$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3232342e302f32322d3232203d3e20313436383137.roa File: 3136302e3230322e3232342e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: ocfqWRIN3ZzfT5TchZD/nwtGQJCMQs5P1Lx6ru1wskg= Subject key identifier: 7A:53:40:2E:CF:73:75:30:4C:66:1C:2C:0D:08:46:DF:CA:16:B8:DE Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 4BBB3388D3547446D025789AB87B27D98A79D99C Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3232342e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:41:54 +0000 ROA not before: Fri 08 May 2026 09:36:54 +0000 ROA not after: Fri 07 May 2027 09:41:54 +0000 asID: 146817 IP address blocks: 160.202.224.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:bb:33:88:d3:54:74:46:d0:25:78:9a:b8:7b:27:d9:8a:79:d9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:36:54 2026 GMT Not After : May 7 09:41:54 2027 GMT Subject: CN=7A53402ECF7375304C661C2C0D0846DFCA16B8DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:94:07:2e:22:38:da:45:9e:5c:91:6a:f2:8a: 67:ab:9a:1c:ac:aa:24:5a:fa:02:11:55:06:69:ed: f7:1f:84:1c:6a:e7:c7:2a:9c:c0:f6:71:11:74:26: 77:1d:8e:24:0a:5c:bc:53:11:1f:f2:b6:34:51:3a: 38:45:e2:fd:8f:41:7a:d7:17:75:41:1e:00:7e:26: 63:34:a1:10:0c:75:d9:b9:47:cb:0a:e6:72:87:e3: 4e:77:a9:f5:f1:39:d3:5a:b8:4e:37:86:e1:b8:14: 79:02:6f:1e:66:06:f8:ec:9f:a1:78:93:28:73:03: 67:2c:08:14:94:e3:f0:07:e0:13:17:3a:59:6e:7f: 3c:79:af:3d:b1:c7:67:00:d3:36:6c:d1:63:b6:6c: 2f:c2:07:50:1d:a0:ae:18:4a:b9:08:50:7c:6c:c0: ea:cb:30:80:22:61:4f:f4:66:11:ef:0d:a8:4d:ae: 12:c1:45:1e:39:d1:ab:c7:18:c1:65:3a:dc:af:c8: 18:b7:c9:8b:a0:67:38:37:2d:c3:ba:cc:01:52:9d: eb:10:1a:b2:63:06:80:ae:ea:76:99:e3:9a:f9:b4: 40:64:59:cd:02:37:9d:9e:13:1c:ec:c3:e9:8d:24: e8:12:93:d6:60:0a:51:fc:11:c3:24:df:39:f5:d9: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:53:40:2E:CF:73:75:30:4C:66:1C:2C:0D:08:46:DF:CA:16:B8:DE X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3232342e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.202.224.0/22 Signature Algorithm: sha256WithRSAEncryption d2:35:bf:1f:55:b3:10:43:c9:96:7c:c9:9d:67:87:4a:88:99: 94:3f:9d:11:a6:13:55:bd:40:9a:89:cf:1c:03:f1:f6:33:ea: 31:f1:a6:bb:f8:22:e0:3c:e4:4d:fd:5c:75:df:de:5b:65:99: 79:bd:25:1b:69:6a:70:3d:19:57:19:63:d2:66:ec:79:32:7c: 40:28:73:b3:f5:b2:7b:cb:03:c2:8f:98:7e:86:5d:8f:c1:f4: 66:cd:3d:d5:7c:d7:de:2f:43:27:0d:c6:aa:df:3f:a5:22:9a: 53:be:ce:96:b2:05:be:e8:cf:c8:90:63:d2:fc:88:0a:3d:4a: e1:9f:ee:52:54:21:fc:1d:27:cb:5e:a0:b5:23:e8:ff:f6:5d: 4e:d6:6c:46:77:8b:79:85:06:54:12:ab:c1:86:73:c2:af:ac: 10:7f:f6:61:b8:a5:07:0c:d5:9d:99:70:39:3c:df:ae:ca:97: 79:7e:da:58:69:04:92:81:70:e1:11:e6:b3:d7:b7:73:e2:45: 02:f0:3b:f6:1a:7c:85:5a:e0:c2:fe:3e:1b:db:54:1c:db:fc: a4:91:8b:aa:58:de:db:09:22:24:e3:2e:33:a4:71:20:9a:d2: 20:22:79:d9:40:0e:34:e8:8d:4f:14:5e:66:df:fa:b2:26:fb: 32:74:65:a3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUS7sziNNUdEbQJXiauHsn2Yp52ZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTM2NTRaFw0yNzA1MDcwOTQxNTRaMDMxMTAvBgNV BAMTKDdBNTM0MDJFQ0Y3Mzc1MzA0QzY2MUMyQzBEMDg0NkRGQ0ExNkI4REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGlAcuIjjaRZ5ckWryimermhys qiRa+gIRVQZp7fcfhBxq58cqnMD2cRF0JncdjiQKXLxTER/ytjRROjhF4v2PQXrX F3VBHgB+JmM0oRAMddm5R8sK5nKH4053qfXxOdNauE43huG4FHkCbx5mBvjsn6F4 kyhzA2csCBSU4/AH4BMXOllufzx5rz2xx2cA0zZs0WO2bC/CB1AdoK4YSrkIUHxs wOrLMIAiYU/0ZhHvDahNrhLBRR450avHGMFlOtyvyBi3yYugZzg3LcO6zAFSnesQ GrJjBoCu6naZ45r5tEBkWc0CN52eExzsw+mNJOgSk9ZgClH8EcMk3zn12QQHAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUelNALs9zdTBMZhwsDQhG38oWuN4wHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzNjMwMmUz MjMwMzIyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqDK4DANBgkqhkiG9w0BAQsFAAOCAQEA0jW/H1WzEEPJlnzJ nWeHSoiZlD+dEaYTVb1AmonPHAPx9jPqMfGmu/gi4DzkTf1cdd/eW2WZeb0lG2lq cD0ZVxlj0mbseTJ8QChzs/Wye8sDwo+YfoZdj8H0Zs091XzX3i9DJw3Gqt8/pSKa U77OlrIFvujPyJBj0vyICj1K4Z/uUlQh/B0ny16gtSPo//ZdTtZsRneLeYUGVBKr wYZzwq+sEH/2YbilBwzVnZlwOTzfrsqXeX7aWGkEkoFw4RHms9e3c+JFAvA79hp8 hVrgwv4+G9tUHNv8pJGLqlje2wkiJOMuM6RxIJrSICJ52UAONOiNTxReZt/6sib7 MnRlow== -----END CERTIFICATE-----Generated at Wed May 13 20:55:29 2026 by rpki-client