$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138392e302f32342d3234203d3e20313331353232.roa File: 3137352e3130322e3138392e302f32342d3234203d3e20313331353232.roa (raw, json) Hash identifier: sdUhCn7syhlI0ZSIL66bdP8IZm1yPqxPRJeHuK0LI/Q= Subject key identifier: 33:10:CC:B2:F0:75:B9:F5:CA:99:C1:76:44:87:A5:5B:DD:F9:26:7F Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23 Certificate serial: 5D0522829FBC5A2E591A520EB859F927AA090232 Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138392e302f32342d3234203d3e20313331353232.roa Signing time: Thu 07 May 2026 02:25:28 +0000 ROA not before: Thu 07 May 2026 02:20:28 +0000 ROA not after: Thu 06 May 2027 02:25:28 +0000 asID: 131522 IP address blocks: 175.102.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:05:22:82:9f:bc:5a:2e:59:1a:52:0e:b8:59:f9:27:aa:09:02:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23 Validity Not Before: May 7 02:20:28 2026 GMT Not After : May 6 02:25:28 2027 GMT Subject: CN=3310CCB2F075B9F5CA99C1764487A55BDDF9267F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6b:fc:90:88:78:17:f3:f6:6b:43:d7:10:93: 6d:79:45:41:ef:1e:70:5a:60:a6:00:90:69:46:c6: 72:35:60:83:98:22:b1:48:69:05:39:9d:26:96:d7: b0:bf:30:57:03:2a:a2:d8:59:0c:1d:de:6b:71:c3: 13:1b:f7:bd:2c:24:c0:5f:4e:20:e8:ba:32:bb:f2: c8:5a:f3:5a:5e:1c:bf:a9:bf:b2:b7:d9:9d:84:71: 7d:bf:f2:fb:ca:67:17:1f:f4:e7:ce:32:ef:7b:c3: 7b:66:2a:c8:72:99:74:99:b5:f2:bc:c9:d2:f9:db: 5b:11:f0:14:a3:4f:cf:c1:b5:bf:cc:3e:0d:5d:a5: a2:34:fb:1b:18:06:ce:c8:54:1e:55:12:06:f7:0b: 0f:80:8e:74:18:36:62:3f:04:ac:02:cf:b7:5d:a7: 5b:02:98:bc:17:d6:03:90:94:ba:12:c2:4b:8b:25: cd:2f:62:2e:b1:72:d6:5b:1b:a2:66:94:ce:ca:6b: fb:db:a8:a7:31:65:79:42:6b:5c:0c:1f:2a:2e:db: 89:b7:b0:2b:5b:ae:fd:14:fb:36:02:6a:40:83:60: c2:03:fe:e1:f7:c1:a1:cc:12:08:8c:ae:83:a9:96: 4d:87:53:d9:38:ae:8a:c5:d9:00:4e:44:a8:ee:44: 93:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:CC:B2:F0:75:B9:F5:CA:99:C1:76:44:87:A5:5B:DD:F9:26:7F X509v3 Authority Key Identifier: keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138392e302f32342d3234203d3e20313331353232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.102.189.0/24 Signature Algorithm: sha256WithRSAEncryption 22:5f:c2:89:02:e7:c9:5a:2f:df:7a:a3:c2:54:0a:10:13:57: ed:64:47:01:ad:76:be:e6:a0:30:7a:8b:d7:08:00:9e:63:cc: 99:59:05:fc:84:be:72:16:c4:67:69:0d:4c:81:da:81:55:c9: 7a:de:55:53:3c:8f:18:ff:83:ea:88:a0:3b:a7:c8:51:b1:49: 7b:7b:81:4e:d0:5e:09:d4:66:67:ff:0c:10:40:8e:d4:da:a3: e7:0e:18:4e:b7:14:1e:3d:86:12:86:4d:7f:f1:4f:4d:6a:25: d9:54:b6:3e:61:e4:d8:52:60:91:71:be:4c:4f:37:90:8a:9e: 11:de:71:8c:8b:2a:dc:0d:53:9f:49:3e:ed:e4:f0:67:1a:57: 7b:31:19:17:48:86:f0:56:6e:2f:f4:c3:c5:61:60:4d:c6:a0: db:68:f1:fc:b7:b0:2a:ac:d1:18:5f:d9:04:a5:2e:78:27:ff: 3e:8c:f6:d7:09:15:cb:e6:5c:27:76:bc:ee:69:d3:d5:e2:4a: 33:d9:27:23:34:0d:4b:0a:48:b5:34:de:33:9e:3a:ad:e3:0b: d5:93:23:50:ff:04:49:35:62:5e:96:60:8b:45:63:6f:d1:a2: 2d:c3:67:77:17:ea:b7:29:1d:26:39:db:66:40:ee:67:93:40: f5:1d:ac:66 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUXQUigp+8Wi5ZGlIOuFn5J6oJAjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1 RTYxREIyMzAeFw0yNjA1MDcwMjIwMjhaFw0yNzA1MDYwMjI1MjhaMDMxMTAvBgNV BAMTKDMzMTBDQ0IyRjA3NUI5RjVDQTk5QzE3NjQ0ODdBNTVCRERGOTI2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVa/yQiHgX8/ZrQ9cQk215RUHv HnBaYKYAkGlGxnI1YIOYIrFIaQU5nSaW17C/MFcDKqLYWQwd3mtxwxMb970sJMBf TiDoujK78sha81peHL+pv7K32Z2EcX2/8vvKZxcf9OfOMu97w3tmKshymXSZtfK8 ydL521sR8BSjT8/Btb/MPg1dpaI0+xsYBs7IVB5VEgb3Cw+AjnQYNmI/BKwCz7dd p1sCmLwX1gOQlLoSwkuLJc0vYi6xctZbG6JmlM7Ka/vbqKcxZXlCa1wMHyou24m3 sCtbrv0U+zYCakCDYMID/uH3waHMEgiMroOplk2HU9k4rorF2QBORKjuRJPLAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUMxDMsvB1ufXKmcF2RIelW935Jn8wHwYDVR0j BBgwFoAUZYBt2FYB8yey4/TcLzRegV5h2yMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU5MjI5NTk1ODY3NTQ2MS8wLzY1ODA2REQ4NTYwMUYzMjdCMkUzRjREQzJGMzQ1 RTgxNUU2MURCMjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjU4MDZERDg1NjAxRjMyN0IyRTNGNERDMkYzNDVFODE1RTYxREIyMy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA0NTkyMjk1OTU4Njc1NDYxLzAvMzEzNzM1MmUz MTMwMzIyZTMxMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzIz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAK9mvTANBgkqhkiG9w0BAQsFAAOCAQEAIl/CiQLnyVov33qj wlQKEBNX7WRHAa12vuagMHqL1wgAnmPMmVkF/IS+chbEZ2kNTIHagVXJet5VUzyP GP+D6oigO6fIUbFJe3uBTtBeCdRmZ/8MEECO1Nqj5w4YTrcUHj2GEoZNf/FPTWol 2VS2PmHk2FJgkXG+TE83kIqeEd5xjIsq3A1Tn0k+7eTwZxpXezEZF0iG8FZuL/TD xWFgTcag22jx/LewKqzRGF/ZBKUueCf/Poz21wkVy+ZcJ3a87mnT1eJKM9knIzQN SwpItTTeM546reML1ZMjUP8ESTViXpZgi0Vjb9GiLcNndxfqtykdJjnbZkDuZ5NA 9R2sZg== -----END CERTIFICATE-----Generated at Wed May 13 16:42:58 2026 by rpki-client