$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233392e302f32342d3234203d3e2034383131.roa File: 3130312e38392e3233392e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: Fw5h//H5lmLglslQZaTK2j9tCMr9q1QNUx8VLeJkkuM= Subject key identifier: 5E:5B:B7:9E:10:79:85:60:1F:66:08:4A:D1:F4:21:E6:75:22:BA:10 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 556203FA64950BABB49FBF982CA7BBFB89A4742B Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233392e302f32342d3234203d3e2034383131.roa Signing time: Sat 09 May 2026 16:15:56 +0000 ROA not before: Sat 09 May 2026 16:10:56 +0000 ROA not after: Sat 08 May 2027 16:15:56 +0000 asID: 4811 IP address blocks: 101.89.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:62:03:fa:64:95:0b:ab:b4:9f:bf:98:2c:a7:bb:fb:89:a4:74:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 9 16:10:56 2026 GMT Not After : May 8 16:15:56 2027 GMT Subject: CN=5E5BB79E107985601F66084AD1F421E67522BA10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:88:8f:f4:08:58:fb:62:5a:62:44:bd:57:09: 12:40:c6:7e:ae:ab:b7:6d:48:b0:00:35:c8:ed:4c: 6c:26:b8:56:f6:bc:9c:a6:05:40:35:8f:26:4f:ee: 8c:56:d9:7d:c2:8b:7d:b4:87:11:47:96:ad:90:52: 0e:a3:a0:2c:73:a7:e6:41:cc:4d:11:82:73:e9:a3: 50:8a:24:00:89:0d:6b:5a:ca:d0:21:93:14:91:6e: c9:99:2a:1d:b9:59:2b:08:43:e6:95:7e:81:5e:0b: 08:77:d0:3d:15:ac:1f:1b:6f:82:1a:0e:8f:66:c1: c7:85:71:0c:3b:1d:89:46:c1:21:fb:c2:cd:e0:cc: b0:03:4f:3f:18:fe:59:b6:35:12:10:2c:b2:e9:df: df:d0:95:73:06:44:7c:3b:9b:6a:01:99:c4:d0:00: fa:40:97:2d:21:85:8d:c9:36:cf:ec:65:84:a5:c8: 46:ec:8c:1d:12:cd:63:3e:96:91:e1:8c:f0:89:e2: 7c:79:aa:0b:46:ab:c4:c5:db:d5:71:7b:0c:31:2a: 50:10:88:90:9c:35:7e:c7:9a:40:23:1b:94:98:25: e7:10:b7:0a:f6:3c:e7:3c:02:d8:b6:c2:44:9f:ab: c0:61:6d:6a:ff:90:65:7a:12:ea:77:e4:76:1e:55: 39:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5B:B7:9E:10:79:85:60:1F:66:08:4A:D1:F4:21:E6:75:22:BA:10 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3233392e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.89.239.0/24 Signature Algorithm: sha256WithRSAEncryption 73:7f:b2:41:d4:1f:14:e7:7a:a2:a3:57:fc:74:24:e3:d7:21: 9a:05:10:d1:d5:5c:32:ea:9c:0c:3e:c3:1d:35:d6:4d:f3:a9: f9:18:e6:21:95:60:71:dc:73:c8:f9:bb:c5:25:cd:62:54:b3: 94:e1:49:c0:1a:34:ce:bc:3e:e8:b2:4e:8f:ad:78:d8:1d:b5: 25:a6:4f:b3:22:af:51:45:b8:44:04:30:f6:5a:c5:4e:21:07: 6e:49:4f:d2:fd:f3:d8:7d:0b:16:ba:3e:24:81:d6:6c:9c:05: 1b:b2:2f:c4:3f:70:fa:d3:2e:32:81:51:9d:9b:6b:e1:2a:78: 08:73:b6:9d:57:6b:e8:d3:7b:d8:33:d0:94:9f:7c:f9:12:5b: cf:c3:0d:1a:ee:8b:f0:cf:d0:be:d3:3b:c4:33:97:fe:ee:eb: 08:82:56:43:59:7f:9a:e6:8d:8c:a1:e5:24:7e:22:5e:27:c1: 36:d4:cf:f2:e6:f4:20:a3:4d:2d:c6:85:0d:12:54:ca:f7:72: fd:b1:4f:58:eb:82:9e:01:e3:f7:51:3d:93:30:66:4f:86:75: ee:1f:90:b5:6d:30:ce:80:6c:07:2f:02:04:2e:1d:e5:ad:13: 4e:a3:69:fd:f1:8b:fd:dc:89:40:4d:05:e2:4d:d7:ba:97:b2: 68:85:f7:41 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUVWID+mSVC6u0n7+YLKe7+4mkdCswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUwOTE2MTA1NloX DTI3MDUwODE2MTU1NlowMzExMC8GA1UEAxMoNUU1QkI3OUUxMDc5ODU2MDFGNjYw ODRBRDFGNDIxRTY3NTIyQkExMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAMOIj/QIWPtiWmJEvVcJEkDGfq6rt21IsAA1yO1MbCa4Vva8nKYFQDWPJk/u jFbZfcKLfbSHEUeWrZBSDqOgLHOn5kHMTRGCc+mjUIokAIkNa1rK0CGTFJFuyZkq HblZKwhD5pV+gV4LCHfQPRWsHxtvghoOj2bBx4VxDDsdiUbBIfvCzeDMsANPPxj+ WbY1EhAssunf39CVcwZEfDubagGZxNAA+kCXLSGFjck2z+xlhKXIRuyMHRLNYz6W keGM8InifHmqC0arxMXb1XF7DDEqUBCIkJw1fseaQCMblJgl5xC3CvY85zwC2LbC RJ+rwGFtav+QZXoS6nfkdh5VOcECAwEAAaOCAhEwggINMB0GA1UdDgQWBBReW7ee EHmFYB9mCErR9CHmdSK6EDAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMTMwMzEyZTM4MzkyZTMyMzMzOTJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZVnvMA0GCSqGSIb3DQEBCwUAA4IB AQBzf7JB1B8U53qio1f8dCTj1yGaBRDR1Vwy6pwMPsMdNdZN86n5GOYhlWBx3HPI +bvFJc1iVLOU4UnAGjTOvD7osk6PrXjYHbUlpk+zIq9RRbhEBDD2WsVOIQduSU/S /fPYfQsWuj4kgdZsnAUbsi/EP3D60y4ygVGdm2vhKngIc7adV2vo03vYM9CUn3z5 ElvPww0a7ovwz9C+0zvEM5f+7usIglZDWX+a5o2MoeUkfiJeJ8E21M/y5vQgo00t xoUNElTK93L9sU9Y64KeAeP3UT2TMGZPhnXuH5C1bTDOgGwHLwIELh3lrRNOo2n9 8Yv93IlATQXiTde6l7JohfdB -----END CERTIFICATE-----Generated at Wed May 13 13:28:21 2026 by rpki-client