$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3136382e302f32322d3232203d3e203435303836.roa File: 3137352e3130322e3136382e302f32322d3232203d3e203435303836.roa (raw, json) Hash identifier: hEaavABJPxrtKWv504kmkRMHs+bEnQXuGyvImKekp2U= Subject key identifier: C0:39:A4:CC:F4:3E:4F:7A:A4:B5:24:12:1F:52:F3:0A:F2:B6:2D:EF Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09 Certificate serial: 7BFF2AA2B5E8BD44C382DA9C32D02BFBCE044343 Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3136382e302f32322d3232203d3e203435303836.roa Signing time: Tue 28 Apr 2026 03:14:20 +0000 ROA not before: Tue 28 Apr 2026 03:09:20 +0000 ROA not after: Tue 27 Apr 2027 03:14:20 +0000 asID: 45086 IP address blocks: 175.102.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ff:2a:a2:b5:e8:bd:44:c3:82:da:9c:32:d0:2b:fb:ce:04:43:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09 Validity Not Before: Apr 28 03:09:20 2026 GMT Not After : Apr 27 03:14:20 2027 GMT Subject: CN=C039A4CCF43E4F7AA4B524121F52F30AF2B62DEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d7:ff:4e:c4:bf:fd:05:7f:d1:a1:be:28:cd: 31:05:cd:7a:30:ec:6f:a7:59:d6:45:b0:91:09:3c: 68:37:b3:9f:f4:c5:25:ea:1a:af:16:88:43:3e:61: 0d:e3:90:29:1c:1b:a2:9e:04:56:0c:5e:95:14:6d: 7e:ed:c7:58:82:37:e4:3b:75:24:89:f2:ba:3e:3c: 0c:09:95:8e:cc:4f:ea:c1:27:37:c5:3d:2b:5d:ad: e5:99:36:62:10:08:b5:ba:3b:00:c2:09:de:76:d1: 64:f8:ca:ea:67:3f:9a:4c:bb:ba:7b:be:c6:37:ab: c8:02:8d:39:91:c7:42:14:ee:21:fd:96:b6:58:aa: 2f:23:9b:5b:98:eb:8a:96:70:23:1e:9a:8a:50:9a: d8:0b:00:74:9a:1c:28:65:34:bd:b4:0b:05:26:9e: 4c:c9:f9:1b:72:67:5a:27:72:39:78:47:8a:63:e6: 8e:52:d1:03:93:af:ec:b4:43:1a:32:93:a5:8d:23: 5b:e4:5e:b4:43:0e:38:50:e8:69:f0:7e:6c:c7:e1: a8:be:ad:ec:bb:b6:9f:9a:47:bb:b3:c6:7a:cd:f9: 39:12:fe:1b:f4:8b:d0:9c:09:fc:73:7f:05:6f:c8: 65:fd:21:83:f9:de:25:b1:19:ab:ab:e1:7f:1f:95: f9:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:39:A4:CC:F4:3E:4F:7A:A4:B5:24:12:1F:52:F3:0A:F2:B6:2D:EF X509v3 Authority Key Identifier: keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3136382e302f32322d3232203d3e203435303836.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.102.168.0/22 Signature Algorithm: sha256WithRSAEncryption 67:b5:39:eb:2f:f4:30:cf:b5:65:aa:cd:23:e9:96:30:cc:ae: b7:8d:a5:bd:8c:b6:f5:27:d0:e3:34:73:35:dc:10:7c:b2:c5: e2:9f:aa:98:66:d4:1d:44:fe:38:58:8e:90:00:08:ce:c1:9b: 29:76:88:1d:d0:c9:f7:98:04:80:41:96:3c:e6:f4:46:6b:88: 20:b1:41:db:cf:24:19:ad:9c:97:c9:aa:c5:cf:bf:55:d4:da: 9e:e9:02:cd:c1:1a:17:63:0c:a8:c4:8c:65:57:8c:2a:47:82: d5:9e:ca:e2:e1:db:20:f1:dd:fe:81:ee:9b:72:a9:65:58:a9: d4:04:8d:29:e6:9c:5f:f0:e0:9e:40:cc:68:21:85:7b:07:dc: ac:6a:dc:56:ab:5e:17:65:89:a7:54:52:8f:72:fa:75:af:df: 6a:ef:30:be:4d:f0:34:cc:03:e2:00:d3:f4:a0:75:fb:47:82: cf:0f:0f:7e:dc:2d:3f:06:85:ff:2a:d8:fa:7f:e1:e1:f1:32: fc:ee:ed:7c:77:2a:ed:c2:9c:3f:76:36:94:c2:8f:78:f7:24: ac:fa:f6:c6:e6:52:c9:e7:b7:02:1f:04:a1:92:84:49:67:83: 16:e7:e1:34:5d:22:1e:ec:5c:90:a8:d6:24:2d:74:9f:f6:5e: fa:21:4f:62 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUe/8qorXovUTDgtqcMtAr+84EQ0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy NUIwMkMwOTAeFw0yNjA0MjgwMzA5MjBaFw0yNzA0MjcwMzE0MjBaMDMxMTAvBgNV BAMTKEMwMzlBNENDRjQzRTRGN0FBNEI1MjQxMjFGNTJGMzBBRjJCNjJERUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01/9OxL/9BX/Rob4ozTEFzXow 7G+nWdZFsJEJPGg3s5/0xSXqGq8WiEM+YQ3jkCkcG6KeBFYMXpUUbX7tx1iCN+Q7 dSSJ8ro+PAwJlY7MT+rBJzfFPStdreWZNmIQCLW6OwDCCd520WT4yupnP5pMu7p7 vsY3q8gCjTmRx0IU7iH9lrZYqi8jm1uY64qWcCMemopQmtgLAHSaHChlNL20CwUm nkzJ+RtyZ1oncjl4R4pj5o5S0QOTr+y0Qxoyk6WNI1vkXrRDDjhQ6GnwfmzH4ai+ rey7tp+aR7uzxnrN+TkS/hv0i9CcCfxzfwVvyGX9IYP53iWxGaur4X8flfnfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUwDmkzPQ+T3qktSQSH1LzCvK2Le8wHwYDVR0j BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDA5Njc4ODI3MTM0NjQ4MzUvMC8zMTM3MzUyZTMx MzAzMjJlMzEzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzNTMwMzgzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAq9mqDANBgkqhkiG9w0BAQsFAAOCAQEAZ7U56y/0MM+1ZarNI+mW MMyut42lvYy29SfQ4zRzNdwQfLLF4p+qmGbUHUT+OFiOkAAIzsGbKXaIHdDJ95gE gEGWPOb0RmuIILFB288kGa2cl8mqxc+/VdTanukCzcEaF2MMqMSMZVeMKkeC1Z7K 4uHbIPHd/oHum3KpZVip1ASNKeacX/DgnkDMaCGFewfcrGrcVqteF2WJp1RSj3L6 da/fau8wvk3wNMwD4gDT9KB1+0eCzw8PftwtPwaF/yrY+n/h4fEy/O7tfHcq7cKc P3Y2lMKPePckrPr2xuZSyee3Ah8EoZKESWeDFufhNF0iHuxckKjWJC10n/Ze+iFP Yg== -----END CERTIFICATE-----Generated at Wed May 13 17:14:14 2026 by rpki-client