$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33342e302f32342d3234203d3e2034363131.roa File: 3130332e36362e33342e302f32342d3234203d3e2034363131.roa (raw, json) Hash identifier: tjZDTuEgQlRXpFbbaG0NArZJgDuaiVOSE05Z7p9qiAI= Subject key identifier: 2A:4C:7B:88:E8:10:07:8E:AF:1D:47:9A:15:47:6B:9C:D7:23:C4:90 Certificate issuer: /CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Certificate serial: 485DAA11A87B830B1DDD6996C36EA814FCFDD5A3 Authority key identifier: 4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33342e302f32342d3234203d3e2034363131.roa Signing time: Tue 12 May 2026 01:54:33 +0000 ROA not before: Tue 12 May 2026 01:49:33 +0000 ROA not after: Tue 11 May 2027 01:54:33 +0000 asID: 4611 IP address blocks: 103.66.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5d:aa:11:a8:7b:83:0b:1d:dd:69:96:c3:6e:a8:14:fc:fd:d5:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB Validity Not Before: May 12 01:49:33 2026 GMT Not After : May 11 01:54:33 2027 GMT Subject: CN=2A4C7B88E810078EAF1D479A15476B9CD723C490 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:56:f1:5f:98:32:40:9b:78:0e:1a:3a:8d:18: 41:20:26:7e:4d:52:ab:95:ad:05:d0:39:b1:6f:72: b4:5a:9d:2a:be:c9:02:cc:1d:f1:ed:90:9e:9f:99: cc:59:36:cd:cd:5c:bf:27:79:d1:2b:c3:66:c9:d2: ef:16:2a:b6:9d:2e:29:92:84:d9:98:f5:43:96:62: 43:ee:b3:c7:67:c8:32:e9:32:76:ca:72:f5:1b:54: 9e:1c:30:10:26:ab:41:65:9e:2b:c5:45:7b:92:10: 60:e2:ca:48:00:bc:a3:0a:89:14:20:6b:f0:47:df: 45:f8:81:ac:54:74:4f:01:d4:98:27:94:8a:b6:94: ce:8d:46:ae:f6:a6:a0:f9:be:95:23:6a:cb:71:b8: 11:e6:51:f2:b1:84:0c:77:b5:9d:6d:45:96:b1:0a: 5b:8e:13:92:41:e3:e0:be:19:60:69:6a:90:bd:16: 47:41:33:02:1d:be:50:72:17:65:65:10:58:60:ea: 92:33:99:13:3b:6b:ef:48:4a:60:e7:fe:5d:25:cf: 6b:1b:5a:fc:27:55:43:8f:b4:f9:df:f8:4d:7a:46: 61:a6:cb:51:24:0d:26:dc:30:7e:c6:3b:d3:38:1c: b9:0c:20:a2:99:c9:87:45:e5:bf:57:e6:8d:dd:ff: 3a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:4C:7B:88:E8:10:07:8E:AF:1D:47:9A:15:47:6B:9C:D7:23:C4:90 X509v3 Authority Key Identifier: keyid:4A:F5:DD:93:98:EB:C3:3E:A0:CA:E0:41:D7:F5:2E:E2:CA:DD:0A:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4AF5DD9398EBC33EA0CAE041D7F52EE2CADD0AFB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106398388187824147/0/3130332e36362e33342e302f32342d3234203d3e2034363131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.66.34.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:e2:71:bd:12:03:ef:08:e7:e1:8f:1c:5d:52:e9:86:bb:d8: 34:c0:66:59:e8:10:46:3d:47:7b:3d:97:ca:f5:a3:d0:14:c9: e6:75:c7:9e:12:72:25:e9:bd:6a:f0:62:5b:9a:d2:28:0e:78: 14:28:96:b5:da:df:c8:b9:41:6b:c9:3a:74:94:e9:49:31:70: 2e:2a:da:0e:94:be:b1:af:9d:63:41:09:8e:ba:85:76:64:44: c3:ff:c9:6b:7c:41:11:9e:66:79:8e:0c:30:22:e1:45:3e:74: 30:f7:39:25:7b:d0:0a:c6:e4:a6:a9:1a:b9:fd:2e:2d:d9:89: 17:12:21:ca:d6:5f:b7:d4:cd:c6:a6:b6:87:c9:0e:c7:ff:81: fc:4f:c8:7d:82:6f:c9:99:85:e5:33:9b:51:73:51:8d:89:1a: 1e:d5:af:5b:1e:f1:70:0b:0e:d4:c4:1d:96:ca:55:9d:ea:e4: 63:f8:96:8f:14:c9:f8:e0:61:a4:63:9b:b5:d7:79:a2:05:1c: 1e:5e:22:fe:ab:01:74:b3:76:b3:67:fc:54:4e:47:f8:bc:da: 83:b3:34:45:be:2a:73:fb:3c:54:11:91:81:95:d6:13:44:a2: e0:64:9a:b3:9e:75:2e:3e:b6:0c:d5:1a:94:31:df:0c:8c:f9: fd:c9:46:f7 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUSF2qEah7gwsd3WmWw26oFPz91aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJD QUREMEFGQjAeFw0yNjA1MTIwMTQ5MzNaFw0yNzA1MTEwMTU0MzNaMDMxMTAvBgNV BAMTKDJBNEM3Qjg4RTgxMDA3OEVBRjFENDc5QTE1NDc2QjlDRDcyM0M0OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVvFfmDJAm3gOGjqNGEEgJn5N UquVrQXQObFvcrRanSq+yQLMHfHtkJ6fmcxZNs3NXL8nedErw2bJ0u8WKradLimS hNmY9UOWYkPus8dnyDLpMnbKcvUbVJ4cMBAmq0FlnivFRXuSEGDiykgAvKMKiRQg a/BH30X4gaxUdE8B1JgnlIq2lM6NRq72pqD5vpUjastxuBHmUfKxhAx3tZ1tRZax CluOE5JB4+C+GWBpapC9FkdBMwIdvlByF2VlEFhg6pIzmRM7a+9ISmDn/l0lz2sb WvwnVUOPtPnf+E16RmGmy1EkDSbcMH7GO9M4HLkMIKKZyYdF5b9X5o3d/zoTAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUKkx7iOgQB46vHUeaFUdrnNcjxJAwHwYDVR0j BBgwFoAUSvXdk5jrwz6gyuBB1/Uu4srdCvswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjM5ODM4ODE4NzgyNDE0Ny8wLzRBRjVERDkzOThFQkMzM0VBMENBRTA0MUQ3RjUy RUUyQ0FERDBBRkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEFGNUREOTM5OEVCQzMzRUEwQ0FFMDQxRDdGNTJFRTJDQUREMEFGQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2Mzk4Mzg4MTg3ODI0MTQ3LzAvMzEzMDMzMmUzNjM2 MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNjMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnQiIwDQYJKoZIhvcNAQELBQADggEBAFvicb0SA+8I5+GPHF1S6Ya72DTAZlno EEY9R3s9l8r1o9AUyeZ1x54SciXpvWrwYlua0igOeBQolrXa38i5QWvJOnSU6Ukx cC4q2g6UvrGvnWNBCY66hXZkRMP/yWt8QRGeZnmODDAi4UU+dDD3OSV70ArG5Kap Grn9Li3ZiRcSIcrWX7fUzcamtofJDsf/gfxPyH2Cb8mZheUzm1FzUY2JGh7Vr1se 8XALDtTEHZbKVZ3q5GP4lo8UyfjgYaRjm7XXeaIFHB5eIv6rAXSzdrNn/FROR/i8 2oOzNEW+KnP7PFQRkYGV1hNEouBkmrOedS4+tgzVGpQx3wyM+f3JRvc= -----END CERTIFICATE-----Generated at Wed May 13 21:31:25 2026 by rpki-client