$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa File: 3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: F41StT+x2rlWXOQVNKcm+wNnMgPZjhcz7G5e31rQ98c= Subject key identifier: 1C:FD:DD:E3:0F:FA:20:95:75:A4:48:3E:26:4E:77:29:65:22:4F:4E Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Certificate serial: 240942EE45F5B3EDAACCA41BF3C53D45B0E859B4 Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa Signing time: Fri 08 May 2026 08:33:29 +0000 ROA not before: Fri 08 May 2026 08:28:29 +0000 ROA not after: Fri 07 May 2027 08:33:29 +0000 asID: 58466 IP address blocks: 103.222.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:09:42:ee:45:f5:b3:ed:aa:cc:a4:1b:f3:c5:3d:45:b0:e8:59:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Validity Not Before: May 8 08:28:29 2026 GMT Not After : May 7 08:33:29 2027 GMT Subject: CN=1CFDDDE30FFA209575A4483E264E772965224F4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0d:69:49:46:68:32:ab:b1:e5:14:64:d0:7a: 13:7b:f8:24:92:89:0d:44:ed:8c:d5:b5:9e:db:2d: 49:63:17:0c:70:aa:8e:cf:f5:74:07:83:74:b6:80: 7d:35:8d:94:ae:8e:49:4c:ae:1a:28:24:a1:d2:22: c1:20:ec:08:a1:4d:52:5d:07:b3:4e:7d:ee:79:ee: b8:e5:c8:6c:67:5f:0c:80:a8:df:3f:b5:0a:f7:53: 3c:1b:99:2a:6b:fb:d1:42:83:7f:24:88:a7:83:20: db:13:2f:dd:75:fd:fd:b9:e6:0c:c6:52:60:a6:5a: a0:cf:6e:e0:80:84:d5:24:16:c7:35:27:74:ad:e0: 0f:43:be:77:e7:52:03:aa:69:5d:71:ff:09:54:77: 63:87:79:20:67:36:82:99:93:97:e1:6a:51:72:7b: 07:f5:fe:05:54:01:b0:b4:20:91:55:74:8d:d3:7d: 56:08:50:23:bb:3e:df:79:df:14:f9:91:87:05:e5: 9d:03:00:72:47:3b:7b:34:49:b8:8e:94:67:76:cb: ad:4c:aa:99:e5:3a:1b:0f:8f:89:5d:c7:42:eb:64: 8a:c6:60:82:37:11:c1:45:1f:b9:bb:1b:39:22:65: 2f:97:e0:e8:fd:67:af:fa:1c:b9:b9:5d:33:f7:c7: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:FD:DD:E3:0F:FA:20:95:75:A4:48:3E:26:4E:77:29:65:22:4F:4E X509v3 Authority Key Identifier: keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e3232322e3137382e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.222.178.0/24 Signature Algorithm: sha256WithRSAEncryption 68:41:d7:4b:6a:95:92:7a:47:fe:a1:22:fb:05:b7:53:af:de: 11:b0:3f:66:51:27:e3:94:b6:7c:06:66:93:27:b6:d6:fb:77: 4d:49:10:6f:b3:c9:d6:31:98:45:41:29:18:ec:cb:59:4d:c7: 44:2e:c6:bc:7c:62:a9:23:b8:de:af:04:e4:bb:71:21:3c:e6: 85:6a:47:14:1b:fc:68:e6:24:73:ad:f5:fa:37:8e:97:f4:0e: 1c:8d:9e:d4:1c:95:05:37:11:2a:70:8e:48:5a:bd:23:8d:02: ab:94:63:71:46:17:13:28:90:9d:0d:7d:da:04:fc:63:ff:1b: 4a:13:d1:20:79:c2:d9:21:aa:89:49:03:08:db:bf:0b:44:fc: 36:76:4a:59:86:2e:78:78:1e:cd:a1:00:eb:3e:f6:cc:ef:58: 4a:00:6a:33:22:9e:64:af:e4:9b:c4:96:a0:47:bf:cd:de:ea: 31:00:37:4f:f0:d7:49:fa:ec:8b:cc:eb:c2:99:9b:18:54:58: 75:c1:61:38:19:40:cc:95:09:76:73:7e:9d:8e:ee:0f:33:b5: 9f:1b:2a:10:5a:f1:48:f1:71:36:10:14:e5:d5:45:62:a3:46: 61:20:bf:89:fe:7e:66:ab:c0:78:62:d5:ec:7e:21:ba:64:e7: bd:5b:b6:fb -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJAlC7kX1s+2qzKQb88U9RbDoWbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG NUFCNjEzMzAeFw0yNjA1MDgwODI4MjlaFw0yNzA1MDcwODMzMjlaMDMxMTAvBgNV BAMTKDFDRkREREUzMEZGQTIwOTU3NUE0NDgzRTI2NEU3NzI5NjUyMjRGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZDWlJRmgyq7HlFGTQehN7+CSS iQ1E7YzVtZ7bLUljFwxwqo7P9XQHg3S2gH01jZSujklMrhooJKHSIsEg7AihTVJd B7NOfe557rjlyGxnXwyAqN8/tQr3UzwbmSpr+9FCg38kiKeDINsTL911/f255gzG UmCmWqDPbuCAhNUkFsc1J3St4A9DvnfnUgOqaV1x/wlUd2OHeSBnNoKZk5fhalFy ewf1/gVUAbC0IJFVdI3TfVYIUCO7Pt953xT5kYcF5Z0DAHJHO3s0SbiOlGd2y61M qpnlOhsPj4ldx0LrZIrGYII3EcFFH7m7GzkiZS+X4Oj9Z6/6HLm5XTP3x8cxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUHP3d4w/6IJV1pEg+Jk53KWUiT04wHwYDVR0j BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgyNDE5MjMvMC8zMTMwMzMyZTMy MzIzMjJlMzEzNzM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfesjANBgkqhkiG9w0BAQsFAAOCAQEAaEHXS2qVknpH/qEi+wW3 U6/eEbA/ZlEn45S2fAZmkye21vt3TUkQb7PJ1jGYRUEpGOzLWU3HRC7GvHxiqSO4 3q8E5LtxITzmhWpHFBv8aOYkc631+jeOl/QOHI2e1ByVBTcRKnCOSFq9I40Cq5Rj cUYXEyiQnQ192gT8Y/8bShPRIHnC2SGqiUkDCNu/C0T8NnZKWYYueHgezaEA6z72 zO9YSgBqMyKeZK/km8SWoEe/zd7qMQA3T/DXSfrsi8zrwpmbGFRYdcFhOBlAzJUJ dnN+nY7uDzO1nxsqEFrxSPFxNhAU5dVFYqNGYSC/if5+ZqvAeGLV7H4humTnvVu2 +w== -----END CERTIFICATE-----Generated at Wed May 13 17:05:45 2026 by rpki-client