$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32392e302f32342d3234203d3e203137363231.roa File: 3137352e3130322e32392e302f32342d3234203d3e203137363231.roa (raw, json) Hash identifier: cDIaybm+l2AZj7CnSR4FXXnr4nmdO5RiBPeBtUiaRqA= Subject key identifier: 34:CC:29:4D:40:79:38:F7:02:22:F1:C9:B8:65:F9:37:F2:67:98:96 Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09 Certificate serial: 1CD76B5F5B20189E5810901D80265EE97104F35D Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32392e302f32342d3234203d3e203137363231.roa Signing time: Tue 28 Apr 2026 03:01:21 +0000 ROA not before: Tue 28 Apr 2026 02:56:21 +0000 ROA not after: Tue 27 Apr 2027 03:01:21 +0000 asID: 17621 IP address blocks: 175.102.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:04:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:d7:6b:5f:5b:20:18:9e:58:10:90:1d:80:26:5e:e9:71:04:f3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09 Validity Not Before: Apr 28 02:56:21 2026 GMT Not After : Apr 27 03:01:21 2027 GMT Subject: CN=34CC294D407938F70222F1C9B865F937F2679896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:52:82:0e:5d:ef:f1:90:eb:e1:59:72:e6:b9: f6:84:5a:55:90:11:fc:07:9e:12:11:22:31:5e:08: 99:82:b5:f8:88:dc:40:ca:b6:ad:69:28:06:3c:a4: b8:09:88:e0:7f:16:53:9e:ad:d9:b6:c5:1a:40:37: 10:95:30:ed:91:e9:9c:74:98:02:0f:2f:0c:e4:27: 72:4e:62:a2:f9:cb:f2:e0:52:0d:17:a4:8a:d9:88: 41:ad:92:6a:2c:a0:eb:48:de:79:17:48:5e:11:9f: 8b:0b:4c:6f:ce:f9:31:fc:0e:15:85:ad:2d:8a:06: ac:47:72:2f:99:46:36:27:c9:01:c9:6f:21:33:28: 10:49:d8:f2:a6:84:0d:1e:29:b0:4f:a1:67:e1:e0: 17:ae:97:d8:cc:5c:ef:03:14:11:c0:23:2d:77:b8: 04:08:1b:9f:b7:0a:a0:d1:93:fc:d9:d9:19:a4:f6: 22:b7:01:d9:d8:7f:ed:75:f2:0f:48:8c:18:20:c3: 81:ed:92:20:0f:18:97:24:c0:a7:f2:31:64:42:ee: 9d:86:49:a9:38:5b:3b:de:7c:33:ae:dd:da:4b:d4: d7:b8:75:c2:6c:43:f8:2c:01:60:29:cd:cc:f1:c6: 03:bd:e5:1e:89:bb:23:5c:9d:fa:d9:14:bb:59:75: 40:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:CC:29:4D:40:79:38:F7:02:22:F1:C9:B8:65:F9:37:F2:67:98:96 X509v3 Authority Key Identifier: keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32392e302f32342d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.102.29.0/24 Signature Algorithm: sha256WithRSAEncryption 69:e7:a4:7f:3d:40:67:07:5f:55:b9:49:5b:ee:1a:87:82:fd: 4a:ed:62:d6:1a:f7:51:ae:6c:47:01:60:c7:5b:7c:31:ff:ac: ac:25:e6:42:e0:0a:c3:87:87:04:20:a6:c3:c4:55:59:1a:a5: 91:64:54:a5:a6:bc:30:b0:59:40:bf:ae:f6:a5:75:1d:d9:f9: 99:c0:80:21:e2:d6:aa:23:04:79:e9:8f:ec:33:33:58:50:34: 18:5d:ac:b8:bd:33:af:92:e9:46:f1:3d:e3:bb:31:47:03:63: 04:4f:78:aa:d0:b6:6b:92:7c:c6:73:9d:f5:ab:b7:40:a4:af: fe:73:c9:18:52:cb:28:3c:4a:ec:76:3c:12:b5:92:16:8e:ae: aa:7b:7f:95:e9:bc:10:df:58:89:fd:19:56:19:ce:b4:53:5c: ca:e6:14:11:ca:81:fc:f3:0e:2a:8c:44:48:98:71:f0:2d:13: 33:f5:2e:05:3e:1a:19:23:e7:47:ba:fa:20:51:eb:eb:f2:88: 00:1b:fd:67:3a:7a:5c:03:80:15:a2:11:e1:91:50:5d:3e:24: 06:67:ca:12:f4:f8:be:1b:73:55:2f:17:9e:0c:14:1d:ae:5d: 2f:f2:cd:71:39:cd:3e:f7:37:47:e1:d5:85:24:49:23:0f:8d: 9b:2f:a7:49 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHNdrX1sgGJ5YEJAdgCZe6XEE810wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy NUIwMkMwOTAeFw0yNjA0MjgwMjU2MjFaFw0yNzA0MjcwMzAxMjFaMDMxMTAvBgNV BAMTKDM0Q0MyOTRENDA3OTM4RjcwMjIyRjFDOUI4NjVGOTM3RjI2Nzk4OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTUoIOXe/xkOvhWXLmufaEWlWQ EfwHnhIRIjFeCJmCtfiI3EDKtq1pKAY8pLgJiOB/FlOerdm2xRpANxCVMO2R6Zx0 mAIPLwzkJ3JOYqL5y/LgUg0XpIrZiEGtkmosoOtI3nkXSF4Rn4sLTG/O+TH8DhWF rS2KBqxHci+ZRjYnyQHJbyEzKBBJ2PKmhA0eKbBPoWfh4Beul9jMXO8DFBHAIy13 uAQIG5+3CqDRk/zZ2Rmk9iK3AdnYf+118g9IjBggw4HtkiAPGJckwKfyMWRC7p2G Sak4WzvefDOu3dpL1Ne4dcJsQ/gsAWApzczxxgO95R6JuyNcnfrZFLtZdUAvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUNMwpTUB5OPcCIvHJuGX5N/JnmJYwHwYDVR0j BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwMDk2Nzg4MjcxMzQ2NDgzNS8wLzMxMzczNTJlMzEz MDMyMmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAK9mHTANBgkqhkiG9w0BAQsFAAOCAQEAaeekfz1AZwdfVblJW+4ah4L9 Su1i1hr3Ua5sRwFgx1t8Mf+srCXmQuAKw4eHBCCmw8RVWRqlkWRUpaa8MLBZQL+u 9qV1Hdn5mcCAIeLWqiMEeemP7DMzWFA0GF2suL0zr5LpRvE947sxRwNjBE94qtC2 a5J8xnOd9au3QKSv/nPJGFLLKDxK7HY8ErWSFo6uqnt/lem8EN9Yif0ZVhnOtFNc yuYUEcqB/PMOKoxESJhx8C0TM/UuBT4aGSPnR7r6IFHr6/KIABv9Zzp6XAOAFaIR 4ZFQXT4kBmfKEvT4vhtzVS8XngwUHa5dL/LNcTnNPvc3R+HVhSRJIw+Nmy+nSQ== -----END CERTIFICATE-----Generated at Wed May 13 16:14:32 2026 by rpki-client