$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e322e302f32342d3234203d3e2034383131.roa File: 3137352e3130322e322e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: IDRLvkEz6bX5aNZssduEqDFfdkeTL8XCZiWC0ZtT8YI= Subject key identifier: 97:F5:C6:07:E5:B9:3C:56:41:A8:1B:CE:71:7B:43:B6:95:60:23:83 Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09 Certificate serial: 33132B9B6FAF5A043A5866CC897E959ED869F370 Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e322e302f32342d3234203d3e2034383131.roa Signing time: Thu 07 May 2026 01:34:17 +0000 ROA not before: Thu 07 May 2026 01:29:17 +0000 ROA not after: Thu 06 May 2027 01:34:17 +0000 asID: 4811 IP address blocks: 175.102.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:13:2b:9b:6f:af:5a:04:3a:58:66:cc:89:7e:95:9e:d8:69:f3:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09 Validity Not Before: May 7 01:29:17 2026 GMT Not After : May 6 01:34:17 2027 GMT Subject: CN=97F5C607E5B93C5641A81BCE717B43B695602383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:25:8d:c8:99:aa:5d:28:f5:d3:fe:00:bd:f6: 8f:70:0d:a3:47:17:3d:37:63:89:f3:78:7d:4d:d9: 9b:7c:0c:07:bd:ed:4b:40:f2:b2:ba:50:1d:8d:c5: 4d:e7:f4:c0:3b:e2:bc:fe:03:69:0e:53:e7:91:3c: 46:47:8f:f6:ba:cb:96:64:a9:11:26:bc:ee:30:04: 0a:92:14:00:cd:7b:91:66:65:2f:e3:0d:1a:78:63: 21:2a:25:b0:3c:0f:c0:5d:91:02:0a:fe:62:eb:ba: a9:4c:26:24:ec:ff:ae:a1:c0:8d:ca:97:cc:4a:ad: d4:1b:5b:ef:3a:85:cd:6a:c4:14:d5:7a:99:c4:14: b5:1b:1e:2e:2a:f9:4a:68:9e:b6:1d:72:ff:34:b7: 05:33:c5:b7:e6:99:31:01:30:90:dd:bf:e9:bd:a7: 31:b7:21:66:12:4b:51:6b:75:58:b4:43:c2:13:93: b0:54:93:b9:c7:c1:40:14:4b:ed:1a:24:94:ed:a9: 5b:91:d8:82:ef:f9:f7:fa:ef:14:af:4e:3b:44:ef: 73:64:a4:11:b9:09:f7:bc:9b:7e:a1:ad:6e:89:20: 31:fc:b3:82:7d:df:f9:7f:9e:aa:27:63:4e:2d:aa: d4:8f:d3:f7:69:86:1a:60:85:05:d1:07:d5:52:34: 80:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F5:C6:07:E5:B9:3C:56:41:A8:1B:CE:71:7B:43:B6:95:60:23:83 X509v3 Authority Key Identifier: keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e322e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.102.2.0/24 Signature Algorithm: sha256WithRSAEncryption 78:eb:0a:a3:76:da:e8:0c:14:14:54:0e:02:9e:1c:3e:e2:ae: 16:a1:c6:79:1f:ef:d3:df:bf:b7:92:f0:bb:42:26:df:19:8d: cb:ef:22:87:52:48:b7:e3:6a:84:4c:2f:3b:fc:1b:9e:e3:e8: 85:15:4a:ee:48:a9:99:d7:cc:31:f2:ce:da:76:2e:8d:8e:23: 3c:a4:2d:73:ee:c7:81:10:da:a5:6d:7d:a6:dd:35:b1:ea:d0: aa:ad:b0:5e:47:99:10:b2:c7:e1:cf:60:a8:8e:61:fc:d4:ec: 49:0e:2e:f0:01:ec:2a:01:fa:09:67:8d:0f:67:2c:de:d5:32: e5:d4:8a:b9:bc:ae:0e:f0:30:17:a4:e1:37:99:86:95:94:b7: b4:01:3a:fe:be:b9:6d:de:e7:39:44:f5:ee:c9:a0:d7:83:79: 3e:b2:d0:aa:be:2b:eb:ba:e7:db:a3:c6:67:a0:4a:82:40:af: dd:5d:ce:6a:de:ec:c9:35:11:2d:cb:90:47:31:ac:9a:9c:da: 06:9c:1f:04:7c:2e:13:a3:f1:ed:a7:a8:d4:f0:4a:27:df:ef: 41:f6:9c:7d:13:2f:0e:6d:43:d8:39:ca:ce:ba:46:86:2e:5c: c4:fd:e3:08:f8:9f:7a:ca:16:b1:49:93:dc:e1:48:18:79:98: ee:51:cc:c7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMxMrm2+vWgQ6WGbMiX6Vnthp83AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy NUIwMkMwOTAeFw0yNjA1MDcwMTI5MTdaFw0yNzA1MDYwMTM0MTdaMDMxMTAvBgNV BAMTKDk3RjVDNjA3RTVCOTNDNTY0MUE4MUJDRTcxN0I0M0I2OTU2MDIzODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5JY3ImapdKPXT/gC99o9wDaNH Fz03Y4nzeH1N2Zt8DAe97UtA8rK6UB2NxU3n9MA74rz+A2kOU+eRPEZHj/a6y5Zk qREmvO4wBAqSFADNe5FmZS/jDRp4YyEqJbA8D8BdkQIK/mLruqlMJiTs/66hwI3K l8xKrdQbW+86hc1qxBTVepnEFLUbHi4q+UponrYdcv80twUzxbfmmTEBMJDdv+m9 pzG3IWYSS1FrdVi0Q8ITk7BUk7nHwUAUS+0aJJTtqVuR2ILv+ff67xSvTjtE73Nk pBG5Cfe8m36hrW6JIDH8s4J93/l/nqonY04tqtSP0/dphhpghQXRB9VSNICPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUl/XGB+W5PFZBqBvOcXtDtpVgI4MwHwYDVR0j BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTY3ODgyNzEzNDY0ODM1LzAvMzEzNzM1MmUzMTMw MzIyZTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BACvZgIwDQYJKoZIhvcNAQELBQADggEBAHjrCqN22ugMFBRUDgKeHD7irhahxnkf 79Pfv7eS8LtCJt8ZjcvvIodSSLfjaoRMLzv8G57j6IUVSu5IqZnXzDHyztp2Lo2O IzykLXPux4EQ2qVtfabdNbHq0KqtsF5HmRCyx+HPYKiOYfzU7EkOLvAB7CoB+gln jQ9nLN7VMuXUirm8rg7wMBek4TeZhpWUt7QBOv6+uW3e5zlE9e7JoNeDeT6y0Kq+ K+u659ujxmegSoJAr91dzmre7Mk1ES3LkEcxrJqc2gacHwR8LhOj8e2nqNTwSiff 70H2nH0TLw5tQ9g5ys66RoYuXMT94wj4n3rKFrFJk9zhSBh5mO5RzMc= -----END CERTIFICATE-----Generated at Wed May 13 16:42:12 2026 by rpki-client