$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105304750166966283/0/3130332e3138392e39322e302f32332d3233203d3e2034383337.roa File: 3130332e3138392e39322e302f32332d3233203d3e2034383337.roa (raw, json) Hash identifier: hKtoAIo2l+wyibKBamCwkOtSCO3d3PmtmFIk+WegxxE= Subject key identifier: 65:E3:ED:69:D4:CF:B1:B8:2D:35:6B:D5:65:54:8B:72:55:59:44:65 Certificate issuer: /CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Certificate serial: 2D445051073036DD141B1C3738AAB9AB292A771A Authority key identifier: 91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/3130332e3138392e39322e302f32332d3233203d3e2034383337.roa Signing time: Sat 09 May 2026 09:05:30 +0000 ROA not before: Sat 09 May 2026 09:00:30 +0000 ROA not after: Sat 08 May 2027 09:05:30 +0000 asID: 4837 IP address blocks: 103.189.92.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:56:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:44:50:51:07:30:36:dd:14:1b:1c:37:38:aa:b9:ab:29:2a:77:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD Validity Not Before: May 9 09:00:30 2026 GMT Not After : May 8 09:05:30 2027 GMT Subject: CN=65E3ED69D4CFB1B82D356BD565548B7255594465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ec:11:f4:36:65:8f:85:26:ee:e0:6e:be:47: 06:64:cb:81:ea:d5:49:79:19:72:82:50:e1:8c:d4: 05:13:00:61:23:1d:7e:0f:6b:9f:d1:11:5d:fd:8e: 0e:d6:62:09:fc:54:99:f8:0e:a8:38:94:1b:43:8c: 49:3e:41:0a:e3:94:fd:c4:0d:02:0c:f2:2b:8c:0f: ea:94:38:ae:b9:cc:5c:02:bb:ea:5f:7d:07:a2:0c: 07:f6:a4:cd:74:69:ee:6f:8b:75:90:18:05:13:45: bf:37:fc:d4:6b:c7:01:67:33:f8:a5:01:fa:bc:7a: 7e:9a:de:e3:91:72:d9:39:b1:ab:f9:38:81:ec:10: c5:06:cc:1a:b3:be:5b:e9:b2:4d:5c:66:dd:e1:bc: de:b8:2a:06:e7:a1:aa:99:bd:5d:c7:88:5b:86:25: 34:1f:91:cf:38:cc:d1:cf:87:91:24:f5:bf:bd:77: e5:b4:39:79:bd:d5:fe:4c:3c:0c:a8:43:a0:95:b3: 45:97:ed:c4:6a:bd:34:cb:20:1e:59:cb:4b:4c:fb: 92:d0:f6:1e:56:00:c7:39:df:db:69:3e:19:13:a4: d6:6f:de:60:3a:1d:a5:a9:1f:a0:5e:22:60:25:f0: 4f:72:a9:c8:25:66:f7:39:b7:2a:18:19:68:7e:a1: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E3:ED:69:D4:CF:B1:B8:2D:35:6B:D5:65:54:8B:72:55:59:44:65 X509v3 Authority Key Identifier: keyid:91:7D:F1:BA:D8:C5:79:74:42:6A:CD:C6:94:D3:7F:B5:F4:B2:CD:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/917DF1BAD8C57974426ACDC694D37FB5F4B2CDAD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105304750166966283/0/3130332e3138392e39322e302f32332d3233203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.189.92.0/23 Signature Algorithm: sha256WithRSAEncryption 10:81:6c:ca:03:7b:63:dd:de:18:7e:7e:4c:e9:bf:19:53:66: 84:d2:12:5c:d4:0b:56:80:3c:35:f8:1b:1d:f3:55:83:6e:50: d7:e4:db:5e:3b:03:07:37:c6:f1:9e:fc:ab:80:b7:c6:d7:e9: 9d:37:bb:1d:bd:c9:f2:be:e6:c0:59:c1:2d:ed:3d:c7:a6:07: f8:a2:6b:34:93:7a:52:83:06:92:2b:17:2a:cc:b2:ab:be:e3: fe:e1:b3:d9:da:bb:d1:92:e8:31:7e:64:f3:8a:54:51:00:cd: 1c:ce:0b:7e:a7:98:47:e8:60:95:58:8b:73:d4:af:2c:63:9e: 3f:1f:94:1c:52:1f:56:d4:fa:11:45:30:ed:bd:88:c7:aa:87: 21:b6:94:4f:9d:f8:b5:65:3b:ee:e9:6f:b3:52:dd:0c:2e:fa: 81:70:66:dd:b3:14:52:0b:37:a0:2d:5d:b9:a4:9f:99:ea:25: 38:f5:c4:b0:88:53:9c:99:9b:13:af:58:be:f0:d3:0b:f5:77: 3e:43:09:8f:da:a9:43:1b:b4:6f:28:c4:1f:d0:d2:13:0f:46: 1e:5d:51:3b:3a:1d:15:15:6a:60:33:9a:5e:46:0d:9f:3d:d9: 81:a0:f3:6f:c0:70:65:d5:6d:cc:5c:13:a9:a4:78:4d:31:c9: 21:55:0f:1f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULURQUQcwNt0UGxw3OKq5qykqdxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVG NEIyQ0RBRDAeFw0yNjA1MDkwOTAwMzBaFw0yNzA1MDgwOTA1MzBaMDMxMTAvBgNV BAMTKDY1RTNFRDY5RDRDRkIxQjgyRDM1NkJENTY1NTQ4QjcyNTU1OTQ0NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl7BH0NmWPhSbu4G6+RwZky4Hq 1Ul5GXKCUOGM1AUTAGEjHX4Pa5/REV39jg7WYgn8VJn4Dqg4lBtDjEk+QQrjlP3E DQIM8iuMD+qUOK65zFwCu+pffQeiDAf2pM10ae5vi3WQGAUTRb83/NRrxwFnM/il Afq8en6a3uORctk5sav5OIHsEMUGzBqzvlvpsk1cZt3hvN64KgbnoaqZvV3HiFuG JTQfkc84zNHPh5Ek9b+9d+W0OXm91f5MPAyoQ6CVs0WX7cRqvTTLIB5Zy0tM+5LQ 9h5WAMc539tpPhkTpNZv3mA6HaWpH6BeImAl8E9yqcglZvc5tyoYGWh+oeMTAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZePtadTPsbgtNWvVZVSLclVZRGUwHwYDVR0j BBgwFoAUkX3xutjFeXRCas3GlNN/tfSyza0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTMwNDc1MDE2Njk2NjI4My8wLzkxN0RGMUJBRDhDNTc5NzQ0MjZBQ0RDNjk0RDM3 RkI1RjRCMkNEQUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTE3REYxQkFEOEM1Nzk3NDQyNkFDREM2OTREMzdGQjVGNEIyQ0RBRC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1MzA0NzUwMTY2OTY2MjgzLzAvMzEzMDMzMmUzMTM4 MzkyZTM5MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWe9XDANBgkqhkiG9w0BAQsFAAOCAQEAEIFsygN7Y93eGH5+TOm/GVNmhNIS XNQLVoA8NfgbHfNVg25Q1+TbXjsDBzfG8Z78q4C3xtfpnTe7Hb3J8r7mwFnBLe09 x6YH+KJrNJN6UoMGkisXKsyyq77j/uGz2dq70ZLoMX5k84pUUQDNHM4LfqeYR+hg lViLc9SvLGOePx+UHFIfVtT6EUUw7b2Ix6qHIbaUT534tWU77ulvs1LdDC76gXBm 3bMUUgs3oC1duaSfmeolOPXEsIhTnJmbE69YvvDTC/V3PkMJj9qpQxu0byjEH9DS Ew9GHl1ROzodFRVqYDOaXkYNnz3ZgaDzb8BwZdVtzFwTqaR4TTHJIVUPHw== -----END CERTIFICATE-----Generated at Wed May 13 14:08:44 2026 by rpki-client