$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3234342e302f32342d3234203d3e2034383131.roa File: 3130312e38392e3234342e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: OYTaDAdK3UyDoCM1pcGVj6G/hW4zYIT0o4Xokp1HUu8= Subject key identifier: A2:31:64:CA:D5:F9:25:E4:3F:D3:3D:B4:C2:48:9D:9D:EB:9C:B5:C9 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 584F64BEBADB8C2BA3F850F9505A1F1E9475F92B Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3234342e302f32342d3234203d3e2034383131.roa Signing time: Sat 09 May 2026 16:15:56 +0000 ROA not before: Sat 09 May 2026 16:10:56 +0000 ROA not after: Sat 08 May 2027 16:15:56 +0000 asID: 4811 IP address blocks: 101.89.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4f:64:be:ba:db:8c:2b:a3:f8:50:f9:50:5a:1f:1e:94:75:f9:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 9 16:10:56 2026 GMT Not After : May 8 16:15:56 2027 GMT Subject: CN=A23164CAD5F925E43FD33DB4C2489D9DEB9CB5C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:b1:07:78:70:fc:af:7e:98:b8:dc:2a:22: d3:63:83:a1:88:0d:63:3e:93:cd:41:3d:3c:00:36: 97:72:69:ca:8d:19:f9:c0:28:80:0c:e4:9e:49:09: ae:54:80:fe:36:ce:20:4e:2e:c7:6c:66:b8:c5:78: ba:71:4c:26:78:a4:54:b4:4e:24:54:34:8d:58:1e: 57:14:c6:31:a2:3c:93:b7:40:9c:31:0a:6d:00:49: cc:c1:28:80:74:a6:a0:39:05:1e:26:93:2e:6c:d0: 38:c2:f3:dd:cb:c8:58:67:b5:12:74:83:40:34:c6: 11:6b:5b:22:0c:db:5f:b6:da:ea:3f:f8:8b:ed:37: e9:02:6f:0a:fb:ce:57:18:10:70:87:74:44:fd:8b: 68:76:63:3d:2c:40:a2:3b:97:c7:da:ed:99:b6:83: 49:5e:95:e1:ff:6f:84:a9:05:65:5e:76:fd:e1:f6: e8:16:87:32:f1:da:da:c0:13:6f:f7:20:42:a6:02: 57:18:77:6d:4e:8a:f0:dd:c0:2c:42:9d:ba:60:ce: c1:70:8b:9c:2c:f4:5e:b8:19:b4:c2:05:51:db:44: 26:40:e7:a9:37:2b:b2:3d:2a:d3:5e:52:08:f3:a8: f5:22:37:a8:ff:24:ea:9e:6d:2a:58:97:94:53:78: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:31:64:CA:D5:F9:25:E4:3F:D3:3D:B4:C2:48:9D:9D:EB:9C:B5:C9 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3234342e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.89.244.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:3a:f6:1e:5c:7c:6c:2c:47:5c:6c:0d:3c:33:69:a3:12:17: c6:d8:b3:94:b4:3f:ae:73:47:2c:3b:43:08:dc:e7:10:a4:a0: 57:ad:5e:76:2e:32:6e:cc:57:0f:93:bd:61:da:93:07:e8:0b: 52:e1:2a:4b:d2:e3:92:3f:2b:4f:e3:1b:82:dc:b9:c9:a4:1b: f2:31:6e:57:b1:f9:72:c3:a2:3c:23:ad:29:b4:bf:2c:06:8d: 4c:b3:43:bb:eb:9a:eb:b9:a7:37:c1:9f:98:89:09:4b:02:c8: 13:48:09:84:02:69:13:51:05:c8:39:e9:ad:98:05:da:11:ba: 82:9f:88:b3:53:2c:46:4a:eb:69:df:3e:69:49:ae:f7:3b:21: 6f:63:d8:fe:a8:e1:38:89:1b:87:cd:a5:e1:6d:ad:af:0d:da: c8:46:af:f5:24:29:66:23:f0:a1:9e:59:26:58:16:1a:73:db: 5a:7d:35:b0:57:3f:c1:e4:76:f3:e6:e7:5a:05:9d:70:48:46: c5:ea:8a:ab:50:4f:c9:f1:2c:a5:01:0e:89:dc:b5:4c:89:46: 96:ef:be:aa:9d:39:da:4d:11:cc:fd:0d:9e:57:85:e7:4d:9a: a0:cf:07:c1:bd:57:82:02:a0:8e:c8:5c:55:60:9c:b5:9e:22: aa:c9:20:6b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUWE9kvrrbjCuj+FD5UFofHpR1+SswDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUwOTE2MTA1NloX DTI3MDUwODE2MTU1NlowMzExMC8GA1UEAxMoQTIzMTY0Q0FENUY5MjVFNDNGRDMz REI0QzI0ODlEOURFQjlDQjVDOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAK44sQd4cPyvfpi43Coi02ODoYgNYz6TzUE9PAA2l3Jpyo0Z+cAogAzknkkJ rlSA/jbOIE4ux2xmuMV4unFMJnikVLROJFQ0jVgeVxTGMaI8k7dAnDEKbQBJzMEo gHSmoDkFHiaTLmzQOMLz3cvIWGe1EnSDQDTGEWtbIgzbX7ba6j/4i+036QJvCvvO VxgQcId0RP2LaHZjPSxAojuXx9rtmbaDSV6V4f9vhKkFZV52/eH26BaHMvHa2sAT b/cgQqYCVxh3bU6K8N3ALEKdumDOwXCLnCz0XrgZtMIFUdtEJkDnqTcrsj0q015S CPOo9SI3qP8k6p5tKliXlFN4p5cCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSiMWTK 1fkl5D/TPbTCSJ2d65y1yTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMTMwMzEyZTM4MzkyZTMyMzQzNDJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZVn0MA0GCSqGSIb3DQEBCwUAA4IB AQBeOvYeXHxsLEdcbA08M2mjEhfG2LOUtD+uc0csO0MI3OcQpKBXrV52LjJuzFcP k71h2pMH6AtS4SpL0uOSPytP4xuC3LnJpBvyMW5Xsflyw6I8I60ptL8sBo1Ms0O7 65rruac3wZ+YiQlLAsgTSAmEAmkTUQXIOemtmAXaEbqCn4izUyxGSutp3z5pSa73 OyFvY9j+qOE4iRuHzaXhba2vDdrIRq/1JClmI/ChnlkmWBYac9tafTWwVz/B5Hbz 5udaBZ1wSEbF6oqrUE/J8SylAQ6J3LVMiUaW776qnTnaTRHM/Q2eV4XnTZqgzwfB vVeCAqCOyFxVYJy1niKqySBr -----END CERTIFICATE-----Generated at Wed May 13 13:42:09 2026 by rpki-client