$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233352e302f32342d3234203d3e2034383437.roa File: 3130332e34382e3233352e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: usK45Vkd33dkPByedMvKz0/E8VkvPi4bEtUfU8FQpPs= Subject key identifier: D7:92:96:BB:A1:C1:19:73:DF:6E:47:45:84:1A:92:EC:A0:1E:42:FC Certificate issuer: /CN=2949D20EB3FEA14E986D0754348A679E44983AEE Certificate serial: 527D57CA4E0C39F279CDA30C60A333151F52AFB3 Authority key identifier: 29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233352e302f32342d3234203d3e2034383437.roa Signing time: Sat 09 May 2026 10:56:18 +0000 ROA not before: Sat 09 May 2026 10:51:18 +0000 ROA not after: Sat 08 May 2027 10:56:18 +0000 asID: 4847 IP address blocks: 103.48.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:7d:57:ca:4e:0c:39:f2:79:cd:a3:0c:60:a3:33:15:1f:52:af:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2949D20EB3FEA14E986D0754348A679E44983AEE Validity Not Before: May 9 10:51:18 2026 GMT Not After : May 8 10:56:18 2027 GMT Subject: CN=D79296BBA1C11973DF6E4745841A92ECA01E42FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:20:29:5e:02:7c:a3:68:ae:c5:97:83:3b: be:3a:02:3c:7f:94:83:cf:60:7d:ca:24:c4:fb:0a: cf:99:d0:0a:a7:31:19:07:1d:5a:fc:88:1b:cd:0a: fb:67:87:5b:3a:ae:9d:fb:23:b9:68:39:6a:6d:b6: fe:8f:c4:60:cd:f9:31:5a:2e:17:3c:81:98:5d:20: a8:b9:40:c3:33:0f:31:3d:e8:42:15:70:27:4e:68: 58:cf:e5:15:ed:6a:00:55:b0:40:63:43:1a:bb:26: d4:42:55:bb:d0:47:5e:96:f5:5d:c7:0a:04:46:01: a1:a0:d4:53:96:76:00:46:d3:b6:4b:1e:4b:b9:13: 6c:6d:1e:f0:7d:f9:9b:eb:e6:4e:d0:48:52:23:0b: 1f:d8:95:4e:3f:05:88:f1:ab:07:a2:dc:b0:09:f3: 6c:e4:e3:ca:7a:9e:b9:af:37:51:33:9e:75:ac:30: 00:66:c5:89:9e:b6:60:1c:54:5a:74:75:ed:68:5d: 19:40:48:e6:b6:a7:4c:51:5d:2b:ae:46:55:cb:e1: bc:d8:d9:19:c0:5f:fb:26:e8:24:62:f6:a3:80:48: 25:6e:38:59:44:2f:d8:4e:83:79:f2:e5:5e:4a:96: a4:07:30:af:72:81:d9:d1:92:ea:58:86:59:8f:77: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:92:96:BB:A1:C1:19:73:DF:6E:47:45:84:1A:92:EC:A0:1E:42:FC X509v3 Authority Key Identifier: keyid:29:49:D2:0E:B3:FE:A1:4E:98:6D:07:54:34:8A:67:9E:44:98:3A:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/2949D20EB3FEA14E986D0754348A679E44983AEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2949D20EB3FEA14E986D0754348A679E44983AEE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105445865205530639/0/3130332e34382e3233352e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.48.235.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:a7:e2:45:b0:23:2e:31:8b:eb:a3:aa:af:d5:69:08:0e:1d: f8:30:b8:9c:e3:e3:9e:58:4e:2c:27:c0:47:9a:f1:2e:36:cf: b4:7c:38:a7:2a:c2:b6:b4:e7:3b:0b:79:d4:0e:fe:0d:77:db: f9:b3:b2:e2:50:2c:eb:0c:1a:3e:f6:8b:83:83:f1:f6:c2:d8: 33:4d:21:09:25:d1:28:e2:d0:da:95:0e:09:4f:13:75:2e:7a: f3:75:85:72:ed:fc:c5:d1:e8:b4:3e:84:a0:06:46:65:15:f1: dc:52:86:d0:29:8f:ae:05:b1:62:94:28:a5:4a:1b:69:c4:ef: 0a:8b:04:9e:c5:41:e9:bc:91:5b:e6:a1:90:f4:55:b2:7f:f2: 6f:84:23:0d:6f:a8:99:0c:c7:96:c9:b1:f9:5a:ca:4d:97:0e: 7f:6f:4a:e1:b9:0c:ac:e2:0d:a6:83:5e:e1:a8:1e:d4:56:33: 25:c1:07:35:a2:e3:a9:41:76:93:db:87:0e:2d:c9:a7:f6:f3: 4a:fa:72:29:f2:d8:25:62:86:cb:61:c7:0e:ff:fa:9e:6d:d4: 9c:b3:6a:db:f1:8f:ee:28:aa:a3:b0:11:8b:b7:53:fc:0a:6e: 7b:4d:5c:92:5c:e5:59:36:1d:dd:c6:f8:8d:3e:b4:36:63:23: 60:a3:53:bb -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUn1Xyk4MOfJ5zaMMYKMzFR9Sr7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0 NDk4M0FFRTAeFw0yNjA1MDkxMDUxMThaFw0yNzA1MDgxMDU2MThaMDMxMTAvBgNV BAMTKEQ3OTI5NkJCQTFDMTE5NzNERjZFNDc0NTg0MUE5MkVDQTAxRTQyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnhSApXgJ8o2iuxZeDO746Ajx/ lIPPYH3KJMT7Cs+Z0AqnMRkHHVr8iBvNCvtnh1s6rp37I7loOWpttv6PxGDN+TFa Lhc8gZhdIKi5QMMzDzE96EIVcCdOaFjP5RXtagBVsEBjQxq7JtRCVbvQR16W9V3H CgRGAaGg1FOWdgBG07ZLHku5E2xtHvB9+Zvr5k7QSFIjCx/YlU4/BYjxqwei3LAJ 82zk48p6nrmvN1EznnWsMABmxYmetmAcVFp0de1oXRlASOa2p0xRXSuuRlXL4bzY 2RnAX/sm6CRi9qOASCVuOFlEL9hOg3ny5V5KlqQHMK9ygdnRkupYhlmPd0k1AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU15KWu6HBGXPfbkdFhBqS7KAeQvwwHwYDVR0j BBgwFoAUKUnSDrP+oU6YbQdUNIpnnkSYOu4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTQ0NTg2NTIwNTUzMDYzOS8wLzI5NDlEMjBFQjNGRUExNEU5ODZEMDc1NDM0OEE2 NzlFNDQ5ODNBRUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjk0OUQyMEVCM0ZFQTE0RTk4NkQwNzU0MzQ4QTY3OUU0NDk4M0FFRS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1NDQ1ODY1MjA1NTMwNjM5LzAvMzEzMDMzMmUzNDM4 MmUzMjMzMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGcw6zANBgkqhkiG9w0BAQsFAAOCAQEADKfiRbAjLjGL66Oqr9VpCA4d+DC4 nOPjnlhOLCfAR5rxLjbPtHw4pyrCtrTnOwt51A7+DXfb+bOy4lAs6wwaPvaLg4Px 9sLYM00hCSXRKOLQ2pUOCU8TdS5683WFcu38xdHotD6EoAZGZRXx3FKG0CmPrgWx YpQopUobacTvCosEnsVB6byRW+ahkPRVsn/yb4QjDW+omQzHlsmx+VrKTZcOf29K 4bkMrOINpoNe4age1FYzJcEHNaLjqUF2k9uHDi3Jp/bzSvpyKfLYJWKGy2HHDv/6 nm3UnLNq2/GP7iiqo7ARi7dT/Apue01cklzlWTYd3cb4jT60NmMjYKNTuw== -----END CERTIFICATE-----Generated at Wed May 13 12:52:13 2026 by rpki-client