$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131342e302f32342d3234203d3e203633353939.roa File: 3130332e38392e3131342e302f32342d3234203d3e203633353939.roa (raw, json) Hash identifier: HWzCIK0J3kj61jM4RJKLtXp5PntrD5IoFA2l+KWrNdg= Subject key identifier: 01:1E:69:2B:AD:7B:19:5B:F7:88:1A:CC:07:3A:91:69:40:BC:52:06 Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Certificate serial: 2308F9E7ABB1245219C3328CA5B2245D725B620C Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131342e302f32342d3234203d3e203633353939.roa Signing time: Thu 30 Apr 2026 07:05:04 +0000 ROA not before: Thu 30 Apr 2026 07:00:04 +0000 ROA not after: Thu 29 Apr 2027 07:05:04 +0000 asID: 63599 IP address blocks: 103.89.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:08:f9:e7:ab:b1:24:52:19:c3:32:8c:a5:b2:24:5d:72:5b:62:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133 Validity Not Before: Apr 30 07:00:04 2026 GMT Not After : Apr 29 07:05:04 2027 GMT Subject: CN=011E692BAD7B195BF7881ACC073A916940BC5206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:ad:ef:71:1c:d5:6b:7f:42:b3:2b:ad:c5: 41:60:77:ea:0a:09:ce:3b:fb:55:71:ca:44:3f:69: 4c:27:3b:3f:17:42:d7:e4:11:a0:25:9a:4a:de:47: 79:e9:14:44:01:36:55:8c:b1:5f:f4:2b:40:2a:27: 0e:3c:c1:d5:83:e0:eb:22:98:da:ca:eb:2c:21:7b: 8d:a0:37:ba:24:f4:9e:51:92:ad:c9:0f:25:0c:8b: 8a:9e:ef:49:0c:49:cb:f2:78:0c:88:e3:e1:e1:3b: 1a:57:23:67:a4:3d:25:07:40:2f:06:01:41:fc:dd: 30:39:f4:b5:9b:1c:b8:4b:b5:b7:e3:7c:9a:cc:70: 88:8d:f4:1b:3a:af:23:1d:e8:d6:7e:05:c4:ee:98: a5:79:0a:b8:19:50:7c:66:e7:61:6d:a8:af:bd:fd: 45:83:c1:3f:89:c3:72:3c:42:98:81:bb:cb:88:e2: ae:a5:79:17:7a:1f:f0:db:01:58:36:c2:55:37:43: d3:0d:be:28:44:7a:d0:cc:a9:dd:ce:df:a3:d0:a9: 66:9b:d8:3b:90:37:63:a5:b4:49:8a:fb:b0:96:f8: 2f:9a:97:29:d4:b8:53:3a:3b:88:e3:f2:49:92:8e: 45:ac:a0:3d:3b:a2:b0:ca:49:1b:7f:5c:e5:79:6c: bd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:1E:69:2B:AD:7B:19:5B:F7:88:1A:CC:07:3A:91:69:40:BC:52:06 X509v3 Authority Key Identifier: keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/3130332e38392e3131342e302f32342d3234203d3e203633353939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.89.114.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:66:37:6e:26:06:af:04:df:20:2f:36:2d:5c:78:ab:db:55: bb:f4:ec:22:c1:92:37:80:49:7b:30:56:c3:c8:55:75:0c:17: e0:5d:80:c6:f6:35:bc:23:d0:3e:1b:1e:64:a4:63:df:24:08: 3e:28:5d:df:ce:65:dd:74:48:a4:7d:e6:c0:a4:cb:ef:2f:f7: 5f:56:03:8c:4f:3b:dc:6c:12:b8:16:ec:e1:b4:9c:89:a4:c6: 2f:a3:40:02:33:73:76:82:c5:67:22:c8:90:f7:16:37:d3:74: af:8f:44:6e:1b:b3:7e:bb:f7:b9:3e:5f:ab:e9:ee:cc:5b:76: c9:ce:9a:67:39:2d:ba:55:a8:18:5f:eb:ae:f1:b9:1e:7e:ff: 65:23:cf:6a:73:86:5e:fe:8e:20:72:78:06:11:9a:7c:17:d9: b0:fa:2c:9d:99:a1:8c:e3:cd:97:26:35:4e:78:69:ed:28:93: 0b:db:62:43:94:67:a2:36:61:3b:17:b0:a0:95:a7:e6:40:51: d3:98:42:ac:a2:25:4b:05:09:aa:13:87:82:35:98:b1:e1:21: a1:e7:9d:6f:b7:44:48:95:7d:46:5d:aa:5d:87:b9:d9:9a:27: 86:d3:ca:ee:5f:27:a3:f0:8c:37:55:8b:7e:a0:ae:cd:a6:30: 09:b6:8f:4e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIwj556uxJFIZwzKMpbIkXXJbYgwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJG NUFCNjEzMzAeFw0yNjA0MzAwNzAwMDRaFw0yNzA0MjkwNzA1MDRaMDMxMTAvBgNV BAMTKDAxMUU2OTJCQUQ3QjE5NUJGNzg4MUFDQzA3M0E5MTY5NDBCQzUyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+K3vcRzVa39CsyutxUFgd+oK Cc47+1VxykQ/aUwnOz8XQtfkEaAlmkreR3npFEQBNlWMsV/0K0AqJw48wdWD4Osi mNrK6ywhe42gN7ok9J5Rkq3JDyUMi4qe70kMScvyeAyI4+HhOxpXI2ekPSUHQC8G AUH83TA59LWbHLhLtbfjfJrMcIiN9Bs6ryMd6NZ+BcTumKV5CrgZUHxm52FtqK+9 /UWDwT+Jw3I8QpiBu8uI4q6leRd6H/DbAVg2wlU3Q9MNvihEetDMqd3O36PQqWab 2DuQN2OltEmK+7CW+C+alynUuFM6O4jj8kmSjkWsoD07orDKSRt/XOV5bL2lAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUAR5pK617GVv3iBrMBzqRaUC8UgYwHwYDVR0j BBgwFoAUSFOhsxfEeqcrRf0IaxvZ4vWrYTMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODI0MTkyMy8wLzQ4NTNBMUIzMTdDNDdBQTcyQjQ1RkQwODZCMUJE OUUyRjVBQjYxMzMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDg1M0ExQjMxN0M0N0FBNzJCNDVGRDA4NkIxQkQ5RTJGNUFCNjEzMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODI0MTkyMy8wLzMxMzAzMzJlMzgz OTJlMzEzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM1MzkzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGdZcjANBgkqhkiG9w0BAQsFAAOCAQEAHGY3biYGrwTfIC82LVx4q9tV u/TsIsGSN4BJezBWw8hVdQwX4F2AxvY1vCPQPhseZKRj3yQIPihd385l3XRIpH3m wKTL7y/3X1YDjE873GwSuBbs4bSciaTGL6NAAjNzdoLFZyLIkPcWN9N0r49Ebhuz frv3uT5fq+nuzFt2yc6aZzktulWoGF/rrvG5Hn7/ZSPPanOGXv6OIHJ4BhGafBfZ sPosnZmhjOPNlyY1Tnhp7SiTC9tiQ5RnojZhOxewoJWn5kBR05hCrKIlSwUJqhOH gjWYseEhoeedb7dESJV9Rl2qXYe52ZonhtPK7l8no/CMN1WLfqCuzaYwCbaPTg== -----END CERTIFICATE-----Generated at Wed May 13 16:15:12 2026 by rpki-client