$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101059168732708865/0/3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa File: 3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa (raw, json) Hash identifier: 8k9/tekmwF3559V6Wcf5Uxlvz6BnhN1MfJB76I2YrfM= Subject key identifier: B4:FC:36:43:DF:8D:4B:F0:17:7B:D6:22:3B:E0:48:82:74:25:EF:48 Certificate issuer: /CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Certificate serial: 050EC39176E2434AD59BD4D201E1777F1403898C Authority key identifier: D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa Signing time: Tue 28 Apr 2026 03:00:55 +0000 ROA not before: Tue 28 Apr 2026 02:55:55 +0000 ROA not after: Tue 27 Apr 2027 03:00:55 +0000 asID: 4811 IP address blocks: 103.198.126.0/23 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0e:c3:91:76:e2:43:4a:d5:9b:d4:d2:01:e1:77:7f:14:03:89:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8E9745B505CCD7D22105CB89D5574E599B45E13 Validity Not Before: Apr 28 02:55:55 2026 GMT Not After : Apr 27 03:00:55 2027 GMT Subject: CN=B4FC3643DF8D4BF0177BD6223BE048827425EF48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9f:86:12:96:b4:af:13:dc:bb:1d:21:a2:2e: 5b:f2:66:f9:e6:11:26:97:cf:0e:99:e1:4f:dc:0e: 94:fe:18:9b:3a:3f:7a:87:f9:18:65:9c:ba:c3:6f: 39:21:0d:e6:32:4d:42:bf:a1:d6:89:1e:f8:39:4f: f1:fb:58:b5:66:93:14:8b:79:26:55:8b:31:ee:3b: 1b:54:7f:c0:02:16:de:02:0b:c5:54:34:f8:54:79: 74:9a:d4:e6:2b:b4:65:06:42:f2:4b:50:d6:64:7b: f2:54:41:fc:6c:2e:18:50:ff:da:7b:9f:45:5f:9f: 69:c4:7a:a9:35:24:83:94:34:34:28:33:88:87:ee: b6:d8:46:1e:a0:b9:6b:59:e4:cf:15:da:9e:06:11: 2f:7f:b4:99:b0:23:e3:6f:da:2a:d6:f4:27:0c:b3: f4:1f:f8:da:e3:cb:f4:15:c5:15:f5:49:ac:0b:fe: cd:d6:6c:59:56:3f:f0:ac:d0:43:18:a8:03:f3:12: 6a:14:75:80:64:f5:30:b8:3b:86:68:b7:0f:f7:b3: 5d:5d:9f:28:73:d4:88:d4:3c:69:a1:7d:f5:43:76: 87:e5:28:f4:71:59:0b:73:83:06:24:a3:0d:83:b1: a5:32:ce:f9:a0:5a:50:9b:9a:07:95:2c:d0:04:fc: c0:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:FC:36:43:DF:8D:4B:F0:17:7B:D6:22:3B:E0:48:82:74:25:EF:48 X509v3 Authority Key Identifier: keyid:D8:E9:74:5B:50:5C:CD:7D:22:10:5C:B8:9D:55:74:E5:99:B4:5E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/D8E9745B505CCD7D22105CB89D5574E599B45E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D8E9745B505CCD7D22105CB89D5574E599B45E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101059168732708865/0/3130332e3139382e3132362e302f32332d3332203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.198.126.0/23 Signature Algorithm: sha256WithRSAEncryption b8:de:ec:e7:8e:63:85:2b:d2:4b:67:3e:86:48:ae:9e:d7:7b: 18:a2:80:8c:95:0f:fe:7d:54:01:23:d8:ca:63:5e:4b:a4:43: d8:27:dd:64:76:4e:50:fa:84:c8:63:48:1a:f9:ad:d6:fe:a7: 03:63:fc:30:f8:04:59:4d:be:d4:66:54:2a:8a:df:29:be:b1: e5:c2:41:77:6c:8f:89:76:82:d3:52:1b:ef:55:f8:03:36:e6: 25:a7:e0:9b:b5:8b:b9:a2:1b:d3:32:c4:02:81:f5:f3:d9:5a: 0d:4f:05:81:74:ae:8e:05:b9:92:5a:e5:f1:51:d4:30:00:79: 92:a1:8d:4e:6b:fa:cc:73:9b:09:d9:f8:a8:16:15:22:69:ce: 5e:0b:6c:ca:d8:50:61:59:ec:3f:ea:e9:0d:9f:af:4d:16:73: 16:12:36:ab:8e:1d:c4:a9:26:b8:84:04:17:1c:f8:c3:dc:32: dd:88:a8:b5:75:6c:86:e3:dd:10:26:73:7e:6a:85:fb:2a:8e: 93:b8:e4:25:f9:7c:c3:ce:ae:58:5c:f1:d3:10:7d:ef:fd:4f: 3f:e4:4a:bc:ab:e7:d1:fc:e6:f2:ff:15:bd:6f:03:3e:29:6b: 59:a5:ac:3a:33:38:f3:3e:bb:db:ec:6b:cb:16:89:3f:9e:82: e2:70:c9:de -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUBQ7DkXbiQ0rVm9TSAeF3fxQDiYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5 OUI0NUUxMzAeFw0yNjA0MjgwMjU1NTVaFw0yNzA0MjcwMzAwNTVaMDMxMTAvBgNV BAMTKEI0RkMzNjQzREY4RDRCRjAxNzdCRDYyMjNCRTA0ODgyNzQyNUVGNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFn4YSlrSvE9y7HSGiLlvyZvnm ESaXzw6Z4U/cDpT+GJs6P3qH+RhlnLrDbzkhDeYyTUK/odaJHvg5T/H7WLVmkxSL eSZVizHuOxtUf8ACFt4CC8VUNPhUeXSa1OYrtGUGQvJLUNZke/JUQfxsLhhQ/9p7 n0Vfn2nEeqk1JIOUNDQoM4iH7rbYRh6guWtZ5M8V2p4GES9/tJmwI+Nv2irW9CcM s/Qf+Nrjy/QVxRX1SawL/s3WbFlWP/Cs0EMYqAPzEmoUdYBk9TC4O4Zotw/3s11d nyhz1IjUPGmhffVDdoflKPRxWQtzgwYkow2DsaUyzvmgWlCbmgeVLNAE/MCTAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUtPw2Q9+NS/AXe9YiO+BIgnQl70gwHwYDVR0j BBgwFoAU2Ol0W1BczX0iEFy4nVV05Zm0XhMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTA1OTE2ODczMjcwODg2NS8wL0Q4RTk3NDVCNTA1Q0NEN0QyMjEwNUNCODlENTU3 NEU1OTlCNDVFMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDhFOTc0NUI1MDVDQ0Q3RDIyMTA1Q0I4OUQ1NTc0RTU5OUI0NUUxMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwMTA1OTE2ODczMjcwODg2NS8wLzMxMzAzMzJlMzEz OTM4MmUzMTMyMzYyZTMwMmYzMjMzMmQzMzMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWfGfjANBgkqhkiG9w0BAQsFAAOCAQEAuN7s545jhSvSS2c+hkiuntd7 GKKAjJUP/n1UASPYymNeS6RD2CfdZHZOUPqEyGNIGvmt1v6nA2P8MPgEWU2+1GZU KorfKb6x5cJBd2yPiXaC01Ib71X4AzbmJafgm7WLuaIb0zLEAoH189laDU8FgXSu jgW5klrl8VHUMAB5kqGNTmv6zHObCdn4qBYVImnOXgtsythQYVnsP+rpDZ+vTRZz FhI2q44dxKkmuIQEFxz4w9wy3YiotXVshuPdECZzfmqF+yqOk7jkJfl8w86uWFzx 0xB97/1PP+RKvKvn0fzm8v8VvW8DPilrWaWsOjM48z672+xryxaJP56C4nDJ3g== -----END CERTIFICATE-----Generated at Wed May 13 14:37:11 2026 by rpki-client