$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233352e302f32342d3234203d3e2034383131.roa File: 3130312e38392e3233352e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: tOzM4R/Ber5U6QdH3zVQofIH4H4+4a22scwzU9UKiiI= Subject key identifier: CA:D3:EE:1B:29:B5:3D:A9:DA:A2:F9:06:F2:DB:1C:50:E4:1D:26:6F Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 1159AC6AF108014A3945EB91C1C3BE91AF77EE3B Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233352e302f32342d3234203d3e2034383131.roa Signing time: Sat 09 May 2026 16:15:56 +0000 ROA not before: Sat 09 May 2026 16:10:56 +0000 ROA not after: Sat 08 May 2027 16:15:56 +0000 asID: 4811 IP address blocks: 101.89.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:59:ac:6a:f1:08:01:4a:39:45:eb:91:c1:c3:be:91:af:77:ee:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 9 16:10:56 2026 GMT Not After : May 8 16:15:56 2027 GMT Subject: CN=CAD3EE1B29B53DA9DAA2F906F2DB1C50E41D266F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3b:47:a6:b3:93:b2:ed:e2:33:d9:bb:53:c3: 5c:0a:12:c7:bf:4e:f1:bf:6c:fb:33:36:3f:b7:37: 0d:d9:47:d9:2e:ac:e5:7d:ed:8b:e1:21:28:6c:89: 0a:21:dd:d8:85:95:fc:9b:5b:ba:48:3a:c6:b5:ca: 27:9b:65:eb:e6:00:7b:25:7c:1d:6a:1c:70:60:9c: 15:d2:7a:e4:f3:55:96:b8:8d:cb:3d:74:5d:f9:e1: 50:38:9e:cd:a4:14:32:2c:e4:bd:25:f1:c6:26:e0: f8:c5:7e:9a:05:05:a5:c8:3d:9d:7b:b5:c8:2e:30: 11:01:00:65:fd:de:e6:09:8f:1b:70:03:8c:9b:42: 8b:ff:5b:ea:48:82:99:1e:ab:09:b3:fa:7b:88:b7: 6f:be:71:19:f7:d9:f2:38:64:16:c8:04:7e:9b:0a: 65:4e:77:8d:db:1a:75:a4:c7:3a:03:f1:05:21:6a: e3:59:6f:0d:f7:c3:af:6e:7d:3d:2a:87:ea:98:8c: d8:5c:69:e6:6b:2d:fe:2f:1f:f3:55:e6:0f:3b:5c: ed:19:3a:a8:cd:ab:0b:33:a6:00:ac:b7:fe:52:ca: 84:63:47:0f:e3:7b:ee:ef:6f:92:ed:e4:8e:35:d5: b1:a0:f8:c2:33:3a:f3:0b:ae:d7:cf:10:9e:c7:f8: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D3:EE:1B:29:B5:3D:A9:DA:A2:F9:06:F2:DB:1C:50:E4:1D:26:6F X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233352e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.89.235.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:ec:8c:2e:18:ba:59:05:53:54:e4:9c:d4:37:f0:ae:32:2a: 38:0a:5b:f2:b2:b8:e8:90:ba:4e:18:e9:d1:d4:88:ba:a5:c5: 93:0a:a2:57:76:40:47:bf:e1:69:1d:41:b3:a3:89:81:65:7b: 34:97:44:38:15:0d:07:67:e1:1f:4e:9f:cc:51:2f:ba:40:46: f9:18:86:95:9a:59:e5:15:2b:21:cf:8d:c4:eb:fa:4e:82:e6: 9c:db:1f:14:25:1a:82:97:a7:c5:68:8f:6f:36:56:6f:ce:fc: 98:36:b8:3f:a7:cf:0c:c5:22:3a:97:1c:ed:12:a7:04:ac:8b: db:f5:d1:b9:21:3d:a0:87:63:c7:79:af:97:31:55:b5:e9:13: 9d:4c:60:3c:c9:f7:65:34:12:37:74:bb:02:ca:54:81:ff:84: 1b:18:bc:30:53:7a:8e:8e:8a:5c:2c:a7:97:6c:72:74:d1:7b: 8b:1e:1f:df:25:dd:51:ce:50:7b:1d:de:02:94:f4:fb:21:97: 1e:52:df:c7:6b:26:f3:f3:71:ab:76:9d:ed:e3:c0:2f:db:07: ba:6e:63:40:73:69:af:a8:59:6e:80:a3:e5:ec:22:b2:5d:d2: e9:24:16:4b:6f:3f:9c:5e:d8:91:2b:30:39:be:ba:94:f7:c5: fe:d4:44:a1 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUEVmsavEIAUo5ReuRwcO+ka937jswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUwOTE2MTA1NloX DTI3MDUwODE2MTU1NlowMzExMC8GA1UEAxMoQ0FEM0VFMUIyOUI1M0RBOURBQTJG OTA2RjJEQjFDNTBFNDFEMjY2RjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKM7R6azk7Lt4jPZu1PDXAoSx79O8b9s+zM2P7c3DdlH2S6s5X3ti+EhKGyJ CiHd2IWV/Jtbukg6xrXKJ5tl6+YAeyV8HWoccGCcFdJ65PNVlriNyz10XfnhUDie zaQUMizkvSXxxibg+MV+mgUFpcg9nXu1yC4wEQEAZf3e5gmPG3ADjJtCi/9b6kiC mR6rCbP6e4i3b75xGffZ8jhkFsgEfpsKZU53jdsadaTHOgPxBSFq41lvDffDr259 PSqH6piM2Fxp5mst/i8f81XmDztc7Rk6qM2rCzOmAKy3/lLKhGNHD+N77u9vku3k jjXVsaD4wjM68wuu188Qnsf4lBUCAwEAAaOCAhEwggINMB0GA1UdDgQWBBTK0+4b KbU9qdqi+Qby2xxQ5B0mbzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMTMwMzEyZTM4MzkyZTMyMzMzNTJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZVnrMA0GCSqGSIb3DQEBCwUAA4IB AQAs7IwuGLpZBVNU5JzUN/CuMio4ClvysrjokLpOGOnR1Ii6pcWTCqJXdkBHv+Fp HUGzo4mBZXs0l0Q4FQ0HZ+EfTp/MUS+6QEb5GIaVmlnlFSshz43E6/pOguac2x8U JRqCl6fFaI9vNlZvzvyYNrg/p88MxSI6lxztEqcErIvb9dG5IT2gh2PHea+XMVW1 6ROdTGA8yfdlNBI3dLsCylSB/4QbGLwwU3qOjopcLKeXbHJ00XuLHh/fJd1RzlB7 Hd4ClPT7IZceUt/Haybz83Grdp3t48Av2we6bmNAc2mvqFlugKPl7CKyXdLpJBZL bz+cXtiRKzA5vrqU98X+1ESh -----END CERTIFICATE-----Generated at Wed May 13 13:51:06 2026 by rpki-client