$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233302e302f32332d3233203d3e2034383131.roa File: 3130312e38392e3233302e302f32332d3233203d3e2034383131.roa (raw, json) Hash identifier: XWERciDDrQPR5hZlfX1/YMegMSA07ttdKclBLYk9nik= Subject key identifier: 05:63:BE:AB:40:C8:4A:2A:9A:F5:C3:9F:B7:84:03:66:F4:45:D4:7B Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 53FB7A2A301020533D620020998B08006969299E Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233302e302f32332d3233203d3e2034383131.roa Signing time: Sat 09 May 2026 16:15:57 +0000 ROA not before: Sat 09 May 2026 16:10:57 +0000 ROA not after: Sat 08 May 2027 16:15:57 +0000 asID: 4811 IP address blocks: 101.89.230.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:fb:7a:2a:30:10:20:53:3d:62:00:20:99:8b:08:00:69:69:29:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 9 16:10:57 2026 GMT Not After : May 8 16:15:57 2027 GMT Subject: CN=0563BEAB40C84A2A9AF5C39FB7840366F445D47B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:e1:6f:c1:76:02:87:1b:fd:37:ec:64:40: 99:20:a3:52:83:df:2f:0c:b3:6a:03:fb:58:24:4b: 0b:df:e1:e2:57:c1:f2:aa:54:8d:e0:b8:68:40:a6: d0:d3:c5:2c:81:a0:53:11:18:82:7a:18:87:0b:41: 05:2c:cf:1d:e5:67:2f:2b:8c:4d:e9:87:83:7c:4d: 3d:60:cf:34:b1:9d:66:eb:49:b5:f1:0f:50:ab:86: 84:b1:97:45:93:a8:ba:54:e7:70:88:27:a2:04:33: fb:42:79:f7:4e:79:5b:25:2d:1c:8e:d0:cb:b4:11: 4c:65:65:68:37:ee:f0:9d:4e:ca:67:da:ac:14:25: 9c:b0:6f:e9:0f:21:ce:78:c8:8a:b7:43:15:84:6e: 7d:ec:60:ec:69:cc:b6:2a:72:8b:38:8e:e9:d3:fa: d5:5c:ae:5c:17:96:d3:2c:79:64:03:d8:5f:ad:b6: 53:4f:9f:aa:2e:75:84:ac:27:1f:f4:47:ea:b2:f7: 1a:05:00:12:7c:c3:53:cb:73:d8:db:de:f8:da:5b: a0:3a:fb:f3:db:8f:bc:f9:2a:41:14:76:cd:31:4d: fb:36:61:76:25:09:cc:1c:86:65:e8:62:98:c6:3e: 2b:a9:05:95:52:42:c3:0c:96:04:e5:b5:a0:41:b5: 45:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:BE:AB:40:C8:4A:2A:9A:F5:C3:9F:B7:84:03:66:F4:45:D4:7B X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233302e302f32332d3233203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.89.230.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:c1:e4:a1:51:88:61:31:93:7c:bc:04:c4:84:26:ef:96:79: 84:5e:2d:fc:7f:36:19:20:58:2f:4f:f1:39:c3:5a:93:c7:29: 65:61:15:c8:05:db:00:e3:1e:16:e4:b5:aa:b6:ee:83:12:4c: f9:a1:b6:d6:59:4e:92:93:a1:d1:e5:00:5d:31:84:b8:01:42: c2:6c:59:f0:be:83:f8:da:82:c2:02:3a:bd:46:e3:04:ce:d3: 9c:c0:8d:50:22:5c:06:c1:21:24:b4:a5:3e:7d:f9:8a:50:91: e8:b9:24:0e:72:67:6e:33:a1:7a:cd:33:69:8b:21:f9:cc:9a: fe:2d:e3:e1:23:7b:ed:4d:31:21:58:16:c5:87:dd:02:bb:c6: 7e:c3:c9:0c:33:d6:73:cc:89:c2:90:ca:1a:f8:ef:cf:0f:4b: c5:85:8a:e7:2b:cd:95:db:9f:ab:6b:8b:21:64:63:71:9a:6c: 80:8f:c7:54:11:40:74:e2:69:77:98:9e:39:6a:8b:63:99:b0: 60:fb:08:96:be:80:a8:4a:93:9a:4f:06:66:ee:87:54:91:8d: 71:21:58:00:b6:fb:cb:50:db:c3:c3:f9:87:54:4a:1e:c8:7a: e0:b5:72:ff:33:32:3f:92:44:6f:0d:fd:ec:4d:a5:da:7e:c3: c3:62:4b:a9 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUU/t6KjAQIFM9YgAgmYsIAGlpKZ4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUwOTE2MTA1N1oX DTI3MDUwODE2MTU1N1owMzExMC8GA1UEAxMoMDU2M0JFQUI0MEM4NEEyQTlBRjVD MzlGQjc4NDAzNjZGNDQ1RDQ3QjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJgp4W/BdgKHG/037GRAmSCjUoPfLwyzagP7WCRLC9/h4lfB8qpUjeC4aECm 0NPFLIGgUxEYgnoYhwtBBSzPHeVnLyuMTemHg3xNPWDPNLGdZutJtfEPUKuGhLGX RZOoulTncIgnogQz+0J59055WyUtHI7Qy7QRTGVlaDfu8J1OymfarBQlnLBv6Q8h znjIirdDFYRufexg7GnMtipyiziO6dP61VyuXBeW0yx5ZAPYX622U0+fqi51hKwn H/RH6rL3GgUAEnzDU8tz2Nve+NpboDr789uPvPkqQRR2zTFN+zZhdiUJzByGZehi mMY+K6kFlVJCwwyWBOW1oEG1RXkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBQFY76r QMhKKpr1w5+3hANm9EXUezAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMTMwMzEyZTM4MzkyZTMyMzMzMDJlMzAyZjMyMzMyZDMyMzMy MDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZVnmMA0GCSqGSIb3DQEBCwUAA4IB AQB/weShUYhhMZN8vATEhCbvlnmEXi38fzYZIFgvT/E5w1qTxyllYRXIBdsA4x4W 5LWqtu6DEkz5obbWWU6Sk6HR5QBdMYS4AULCbFnwvoP42oLCAjq9RuMEztOcwI1Q IlwGwSEktKU+ffmKUJHouSQOcmduM6F6zTNpiyH5zJr+LePhI3vtTTEhWBbFh90C u8Z+w8kMM9ZzzInCkMoa+O/PD0vFhYrnK82V25+ra4shZGNxmmyAj8dUEUB04ml3 mJ45aotjmbBg+wiWvoCoSpOaTwZm7odUkY1xIVgAtvvLUNvDw/mHVEoeyHrgtXL/ MzI/kkRvDf3sTaXafsPDYkup -----END CERTIFICATE-----Generated at Wed May 13 11:50:07 2026 by rpki-client