$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233322e302f32342d3234203d3e2034383131.roa File: 3130312e38392e3233322e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: 5h0aQNFf2n17tAjYs9H6CHG+7o6LHNGUYan/DMq4O/g= Subject key identifier: 47:A6:38:FF:54:2A:3B:B5:B0:BA:F8:5F:3A:B1:1D:FC:B6:34:4E:D5 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 4FE2DE4278ACB1363FF5A8D067E9635063FF0920 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233322e302f32342d3234203d3e2034383131.roa Signing time: Sat 09 May 2026 16:15:56 +0000 ROA not before: Sat 09 May 2026 16:10:56 +0000 ROA not after: Sat 08 May 2027 16:15:56 +0000 asID: 4811 IP address blocks: 101.89.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e2:de:42:78:ac:b1:36:3f:f5:a8:d0:67:e9:63:50:63:ff:09:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 9 16:10:56 2026 GMT Not After : May 8 16:15:56 2027 GMT Subject: CN=47A638FF542A3BB5B0BAF85F3AB11DFCB6344ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:97:c0:bd:af:5d:82:14:30:97:62:af:69: b3:92:00:7b:38:c6:51:ab:78:2e:67:02:c7:89:38: 32:d9:b3:b2:6a:42:d3:d2:39:e2:25:ca:a9:e4:3e: b9:d3:38:1e:f1:b2:78:f4:7c:1b:4a:e4:e2:fc:bf: 39:aa:8e:e6:b0:d2:8e:2f:60:a1:fd:33:98:6b:3b: ee:de:54:dd:f5:08:72:e9:e7:4b:e9:69:3b:6b:19: c9:9a:64:df:9d:28:7d:d4:8a:a7:e9:f6:eb:64:c2: 92:b3:fc:c4:71:ff:ea:40:08:ab:17:63:f8:9e:e6: fe:5b:0b:77:1d:10:73:64:19:63:97:e4:e9:be:ec: 98:df:93:12:a8:65:af:4f:80:65:07:19:8a:a3:c5: 37:2a:43:de:fc:c9:6e:aa:a3:7e:6d:20:7a:5b:2e: 1e:5e:96:ab:18:98:86:fc:a2:dc:90:4b:40:31:81: 4c:2a:7e:8a:d7:fa:19:35:1f:5a:f8:79:2f:ee:10: 86:57:d5:f2:71:62:78:2e:d9:bf:b0:cd:64:3d:2f: f5:30:8a:c7:7f:4c:33:4a:50:ec:75:98:1a:d4:65: 5a:c4:1d:3b:cf:9f:88:a3:61:b0:dd:8f:a6:d1:0d: 61:6c:be:fc:e2:84:6a:64:de:45:2b:93:59:d4:5a: 85:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A6:38:FF:54:2A:3B:B5:B0:BA:F8:5F:3A:B1:1D:FC:B6:34:4E:D5 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233322e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.89.232.0/24 Signature Algorithm: sha256WithRSAEncryption a1:72:00:44:19:f8:ad:d8:12:1e:f4:49:72:1e:a1:fc:48:c8: 31:2a:c6:e2:08:e4:70:37:df:7b:fc:ee:94:34:27:09:74:aa: 6f:a1:bd:be:b7:e4:03:f7:01:64:b4:b5:b4:09:e3:e5:98:14: 45:3f:90:28:45:9d:de:37:45:69:02:3d:42:a3:9a:94:06:c7: fe:69:89:1f:7f:01:48:c5:ba:9e:4a:51:34:c6:68:21:71:b8: ca:78:30:20:c6:f7:6b:11:fe:b1:ee:24:e5:18:d3:cd:17:78: 57:e6:c5:42:c3:98:49:c3:91:3f:23:8e:92:f7:1f:f4:b8:78: 81:d2:6d:f1:18:ee:30:11:15:56:1c:8d:b4:cf:30:f2:4b:6f: a4:38:2b:d1:8e:47:79:53:be:0e:76:5f:eb:6a:66:a7:07:d1: ca:28:03:4a:85:a3:58:54:a0:b9:20:34:1a:84:cc:a1:63:ac: d6:a4:91:7e:b1:94:ed:1d:aa:44:dc:0f:a9:b1:2c:b3:be:c1: fa:c4:04:4d:2e:5a:c3:fc:a3:d5:8e:92:9d:53:bd:cf:84:55: b4:d4:61:04:71:b6:52:47:51:40:e4:51:6d:55:34:54:9a:42: c7:e3:3c:a5:cf:7f:12:70:e2:41:2b:53:50:80:db:c5:23:a5: 78:07:fa:48 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUT+LeQnissTY/9ajQZ+ljUGP/CSAwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUwOTE2MTA1NloX DTI3MDUwODE2MTU1NlowMzExMC8GA1UEAxMoNDdBNjM4RkY1NDJBM0JCNUIwQkFG ODVGM0FCMTFERkNCNjM0NEVENTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALX/l8C9r12CFDCXYq9ps5IAezjGUat4LmcCx4k4MtmzsmpC09I54iXKqeQ+ udM4HvGyePR8G0rk4vy/OaqO5rDSji9gof0zmGs77t5U3fUIcunnS+lpO2sZyZpk 350ofdSKp+n262TCkrP8xHH/6kAIqxdj+J7m/lsLdx0Qc2QZY5fk6b7smN+TEqhl r0+AZQcZiqPFNypD3vzJbqqjfm0gelsuHl6WqxiYhvyi3JBLQDGBTCp+itf6GTUf Wvh5L+4QhlfV8nFieC7Zv7DNZD0v9TCKx39MM0pQ7HWYGtRlWsQdO8+fiKNhsN2P ptENYWy+/OKEamTeRSuTWdRahcMCAwEAAaOCAhEwggINMB0GA1UdDgQWBBRHpjj/ VCo7tbC6+F86sR38tjRO1TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMTMwMzEyZTM4MzkyZTMyMzMzMjJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZVnoMA0GCSqGSIb3DQEBCwUAA4IB AQChcgBEGfit2BIe9ElyHqH8SMgxKsbiCORwN997/O6UNCcJdKpvob2+t+QD9wFk tLW0CePlmBRFP5AoRZ3eN0VpAj1Co5qUBsf+aYkffwFIxbqeSlE0xmghcbjKeDAg xvdrEf6x7iTlGNPNF3hX5sVCw5hJw5E/I46S9x/0uHiB0m3xGO4wERVWHI20zzDy S2+kOCvRjkd5U74Odl/ramanB9HKKANKhaNYVKC5IDQahMyhY6zWpJF+sZTtHapE 3A+psSyzvsH6xARNLlrD/KPVjpKdU73PhFW01GEEcbZSR1FA5FFtVTRUmkLH4zyl z38ScOJBK1NQgNvFI6V4B/pI -----END CERTIFICATE-----Generated at Wed May 13 13:48:27 2026 by rpki-client