$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32322d3232203d3e2030.roa File: 3130332e3233352e3134342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: paQsZYAudDeP1ZZucgzNUmXV3elB/DZYBKRJnx3f5/w= Subject key identifier: 84:1C:E4:10:C4:95:E1:FA:D5:02:01:83:2C:52:AE:41:D1:1B:4C:19 Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 2E907F350BC626CD1B529B343CF358990400AE9B Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32322d3232203d3e2030.roa Signing time: Thu 07 May 2026 02:21:20 +0000 ROA not before: Thu 07 May 2026 02:16:20 +0000 ROA not after: Thu 06 May 2027 02:21:20 +0000 asID: 0 IP address blocks: 103.235.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:90:7f:35:0b:c6:26:cd:1b:52:9b:34:3c:f3:58:99:04:00:ae:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 7 02:16:20 2026 GMT Not After : May 6 02:21:20 2027 GMT Subject: CN=841CE410C495E1FAD50201832C52AE41D11B4C19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:70:0f:86:5b:40:2a:db:f1:bc:c8:fc:85:2d: 77:14:51:8a:0e:1e:2f:9a:af:ff:fe:91:40:03:74: f3:41:af:42:7b:38:5a:0a:96:10:f6:76:95:a0:25: 95:96:24:80:b3:ef:a4:dd:ce:63:7e:50:34:0a:5d: ca:91:f1:50:03:60:74:95:80:db:ae:38:55:46:97: 0c:f4:63:57:b7:c9:1c:80:ce:ee:aa:b5:6a:e9:cc: 61:89:4f:90:c7:d5:83:1a:a4:57:e8:37:d5:6c:0f: f2:b5:4c:e4:ff:1b:04:5c:bd:52:1d:77:a4:dd:49: 0b:de:b9:9b:ba:49:2a:f2:40:6e:7f:87:1e:51:a4: 24:11:b3:3e:76:77:94:ef:53:15:eb:7a:30:cc:97: 20:59:97:24:a5:87:28:9b:62:c5:a0:c9:c4:92:0b: 43:f5:a4:29:5a:fe:c0:de:02:b1:cc:f3:e9:c5:e4: 22:4f:9b:23:2f:ae:fa:7e:b1:87:95:ce:74:83:6e: d9:d6:b5:52:e6:64:2e:b0:76:7c:a3:64:a0:d5:d5: 68:ca:68:15:5d:b7:52:97:3c:7a:d7:6e:3c:4e:ed: c3:f2:77:0a:7f:c0:93:bf:84:39:9d:03:f8:96:bf: 46:c5:53:64:0f:08:96:d3:26:97:a4:62:10:2f:58: ca:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:E4:10:C4:95:E1:FA:D5:02:01:83:2C:52:AE:41:D1:1B:4C:19 X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3130332e3233352e3134342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.144.0/22 Signature Algorithm: sha256WithRSAEncryption 86:7e:c8:c8:0f:de:9f:e6:16:95:30:89:c9:c6:1a:4c:13:82: 8a:2c:8a:e1:a8:6a:61:4e:b0:17:bc:c3:b3:ae:02:2f:cf:9f: 6c:8d:73:12:e6:79:ce:fa:50:86:29:17:76:02:51:6c:bc:f5: 98:7d:e5:b1:f7:17:85:65:55:74:b8:b2:f8:4e:bd:96:9a:bf: eb:3d:37:0f:6c:05:e8:23:f1:b1:b6:c4:a3:b8:12:7c:96:a2: 67:12:fc:46:0e:46:40:e5:ce:5e:98:74:c6:39:45:40:a9:c7: ab:08:3a:16:25:6f:36:75:0b:7c:a9:85:b4:95:ef:7a:01:17: dd:d3:b6:c7:ef:28:3b:85:a5:48:d0:90:4a:7d:23:d1:ab:ca: 8d:3e:a1:e7:eb:b0:fc:cf:77:99:fb:a5:c9:45:68:77:7d:4d: 8c:f4:9e:11:5d:7f:59:98:ab:ef:2e:78:6a:e2:34:5d:5b:ee: 41:9e:02:1e:b3:a6:cb:94:16:3c:99:36:2e:1e:46:14:5a:04: 47:ae:ab:e4:c2:a5:33:c6:64:b7:a3:d7:15:f8:a4:4a:29:0c: ed:18:43:ec:12:1f:01:62:4b:d0:5a:85:46:d2:9b:9e:47:52: 83:54:cc:40:16:3a:be:a5:3d:ac:84:cd:ba:76:78:a6:af:f5: 5f:16:8d:56 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULpB/NQvGJs0bUps0PPNYmQQArpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDcwMjE2MjBaFw0yNzA1MDYwMjIxMjBaMDMxMTAvBgNV BAMTKDg0MUNFNDEwQzQ5NUUxRkFENTAyMDE4MzJDNTJBRTQxRDExQjRDMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkcA+GW0Aq2/G8yPyFLXcUUYoO Hi+ar//+kUADdPNBr0J7OFoKlhD2dpWgJZWWJICz76TdzmN+UDQKXcqR8VADYHSV gNuuOFVGlwz0Y1e3yRyAzu6qtWrpzGGJT5DH1YMapFfoN9VsD/K1TOT/GwRcvVId d6TdSQveuZu6SSryQG5/hx5RpCQRsz52d5TvUxXrejDMlyBZlySlhyibYsWgycSS C0P1pCla/sDeArHM8+nF5CJPmyMvrvp+sYeVznSDbtnWtVLmZC6wdnyjZKDV1WjK aBVdt1KXPHrXbjxO7cPydwp/wJO/hDmdA/iWv0bFU2QPCJbTJpekYhAvWMojAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUhBzkEMSV4frVAgGDLFKuQdEbTBkwHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzEzMDMzMmUzMjMz MzUyZTMxMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z+uQMA0GCSqGSIb3DQEBCwUAA4IBAQCGfsjID96f5haVMInJxhpME4KKLIrhqGph TrAXvMOzrgIvz59sjXMS5nnO+lCGKRd2AlFsvPWYfeWx9xeFZVV0uLL4Tr2Wmr/r PTcPbAXoI/GxtsSjuBJ8lqJnEvxGDkZA5c5emHTGOUVAqcerCDoWJW82dQt8qYW0 le96ARfd07bH7yg7haVI0JBKfSPRq8qNPqHn67D8z3eZ+6XJRWh3fU2M9J4RXX9Z mKvvLnhq4jRdW+5BngIes6bLlBY8mTYuHkYUWgRHrqvkwqUzxmS3o9cV+KRKKQzt GEPsEh8BYkvQWoVG0pueR1KDVMxAFjq+pT2shM26dnimr/VfFo1W -----END CERTIFICATE-----Generated at Wed May 13 05:50:44 2026 by rpki-client