$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa File: 3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa (raw, json) Hash identifier: gi5/C7Ig+PLVimVU9eNIn1aKpNA5wgBO2EvkhiKLFtQ= Subject key identifier: D8:39:2D:97:FF:3A:56:6B:E6:17:62:2C:9F:31:EC:F4:43:51:12:7F Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 668C05464ABDC5F937375AF660D709AD8C2133C2 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa Signing time: Tue 12 May 2026 01:54:33 +0000 ROA not before: Tue 12 May 2026 01:49:33 +0000 ROA not after: Tue 11 May 2027 01:54:33 +0000 asID: 4611 IP address blocks: 103.228.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:8c:05:46:4a:bd:c5:f9:37:37:5a:f6:60:d7:09:ad:8c:21:33:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 12 01:49:33 2026 GMT Not After : May 11 01:54:33 2027 GMT Subject: CN=D8392D97FF3A566BE617622C9F31ECF44351127F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a0:4e:70:26:df:35:39:59:f5:40:cd:6f:e0: c6:98:19:7e:c3:6e:b2:57:79:8d:59:27:2f:aa:89: 7d:5a:58:53:be:30:35:c6:56:b1:d5:d2:0a:49:ad: e1:75:02:83:e9:03:59:a6:61:69:c9:93:5a:18:0b: ce:d5:16:14:c0:cd:c5:98:7b:fe:a4:20:18:86:7e: 06:17:61:dd:0f:e2:af:50:7e:8b:e8:de:39:1c:8f: e3:20:79:4c:0b:40:6f:50:06:d5:75:5d:1d:11:e1: e1:d8:07:b8:84:f8:42:af:33:b5:e2:d7:cb:d4:c0: f1:a8:30:91:c0:c8:25:78:d6:4d:7d:73:60:b7:0c: e3:38:75:41:36:04:4f:2c:a2:2d:e3:a3:31:23:50: ef:89:ff:03:59:65:40:25:19:cd:ad:ab:e8:34:ae: 2a:13:30:da:c2:07:f1:2f:de:4a:07:7e:c9:36:ed: d2:90:de:26:dc:b9:12:93:ab:95:5b:f4:13:d6:c8: ea:b1:63:7f:03:82:af:2c:37:6c:a7:38:78:db:9b: 27:c1:c2:15:ca:33:3c:c2:e3:8c:f7:bf:6e:95:65: b5:47:63:7f:d5:f8:f0:ee:51:1b:e9:fa:86:07:bc: 7b:cd:52:11:8a:9b:b6:60:74:cb:b8:b2:5f:f2:ac: 7c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:39:2D:97:FF:3A:56:6B:E6:17:62:2C:9F:31:EC:F4:43:51:12:7F X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133362e302f32342d3234203d3e2034363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.136.0/24 Signature Algorithm: sha256WithRSAEncryption 17:09:cf:7c:2a:f0:d4:40:15:a2:0c:52:e3:90:e5:7b:9e:02: 0a:5c:5c:7b:51:53:1e:57:ef:ac:c6:04:d6:8b:cf:27:30:ae: 51:66:ba:b9:30:25:be:19:67:25:69:80:08:30:53:61:3d:af: 96:ff:66:9a:32:29:48:d2:88:e1:d4:22:db:0c:1e:70:26:18: 7c:42:fb:b5:21:c0:c1:9a:71:9d:df:c1:a6:d6:cf:ba:ee:68: a9:b3:02:01:fc:1b:98:d8:d2:b4:56:35:57:17:6e:17:d0:6c: 38:a6:ce:94:7d:89:9e:bd:a2:63:ea:72:2d:00:f9:e6:1e:e7: 4b:d7:44:c2:57:43:85:e7:2e:da:c8:a0:0a:27:d5:40:2d:c5: 98:ef:9c:ef:c3:a3:6a:cb:33:62:7a:5e:fe:13:11:32:03:02: c5:c4:a2:cb:5d:67:1b:ab:66:30:5b:0e:6f:8c:1d:ee:b0:f9: 86:67:dc:05:c4:ba:f2:1b:82:8f:4d:e0:75:a8:29:8a:f6:de: 80:30:b8:00:85:8c:4e:a5:8c:9f:de:1e:d3:6f:08:c4:19:1f: cc:d4:8b:b3:41:b2:87:a1:3e:9b:3c:d8:41:c6:da:34:4d:6f: 69:de:ba:59:d6:24:ac:58:08:25:f7:68:bd:18:c7:23:78:ca: eb:5d:97:48 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZowFRkq9xfk3N1r2YNcJrYwhM8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MTIwMTQ5MzNaFw0yNzA1MTEwMTU0MzNaMDMxMTAvBgNV BAMTKEQ4MzkyRDk3RkYzQTU2NkJFNjE3NjIyQzlGMzFFQ0Y0NDM1MTEyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNoE5wJt81OVn1QM1v4MaYGX7D brJXeY1ZJy+qiX1aWFO+MDXGVrHV0gpJreF1AoPpA1mmYWnJk1oYC87VFhTAzcWY e/6kIBiGfgYXYd0P4q9Qfovo3jkcj+MgeUwLQG9QBtV1XR0R4eHYB7iE+EKvM7Xi 18vUwPGoMJHAyCV41k19c2C3DOM4dUE2BE8soi3jozEjUO+J/wNZZUAlGc2tq+g0 rioTMNrCB/Ev3koHfsk27dKQ3ibcuRKTq5Vb9BPWyOqxY38Dgq8sN2ynOHjbmyfB whXKMzzC44z3v26VZbVHY3/V+PDuURvp+oYHvHvNUhGKm7ZgdMu4sl/yrHxzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU2Dktl/86VmvmF2IsnzHs9ENREn8wHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwNjM5ODM4ODE4NzgyNDE0Ny8wLzMxMzAzMzJlMzIz MjM4MmUzMTMzMzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM2MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfkiDANBgkqhkiG9w0BAQsFAAOCAQEAFwnPfCrw1EAVogxS45Dle54C Clxce1FTHlfvrMYE1ovPJzCuUWa6uTAlvhlnJWmACDBTYT2vlv9mmjIpSNKI4dQi 2wwecCYYfEL7tSHAwZpxnd/BptbPuu5oqbMCAfwbmNjStFY1VxduF9BsOKbOlH2J nr2iY+pyLQD55h7nS9dEwldDhecu2sigCifVQC3FmO+c78OjasszYnpe/hMRMgMC xcSiy11nG6tmMFsOb4wd7rD5hmfcBcS68huCj03gdagpivbegDC4AIWMTqWMn94e 028IxBkfzNSLs0Gyh6E+mzzYQcbaNE1vad66WdYkrFgIJfdovRjHI3jK612XSA== -----END CERTIFICATE-----Generated at Wed May 13 21:32:12 2026 by rpki-client