$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3234352e302f32342d3234203d3e2034383131.roa File: 3130312e38392e3234352e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: ky87mmC1Nm6KzRrRBPD8j2QXQxwwuEbiSXzQjUhX8gw= Subject key identifier: D7:41:D7:4C:C9:D7:A6:5F:33:31:F5:91:7F:5A:09:8C:7C:BD:54:D1 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 59121BCAC426D595EEE57653DC97B214CD22503F Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3234352e302f32342d3234203d3e2034383131.roa Signing time: Sat 09 May 2026 16:15:56 +0000 ROA not before: Sat 09 May 2026 16:10:56 +0000 ROA not after: Sat 08 May 2027 16:15:56 +0000 asID: 4811 IP address blocks: 101.89.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:12:1b:ca:c4:26:d5:95:ee:e5:76:53:dc:97:b2:14:cd:22:50:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 9 16:10:56 2026 GMT Not After : May 8 16:15:56 2027 GMT Subject: CN=D741D74CC9D7A65F3331F5917F5A098C7CBD54D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:65:1e:50:fb:96:ef:15:21:7c:b7:f6:4b: 51:0d:70:72:8d:7a:cd:37:84:58:96:e9:e6:f5:1e: 72:7e:d4:c3:a1:48:aa:e1:6d:15:b2:b0:1f:c4:08: 0b:77:79:d6:56:9e:69:56:5a:ee:7d:aa:d7:2b:67: 82:93:e4:c4:bd:b3:e6:6b:1c:73:40:39:d7:12:91: 46:84:bc:3e:55:9f:c0:14:8d:7f:39:c5:d9:eb:fd: 68:1d:f1:60:09:5b:8d:4f:7f:89:84:8c:81:8b:14: 6d:69:a1:f2:f0:3e:33:e3:b2:26:1b:d1:e0:01:85: bc:b8:ed:7b:91:c0:c8:bb:76:4b:13:1f:50:c3:8c: ca:d0:8a:b9:2d:46:be:69:37:8d:0b:fc:fa:dd:ae: 6f:3c:b7:7d:7d:e2:73:f9:ca:b5:3a:f4:e4:10:a6: 75:b5:5d:d3:65:37:5d:3e:f6:9d:33:67:64:81:26: 13:41:33:c4:e7:6f:35:e0:89:2b:9c:f8:00:4a:e6: 3e:ac:ab:23:7b:e6:55:7c:28:04:34:54:7f:4b:8e: 5c:0e:98:21:c0:9f:fc:09:14:7a:9b:ae:72:44:5c: 3a:b6:de:c2:ff:b8:43:7d:76:9a:0f:6c:a2:d3:0e: e7:87:95:77:b2:82:6d:e7:75:3b:0b:43:b7:94:0b: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:41:D7:4C:C9:D7:A6:5F:33:31:F5:91:7F:5A:09:8C:7C:BD:54:D1 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3234352e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.89.245.0/24 Signature Algorithm: sha256WithRSAEncryption ae:5b:7a:8c:35:66:ce:3f:af:4b:96:64:ee:ed:49:22:75:49: 54:f9:96:09:d1:47:ae:fa:d8:9d:e0:4d:b2:a1:f6:84:b3:1f: 8e:7d:53:78:e7:c9:47:2d:ec:7a:0c:d3:c3:63:38:ce:21:85: 45:10:96:5c:90:9d:7c:10:db:50:8f:0e:47:12:6e:60:1a:ba: b3:c1:d8:7b:30:e8:a1:0e:52:0e:21:d7:4f:0b:c0:60:f2:bb: fa:c4:34:c8:7e:74:36:b7:6e:99:ce:81:81:53:d1:76:87:4b: 0e:86:1b:be:e9:89:ef:4b:9d:a7:3b:54:a3:7e:c8:43:30:0b: e6:91:f1:88:22:5a:a8:f3:f3:ad:38:23:1e:e3:00:62:8f:e1: e4:7f:45:4c:49:4e:27:72:68:6f:79:85:d5:c6:98:b6:13:b3: 4e:22:e5:3b:b6:95:3c:a5:bb:97:48:ae:94:24:0d:ec:f2:6e: 59:66:a6:cd:20:13:71:6e:02:de:d1:83:36:b8:87:dd:0f:2d: 76:57:ca:5a:15:1f:81:2a:6f:b4:48:22:2a:b3:5e:78:82:e6: 95:dc:b8:bf:aa:b1:14:69:3b:ba:e3:0e:1a:ea:44:23:f8:33: e4:96:fd:e2:86:17:a4:c5:8a:9c:80:7c:b9:9a:81:c4:01:e4: f3:72:15:6c -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUWRIbysQm1ZXu5XZT3JeyFM0iUD8wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUwOTE2MTA1NloX DTI3MDUwODE2MTU1NlowMzExMC8GA1UEAxMoRDc0MUQ3NENDOUQ3QTY1RjMzMzFG NTkxN0Y1QTA5OEM3Q0JENTREMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANWmZR5Q+5bvFSF8t/ZLUQ1wco16zTeEWJbp5vUecn7Uw6FIquFtFbKwH8QI C3d51laeaVZa7n2q1ytngpPkxL2z5mscc0A51xKRRoS8PlWfwBSNfznF2ev9aB3x YAlbjU9/iYSMgYsUbWmh8vA+M+OyJhvR4AGFvLjte5HAyLt2SxMfUMOMytCKuS1G vmk3jQv8+t2ubzy3fX3ic/nKtTr05BCmdbVd02U3XT72nTNnZIEmE0EzxOdvNeCJ K5z4AErmPqyrI3vmVXwoBDRUf0uOXA6YIcCf/AkUepuuckRcOrbewv+4Q312mg9s otMO54eVd7KCbed1OwtDt5QLn70CAwEAAaOCAhEwggINMB0GA1UdDgQWBBTXQddM ydemXzMx9ZF/WgmMfL1U0TAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMTMwMzEyZTM4MzkyZTMyMzQzNTJlMzAyZjMyMzQyZDMyMzQy MDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZVn1MA0GCSqGSIb3DQEBCwUAA4IB AQCuW3qMNWbOP69LlmTu7UkidUlU+ZYJ0Ueu+tid4E2yofaEsx+OfVN458lHLex6 DNPDYzjOIYVFEJZckJ18ENtQjw5HEm5gGrqzwdh7MOihDlIOIddPC8Bg8rv6xDTI fnQ2t26ZzoGBU9F2h0sOhhu+6YnvS52nO1SjfshDMAvmkfGIIlqo8/OtOCMe4wBi j+Hkf0VMSU4ncmhveYXVxpi2E7NOIuU7tpU8pbuXSK6UJA3s8m5ZZqbNIBNxbgLe 0YM2uIfdDy12V8paFR+BKm+0SCIqs154guaV3Li/qrEUaTu64w4a6kQj+DPklv3i hhekxYqcgHy5moHEAeTzchVs -----END CERTIFICATE-----Generated at Wed May 13 14:27:24 2026 by rpki-client