$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233382e302f32342d3234203d3e2034383131.roa File: 3130312e38392e3233382e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: iVQK41IaK1SYi36+33WBA2Exp7mxntee+Qt/aimGwo0= Subject key identifier: A4:D2:28:AB:F0:5A:4D:CC:AB:E2:81:C0:BA:F9:02:95:65:39:C1:63 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 7FB64E9C769212E393C1E40DE537C815F8B95C51 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233382e302f32342d3234203d3e2034383131.roa Signing time: Sat 09 May 2026 16:15:55 +0000 ROA not before: Sat 09 May 2026 16:10:55 +0000 ROA not after: Sat 08 May 2027 16:15:55 +0000 asID: 4811 IP address blocks: 101.89.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:b6:4e:9c:76:92:12:e3:93:c1:e4:0d:e5:37:c8:15:f8:b9:5c:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 9 16:10:55 2026 GMT Not After : May 8 16:15:55 2027 GMT Subject: CN=A4D228ABF05A4DCCABE281C0BAF902956539C163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c1:8b:1f:f5:a2:98:c2:81:79:74:1a:85:5c: 0f:29:5c:ad:ce:51:a7:d5:5e:a8:68:f0:9b:68:4b: f6:d4:71:06:81:9f:19:c8:85:1a:ae:7c:4f:d2:22: e4:36:68:2f:f4:a0:ec:58:21:9e:07:93:a5:bf:5c: b4:d0:98:41:41:fc:9b:c7:9c:23:aa:84:03:62:78: b2:6b:25:a1:7d:37:75:8c:fb:82:f9:cf:09:42:94: 19:7b:b0:70:48:f7:90:89:4d:9e:3d:bd:71:d7:8f: 8b:67:ef:38:93:f3:63:f5:1a:68:9a:49:86:0b:cc: 2c:19:6d:81:48:4b:89:25:8a:22:22:84:7f:cf:79: 4e:33:38:bb:a2:c8:02:e4:10:14:f7:9d:0f:6d:84: 71:c2:f6:30:bf:77:69:07:3c:28:47:b9:10:f8:ec: d8:6c:37:cb:3e:d3:07:14:41:4f:ec:6a:22:4c:89: 37:c8:51:55:4e:f9:8b:22:c0:d5:2e:16:e6:57:3e: 1e:69:9a:63:1c:19:3b:a2:be:ab:63:5f:5f:7d:06: d6:9e:68:77:cf:3a:d8:90:61:53:8c:cf:35:59:f2: ad:3a:71:15:a2:be:ef:17:df:8e:d1:49:ad:55:7b: 76:66:ed:fd:6b:99:b8:3e:28:05:4d:05:32:84:f6: b5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:D2:28:AB:F0:5A:4D:CC:AB:E2:81:C0:BA:F9:02:95:65:39:C1:63 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233382e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.89.238.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:11:37:a5:72:7f:fc:44:8f:2b:f9:33:ee:03:86:bc:6f:18: f1:2e:68:70:4f:70:da:32:d3:d0:ab:d2:ab:88:0b:ca:0e:41: 60:7b:76:26:e0:de:96:c6:2b:9a:03:3f:c9:4e:76:92:19:f4: 33:47:ef:ac:fd:ac:5c:b4:54:c0:aa:5d:31:23:1b:8f:2a:63: cc:ca:85:55:2a:13:9b:55:9c:a9:02:bc:c5:2e:c9:3e:fb:37: 73:c3:c3:42:63:c4:f1:4c:db:dd:34:57:21:24:dc:4f:e2:7b: 46:64:b5:4e:72:58:cc:72:74:3a:a1:dc:8e:c7:1f:f7:c2:83: d9:b9:06:70:ce:7c:52:95:d3:44:7c:bf:cb:b7:2c:6d:de:ca: d7:34:9f:e9:00:5f:c1:75:52:67:55:9b:ae:a8:07:99:6a:86: fd:d4:08:af:9d:16:f5:c2:13:db:22:c7:5f:53:12:fb:a4:10: c7:a2:85:ee:61:d6:c5:54:87:34:f8:b7:a2:b9:58:15:60:65: 32:1f:e2:ad:59:51:02:a0:ba:1a:5a:3a:f4:03:8f:be:08:d3: 2f:d5:ec:79:32:f8:62:a0:93:10:98:2e:e1:04:aa:14:f8:73: 68:45:f1:33:82:80:8f:5b:85:0d:75:be:8b:60:3a:90:aa:d0: fb:bd:a5:6e -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUf7ZOnHaSEuOTweQN5TfIFfi5XFEwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUwOTE2MTA1NVoX DTI3MDUwODE2MTU1NVowMzExMC8GA1UEAxMoQTREMjI4QUJGMDVBNERDQ0FCRTI4 MUMwQkFGOTAyOTU2NTM5QzE2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANbBix/1opjCgXl0GoVcDylcrc5Rp9VeqGjwm2hL9tRxBoGfGciFGq58T9Ii 5DZoL/Sg7FghngeTpb9ctNCYQUH8m8ecI6qEA2J4smsloX03dYz7gvnPCUKUGXuw cEj3kIlNnj29cdePi2fvOJPzY/UaaJpJhgvMLBltgUhLiSWKIiKEf895TjM4u6LI AuQQFPedD22EccL2ML93aQc8KEe5EPjs2Gw3yz7TBxRBT+xqIkyJN8hRVU75iyLA 1S4W5lc+HmmaYxwZO6K+q2NfX30G1p5od8862JBhU4zPNVnyrTpxFaK+7xffjtFJ rVV7dmbt/WuZuD4oBU0FMoT2tUkCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSk0iir 8FpNzKvigcC6+QKVZTnBYzAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMTMwMzEyZTM4MzkyZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZVnuMA0GCSqGSIb3DQEBCwUAA4IB AQAPETelcn/8RI8r+TPuA4a8bxjxLmhwT3DaMtPQq9KriAvKDkFge3Ym4N6Wxiua Az/JTnaSGfQzR++s/axctFTAql0xIxuPKmPMyoVVKhObVZypArzFLsk++zdzw8NC Y8TxTNvdNFchJNxP4ntGZLVOcljMcnQ6odyOxx/3woPZuQZwznxSldNEfL/Ltyxt 3srXNJ/pAF/BdVJnVZuuqAeZaob91AivnRb1whPbIsdfUxL7pBDHooXuYdbFVIc0 +LeiuVgVYGUyH+KtWVECoLoaWjr0A4++CNMv1ex5MvhioJMQmC7hBKoU+HNoRfEz goCPW4UNdb6LYDqQqtD7vaVu -----END CERTIFICATE-----Generated at Wed May 13 13:43:04 2026 by rpki-client