$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233362e302f32322d3232203d3e20313436383137.roa File: 3136302e3230322e3233362e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: 3KgDsIumxsyp+gD8kaiuqFdhfTOOZfZpKKNPXTP9L3U= Subject key identifier: B2:AE:FB:31:40:A9:EA:11:E4:EA:C2:33:52:46:81:9E:7E:9E:C2:55 Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 4D8F88D91A83099FBF9BD1A0C42C4D47212E2F40 Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233362e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:34:29 +0000 ROA not before: Fri 08 May 2026 09:29:29 +0000 ROA not after: Fri 07 May 2027 09:34:29 +0000 asID: 146817 IP address blocks: 160.202.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:8f:88:d9:1a:83:09:9f:bf:9b:d1:a0:c4:2c:4d:47:21:2e:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:29:29 2026 GMT Not After : May 7 09:34:29 2027 GMT Subject: CN=B2AEFB3140A9EA11E4EAC2335246819E7E9EC255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:a8:18:25:7d:a2:26:4e:b3:10:47:54:5e: f4:d0:b2:69:b4:fd:3e:d1:15:b6:5c:a2:9d:9f:73: 15:8e:64:a0:15:f0:6c:26:72:11:48:e1:6c:c5:99: 8d:e2:f1:c9:06:60:06:5b:ae:60:59:04:e6:0b:c3: 3f:36:6d:2e:63:5d:71:ec:f9:7a:69:c7:0b:bd:97: 15:9c:ff:8f:05:6a:05:bb:60:9a:d6:17:e8:94:ac: 8b:3f:ee:db:b0:ba:67:30:bf:0e:17:fa:fb:5a:dc: fa:22:12:8d:80:e3:89:68:16:50:b3:de:92:0a:d1: 22:83:45:d2:d9:9b:ab:90:a0:34:cc:dc:5b:8a:fb: f1:9a:69:b9:48:0b:44:ab:39:0f:6a:01:b4:9e:6b: c2:82:b3:d1:8c:7b:84:da:06:67:f8:e4:85:7a:72: f6:25:37:de:39:e7:ff:33:98:e0:b0:0c:b3:a9:2b: 4f:7a:6f:7c:68:4c:22:18:f3:f6:3d:4a:03:50:f2: 0c:cb:ba:8b:e5:ed:ae:2e:bd:fe:21:1b:88:7e:c2: 9a:53:ee:73:03:5b:b8:0b:2b:66:19:3e:8e:3a:8e: 67:0d:be:41:03:64:ed:6a:79:58:9a:48:e6:f5:62: 3d:04:43:ac:d9:27:ae:a1:76:9e:d0:35:64:92:07: d6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AE:FB:31:40:A9:EA:11:E4:EA:C2:33:52:46:81:9E:7E:9E:C2:55 X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/3136302e3230322e3233362e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.202.236.0/22 Signature Algorithm: sha256WithRSAEncryption 39:49:9a:3a:ad:37:8d:e8:d1:ee:73:6a:71:96:ff:d6:77:9b: 29:5f:05:50:82:85:f7:0f:7a:70:1e:f8:4f:03:81:3a:27:2f: 06:d8:b6:a4:ea:68:d6:a4:35:b4:5f:98:a7:4e:3b:ef:ed:d3: 51:53:18:3f:a1:54:fb:ff:2f:cb:29:4f:9b:e9:ce:15:e3:7f: b7:a7:11:75:10:45:dc:d6:8d:95:a2:c2:b9:89:78:1b:f3:2a: 1d:e6:32:da:a0:1c:40:de:eb:9e:e8:a7:b9:e2:b5:cc:54:cc: c6:25:18:08:d3:db:0e:59:3b:48:a0:a9:30:f6:61:1f:bc:bf: eb:96:00:11:bf:3e:54:5e:b6:f5:70:a9:72:aa:75:1f:20:09: fa:ad:90:7c:3a:5d:60:d6:16:1c:c9:86:d0:3a:fb:de:58:e4: 89:b6:35:5a:17:04:2c:e5:e2:cf:26:1d:34:0c:b0:a8:1b:71: d6:25:e1:27:f8:e3:cc:cb:a2:4e:06:21:4c:30:9b:cc:97:21: 67:36:73:bc:2e:27:d1:9b:13:7d:79:6f:ff:59:65:64:ef:fe: c0:66:0e:8c:5b:bf:58:0d:66:ed:cb:fd:a3:81:03:4e:58:0c: 6e:99:0d:0e:f6:51:77:ed:f3:8e:77:a6:45:77:2d:19:16:f3: d6:54:6b:c5 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUTY+I2RqDCZ+/m9GgxCxNRyEuL0AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTI5MjlaFw0yNzA1MDcwOTM0MjlaMDMxMTAvBgNV BAMTKEIyQUVGQjMxNDBBOUVBMTFFNEVBQzIzMzUyNDY4MTlFN0U5RUMyNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nqgYJX2iJk6zEEdUXvTQsmm0 /T7RFbZcop2fcxWOZKAV8GwmchFI4WzFmY3i8ckGYAZbrmBZBOYLwz82bS5jXXHs +Xppxwu9lxWc/48FagW7YJrWF+iUrIs/7tuwumcwvw4X+vta3PoiEo2A44loFlCz 3pIK0SKDRdLZm6uQoDTM3FuK+/GaablIC0SrOQ9qAbSea8KCs9GMe4TaBmf45IV6 cvYlN9455/8zmOCwDLOpK096b3xoTCIY8/Y9SgNQ8gzLuovl7a4uvf4hG4h+wppT 7nMDW7gLK2YZPo46jmcNvkEDZO1qeViaSOb1Yj0EQ6zZJ66hdp7QNWSSB9anAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUsq77MUCp6hHk6sIzUkaBnn6ewlUwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzEzNjMwMmUz MjMwMzIyZTMyMzMzNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAqDK7DANBgkqhkiG9w0BAQsFAAOCAQEAOUmaOq03jejR7nNq cZb/1nebKV8FUIKF9w96cB74TwOBOicvBti2pOpo1qQ1tF+Yp0477+3TUVMYP6FU +/8vyylPm+nOFeN/t6cRdRBF3NaNlaLCuYl4G/MqHeYy2qAcQN7rnuinueK1zFTM xiUYCNPbDlk7SKCpMPZhH7y/65YAEb8+VF629XCpcqp1HyAJ+q2QfDpdYNYWHMmG 0Dr73ljkibY1WhcELOXizyYdNAywqBtx1iXhJ/jjzMuiTgYhTDCbzJchZzZzvC4n 0ZsTfXlv/1llZO/+wGYOjFu/WA1m7cv9o4EDTlgMbpkNDvZRd+3zjnemRXctGRbz 1lRrxQ== -----END CERTIFICATE-----Generated at Wed May 13 20:55:15 2026 by rpki-client