$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33322e302f32342d3234203d3e2034363131.roa File: 3130332e36362e33322e302f32342d3234203d3e2034363131.roa (raw, json) Hash identifier: pGPnNL8I17M9sBQn6scU0wF53hsmAZju26aVp9ckSkQ= Subject key identifier: 4D:27:1C:3E:45:C6:C0:14:28:90:46:56:FE:31:73:2C:88:24:0F:28 Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 7F4148D87BE6727A212DFA2FC3ABBD074F176343 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33322e302f32342d3234203d3e2034363131.roa Signing time: Tue 12 May 2026 01:54:33 +0000 ROA not before: Tue 12 May 2026 01:49:33 +0000 ROA not after: Tue 11 May 2027 01:54:33 +0000 asID: 4611 IP address blocks: 103.66.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:41:48:d8:7b:e6:72:7a:21:2d:fa:2f:c3:ab:bd:07:4f:17:63:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 12 01:49:33 2026 GMT Not After : May 11 01:54:33 2027 GMT Subject: CN=4D271C3E45C6C01428904656FE31732C88240F28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:43:43:7a:88:85:e9:96:7d:55:0f:2a:9b:13: 4b:cf:27:30:8f:10:22:57:09:cd:b3:2b:8f:9f:5e: 7d:42:74:35:83:f2:16:40:38:54:a6:7a:16:4d:d0: 0f:98:50:63:d4:fd:2e:be:7f:6a:bf:94:65:fe:5e: 00:1a:73:87:ec:2d:8a:90:18:af:2f:d8:66:4e:23: f2:1d:fb:65:9d:bf:47:f1:0a:aa:7b:52:b3:7c:b8: b0:d8:7e:73:ef:44:a9:32:d8:37:c0:45:ac:55:76: 4e:f0:f3:ac:eb:16:10:27:bc:73:71:41:9c:8c:79: c5:14:76:d5:3e:bf:cc:cc:25:fc:8d:e5:8f:36:f0: 93:db:33:20:85:ed:64:4b:89:0c:92:c2:c7:02:7f: a6:08:07:f8:bf:d3:68:c1:50:e4:ef:79:c1:66:5d: 59:1c:8d:60:7b:1f:a7:75:0f:99:82:f6:f8:6c:8b: f0:21:38:7f:95:cb:d4:bf:87:dc:55:91:ba:33:41: 36:36:f1:5d:24:9b:78:8c:72:f3:75:54:a0:4e:22: 55:0d:9f:58:6b:66:e1:33:1b:bf:51:8e:b4:cd:92: 64:55:2c:4d:0f:08:d9:13:fe:82:75:c7:b8:9c:c7: 18:e7:f6:1c:a9:60:b4:30:db:1b:9a:dd:18:80:1b: b4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:27:1C:3E:45:C6:C0:14:28:90:46:56:FE:31:73:2C:88:24:0F:28 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33322e302f32342d3234203d3e2034363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.32.0/24 Signature Algorithm: sha256WithRSAEncryption 71:b7:56:79:d4:ca:ee:70:c7:0d:37:13:01:27:9c:5a:71:17: d3:00:6d:be:2a:86:05:60:8b:c0:8d:6b:c1:64:24:57:ad:05: a8:47:5c:04:c8:89:70:45:68:9d:62:c5:59:f4:1d:8d:df:34: 7b:3d:59:2c:b5:73:80:c9:e3:83:cd:4f:52:76:c3:b5:ed:23: 41:68:e1:35:fd:d7:1c:4c:4b:83:3d:e4:e2:59:28:33:61:9d: 1a:21:57:8a:20:64:22:f3:76:c3:18:1a:8e:ea:44:b1:eb:c8: fb:8a:8d:72:e8:ab:f2:01:e0:3c:00:46:79:7b:b9:42:ca:1c: d9:65:d9:6f:29:11:a1:d9:31:05:6e:c3:89:a1:53:b8:9c:eb: d8:28:67:2d:fe:16:6e:57:3c:c8:af:c0:69:1e:b6:2a:0d:9d: bd:9e:df:2b:29:5b:a7:2b:af:5a:4d:4a:ce:1d:60:3b:e1:8a: b9:c2:44:bc:ff:af:f4:dc:57:ab:9d:b3:f8:87:71:94:92:4d: 96:78:21:90:98:6c:57:1a:01:51:7c:17:51:d2:49:c7:99:a4: df:7f:23:af:5b:1d:cc:c1:01:bf:2b:f2:38:de:1b:44:84:36: e4:a5:4a:c7:66:23:d6:47:ac:67:da:5b:ce:10:57:53:28:47: b6:ad:b0:55 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUf0FI2HvmcnohLfovw6u9B08XY0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MTIwMTQ5MzNaFw0yNzA1MTEwMTU0MzNaMDMxMTAvBgNV BAMTKDREMjcxQzNFNDVDNkMwMTQyODkwNDY1NkZFMzE3MzJDODgyNDBGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLQ0N6iIXpln1VDyqbE0vPJzCP ECJXCc2zK4+fXn1CdDWD8hZAOFSmehZN0A+YUGPU/S6+f2q/lGX+XgAac4fsLYqQ GK8v2GZOI/Id+2Wdv0fxCqp7UrN8uLDYfnPvRKky2DfARaxVdk7w86zrFhAnvHNx QZyMecUUdtU+v8zMJfyN5Y828JPbMyCF7WRLiQySwscCf6YIB/i/02jBUOTvecFm XVkcjWB7H6d1D5mC9vhsi/AhOH+Vy9S/h9xVkbozQTY28V0km3iMcvN1VKBOIlUN n1hrZuEzG79RjrTNkmRVLE0PCNkT/oJ1x7icxxjn9hypYLQw2xua3RiAG7T7AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUTSccPkXGwBQokEZW/jFzLIgkDygwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2Mzk4Mzg4MTg3ODI0MTQ3LzAvMzEzMDMzMmUzNjM2 MmUzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnQiAwDQYJKoZIhvcNAQELBQADggEBAHG3VnnUyu5wxw03EwEnnFpxF9MAbb4q hgVgi8CNa8FkJFetBahHXATIiXBFaJ1ixVn0HY3fNHs9WSy1c4DJ44PNT1J2w7Xt I0Fo4TX91xxMS4M95OJZKDNhnRohV4ogZCLzdsMYGo7qRLHryPuKjXLoq/IB4DwA Rnl7uULKHNll2W8pEaHZMQVuw4mhU7ic69goZy3+Fm5XPMivwGketioNnb2e3ysp W6crr1pNSs4dYDvhirnCRLz/r/TcV6uds/iHcZSSTZZ4IZCYbFcaAVF8F1HSSceZ pN9/I69bHczBAb8r8jjeG0SENuSlSsdmI9ZHrGfaW84QV1MoR7atsFU= -----END CERTIFICATE-----Generated at Wed May 13 21:31:33 2026 by rpki-client