$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104977264086417417/0/3130332e32362e37362e302f32322d3232203d3e203233363530.roa File: 3130332e32362e37362e302f32322d3232203d3e203233363530.roa (raw, json) Hash identifier: 9Ixfxmr2fgpj9kcGLZ/WcP2sJnuni9uiRkmwCPFkX8w= Subject key identifier: 97:3D:88:BF:88:B5:86:11:E3:BC:8E:30:E6:35:94:94:DE:5C:69:0B Certificate issuer: /CN=128A765795FE2957B26881E441F8240B52742BED Certificate serial: 6B1979E02E0270EF486AEB41645FDAA2BEEFB708 Authority key identifier: 12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/3130332e32362e37362e302f32322d3232203d3e203233363530.roa Signing time: Fri 08 May 2026 10:07:02 +0000 ROA not before: Fri 08 May 2026 10:02:02 +0000 ROA not after: Fri 07 May 2027 10:07:02 +0000 asID: 23650 IP address blocks: 103.26.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:19:79:e0:2e:02:70:ef:48:6a:eb:41:64:5f:da:a2:be:ef:b7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=128A765795FE2957B26881E441F8240B52742BED Validity Not Before: May 8 10:02:02 2026 GMT Not After : May 7 10:07:02 2027 GMT Subject: CN=973D88BF88B58611E3BC8E30E6359494DE5C690B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:c0:99:02:e0:74:24:6f:00:40:8b:bf:a9: 56:7d:b4:7c:5c:19:f4:be:76:a0:81:de:1f:14:3c: 3f:36:fc:40:31:50:a9:0b:bf:e6:9e:d2:df:8e:cc: 48:e4:ed:85:9d:45:39:30:a6:14:da:ec:5c:5b:9b: d0:45:29:b5:cf:e6:70:5f:a5:4b:45:cd:1e:be:33: e9:9d:af:c1:ab:26:38:e4:60:b2:56:42:3a:62:86: 71:b0:9d:51:ca:54:22:70:c2:54:fe:57:32:01:89: 4b:23:f2:ee:11:55:79:00:02:c3:35:6b:6e:3a:a6: 4c:b8:39:5d:f0:c4:19:4f:50:93:5e:0d:b1:dd:67: e2:4d:b5:2e:9e:5c:19:8c:2e:5d:5f:52:b6:91:24: 15:9b:57:02:99:34:e7:9d:3a:6d:0a:43:e0:48:8e: 85:e0:d4:92:80:c3:44:fe:a6:81:08:51:52:00:1a: c8:2f:2c:9c:ad:56:04:35:57:62:88:19:44:8c:ce: 17:96:5d:3f:5d:a5:05:a1:ac:77:da:e1:e8:dc:6d: e4:b1:94:b4:21:4a:53:ba:5a:9e:4b:50:0a:51:3c: 86:23:0d:b6:d8:7c:81:63:94:31:47:0b:58:03:16: cc:e4:45:0e:d8:6e:0f:a1:1a:4a:80:af:3e:a5:7c: 47:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:3D:88:BF:88:B5:86:11:E3:BC:8E:30:E6:35:94:94:DE:5C:69:0B X509v3 Authority Key Identifier: keyid:12:8A:76:57:95:FE:29:57:B2:68:81:E4:41:F8:24:0B:52:74:2B:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/128A765795FE2957B26881E441F8240B52742BED.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/128A765795FE2957B26881E441F8240B52742BED.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104977264086417417/0/3130332e32362e37362e302f32322d3232203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.26.76.0/22 Signature Algorithm: sha256WithRSAEncryption 3d:29:8f:30:9a:39:b2:f6:5f:b1:9f:44:38:f9:86:e7:f8:5a: 5e:8b:93:fb:4c:db:1d:34:c6:b4:4a:37:9a:b8:aa:b8:dc:26: 7b:59:77:e7:ff:a4:9f:22:eb:0a:2f:a5:74:74:63:87:fd:45: a2:58:1b:f8:72:e7:ef:58:e5:31:aa:65:af:a5:d6:ed:87:1f: 3c:6b:87:2c:41:af:11:53:d4:8e:0c:bd:db:97:8f:5b:59:d1: 01:8a:e0:dd:34:7b:6a:67:4a:61:f2:a4:9b:07:bb:6c:fd:51: ff:33:13:20:40:39:f3:30:21:fd:df:78:00:90:06:76:81:b9: 6d:db:8a:f7:c6:d8:34:e8:cb:40:a7:87:66:b7:32:8c:f7:31: e6:4e:3a:d4:10:3f:30:26:5c:12:3a:fd:b1:f0:47:8a:20:88: 46:00:4c:c3:75:b5:21:85:e0:c4:e3:1d:ed:f8:ec:c9:bd:cf: bf:55:d0:c1:37:0e:a9:3b:9e:57:2a:75:23:bb:52:0c:f4:b9: 5b:14:a6:00:22:bf:a4:8f:97:c8:4c:b3:b4:e8:8a:00:e4:95: 83:65:11:96:c6:78:ee:c2:7f:88:98:24:87:d1:7f:53:7e:31: 3e:62:02:6c:d5:43:21:e9:26:c5:13:7c:5a:cd:2d:35:25:8d: 65:c0:78:82 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUaxl54C4CcO9IautBZF/aor7vtwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1 Mjc0MkJFRDAeFw0yNjA1MDgxMDAyMDJaFw0yNzA1MDcxMDA3MDJaMDMxMTAvBgNV BAMTKDk3M0Q4OEJGODhCNTg2MTFFM0JDOEUzMEU2MzU5NDk0REU1QzY5MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAcCZAuB0JG8AQIu/qVZ9tHxc GfS+dqCB3h8UPD82/EAxUKkLv+ae0t+OzEjk7YWdRTkwphTa7Fxbm9BFKbXP5nBf pUtFzR6+M+mdr8GrJjjkYLJWQjpihnGwnVHKVCJwwlT+VzIBiUsj8u4RVXkAAsM1 a246pky4OV3wxBlPUJNeDbHdZ+JNtS6eXBmMLl1fUraRJBWbVwKZNOedOm0KQ+BI joXg1JKAw0T+poEIUVIAGsgvLJytVgQ1V2KIGUSMzheWXT9dpQWhrHfa4ejcbeSx lLQhSlO6Wp5LUApRPIYjDbbYfIFjlDFHC1gDFszkRQ7Ybg+hGkqArz6lfEdbAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUlz2Iv4i1hhHjvI4w5jWUlN5caQswHwYDVR0j BBgwFoAUEop2V5X+KVeyaIHkQfgkC1J0K+0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk3NzI2NDA4NjQxNzQxNy8wLzEyOEE3NjU3OTVGRTI5NTdCMjY4ODFFNDQxRjgy NDBCNTI3NDJCRUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTI4QTc2NTc5NUZFMjk1N0IyNjg4MUU0NDFGODI0MEI1Mjc0MkJFRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0OTc3MjY0MDg2NDE3NDE3LzAvMzEzMDMzMmUzMjM2 MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcaTDANBgkqhkiG9w0BAQsFAAOCAQEAPSmPMJo5svZfsZ9EOPmG5/haXouT +0zbHTTGtEo3mriquNwme1l35/+knyLrCi+ldHRjh/1Folgb+HLn71jlMaplr6XW 7YcfPGuHLEGvEVPUjgy925ePW1nRAYrg3TR7amdKYfKkmwe7bP1R/zMTIEA58zAh /d94AJAGdoG5bduK98bYNOjLQKeHZrcyjPcx5k461BA/MCZcEjr9sfBHiiCIRgBM w3W1IYXgxOMd7fjsyb3Pv1XQwTcOqTueVyp1I7tSDPS5WxSmACK/pI+XyEyztOiK AOSVg2URlsZ47sJ/iJgkh9F/U34xPmICbNVDIekmxRN8Ws0tNSWNZcB4gg== -----END CERTIFICATE-----Generated at Wed May 13 12:33:02 2026 by rpki-client