$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e3230382e302f32322d3232203d3e2034383337.roa File: 31342e3230342e3230382e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: yqY7OrLd0I0kLY3qlLvjFuULdPwOWgZkrrFS9cIJLZg= Subject key identifier: 13:01:8D:E1:60:62:31:48:C6:1C:51:D7:73:7B:F0:97:F6:16:8B:97 Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 5B65BE5A14D5CE1E75479E565922FB462BE24858 Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e3230382e302f32322d3232203d3e2034383337.roa Signing time: Wed 13 May 2026 02:50:07 +0000 ROA not before: Wed 13 May 2026 02:45:07 +0000 ROA not after: Wed 12 May 2027 02:50:07 +0000 asID: 4837 IP address blocks: 14.204.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:65:be:5a:14:d5:ce:1e:75:47:9e:56:59:22:fb:46:2b:e2:48:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: May 13 02:45:07 2026 GMT Not After : May 12 02:50:07 2027 GMT Subject: CN=13018DE160623148C61C51D7737BF097F6168B97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:59:e9:17:d7:42:33:79:26:43:6d:ac:f1:de: 6a:f9:d0:37:66:e7:50:a5:27:e2:0d:5f:e0:4a:65: 99:0e:a1:39:50:27:98:e2:76:0c:be:42:a2:2a:54: 2b:18:f9:83:02:a2:26:6e:2e:7e:c4:6a:f9:91:c2: 47:bf:a7:2e:5b:29:c0:d9:a6:4b:1b:27:77:24:1c: 93:a9:69:ef:20:3d:2e:7c:c7:ac:35:a3:03:d3:4c: 32:94:ab:b7:dd:3e:ac:84:02:05:04:37:ef:bf:55: 62:29:07:a1:f6:12:7f:00:8b:be:75:3b:b2:e5:3e: c0:85:3d:e8:0d:b6:6a:7a:fe:f8:06:23:7a:5b:5f: a7:a2:f3:a8:8f:6a:ef:20:0a:31:7d:94:8f:2a:93: 9d:fc:73:e4:50:38:ea:87:7f:c8:e2:1a:3d:a7:66: 50:c4:75:8f:02:2f:2d:2d:e6:7a:38:af:7e:ae:b8: d9:1d:7f:6d:bd:63:fd:10:55:ad:54:40:ae:74:8f: d4:8b:1b:31:10:08:80:2b:17:2e:de:df:f0:ac:62: 36:2c:7c:17:74:86:16:75:35:3b:5f:68:c4:fc:a3: bb:33:ff:87:db:d8:13:25:0b:7c:0b:06:fa:42:d1: 8e:26:ec:11:08:66:57:c3:ec:3f:f6:ae:19:21:90: c4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:01:8D:E1:60:62:31:48:C6:1C:51:D7:73:7B:F0:97:F6:16:8B:97 X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230342e3230382e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 14.204.208.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:cb:85:08:e9:2c:81:b2:c5:db:73:31:4a:26:b8:b5:04:b4: e0:43:87:8e:eb:5f:80:dd:6c:45:94:15:4e:d7:04:e6:5a:37: 92:59:a7:65:5c:25:a2:9a:96:28:68:e3:af:38:b1:8e:65:c4: 9e:16:8f:6f:5a:b2:77:71:99:90:26:88:2e:1c:de:01:8d:55: 7f:e1:28:7f:58:85:65:a1:d2:b3:a0:4b:e4:d3:72:cf:1f:73: 32:f7:74:24:53:2e:1f:ab:da:1f:dc:12:70:2e:47:6e:19:19: 76:52:34:68:d9:ec:af:2c:10:99:72:3f:b4:37:99:e3:da:a5: f9:eb:91:04:eb:98:d1:68:aa:0a:2a:4b:12:0b:38:9a:fc:f8: d0:99:f2:75:d1:63:08:ae:50:62:c3:d1:c2:67:5e:1e:fb:76: bc:a9:03:93:d9:d0:7a:b8:75:7e:81:41:3c:01:60:33:4b:7b: 35:d6:31:3c:15:ef:92:c4:2b:4b:81:b5:3d:10:db:56:5f:43: 96:5a:ec:50:20:c1:8c:09:2f:10:7b:a7:9d:a8:fd:14:dd:25: 65:d6:e9:ec:7e:b7:38:99:74:55:58:cf:c6:d0:f4:2f:9e:11: e4:d2:93:59:e0:a5:53:8d:a4:70:f6:70:88:f0:81:dd:a3:44: 65:dd:39:12 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUW2W+WhTVzh51R55WWSL7RiviSFgwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUxMzAyNDUwN1oX DTI3MDUxMjAyNTAwN1owMzExMC8GA1UEAxMoMTMwMThERTE2MDYyMzE0OEM2MUM1 MUQ3NzM3QkYwOTdGNjE2OEI5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpZ6RfXQjN5JkNtrPHeavnQN2bnUKUn4g1f4EplmQ6hOVAnmOJ2DL5CoipU Kxj5gwKiJm4ufsRq+ZHCR7+nLlspwNmmSxsndyQck6lp7yA9LnzHrDWjA9NMMpSr t90+rIQCBQQ3779VYikHofYSfwCLvnU7suU+wIU96A22anr++AYjeltfp6LzqI9q 7yAKMX2UjyqTnfxz5FA46od/yOIaPadmUMR1jwIvLS3mejivfq642R1/bb1j/RBV rVRArnSP1IsbMRAIgCsXLt7f8KxiNix8F3SGFnU1O19oxPyjuzP/h9vYEyULfAsG +kLRjibsEQhmV8PsP/auGSGQxI8CAwEAAaOCAhEwggINMB0GA1UdDgQWBBQTAY3h YGIxSMYcUddze/CX9haLlzAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTY3MDQ1OTM2 OTUzNDI1OTMvMS8zMTM0MmUzMjMwMzQyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzIy MDNkM2UyMDM0MzgzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCDszQMA0GCSqGSIb3DQEBCwUAA4IB AQCLy4UI6SyBssXbczFKJri1BLTgQ4eO61+A3WxFlBVO1wTmWjeSWadlXCWimpYo aOOvOLGOZcSeFo9vWrJ3cZmQJoguHN4BjVV/4Sh/WIVlodKzoEvk03LPH3My93Qk Uy4fq9of3BJwLkduGRl2UjRo2eyvLBCZcj+0N5nj2qX565EE65jRaKoKKksSCzia /PjQmfJ10WMIrlBiw9HCZ14e+3a8qQOT2dB6uHV+gUE8AWAzS3s11jE8Fe+SxCtL gbU9ENtWX0OWWuxQIMGMCS8Qe6edqP0U3SVl1unsfrc4mXRVWM/G0PQvnhHk0pNZ 4KVTjaRw9nCI8IHdo0Rl3TkS -----END CERTIFICATE-----Generated at Wed May 13 07:46:36 2026 by rpki-client