$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099583963774582787/0/3138302e3233352e36342e302f32322d3232203d3e2034383131.roa File: 3138302e3233352e36342e302f32322d3232203d3e2034383131.roa (raw, json) Hash identifier: RBN1zu5bY8wz+RQXXk/fbOewGwiSGcfCJj/0BlacigA= Subject key identifier: 8D:6C:49:91:AB:FD:DE:88:67:72:2C:9A:D7:61:8D:9F:38:3E:69:C2 Certificate issuer: /CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Certificate serial: 0EDF7B41A2957C1B3254F4673EFEA386107E383B Authority key identifier: 8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/3138302e3233352e36342e302f32322d3232203d3e2034383131.roa Signing time: Tue 28 Apr 2026 09:10:17 +0000 ROA not before: Tue 28 Apr 2026 09:05:17 +0000 ROA not after: Tue 27 Apr 2027 09:10:17 +0000 asID: 4811 IP address blocks: 180.235.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:df:7b:41:a2:95:7c:1b:32:54:f4:67:3e:fe:a3:86:10:7e:38:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8B215666577E10BF852C3AC9A7EB59536DFF468B Validity Not Before: Apr 28 09:05:17 2026 GMT Not After : Apr 27 09:10:17 2027 GMT Subject: CN=8D6C4991ABFDDE8867722C9AD7618D9F383E69C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:33:73:34:8e:ee:23:a4:63:6c:c0:78:a8:a4: 59:a3:73:77:ea:c0:aa:5a:c4:e3:0b:f4:44:b2:f0: 57:f6:5e:c6:50:f5:d0:28:3b:78:2c:6f:1e:39:56: c2:1e:fa:57:e1:87:26:52:f2:af:ad:9a:f6:95:40: 2f:e8:ec:99:0f:5b:c3:06:58:af:f8:b8:d2:3a:33: cb:f4:06:0b:66:30:e3:a3:64:50:fa:02:a6:b6:3a: b0:27:c5:22:01:39:c9:50:ed:cb:f8:bd:24:6a:4b: 19:c6:be:16:02:d8:a9:b6:07:02:31:57:b8:46:01: 4a:77:3f:25:d9:49:11:ce:40:95:96:73:6b:d9:d3: f7:30:51:78:65:06:9e:26:29:49:c3:b3:d2:68:39: 05:87:ed:b5:90:f6:c5:2c:df:de:eb:7a:e1:76:a3: 04:6e:e5:e6:33:9b:ad:a5:33:a1:3b:36:cf:b1:91: 89:68:69:5c:76:2b:d1:95:d0:08:8f:80:d8:8c:9d: 9d:10:92:bb:df:e6:35:50:b1:45:01:83:14:7c:38: 08:57:f1:52:bf:00:2a:aa:58:e4:f1:d8:dc:70:9f: 87:46:5e:c3:c6:f4:bc:e8:93:cf:d4:c5:ff:87:94: eb:f2:00:5a:fa:60:41:f4:5e:eb:5e:b3:7d:3d:62: c4:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6C:49:91:AB:FD:DE:88:67:72:2C:9A:D7:61:8D:9F:38:3E:69:C2 X509v3 Authority Key Identifier: keyid:8B:21:56:66:57:7E:10:BF:85:2C:3A:C9:A7:EB:59:53:6D:FF:46:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/8B215666577E10BF852C3AC9A7EB59536DFF468B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8B215666577E10BF852C3AC9A7EB59536DFF468B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099583963774582787/0/3138302e3233352e36342e302f32322d3232203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 180.235.64.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:78:d5:f2:92:17:61:c6:14:57:18:c8:86:d5:29:57:93:84: a4:16:d7:e4:b3:1f:61:1a:46:d7:14:fa:29:07:52:5e:7e:a0: f6:b5:92:6e:47:de:16:bf:2d:1a:b9:44:c8:f1:b8:3b:4f:95: 7d:36:f9:94:a3:8a:89:21:da:14:86:8c:38:7a:2e:6d:36:26: 87:a0:db:d2:fd:98:96:37:d2:c3:6b:f6:10:79:eb:cb:82:46: dc:e0:00:ea:8e:4e:3b:3b:ca:3c:23:33:68:77:8e:2f:97:93: 6a:e7:16:5c:5a:35:fc:4a:5d:e4:13:4e:b9:8f:2c:d7:e2:a5: bf:ae:01:ba:53:ca:20:10:51:79:90:cd:a3:43:f7:da:4e:5b: e9:35:23:b6:40:dd:13:a6:ad:8a:f6:32:06:c2:0f:ca:8d:e9: b1:9c:d5:b1:0a:c3:2c:99:90:c3:fc:74:b3:2c:00:e5:5b:57: ac:35:19:b5:74:1b:cc:a7:3e:6e:ed:1b:54:68:2d:f0:44:f3: ca:aa:64:2d:79:2c:4c:20:c7:f7:f4:ad:24:65:b2:f3:d9:9d: d1:ef:14:52:13:7b:50:13:1a:1b:c5:1a:b7:89:50:c3:e3:a4: 53:ac:19:64:4e:24:ac:a1:f2:3b:8e:eb:1b:c6:36:74:f7:bc: 8f:e5:e4:09 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDt97QaKVfBsyVPRnPv6jhhB+ODswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2 REZGNDY4QjAeFw0yNjA0MjgwOTA1MTdaFw0yNzA0MjcwOTEwMTdaMDMxMTAvBgNV BAMTKDhENkM0OTkxQUJGRERFODg2NzcyMkM5QUQ3NjE4RDlGMzgzRTY5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbM3M0ju4jpGNswHiopFmjc3fq wKpaxOML9ESy8Ff2XsZQ9dAoO3gsbx45VsIe+lfhhyZS8q+tmvaVQC/o7JkPW8MG WK/4uNI6M8v0BgtmMOOjZFD6Aqa2OrAnxSIBOclQ7cv4vSRqSxnGvhYC2Km2BwIx V7hGAUp3PyXZSRHOQJWWc2vZ0/cwUXhlBp4mKUnDs9JoOQWH7bWQ9sUs397reuF2 owRu5eYzm62lM6E7Ns+xkYloaVx2K9GV0AiPgNiMnZ0Qkrvf5jVQsUUBgxR8OAhX 8VK/ACqqWOTx2Nxwn4dGXsPG9Lzok8/Uxf+HlOvyAFr6YEH0Xutes309YsTBAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUjWxJkav93ohnciya12GNnzg+acIwHwYDVR0j BBgwFoAUiyFWZld+EL+FLDrJp+tZU23/RoswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTU4Mzk2Mzc3NDU4Mjc4Ny8wLzhCMjE1NjY2NTc3RTEwQkY4NTJDM0FDOUE3RUI1 OTUzNkRGRjQ2OEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEIyMTU2NjY1NzdFMTBCRjg1MkMzQUM5QTdFQjU5NTM2REZGNDY4Qi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NTgzOTYzNzc0NTgyNzg3LzAvMzEzODMwMmUzMjMz MzUyZTM2MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEArTrQDANBgkqhkiG9w0BAQsFAAOCAQEAn3jV8pIXYcYUVxjIhtUpV5OEpBbX 5LMfYRpG1xT6KQdSXn6g9rWSbkfeFr8tGrlEyPG4O0+VfTb5lKOKiSHaFIaMOHou bTYmh6Db0v2YljfSw2v2EHnry4JG3OAA6o5OOzvKPCMzaHeOL5eTaucWXFo1/Epd 5BNOuY8s1+Klv64BulPKIBBReZDNo0P32k5b6TUjtkDdE6ativYyBsIPyo3psZzV sQrDLJmQw/x0sywA5VtXrDUZtXQbzKc+bu0bVGgt8ETzyqpkLXksTCDH9/StJGWy 89md0e8UUhN7UBMaG8Uat4lQw+OkU6wZZE4krKHyO47rG8Y2dPe8j+XkCQ== -----END CERTIFICATE-----Generated at Wed May 13 14:08:34 2026 by rpki-client