$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3235302e302f32332d3233203d3e2034383131.roa File: 3130312e38392e3235302e302f32332d3233203d3e2034383131.roa (raw, json) Hash identifier: 2zmdwmDQd3itk2OxwrtbgKnGPlDRNVmIkUrncLgoMuA= Subject key identifier: B1:0D:04:18:04:65:3E:76:2E:B8:52:BF:DC:F3:78:47:5D:AD:E9:51 Certificate issuer: /CN=A914EAE40000/serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Certificate serial: 6F8E381E9A10541452959392998DD250CC832E62 Authority key identifier: 19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3235302e302f32332d3233203d3e2034383131.roa Signing time: Sat 09 May 2026 16:15:56 +0000 ROA not before: Sat 09 May 2026 16:10:56 +0000 ROA not after: Sat 08 May 2027 16:15:56 +0000 asID: 4811 IP address blocks: 101.89.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 08:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8e:38:1e:9a:10:54:14:52:95:93:92:99:8d:d2:50:cc:83:2e:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE40000, serialNumber=196F2188A356D1C42D39F6D165719B596B4CD91E Validity Not Before: May 9 16:10:56 2026 GMT Not After : May 8 16:15:56 2027 GMT Subject: CN=B10D041804653E762EB852BFDCF378475DADE951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:05:2b:fb:89:9d:d8:29:35:be:a6:4d:a3: 7e:5a:c9:6f:c2:09:c4:95:43:69:93:da:93:e7:a3: ac:77:b1:0d:66:4f:b7:8a:8d:73:c5:75:ac:83:d9: 1c:de:1e:16:22:df:8b:04:99:30:a6:d8:d0:55:c2: 51:14:8b:6b:07:18:9d:49:9e:cd:21:ab:42:aa:a1: 27:09:46:2e:11:d3:87:b7:c0:ba:4a:f7:33:53:79: 01:f1:3b:66:a6:fc:1e:55:84:22:08:af:33:22:a5: f5:97:95:12:62:87:82:ac:9b:1a:aa:8c:84:92:3d: f4:2f:ed:80:49:3a:92:87:a3:42:30:32:3a:1a:91: 01:2b:b3:9d:b9:60:c2:8c:22:cd:d1:70:06:f6:9e: 05:39:5b:93:3b:e9:ee:b2:58:40:44:00:85:48:df: 22:6f:44:62:22:2e:43:21:1e:b7:93:f3:69:1c:31: 5f:29:0e:21:5e:f3:25:24:a2:08:47:48:d6:93:50: e0:12:b7:92:42:09:fa:f1:be:19:e7:57:09:65:ea: 94:31:fc:c0:d0:53:c6:72:ff:df:3e:44:3a:78:36: 94:18:49:2e:48:53:bf:4c:a4:33:68:4e:df:a6:ed: ce:cb:a9:4f:d5:47:4f:18:ef:09:25:4b:96:6d:4b: b1:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0D:04:18:04:65:3E:76:2E:B8:52:BF:DC:F3:78:47:5D:AD:E9:51 X509v3 Authority Key Identifier: keyid:19:6F:21:88:A3:56:D1:C4:2D:39:F6:D1:65:71:9B:59:6B:4C:D9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/196F2188A356D1C42D39F6D165719B596B4CD91E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GW8hiKNW0cQtOfbRZXGbWWtM2R4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097099402905976835/1/3130312e38392e3235302e302f32332d3233203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.89.250.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:fb:90:e6:fa:22:6f:c7:0a:74:1e:4d:2f:26:f3:0f:29:1a: 7c:bc:a4:fc:be:e9:4b:4c:32:56:98:4b:98:d5:43:57:09:c4: 6b:b3:0a:85:d0:5a:47:8c:b8:60:80:1f:10:fc:dc:ca:5f:38: 86:ef:e0:dd:46:ed:cf:a6:43:e5:3d:19:9b:e8:fa:15:35:bd: 89:d5:c9:f8:cc:45:f9:e7:a6:5f:0b:1d:f1:a1:a4:ec:cb:7b: eb:b4:6a:c1:8d:67:3f:05:5c:e1:7d:d7:cf:a4:a5:68:47:85: eb:50:1b:ad:65:9b:04:8e:72:1f:32:2c:4c:c4:38:ad:48:30: ac:2b:55:40:f7:52:92:29:f7:4a:28:ad:41:81:8a:ff:b4:d3: 11:68:b6:07:ba:03:bd:b9:5a:92:b8:63:0d:86:f7:3c:53:72: 2c:a9:a3:3f:5f:2b:f4:2e:de:dc:c6:4f:e9:de:33:24:9c:fc: d8:04:68:3a:fb:e7:39:b1:14:52:57:91:3a:c8:75:69:81:d5: f9:86:7f:9c:cf:c7:63:26:5d:fe:f1:94:c1:5a:b2:43:a6:62: c9:6a:2c:53:00:c0:08:d9:2d:6b:92:98:cc:b9:5f:94:3c:00: f2:a4:ff:03:f8:35:41:be:a8:4d:c4:59:6e:9b:1d:c0:8c:e8: eb:cb:e6:59 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgIUb444HpoQVBRSlZOSmY3SUMyDLmIwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNEVBRTQwMDAwMTEwLwYDVQQFEygxOTZGMjE4OEEz NTZEMUM0MkQzOUY2RDE2NTcxOUI1OTZCNENEOTFFMB4XDTI2MDUwOTE2MTA1NloX DTI3MDUwODE2MTU1NlowMzExMC8GA1UEAxMoQjEwRDA0MTgwNDY1M0U3NjJFQjg1 MkJGRENGMzc4NDc1REFERTk1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAIqGBSv7iZ3YKTW+pk2jflrJb8IJxJVDaZPak+ejrHexDWZPt4qNc8V1rIPZ HN4eFiLfiwSZMKbY0FXCURSLawcYnUmezSGrQqqhJwlGLhHTh7fAukr3M1N5AfE7 Zqb8HlWEIgivMyKl9ZeVEmKHgqybGqqMhJI99C/tgEk6koejQjAyOhqRASuznblg wowizdFwBvaeBTlbkzvp7rJYQEQAhUjfIm9EYiIuQyEet5PzaRwxXykOIV7zJSSi CEdI1pNQ4BK3kkIJ+vG+GedXCWXqlDH8wNBTxnL/3z5EOng2lBhJLkhTv0ykM2hO 36btzsupT9VHTxjvCSVLlm1LsekCAwEAAaOCAhEwggINMB0GA1UdDgQWBBSxDQQY BGU+di64Ur/c83hHXa3pUTAfBgNVHSMEGDAWgBQZbyGIo1bRxC059tFlcZtZa0zZ HjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3MDk5NDAyOTA1OTc2ODM1LzEvMTk2RjIx ODhBMzU2RDFDNDJEMzlGNkQxNjU3MTlCNTk2QjRDRDkxRS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvR1c4aGlLTlcw Y1F0T2ZiUlpYR2JXV3RNMlI0LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF BzALhm5yc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTcwOTk0MDI5 MDU5NzY4MzUvMS8zMTMwMzEyZTM4MzkyZTMyMzUzMDJlMzAyZjMyMzMyZDMyMzMy MDNkM2UyMDM0MzgzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZVn6MA0GCSqGSIb3DQEBCwUAA4IB AQCa+5Dm+iJvxwp0Hk0vJvMPKRp8vKT8vulLTDJWmEuY1UNXCcRrswqF0FpHjLhg gB8Q/NzKXziG7+DdRu3PpkPlPRmb6PoVNb2J1cn4zEX556ZfCx3xoaTsy3vrtGrB jWc/BVzhfdfPpKVoR4XrUButZZsEjnIfMixMxDitSDCsK1VA91KSKfdKKK1BgYr/ tNMRaLYHugO9uVqSuGMNhvc8U3IsqaM/Xyv0Lt7cxk/p3jMknPzYBGg6++c5sRRS V5E6yHVpgdX5hn+cz8djJl3+8ZTBWrJDpmLJaixTAMAI2S1rkpjMuV+UPADypP8D +DVBvqhNxFlumx3AjOjry+ZZ -----END CERTIFICATE-----Generated at Wed May 13 14:17:09 2026 by rpki-client