$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e3233382e3230342e302f32322d3332203d3e2034383038.roa File: 3130332e3233382e3230342e302f32322d3332203d3e2034383038.roa (raw, json) Hash identifier: EabQKAUmdP4X2TxCi50njwijRb0aMHVKT13VuH0Sypk= Subject key identifier: D5:3F:56:63:D5:A9:FC:FD:B2:CF:60:FD:45:19:97:F6:88:25:32:16 Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Certificate serial: 5F180994CA3D5B6A10A3BFB963D986C2308DA8F6 Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e3233382e3230342e302f32322d3332203d3e2034383038.roa Signing time: Tue 28 Apr 2026 06:37:06 +0000 ROA not before: Tue 28 Apr 2026 06:32:06 +0000 ROA not after: Tue 27 Apr 2027 06:37:06 +0000 asID: 4808 IP address blocks: 103.238.204.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:18:09:94:ca:3d:5b:6a:10:a3:bf:b9:63:d9:86:c2:30:8d:a8:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Validity Not Before: Apr 28 06:32:06 2026 GMT Not After : Apr 27 06:37:06 2027 GMT Subject: CN=D53F5663D5A9FCFDB2CF60FD451997F688253216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:66:74:f3:b8:74:ba:08:35:65:cb:83:1c:86: 6e:76:7f:3d:a9:94:64:32:49:c3:4c:59:b0:1e:89: 79:28:b7:e6:aa:a0:5e:f7:55:a5:64:b5:c2:0a:c4: b3:37:e2:ee:53:a4:9f:f5:9b:e8:70:a9:41:0a:23: ab:de:4a:6f:49:4f:04:21:9d:fc:ff:70:97:f2:a6: fd:31:da:30:57:ff:a9:42:3f:f0:8e:1b:ac:8c:b1: 1e:f0:02:42:01:44:95:11:77:cf:be:0a:bf:2c:05: d2:22:d4:cd:2a:eb:71:97:48:22:4c:0e:b1:01:26: 57:b6:c4:b8:da:e9:fb:9d:f4:5d:40:42:64:06:02: b8:6a:34:cc:55:fb:59:cf:00:0d:02:56:0a:0a:22: b2:13:22:ac:7c:a4:b3:17:dd:3f:e5:5e:50:a6:a7: 1b:0f:9d:13:29:ad:94:ba:cd:54:a0:40:e6:54:43: 85:ed:1c:64:4c:7a:f5:7b:04:a6:2c:d7:f6:fb:8f: 0b:eb:ef:3b:09:c5:ca:e2:3f:39:f0:42:d7:45:c8: 44:47:b8:e8:f3:4f:dd:7f:ae:8d:fb:df:e3:00:5c: ef:a4:4c:73:f0:c2:b5:71:76:cb:c9:43:fc:69:04: 37:56:44:b2:19:bc:d4:32:70:01:12:90:40:01:2d: 64:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:3F:56:63:D5:A9:FC:FD:B2:CF:60:FD:45:19:97:F6:88:25:32:16 X509v3 Authority Key Identifier: keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/3130332e3233382e3230342e302f32322d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.204.0/22 Signature Algorithm: sha256WithRSAEncryption 02:8e:a0:c7:4d:01:0f:00:43:17:87:77:df:ba:fa:ec:23:95: 9c:b2:85:bc:67:c3:9c:c3:7f:68:1c:f5:8e:3e:04:7b:f2:71: 29:60:af:52:25:ca:fe:c9:10:03:41:8a:ef:f4:0f:a2:f7:55: 85:87:c2:d2:5c:93:57:a9:0f:cd:62:d3:18:cb:60:02:85:e8: 54:3f:fe:44:67:0f:d3:02:4b:35:a7:01:a2:8c:52:d6:15:93: 61:9b:41:16:38:92:a6:bb:85:e0:b9:54:61:2a:fc:90:cc:ea: 79:08:00:b2:85:1e:cc:22:f3:ce:4c:c0:ec:52:e7:15:c8:25: 5d:da:67:5b:b2:86:fe:85:60:ee:0b:cc:8f:29:18:b6:f7:7b: a4:d1:17:5f:3b:54:4e:20:82:c3:02:b3:8e:81:b9:d9:89:21: 00:3c:d5:d0:ba:50:7e:90:e4:19:84:15:6a:9a:33:11:ad:dc: df:dd:03:92:cb:23:b2:76:a5:3a:63:0e:54:37:1f:43:c4:df: b6:db:68:a3:c4:2a:4e:fc:bd:4a:46:74:04:c6:36:bf:a3:95: 20:dc:cd:09:29:59:43:44:db:10:2d:c9:19:2b:9b:34:35:f0: e5:c3:1b:dd:9c:6d:f0:33:bd:fd:44:2d:24:30:9a:23:cb:26: 9f:ec:ae:33 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXxgJlMo9W2oQo7+5Y9mGwjCNqPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBB NjFDRTA2MTAeFw0yNjA0MjgwNjMyMDZaFw0yNzA0MjcwNjM3MDZaMDMxMTAvBgNV BAMTKEQ1M0Y1NjYzRDVBOUZDRkRCMkNGNjBGRDQ1MTk5N0Y2ODgyNTMyMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZnTzuHS6CDVly4Mchm52fz2p lGQyScNMWbAeiXkot+aqoF73VaVktcIKxLM34u5TpJ/1m+hwqUEKI6veSm9JTwQh nfz/cJfypv0x2jBX/6lCP/COG6yMsR7wAkIBRJURd8++Cr8sBdIi1M0q63GXSCJM DrEBJle2xLja6fud9F1AQmQGArhqNMxV+1nPAA0CVgoKIrITIqx8pLMX3T/lXlCm pxsPnRMprZS6zVSgQOZUQ4XtHGRMevV7BKYs1/b7jwvr7zsJxcriPznwQtdFyERH uOjzT91/ro373+MAXO+kTHPwwrVxdsvJQ/xpBDdWRLIZvNQycAESkEABLWRxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU1T9WY9Wp/P2yz2D9RRmX9oglMhYwHwYDVR0j BBgwFoAUM0uT929byqogMOW92M7yIKYc4GEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTM5NDIwNzEzOTk1NDY5My8wLzMzNEI5M0Y3NkY1QkNBQUEyMDMwRTVCREQ4Q0VG MjIwQTYxQ0UwNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBBNjFDRTA2MS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwMTM5NDIwNzEzOTk1NDY5My8wLzMxMzAzMzJlMzIz MzM4MmUzMjMwMzQyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfuzDANBgkqhkiG9w0BAQsFAAOCAQEAAo6gx00BDwBDF4d337r67COV nLKFvGfDnMN/aBz1jj4Ee/JxKWCvUiXK/skQA0GK7/QPovdVhYfC0lyTV6kPzWLT GMtgAoXoVD/+RGcP0wJLNacBooxS1hWTYZtBFjiSpruF4LlUYSr8kMzqeQgAsoUe zCLzzkzA7FLnFcglXdpnW7KG/oVg7gvMjykYtvd7pNEXXztUTiCCwwKzjoG52Ykh ADzV0LpQfpDkGYQVapozEa3c390DkssjsnalOmMOVDcfQ8Tftttoo8QqTvy9SkZ0 BMY2v6OVINzNCSlZQ0TbEC3JGSubNDXw5cMb3Zxt8DO9/UQtJDCaI8smn+yuMw== -----END CERTIFICATE-----Generated at Wed May 13 14:59:13 2026 by rpki-client