$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa File: 3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa (raw, json) Hash identifier: QdeAkUPnqLpZiSPqBIxzU0fpw+Eqvq8f9jvgOeoo9mg= Subject key identifier: C4:67:AD:22:94:18:B2:D8:38:9B:30:CA:3E:DA:AF:A6:07:52:F3:C1 Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 6B6279A1E0B4024E93A002C49DC54B3D3BD78E02 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa Signing time: Tue 12 May 2026 01:54:33 +0000 ROA not before: Tue 12 May 2026 01:49:33 +0000 ROA not after: Tue 11 May 2027 01:54:33 +0000 asID: 4611 IP address blocks: 103.228.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:62:79:a1:e0:b4:02:4e:93:a0:02:c4:9d:c5:4b:3d:3b:d7:8e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 12 01:49:33 2026 GMT Not After : May 11 01:54:33 2027 GMT Subject: CN=C467AD229418B2D8389B30CA3EDAAFA60752F3C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:bf:14:6d:b4:6c:79:95:64:ec:af:2b:95: f0:77:85:96:12:f8:5e:b3:34:36:69:e0:38:46:b6: 3a:27:ad:89:e3:7e:9a:d2:1a:cb:61:fb:ae:ad:e9: f1:4e:3d:8a:29:1f:39:6e:61:42:f1:25:0d:0d:d1: 4f:18:71:15:83:c9:5b:23:b4:74:3c:5e:23:3b:fa: 0f:a9:5f:8a:b3:c0:d6:65:09:af:c7:95:2d:2c:47: 03:8e:65:d8:b0:fd:26:26:88:d0:3a:aa:39:41:70: 6e:0f:6f:04:eb:9c:a6:65:9f:74:7e:da:c9:21:0d: 94:8b:5b:4b:bb:7e:b6:8f:44:48:24:67:63:82:aa: 1f:40:15:a3:3d:1d:eb:9b:4b:ab:40:5a:29:97:19: 5f:d2:6c:8a:98:5a:0a:03:a8:a1:4b:fc:63:63:87: da:12:87:ea:f6:c9:29:7a:d8:28:5a:e9:2d:c0:d2: 74:0d:3d:fe:b7:2e:84:19:94:2a:a4:13:5c:e0:0d: 62:57:d9:e4:a9:5a:5e:43:82:4c:c9:83:21:9c:3d: 2d:07:44:29:84:3f:39:b5:5e:cc:ce:ae:20:21:df: 9a:9e:f0:78:49:f3:09:18:41:b6:88:66:b4:df:96: a7:e9:58:24:57:6e:07:83:a4:af:0e:17:96:2b:97: 29:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:67:AD:22:94:18:B2:D8:38:9B:30:CA:3E:DA:AF:A6:07:52:F3:C1 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e3232382e3133392e302f32342d3234203d3e2034363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.228.139.0/24 Signature Algorithm: sha256WithRSAEncryption 41:96:e6:7a:62:86:3b:e1:d4:b3:74:87:d2:ee:5d:fb:1e:6d: 81:87:1a:ef:49:ed:0e:58:7c:fd:a0:33:4e:51:e4:04:da:9a: 82:e7:f8:b0:84:85:6c:3b:96:b3:cf:e1:ad:05:1a:52:c0:d0: 0f:e7:e8:d1:1e:f7:e6:c7:66:16:22:d6:37:88:a6:98:c0:ad: 94:05:0a:20:f3:c3:2c:06:8e:b6:61:c3:0f:e6:c0:63:66:b3: 02:4d:72:67:52:a1:3d:cc:73:59:53:10:14:bd:11:07:d7:d6: c6:1f:24:66:ea:26:ad:7e:1c:aa:f2:31:bc:3f:23:f3:fe:78: 51:0f:3b:1a:0f:0d:77:8b:65:69:a4:ef:df:b5:c6:02:3e:b1: 0f:16:d4:b0:b2:fb:d4:d4:51:87:8f:44:c2:4d:0c:a3:ec:da: 2f:11:d5:bd:dd:24:60:ea:6d:4f:4d:18:0d:67:ae:80:b7:ed: 5a:4d:42:0a:5f:1c:6c:3c:d8:81:7b:c3:cd:ca:1a:b0:5d:f5: e3:12:bd:c5:e9:7e:f0:8a:1c:14:1c:6f:61:f4:15:7d:fb:c7: 7c:f5:eb:2b:12:f5:59:21:86:d0:5d:39:b9:21:e3:42:c0:48: e0:0c:ac:ef:22:88:07:8d:e3:78:e3:a6:b4:cd:85:1c:4f:60: ae:81:92:17 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUa2J5oeC0Ak6ToALEncVLPTvXjgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MTIwMTQ5MzNaFw0yNzA1MTEwMTU0MzNaMDMxMTAvBgNV BAMTKEM0NjdBRDIyOTQxOEIyRDgzODlCMzBDQTNFREFBRkE2MDc1MkYzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHF78UbbRseZVk7K8rlfB3hZYS +F6zNDZp4DhGtjonrYnjfprSGsth+66t6fFOPYopHzluYULxJQ0N0U8YcRWDyVsj tHQ8XiM7+g+pX4qzwNZlCa/HlS0sRwOOZdiw/SYmiNA6qjlBcG4PbwTrnKZln3R+ 2skhDZSLW0u7fraPREgkZ2OCqh9AFaM9HeubS6tAWimXGV/SbIqYWgoDqKFL/GNj h9oSh+r2ySl62Cha6S3A0nQNPf63LoQZlCqkE1zgDWJX2eSpWl5DgkzJgyGcPS0H RCmEPzm1XszOriAh35qe8HhJ8wkYQbaIZrTflqfpWCRXbgeDpK8OF5Yrlyl5AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxGetIpQYstg4mzDKPtqvpgdS88EwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwNjM5ODM4ODE4NzgyNDE0Ny8wLzMxMzAzMzJlMzIz MjM4MmUzMTMzMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM2MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfkizANBgkqhkiG9w0BAQsFAAOCAQEAQZbmemKGO+HUs3SH0u5d+x5t gYca70ntDlh8/aAzTlHkBNqaguf4sISFbDuWs8/hrQUaUsDQD+fo0R735sdmFiLW N4immMCtlAUKIPPDLAaOtmHDD+bAY2azAk1yZ1KhPcxzWVMQFL0RB9fWxh8kZuom rX4cqvIxvD8j8/54UQ87Gg8Nd4tlaaTv37XGAj6xDxbUsLL71NRRh49Ewk0Mo+za LxHVvd0kYOptT00YDWeugLftWk1CCl8cbDzYgXvDzcoasF314xK9xel+8IocFBxv YfQVffvHfPXrKxL1WSGG0F05uSHjQsBI4Ays7yKIB43jeOOmtM2FHE9groGSFw== -----END CERTIFICATE-----Generated at Wed May 13 21:32:13 2026 by rpki-client