw, json) Hash identifier: 2LnjFG+Q2LripW/PfbwL7eiTUvlgsDP08f4mqEdQzY8= Subject key identifier: 42:4E:68:1F:99:70:C6:FB:AB:5B:EE:61:BE:16:BF:55:56:AA:10:F2 Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 3E79C7E22A3512FD854E10A2BAA4FE063A484C87 Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/3130332e33362e3137362e302f32322d3234203d3e203535393939.roa Signing time: Fri 08 May 2026 15:29:41 +0000 ROA not before: Fri 08 May 2026 15:24:41 +0000 ROA not after: Fri 07 May 2027 15:29:41 +0000 asID: 55999 IP address blocks: 103.36.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:79:c7:e2:2a:35:12:fd:85:4e:10:a2:ba:a4:fe:06:3a:48:4c:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: May 8 15:24:41 2026 GMT Not After : May 7 15:29:41 2027 GMT Subject: CN=424E681F9970C6FBAB5BEE61BE16BF5556AA10F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cc:7e:c5:ff:47:4f:69:a6:92:b5:10:48:38: aa:e5:97:fd:11:ec:a6:ab:c0:0e:87:1f:b0:ca:0f: d6:ec:15:01:6b:30:e4:b8:c0:2d:b7:aa:22:02:2e: 4a:3e:56:f1:81:c7:bc:3b:6e:15:5c:5b:3e:0d:ff: e1:74:ef:cb:d5:b8:b7:d3:6a:d5:18:a2:91:42:05: e1:47:7e:82:a1:c0:7b:73:39:d7:84:47:3a:17:e8: 31:6c:b9:7b:ad:0d:44:01:1f:4a:91:42:bf:f4:d3: 2a:44:72:60:33:73:bd:dc:a1:a0:e4:d4:b7:3a:fd: 52:7d:85:f5:db:af:c4:56:00:bd:cf:7d:54:3c:db: 86:a8:02:5a:a5:00:72:d3:d1:2d:5d:3a:b2:d9:96: bc:06:e7:fe:32:4d:1f:6f:7b:32:59:76:23:83:b2: 0e:c3:2b:7d:22:af:64:73:c0:2e:8e:73:e0:e6:b9: c1:96:a4:55:ad:18:7d:fd:6a:e8:16:a4:86:a5:f5: 03:21:0a:16:f2:a0:05:91:1d:79:f3:6d:0d:3c:e9: 42:37:63:1e:e0:36:18:8d:45:41:79:1e:85:3d:83: ed:50:7a:7c:ec:f6:68:9c:9c:9a:0a:96:3b:57:2e: 23:f5:89:d5:47:9e:04:52:af:3a:dc:68:f1:7c:5d: 7b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:4E:68:1F:99:70:C6:FB:AB:5B:EE:61:BE:16:BF:55:56:AA:10:F2 X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/3130332e33362e3137362e302f32322d3234203d3e203535393939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.36.176.0/22 Signature Algorithm: sha256WithRSAEncryption 7c:bd:7e:fb:b2:e6:50:6d:ae:68:ab:f0:f5:2d:a4:33:ad:17: a4:31:42:3a:53:89:cc:a7:89:82:82:bc:b3:5c:a4:69:7e:4e: a8:38:8d:c8:ca:e4:97:a5:9a:04:01:a8:dc:a9:a3:ec:98:d9: 2c:9f:20:68:63:31:0a:34:84:46:c5:a5:c8:0f:6c:d0:8d:8e: 4e:27:d6:14:5e:a7:75:68:32:f6:af:06:d8:d0:08:5b:50:fc: 0a:06:f1:22:bf:01:22:ed:dc:91:1c:cd:46:18:af:7b:09:2a: 44:76:8d:a8:b9:4a:55:c1:f7:03:4d:f8:bb:fe:1c:d5:ea:dc: d2:ce:1f:84:e6:90:03:33:96:ee:4d:00:0a:e7:ab:e1:a2:cf: 03:53:ad:2b:4b:15:70:99:91:82:7b:90:15:b0:65:11:67:4b: 69:e9:83:47:0a:c1:70:90:a2:f5:28:5b:cc:0e:b5:92:b7:e4: 41:13:52:b6:46:b5:d0:a7:33:f1:88:0b:71:88:89:97:ff:01: 87:0c:77:da:6e:99:0c:e5:b0:16:cd:e3:a4:91:0f:0e:02:33: a1:70:63:c7:30:7a:c9:ed:d9:f8:46:d9:5d:18:f0:ac:43:fc: 5f:fd:68:9f:56:57:dd:ff:61:0a:7f:cc:f4:c3:f9:89:31:6a: b0:6e:a5:f4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUPnnH4io1Ev2FThCiuqT+BjpITIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjA1MDgxNTI0NDFaFw0yNzA1MDcxNTI5NDFaMDMxMTAvBgNV BAMTKDQyNEU2ODFGOTk3MEM2RkJBQjVCRUU2MUJFMTZCRjU1NTZBQTEwRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCzH7F/0dPaaaStRBIOKrll/0R 7KarwA6HH7DKD9bsFQFrMOS4wC23qiICLko+VvGBx7w7bhVcWz4N/+F078vVuLfT atUYopFCBeFHfoKhwHtzOdeERzoX6DFsuXutDUQBH0qRQr/00ypEcmAzc73coaDk 1Lc6/VJ9hfXbr8RWAL3PfVQ824aoAlqlAHLT0S1dOrLZlrwG5/4yTR9vezJZdiOD sg7DK30ir2RzwC6Oc+DmucGWpFWtGH39augWpIal9QMhChbyoAWRHXnzbQ086UI3 Yx7gNhiNRUF5HoU9g+1Qenzs9micnJoKljtXLiP1idVHngRSrzrcaPF8XXs7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQk5oH5lwxvurW+5hvha/VVaqEPIwHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjY5Mzg5OTU5NTg3NDMwNS8wLzMxMzAzMzJlMzMz NjJlMzEzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmcksDANBgkqhkiG9w0BAQsFAAOCAQEAfL1++7LmUG2uaKvw9S2kM60X pDFCOlOJzKeJgoK8s1ykaX5OqDiNyMrkl6WaBAGo3Kmj7JjZLJ8gaGMxCjSERsWl yA9s0I2OTifWFF6ndWgy9q8G2NAIW1D8CgbxIr8BIu3ckRzNRhivewkqRHaNqLlK VcH3A034u/4c1erc0s4fhOaQAzOW7k0ACuer4aLPA1OtK0sVcJmRgnuQFbBlEWdL aemDRwrBcJCi9ShbzA61krfkQRNStka10Kcz8YgLcYiJl/8Bhwx32m6ZDOWwFs3j pJEPDgIzoXBjxzB6ye3Z+EbZXRjwrEP8X/1on1ZX3f9hCn/M9MP5iTFqsG6l9A== -----END CERTIFICATE-----Generated at Wed May 13 21:32:20 2026 by rpki-client