$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3138382e302f32322d3232203d3e20313436383137.roa File: 3130332e3231372e3138382e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: qNh8F/V2lg/ed+JyLGu1bzgglae41QVwVHwcXDuFqWg= Subject key identifier: B8:28:A5:A7:F5:32:B0:7C:5D:FE:3A:AF:AC:F4:A7:3D:76:BB:60:C1 Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 48A1FEF8AE8B7213CB6D951058533BA93D3C4FCC Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3138382e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:34:30 +0000 ROA not before: Fri 08 May 2026 09:29:30 +0000 ROA not after: Fri 07 May 2027 09:34:30 +0000 asID: 146817 IP address blocks: 103.217.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:a1:fe:f8:ae:8b:72:13:cb:6d:95:10:58:53:3b:a9:3d:3c:4f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:29:30 2026 GMT Not After : May 7 09:34:30 2027 GMT Subject: CN=B828A5A7F532B07C5DFE3AAFACF4A73D76BB60C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:c8:30:4b:da:b7:93:2d:82:c2:4d:d8:76: 12:ad:18:30:ca:34:16:ad:44:77:0c:a3:99:2c:cc: 13:5e:c0:f3:2c:09:45:13:9e:f0:6e:85:a2:70:c8: fe:36:78:fb:55:f0:ea:b7:7f:c4:35:4d:4f:1c:17: 66:c3:e8:e7:80:9e:39:8a:ea:16:0c:cf:cd:43:9b: 46:91:9a:18:f9:56:ff:c3:aa:ec:b2:5e:35:5a:84: e7:c0:0a:38:bb:b6:21:48:d6:17:fb:94:be:28:d1: d1:cb:3a:df:b9:b3:a0:fd:7f:36:0b:b4:88:0b:a0: 81:72:b4:13:0c:43:b3:05:70:d1:e2:b3:08:b2:5d: 33:2a:9f:09:d2:a2:4a:cb:2d:8e:1c:2b:d9:1e:4c: aa:91:8c:4e:ab:c4:5f:43:a4:3a:7b:86:4d:5e:02: 24:9f:59:07:3b:d5:d4:56:87:98:b9:7e:29:27:cd: bc:c3:57:ce:4a:f2:b6:1f:70:1c:bf:b8:ff:f7:b2: f4:bf:93:7b:6f:42:61:74:27:50:58:99:c0:92:ff: 31:8b:b3:a3:b2:9e:dc:b2:11:8d:30:c0:44:40:25: 01:47:c7:3e:cc:3e:1e:fb:30:db:fb:57:94:4b:a7: c0:23:3a:91:e2:45:53:92:bc:e5:38:f7:98:24:a3: 4e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:28:A5:A7:F5:32:B0:7C:5D:FE:3A:AF:AC:F4:A7:3D:76:BB:60:C1 X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3130332e3231372e3138382e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.217.188.0/22 Signature Algorithm: sha256WithRSAEncryption 72:e7:1f:dc:5c:ce:f5:64:af:42:1f:3f:45:c3:e9:7c:2e:56: 2f:3b:7d:10:d4:54:77:93:b8:13:10:07:e5:40:40:9e:c8:79: 26:81:f6:2d:89:b0:c6:54:fd:dc:9d:a9:58:09:f4:bf:d0:31: 1e:1e:d5:f0:59:5e:50:ef:5c:b5:07:3f:75:4f:1f:1a:bf:82: 25:74:b1:76:b8:eb:ab:29:bb:04:95:e2:d8:92:93:9f:ca:f2: cb:ec:14:08:e5:ad:03:7e:d3:ca:31:cb:fc:a7:17:b4:ab:23: a0:85:6f:ca:d9:ce:45:96:24:ee:da:92:44:5e:12:44:b9:fc: 24:ab:99:46:2e:06:6b:f1:59:7e:c2:ce:94:4e:22:bb:dd:a6: 27:9a:c6:1a:93:cb:8c:a4:c2:27:95:8c:a8:d3:db:7c:bc:87: 16:0c:91:fa:c2:d0:d2:87:db:1a:ad:1d:3d:a5:26:25:46:3b: a9:e9:e5:10:03:08:78:9f:82:e1:3a:40:ce:af:04:9b:fa:dd: 1d:7c:60:dd:32:fe:68:a6:cf:e5:c4:8c:a9:20:f1:47:b7:d9: 1c:60:e1:22:4e:68:a4:b4:70:11:1d:7a:55:5f:47:64:ed:1b: 9d:24:3e:be:cb:bd:6e:a1:3c:9e:e5:7e:c4:22:ba:55:7d:3e: 0e:61:d7:6e -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUSKH++K6LchPLbZUQWFM7qT08T8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTI5MzBaFw0yNzA1MDcwOTM0MzBaMDMxMTAvBgNV BAMTKEI4MjhBNUE3RjUzMkIwN0M1REZFM0FBRkFDRjRBNzNENzZCQjYwQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pcgwS9q3ky2Cwk3YdhKtGDDK NBatRHcMo5kszBNewPMsCUUTnvBuhaJwyP42ePtV8Oq3f8Q1TU8cF2bD6OeAnjmK 6hYMz81Dm0aRmhj5Vv/DquyyXjVahOfACji7tiFI1hf7lL4o0dHLOt+5s6D9fzYL tIgLoIFytBMMQ7MFcNHiswiyXTMqnwnSokrLLY4cK9keTKqRjE6rxF9DpDp7hk1e AiSfWQc71dRWh5i5fiknzbzDV85K8rYfcBy/uP/3svS/k3tvQmF0J1BYmcCS/zGL s6OyntyyEY0wwERAJQFHxz7MPh77MNv7V5RLp8AjOpHiRVOSvOU495gko04jAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUuCilp/UysHxd/jqvrPSnPXa7YMEwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzMDMzMmUz MjMxMzcyZTMxMzgzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfZvDANBgkqhkiG9w0BAQsFAAOCAQEAcucf3FzO9WSvQh8/ RcPpfC5WLzt9ENRUd5O4ExAH5UBAnsh5JoH2LYmwxlT93J2pWAn0v9AxHh7V8Fle UO9ctQc/dU8fGr+CJXSxdrjrqym7BJXi2JKTn8ryy+wUCOWtA37TyjHL/KcXtKsj oIVvytnORZYk7tqSRF4SRLn8JKuZRi4Ga/FZfsLOlE4iu92mJ5rGGpPLjKTCJ5WM qNPbfLyHFgyR+sLQ0ofbGq0dPaUmJUY7qenlEAMIeJ+C4TpAzq8Em/rdHXxg3TL+ aKbP5cSMqSDxR7fZHGDhIk5opLRwER16VV9HZO0bnSQ+vsu9bqE8nuV+xCK6VX0+ DmHXbg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:13 2026 by rpki-client