$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa File: 3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa (raw, json) Hash identifier: AUxiN3xrkojOpJEDBqwUUG7fz2qhvusWn+TwwyA5v5Y= Subject key identifier: 99:92:A8:20:1B:AA:80:67:18:6D:38:2C:5D:93:4D:97:7C:0C:DB:A0 Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Certificate serial: 638021CF8078D9AF7F28BAAD3A813D5CA34A70C0 Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa Signing time: Mon 20 Apr 2026 07:50:33 +0000 ROA not before: Mon 20 Apr 2026 07:45:33 +0000 ROA not after: Mon 19 Apr 2027 07:50:33 +0000 asID: 59084 IP address blocks: 103.229.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:80:21:cf:80:78:d9:af:7f:28:ba:ad:3a:81:3d:5c:a3:4a:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57 Validity Not Before: Apr 20 07:45:33 2026 GMT Not After : Apr 19 07:50:33 2027 GMT Subject: CN=9992A8201BAA8067186D382C5D934D977C0CDBA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:58:a8:1f:76:de:f1:69:6f:f5:25:7c:81:53: 7b:36:c1:a1:97:51:82:c3:35:e9:ae:9b:da:99:20: b4:7b:c9:c0:c8:be:a6:f8:8d:8f:27:8a:4b:24:64: 33:42:74:6e:9a:b1:c0:ef:24:ef:28:e6:b7:60:62: 1c:b9:28:4c:65:b9:6d:66:c2:fe:2f:58:c2:eb:59: d1:1b:c6:be:f7:af:b6:d2:c3:ae:c1:db:89:a4:e4: 59:cf:57:d2:ba:0f:e4:06:17:df:84:12:be:ac:36: 38:e7:56:18:73:77:d7:2b:fb:a9:14:03:60:81:3a: 0c:d8:2a:d8:63:62:bc:d8:9c:69:c5:d7:91:ba:2a: d5:6c:89:80:98:94:bb:65:6c:5b:77:6b:ea:22:af: 02:46:42:1f:87:94:43:62:ed:7d:49:3b:7a:32:13: eb:63:7a:06:89:3c:12:33:d4:3f:61:c9:be:ab:db: 53:30:d6:0b:54:d0:88:19:a8:00:14:7f:e1:1c:62: a0:13:e8:07:af:bb:74:01:61:d9:e5:57:60:dc:cb: 00:2d:59:c2:aa:6d:dd:c6:ee:23:5c:45:33:31:94: 11:63:07:33:96:fe:55:bc:0d:04:f9:16:d0:ec:f3: 1e:4b:ad:17:55:fc:d0:58:2f:bc:8f:4b:e9:16:6b: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:92:A8:20:1B:AA:80:67:18:6D:38:2C:5D:93:4D:97:7C:0C:DB:A0 X509v3 Authority Key Identifier: keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/3130332e3232392e3137322e302f32322d3232203d3e203539303834.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.229.172.0/22 Signature Algorithm: sha256WithRSAEncryption 5e:11:5c:29:12:b1:9e:6d:a6:af:06:b9:f7:e6:48:db:1a:16: c6:fb:d8:81:2a:7c:ca:c4:3a:fe:ea:96:e0:3c:4a:10:cb:2f: 0b:a9:19:23:16:01:10:1b:f2:a7:90:76:d4:7b:c1:94:9b:ce: b2:5e:65:42:c8:43:d3:a5:1c:89:f9:57:98:4e:eb:94:ff:bc: 39:cb:9e:8e:ee:e0:40:77:18:22:ef:40:05:30:85:38:da:2e: 58:2f:05:6e:c4:d9:b4:e5:88:4f:74:2d:2a:26:ad:c9:23:20: f4:fa:d3:46:ae:56:2c:6a:e7:6d:17:32:e0:06:e1:3c:1a:d4: d0:e5:31:81:3d:fb:d0:a0:4f:e1:bc:12:88:b3:30:1c:f5:1d: 4c:c7:fc:63:2a:1a:ad:c8:1d:6d:b8:e5:f6:c6:69:09:53:28: da:0c:e9:55:06:0c:95:2f:0f:1a:0a:ee:88:65:03:23:3f:f1: 41:27:77:e1:2a:3d:2d:8a:75:06:ab:cf:26:11:39:41:fe:08: 53:68:94:97:28:0e:0a:29:48:9c:42:ca:a5:c8:2a:7e:9d:dd: 5f:5e:56:a2:14:bd:2a:28:0c:c0:82:4b:b6:60:26:24:c1:c3: 06:ef:8c:23:13:d0:f8:0c:5d:c1:6f:8f:14:52:95:7d:01:dc: 6b:ee:7b:3e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUY4Ahz4B42a9/KLqtOoE9XKNKcMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0Mz NTc4Q0Q1NzAeFw0yNjA0MjAwNzQ1MzNaFw0yNzA0MTkwNzUwMzNaMDMxMTAvBgNV BAMTKDk5OTJBODIwMUJBQTgwNjcxODZEMzgyQzVEOTM0RDk3N0MwQ0RCQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsWKgfdt7xaW/1JXyBU3s2waGX UYLDNemum9qZILR7ycDIvqb4jY8nikskZDNCdG6ascDvJO8o5rdgYhy5KExluW1m wv4vWMLrWdEbxr73r7bSw67B24mk5FnPV9K6D+QGF9+EEr6sNjjnVhhzd9cr+6kU A2CBOgzYKthjYrzYnGnF15G6KtVsiYCYlLtlbFt3a+oirwJGQh+HlENi7X1JO3oy E+tjegaJPBIz1D9hyb6r21Mw1gtU0IgZqAAUf+EcYqAT6Aevu3QBYdnlV2DcywAt WcKqbd3G7iNcRTMxlBFjBzOW/lW8DQT5FtDs8x5LrRdV/NBYL7yPS+kWa/TxAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmZKoIBuqgGcYbTgsXZNNl3wM26AwHwYDVR0j BBgwFoAUTsJ/zETUM/q8yxcwFEalfDV4zVcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTAyNzQ1Ny8wLzRFQzI3RkNDNDRENDMzRkFCQ0NCMTczMDE0NDZB NTdDMzU3OENENTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEVDMjdGQ0M0NEQ0MzNGQUJDQ0IxNzMwMTQ0NkE1N0MzNTc4Q0Q1Ny5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg1MTU2ODIxNzEwMjc0NTcvMC8zMTMwMzMyZTMy MzIzOTJlMzEzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzgzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmflrDANBgkqhkiG9w0BAQsFAAOCAQEAXhFcKRKxnm2mrwa59+ZI 2xoWxvvYgSp8ysQ6/uqW4DxKEMsvC6kZIxYBEBvyp5B21HvBlJvOsl5lQshD06Uc iflXmE7rlP+8Ocueju7gQHcYIu9ABTCFONouWC8FbsTZtOWIT3QtKiatySMg9PrT Rq5WLGrnbRcy4AbhPBrU0OUxgT370KBP4bwSiLMwHPUdTMf8Yyoarcgdbbjl9sZp CVMo2gzpVQYMlS8PGgruiGUDIz/xQSd34So9LYp1BqvPJhE5Qf4IU2iUlygOCilI nELKpcgqfp3dX15WohS9KigMwIJLtmAmJMHDBu+MIxPQ+AxdwW+PFFKVfQHca+57 Pg== -----END CERTIFICATE-----Generated at Wed May 13 21:31:47 2026 by rpki-client