$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32342d3234203d3e203137363231.roa File: 3137352e3130322e32382e302f32342d3234203d3e203137363231.roa (raw, json) Hash identifier: HDbKsr/N4QLVuiOQJeLnsESvua08gZlWmsWN8MAZ4k0= Subject key identifier: 72:0F:5E:79:33:C4:A0:DD:FA:17:54:9E:D4:AB:07:B4:F5:3C:5B:12 Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09 Certificate serial: 15F1302C8F4295A20D366847D733739E60984E67 Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32342d3234203d3e203137363231.roa Signing time: Tue 28 Apr 2026 03:01:22 +0000 ROA not before: Tue 28 Apr 2026 02:56:22 +0000 ROA not after: Tue 27 Apr 2027 03:01:22 +0000 asID: 17621 IP address blocks: 175.102.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f1:30:2c:8f:42:95:a2:0d:36:68:47:d7:33:73:9e:60:98:4e:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09 Validity Not Before: Apr 28 02:56:22 2026 GMT Not After : Apr 27 03:01:22 2027 GMT Subject: CN=720F5E7933C4A0DDFA17549ED4AB07B4F53C5B12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1d:60:17:9e:db:35:df:db:af:b3:0d:e6:d3: 91:02:a0:e3:9b:ef:76:3f:26:d0:7e:9a:52:a2:65: b0:19:78:ec:5d:a1:ad:50:fc:10:9c:87:f7:7f:a5: 71:0c:db:99:00:7b:ca:e9:f4:5f:9f:8f:ef:76:02: 6d:df:91:03:64:c4:61:08:15:fc:7c:2c:34:ad:fd: 11:eb:e6:ec:71:f7:9f:7b:0b:4d:69:77:0a:1e:79: ae:94:e4:af:08:70:32:cc:3d:27:e8:d1:0a:d5:0b: 17:9f:5c:69:33:bb:22:ea:d9:e3:ef:2a:cf:e3:7e: af:e0:7a:95:d3:e1:62:9b:9a:ac:33:36:4e:2c:b1: fa:e9:22:93:4b:e9:42:42:a0:8a:38:41:8d:31:55: 9e:8a:80:14:53:ed:0e:44:ea:c4:d6:c6:38:ca:46: 4f:60:29:b9:f3:a8:50:66:b8:f0:3c:07:56:9b:0d: bf:88:9e:f2:68:67:98:4c:05:0e:da:94:93:bb:b4: 91:3a:3a:2e:c7:1d:72:4b:6e:a7:d6:01:81:a7:c9: 6a:fc:12:0d:c6:22:a4:b3:cd:2c:c4:8e:94:61:bd: e8:e6:84:10:24:52:c2:f7:15:a1:84:4a:12:d4:a9: fa:68:58:0c:da:aa:38:db:9a:06:26:65:64:7f:b8: 60:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:0F:5E:79:33:C4:A0:DD:FA:17:54:9E:D4:AB:07:B4:F5:3C:5B:12 X509v3 Authority Key Identifier: keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32382e302f32342d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.102.28.0/24 Signature Algorithm: sha256WithRSAEncryption 93:f4:41:c4:48:21:95:a5:bb:57:a1:26:2b:6f:78:c0:32:7b: ff:19:72:1f:4c:d0:ac:80:9e:dd:8e:db:62:b3:b1:76:14:75: 1d:7f:ee:25:60:1c:0b:04:68:6a:60:c6:5b:cc:a0:16:4a:1e: cb:f5:90:69:c8:6a:e6:6d:d5:8f:0e:d7:37:ed:df:34:b6:a2: 83:7f:17:c0:44:f4:01:b0:65:de:ee:f9:e4:a6:a3:3b:e7:bf: c0:3e:ba:34:28:d9:9c:12:6b:a1:20:82:32:c9:fe:c8:48:1c: be:a8:11:fa:76:a1:c9:22:1a:34:a9:92:9f:4c:c1:e3:91:0f: 50:04:ca:35:32:53:fc:e6:ef:73:f3:aa:44:33:69:3b:b1:0f: 1f:90:8f:65:9b:ce:61:00:cc:64:04:02:ae:8e:00:2b:01:11: 81:16:73:47:78:b5:f6:fd:77:7c:1d:46:1e:b9:15:7c:bb:5c: 27:ac:b9:f0:2c:fb:5e:be:d1:58:0b:03:ca:69:13:2e:55:d1: 74:bd:7c:99:ed:86:02:2d:ef:89:9f:7d:dc:43:f7:94:3b:f7: 19:a7:11:dc:b5:9e:ac:0a:fd:cf:6d:3d:7f:a9:59:6f:97:c8: 9e:94:1e:04:8e:73:22:1e:e7:16:eb:2f:4c:0b:fe:c3:a0:b2: d4:40:ef:9f -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFfEwLI9ClaINNmhH1zNznmCYTmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy NUIwMkMwOTAeFw0yNjA0MjgwMjU2MjJaFw0yNzA0MjcwMzAxMjJaMDMxMTAvBgNV BAMTKDcyMEY1RTc5MzNDNEEwRERGQTE3NTQ5RUQ0QUIwN0I0RjUzQzVCMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqHWAXnts139uvsw3m05ECoOOb 73Y/JtB+mlKiZbAZeOxdoa1Q/BCch/d/pXEM25kAe8rp9F+fj+92Am3fkQNkxGEI Ffx8LDSt/RHr5uxx9597C01pdwoeea6U5K8IcDLMPSfo0QrVCxefXGkzuyLq2ePv Ks/jfq/gepXT4WKbmqwzNk4ssfrpIpNL6UJCoIo4QY0xVZ6KgBRT7Q5E6sTWxjjK Rk9gKbnzqFBmuPA8B1abDb+InvJoZ5hMBQ7alJO7tJE6Oi7HHXJLbqfWAYGnyWr8 Eg3GIqSzzSzEjpRhvejmhBAkUsL3FaGEShLUqfpoWAzaqjjbmgYmZWR/uGC5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUcg9eeTPEoN36F1Se1KsHtPU8WxIwHwYDVR0j BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwMDk2Nzg4MjcxMzQ2NDgzNS8wLzMxMzczNTJlMzEz MDMyMmUzMjM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAK9mHDANBgkqhkiG9w0BAQsFAAOCAQEAk/RBxEghlaW7V6EmK294wDJ7 /xlyH0zQrICe3Y7bYrOxdhR1HX/uJWAcCwRoamDGW8ygFkoey/WQachq5m3Vjw7X N+3fNLaig38XwET0AbBl3u755KajO+e/wD66NCjZnBJroSCCMsn+yEgcvqgR+nah ySIaNKmSn0zB45EPUATKNTJT/Obvc/OqRDNpO7EPH5CPZZvOYQDMZAQCro4AKwER gRZzR3i19v13fB1GHrkVfLtcJ6y58Cz7Xr7RWAsDymkTLlXRdL18me2GAi3viZ99 3EP3lDv3GacR3LWerAr9z209f6lZb5fInpQeBI5zIh7nFusvTAv+w6Cy1EDvnw== -----END CERTIFICATE-----Generated at Wed May 13 16:14:32 2026 by rpki-client