$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e302e302f31362d3136203d3e2030.roa File: 3131382e36362e302e302f31362d3136203d3e2030.roa (raw, json) Hash identifier: FU7Ui3r0rlv0kg+piNK9rsckmrMHis+1qjUvu4dliZU= Subject key identifier: 99:CB:01:64:2B:D4:E1:59:AD:EB:A7:7A:75:0F:9A:F1:9E:66:D6:46 Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 370C5D2AC2462446389DA043BE699078B2ACBBF4 Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e302e302f31362d3136203d3e2030.roa Signing time: Thu 07 May 2026 02:21:20 +0000 ROA not before: Thu 07 May 2026 02:16:20 +0000 ROA not after: Thu 06 May 2027 02:21:20 +0000 asID: 0 IP address blocks: 118.66.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0c:5d:2a:c2:46:24:46:38:9d:a0:43:be:69:90:78:b2:ac:bb:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 7 02:16:20 2026 GMT Not After : May 6 02:21:20 2027 GMT Subject: CN=99CB01642BD4E159ADEBA77A750F9AF19E66D646 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ad:2c:bc:b4:e9:24:94:29:5b:d3:8e:93:1b: a0:c2:af:44:0a:16:d4:10:77:ac:b2:9a:31:de:a2: 60:9f:14:8a:e0:6c:6f:6e:c0:57:68:6a:f9:95:e4: 50:88:75:b9:08:48:b7:5c:90:10:ac:b5:6f:d4:7a: d5:36:cf:1b:c7:a9:35:66:e0:42:d0:1e:57:4e:c3: 12:23:85:58:ac:be:5f:ca:1c:36:ce:43:a4:97:b3: 06:b0:9a:bb:87:86:15:2d:2c:68:56:c2:35:17:fc: 2d:cf:15:d1:be:1a:5f:17:ae:04:14:a9:4d:15:dc: f3:c7:13:52:f2:5b:80:7f:9e:e2:8e:67:4f:d7:7a: b0:0f:a8:45:39:dc:f1:5b:d5:15:a6:9c:16:ef:33: ce:59:65:4b:08:a4:77:76:d1:68:4b:4f:b4:03:68: 5a:8e:9c:1c:c8:0d:7d:8b:32:e2:e5:e9:0e:eb:f8: f0:e5:65:97:f9:f8:24:3a:e5:40:6c:fa:fc:d3:ad: 34:04:f0:6b:d9:01:45:c0:d6:b7:7a:4a:6e:41:6f: b6:0c:2a:2e:e3:7e:1e:69:b9:ba:7a:73:09:3b:e2: ef:92:58:01:8a:be:bd:8a:2f:7a:9f:17:5c:12:39: 87:a3:da:b0:aa:d6:96:71:db:30:68:f0:89:29:46: b3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:CB:01:64:2B:D4:E1:59:AD:EB:A7:7A:75:0F:9A:F1:9E:66:D6:46 X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/3131382e36362e302e302f31362d3136203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 118.66.0.0/16 Signature Algorithm: sha256WithRSAEncryption 85:b8:94:3b:94:e1:ee:5b:d3:5c:c6:55:c6:b2:8b:5d:2b:a2: de:8f:e6:4a:18:9a:d5:7a:11:ec:29:10:5c:6b:48:d5:87:97: 40:f8:6d:38:c8:b6:3d:8f:c2:aa:d0:f5:28:30:6d:e4:25:a6: 45:2b:7e:c6:bc:1e:c2:5a:4e:40:f3:0c:c6:b4:90:d9:1f:a5: 3e:9b:01:d3:91:f5:f3:f7:75:ae:6e:8f:54:11:0f:fb:ee:ae: da:ae:9d:d9:71:36:27:a2:98:c2:47:15:c6:5c:fb:ff:7a:d3: 67:35:12:17:37:30:38:67:f8:c1:da:65:d4:16:af:5d:91:40: 06:ab:40:ae:5a:ed:78:14:8c:42:1f:3a:bc:ae:85:9f:5e:22: b3:15:49:a0:19:0a:e0:88:fc:99:13:1b:ba:f7:8f:e4:ae:5c: 50:0d:88:8a:dc:ab:ac:12:7f:30:29:ba:c8:28:1b:c9:18:b1: 5e:33:b6:dc:b0:b9:5b:03:60:54:49:7f:43:71:44:30:59:9c: 0d:79:d6:15:b8:fa:72:8b:64:da:f7:e2:d2:2f:87:79:96:de: ee:5c:4e:ab:b8:76:19:8f:1e:ac:07:ee:0e:25:cc:14:6b:e2: f4:d8:c0:d7:35:c5:4a:de:bb:ab:4b:b8:e0:a7:57:f8:b0:6f: 36:f7:d0:29 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgIUNwxdKsJGJEY4naBDvmmQeLKsu/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDcwMjE2MjBaFw0yNzA1MDYwMjIxMjBaMDMxMTAvBgNV BAMTKDk5Q0IwMTY0MkJENEUxNTlBREVCQTc3QTc1MEY5QUYxOUU2NkQ2NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxrSy8tOkklClb046TG6DCr0QK FtQQd6yymjHeomCfFIrgbG9uwFdoavmV5FCIdbkISLdckBCstW/UetU2zxvHqTVm 4ELQHldOwxIjhVisvl/KHDbOQ6SXswawmruHhhUtLGhWwjUX/C3PFdG+Gl8XrgQU qU0V3PPHE1LyW4B/nuKOZ0/XerAPqEU53PFb1RWmnBbvM85ZZUsIpHd20WhLT7QD aFqOnBzIDX2LMuLl6Q7r+PDlZZf5+CQ65UBs+vzTrTQE8GvZAUXA1rd6Sm5Bb7YM Ki7jfh5pubp6cwk74u+SWAGKvr2KL3qfF1wSOYej2rCq1pZx2zBo8IkpRrMzAgMB AAGjggIGMIICAjAdBgNVHQ4EFgQUmcsBZCvU4Vmt66d6dQ+a8Z5m1kYwHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzEzMTM4MmUzNjM2 MmUzMDJlMzAyZjMxMzYyZDMxMzYyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAdkIwDQYJ KoZIhvcNAQELBQADggEBAIW4lDuU4e5b01zGVcayi10rot6P5koYmtV6EewpEFxr SNWHl0D4bTjItj2PwqrQ9SgwbeQlpkUrfsa8HsJaTkDzDMa0kNkfpT6bAdOR9fP3 da5uj1QRD/vurtqundlxNieimMJHFcZc+/9602c1Ehc3MDhn+MHaZdQWr12RQAar QK5a7XgUjEIfOryuhZ9eIrMVSaAZCuCI/JkTG7r3j+SuXFANiIrcq6wSfzApusgo G8kYsV4zttywuVsDYFRJf0NxRDBZnA151hW4+nKLZNr34tIvh3mW3u5cTqu4dhmP HqwH7g4lzBRr4vTYwNc1xUreu6tLuOCnV/iwbzb30Ck= -----END CERTIFICATE-----Generated at Tue May 12 21:38:53 2026 by rpki-client