$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e39362e302f32302d3230203d3e2034383038.roa File: 3138322e34382e39362e302f32302d3230203d3e2034383038.roa (raw, json) Hash identifier: fYNxKFetktKuNOwghMH1GxVLAt+yr4jZCLja6piwfWo= Subject key identifier: 44:A0:62:F3:0A:97:E7:1F:DB:9F:75:38:06:40:B9:76:FC:A6:01:8D Certificate issuer: /CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Certificate serial: 067728F2B34EDE4E346C8F279A49DC03C0DF5744 Authority key identifier: A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e39362e302f32302d3230203d3e2034383038.roa Signing time: Sat 09 May 2026 07:52:10 +0000 ROA not before: Sat 09 May 2026 07:47:10 +0000 ROA not after: Sat 08 May 2027 07:52:10 +0000 asID: 4808 IP address blocks: 182.48.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:20:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:77:28:f2:b3:4e:de:4e:34:6c:8f:27:9a:49:dc:03:c0:df:57:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9F9DA71223D64542EC0318B90DA37CBC5362266 Validity Not Before: May 9 07:47:10 2026 GMT Not After : May 8 07:52:10 2027 GMT Subject: CN=44A062F30A97E71FDB9F75380640B976FCA6018D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f3:3a:81:8b:59:05:32:ff:c6:84:03:0b:9d: 08:a3:36:35:2d:49:97:19:b1:a2:32:cf:09:92:7c: 46:be:4f:8c:01:1a:c0:c0:c2:71:10:5e:03:eb:35: 92:e0:a6:b9:57:a2:c8:5c:06:32:34:97:37:c6:21: b0:e8:e1:4e:b4:dd:5f:70:2b:9f:06:5c:1e:7a:6a: 67:43:00:eb:56:53:ed:e6:70:7a:71:22:44:9e:e6: c3:50:b9:24:e4:e7:81:9a:7d:63:d5:2b:0d:b7:14: 02:5e:03:fb:1f:f8:dd:01:d9:a4:4c:02:42:3a:e7: 5b:55:e4:e7:cb:e7:db:46:b7:1b:14:89:e0:db:87: ea:ba:83:81:03:13:30:13:45:27:84:7a:86:7f:02: 18:6e:98:bf:5d:73:c7:2a:a6:74:63:82:6e:17:e4: 7e:26:e1:81:f1:7a:cc:6e:ce:74:f0:e3:74:3b:64: 11:17:e3:ae:2e:1c:8a:83:8f:91:1f:4d:52:13:a6: e7:54:a3:25:f5:62:7b:9a:72:4e:c2:17:30:fc:94: 2f:bf:3f:4a:89:66:7d:09:d3:27:c3:9e:a6:48:78: 2a:7b:7e:70:d0:98:1d:32:8e:4d:bf:1f:ed:65:df: 4c:3a:cc:76:82:44:65:03:f2:08:83:53:45:22:eb: 35:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:A0:62:F3:0A:97:E7:1F:DB:9F:75:38:06:40:B9:76:FC:A6:01:8D X509v3 Authority Key Identifier: keyid:A9:F9:DA:71:22:3D:64:54:2E:C0:31:8B:90:DA:37:CB:C5:36:22:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/A9F9DA71223D64542EC0318B90DA37CBC5362266.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A9F9DA71223D64542EC0318B90DA37CBC5362266.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105399172770562063/0/3138322e34382e39362e302f32302d3230203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 182.48.96.0/20 Signature Algorithm: sha256WithRSAEncryption 80:c6:4c:63:9d:9e:72:16:85:46:2c:7b:79:62:d2:6a:b6:bf: 39:a7:3e:9d:5f:94:6e:09:7b:34:5b:0f:cd:59:ed:77:41:58: b5:1e:6f:aa:b6:24:1e:21:12:6b:77:49:dd:62:36:fb:9c:49: 60:53:d4:01:13:4a:fe:87:b9:bd:b3:56:7f:62:72:1f:71:d1: 93:75:08:9f:68:f2:19:9e:76:60:00:5c:ef:d2:f1:33:b6:f1: 95:80:c7:ab:5a:1f:e7:d7:70:33:09:ac:0c:ec:2b:4b:26:22: 9d:dc:d9:0b:81:82:7a:2d:8c:13:df:16:f9:1b:97:16:fb:43: 76:3b:4b:51:8b:98:66:60:d5:8b:0a:0b:19:5d:43:b0:3d:ce: a6:43:66:cc:af:e8:99:85:f6:65:ed:22:16:be:c1:97:d9:5c: 04:78:a9:62:5e:53:fa:76:68:46:41:5e:7f:9a:31:37:f2:54: 17:79:03:06:6c:b9:4d:b4:bb:04:b0:36:ac:0d:65:72:94:eb: e7:f1:9a:a7:f4:78:28:9c:0f:8b:d8:da:6c:6a:d2:92:57:78: 4d:96:e9:9b:d7:a9:e2:b5:49:49:cf:07:3a:af:21:d9:0e:f0: b6:82:3d:89:15:cd:b3:ff:f2:22:79:20:e3:00:29:e6:b7:f5: 2b:d2:37:79 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUBnco8rNO3k40bI8nmkncA8DfV0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JD NTM2MjI2NjAeFw0yNjA1MDkwNzQ3MTBaFw0yNzA1MDgwNzUyMTBaMDMxMTAvBgNV BAMTKDQ0QTA2MkYzMEE5N0U3MUZEQjlGNzUzODA2NDBCOTc2RkNBNjAxOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68zqBi1kFMv/GhAMLnQijNjUt SZcZsaIyzwmSfEa+T4wBGsDAwnEQXgPrNZLgprlXoshcBjI0lzfGIbDo4U603V9w K58GXB56amdDAOtWU+3mcHpxIkSe5sNQuSTk54GafWPVKw23FAJeA/sf+N0B2aRM AkI651tV5OfL59tGtxsUieDbh+q6g4EDEzATRSeEeoZ/AhhumL9dc8cqpnRjgm4X 5H4m4YHxesxuznTw43Q7ZBEX464uHIqDj5EfTVITpudUoyX1Ynuack7CFzD8lC+/ P0qJZn0J0yfDnqZIeCp7fnDQmB0yjk2/H+1l30w6zHaCRGUD8giDU0Ui6zVRAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQURKBi8wqX5x/bn3U4BkC5dvymAY0wHwYDVR0j BBgwFoAUqfnacSI9ZFQuwDGLkNo3y8U2ImYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM5OTE3Mjc3MDU2MjA2My8wL0E5RjlEQTcxMjIzRDY0NTQyRUMwMzE4QjkwREEz N0NCQzUzNjIyNjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTlGOURBNzEyMjNENjQ1NDJFQzAzMThCOTBEQTM3Q0JDNTM2MjI2Ni5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1Mzk5MTcyNzcwNTYyMDYzLzAvMzEzODMyMmUzNDM4 MmUzOTM2MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAS2MGAwDQYJKoZIhvcNAQELBQADggEBAIDGTGOdnnIWhUYse3li0mq2vzmnPp1f lG4JezRbD81Z7XdBWLUeb6q2JB4hEmt3Sd1iNvucSWBT1AETSv6Hub2zVn9ich9x 0ZN1CJ9o8hmedmAAXO/S8TO28ZWAx6taH+fXcDMJrAzsK0smIp3c2QuBgnotjBPf Fvkblxb7Q3Y7S1GLmGZg1YsKCxldQ7A9zqZDZsyv6JmF9mXtIha+wZfZXAR4qWJe U/p2aEZBXn+aMTfyVBd5AwZsuU20uwSwNqwNZXKU6+fxmqf0eCicD4vY2mxq0pJX eE2W6ZvXqeK1SUnPBzqvIdkO8LaCPYkVzbP/8iJ5IOMAKea39SvSN3k= -----END CERTIFICATE-----Generated at Wed May 13 11:52:54 2026 by rpki-client