$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131322e302f32342d3234203d3e203633353939.roa File: 3130332e38392e3131322e302f32342d3234203d3e203633353939.roa (raw, json) Hash identifier: qeNecZYzzDOdHNQ7OI1FGeTPwXb6OHSlmtGAyhOcfnc= Subject key identifier: E1:B5:CA:4A:57:D0:06:D0:FC:05:1A:2F:A1:A6:CD:12:25:51:FD:4B Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Certificate serial: 046436148600D785CC47B7FFACAA31431689E6A0 Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131322e302f32342d3234203d3e203633353939.roa Signing time: Thu 30 Apr 2026 07:05:04 +0000 ROA not before: Thu 30 Apr 2026 07:00:04 +0000 ROA not after: Thu 29 Apr 2027 07:05:04 +0000 asID: 63599 IP address blocks: 103.89.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:64:36:14:86:00:d7:85:cc:47:b7:ff:ac:aa:31:43:16:89:e6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Validity Not Before: Apr 30 07:00:04 2026 GMT Not After : Apr 29 07:05:04 2027 GMT Subject: CN=E1B5CA4A57D006D0FC051A2FA1A6CD122551FD4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fc:cb:c4:b0:26:14:04:95:1c:28:79:05:b2: 01:a1:3b:92:c3:e5:69:61:53:db:84:df:09:fb:0f: a8:f7:c1:c6:8f:8c:27:db:06:0b:5c:8b:aa:53:d2: 60:75:10:65:d3:34:15:61:d3:0b:3a:73:f0:73:55: fe:ff:d4:57:a1:c9:75:8b:5c:ea:0b:e7:b1:c7:e5: e1:d2:c0:cd:c3:97:ee:37:b1:36:cf:bb:d1:78:4b: 06:ee:e8:aa:2a:79:0d:c9:ca:86:19:d6:29:d8:72: 4b:1e:c9:38:64:6d:b2:0a:2f:9c:d8:4a:1e:7c:a7: 94:ba:e0:e9:f2:23:6a:87:97:ba:af:28:61:3d:9d: f2:57:9c:35:5f:34:63:b1:3e:5b:6e:3c:9d:a5:b4: 55:54:32:26:f4:a7:b4:40:90:9e:40:77:a6:81:9c: 97:a2:a8:58:9f:f8:86:15:19:de:94:67:81:31:d5: 61:ea:1a:ad:15:7a:61:34:f1:80:92:a8:f3:17:6b: 96:17:28:79:57:4d:39:bb:19:a1:ac:c6:c2:19:0f: b5:f4:37:91:0f:f8:ae:e1:1d:76:74:32:0e:01:43: cb:19:b3:63:65:77:d1:73:bf:da:88:d1:9a:fd:91: c9:33:8f:1d:5a:5f:d1:12:f6:b6:b5:67:cc:f0:f7: 3e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B5:CA:4A:57:D0:06:D0:FC:05:1A:2F:A1:A6:CD:12:25:51:FD:4B X509v3 Authority Key Identifier: keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131322e302f32342d3234203d3e203633353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.112.0/24 Signature Algorithm: sha256WithRSAEncryption 40:e1:ed:4e:94:33:50:be:e5:51:36:6b:c5:70:79:b6:5c:25: f0:c3:c7:98:55:e1:5e:9b:e5:bd:71:cf:eb:a6:03:e2:42:80: de:d8:28:0f:d1:29:9f:75:ed:0e:74:45:72:3f:44:48:b9:15: 50:d2:60:b0:04:cb:18:91:7a:81:7b:c4:22:f3:14:f8:f8:1c: 3b:90:9f:bb:fb:7b:e4:c1:9e:cf:68:2e:f3:9a:78:90:9f:73: c9:3b:ca:d2:57:e3:f5:88:02:e3:1c:f5:00:34:63:fa:53:a3: 84:ef:f5:9e:2c:ec:a2:82:5c:bf:eb:b0:6b:7e:63:21:6d:ea: cc:47:fc:d7:11:00:ce:db:ae:da:ba:fc:fe:00:dc:a3:1d:cb: ac:dd:a3:eb:19:3c:b4:9f:e7:a3:94:00:c4:7a:a2:12:f7:fd: e4:38:6f:1a:2c:45:dd:b2:22:71:4c:5d:2f:d0:21:55:41:f2: 9b:70:9b:d4:6d:10:fb:60:37:ae:6c:d2:6b:2a:5d:c3:5a:34: bd:67:6b:e8:fb:f2:cd:98:34:71:fa:79:94:34:69:34:92:f5: 18:a0:dc:7a:02:0a:47:ce:8e:41:93:92:d5:6a:19:63:3f:f5: 8c:ab:9d:af:40:26:50:21:a3:56:fa:8b:e6:56:42:ed:e4:82: 7e:a9:49:28 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBGQ2FIYA14XMR7f/rKoxQxaJ5qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG NUFCNjEzMzAeFw0yNjA0MzAwNzAwMDRaFw0yNzA0MjkwNzA1MDRaMDMxMTAvBgNV BAMTKEUxQjVDQTRBNTdEMDA2RDBGQzA1MUEyRkExQTZDRDEyMjU1MUZENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/MvEsCYUBJUcKHkFsgGhO5LD 5WlhU9uE3wn7D6j3wcaPjCfbBgtci6pT0mB1EGXTNBVh0ws6c/BzVf7/1FehyXWL XOoL57HH5eHSwM3Dl+43sTbPu9F4Swbu6KoqeQ3JyoYZ1inYckseyThkbbIKL5zY Sh58p5S64OnyI2qHl7qvKGE9nfJXnDVfNGOxPltuPJ2ltFVUMib0p7RAkJ5Ad6aB nJeiqFif+IYVGd6UZ4Ex1WHqGq0VemE08YCSqPMXa5YXKHlXTTm7GaGsxsIZD7X0 N5EP+K7hHXZ0Mg4BQ8sZs2Nld9Fzv9qI0Zr9kckzjx1aX9ES9ra1Z8zw9z5PAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU4bXKSlfQBtD8BRovoabNEiVR/UswHwYDVR0j BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODI0MTkyMy8wLzMxMzAzMzJlMzgz OTJlMzEzMTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzkzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGdZcDANBgkqhkiG9w0BAQsFAAOCAQEAQOHtTpQzUL7lUTZrxXB5tlwl 8MPHmFXhXpvlvXHP66YD4kKA3tgoD9Epn3XtDnRFcj9ESLkVUNJgsATLGJF6gXvE IvMU+PgcO5Cfu/t75MGez2gu85p4kJ9zyTvK0lfj9YgC4xz1ADRj+lOjhO/1nizs ooJcv+uwa35jIW3qzEf81xEAztuu2rr8/gDcox3LrN2j6xk8tJ/no5QAxHqiEvf9 5DhvGixF3bIicUxdL9AhVUHym3Cb1G0Q+2A3rmzSaypdw1o0vWdr6PvyzZg0cfp5 lDRpNJL1GKDcegIKR86OQZOS1WoZYz/1jKudr0AmUCGjVvqL5lZC7eSCfqlJKA== -----END CERTIFICATE-----Generated at Wed May 13 15:27:27 2026 by rpki-client