$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137362e302f32322d3232203d3e203535393932.roa File: 3130312e3139382e3137362e302f32322d3232203d3e203535393932.roa (raw, json) Hash identifier: fCjsOZtnw4nGDn9abm6owAHPuFVqkWmA5M7Dcbm5+hM= Subject key identifier: 9B:00:30:7E:10:A7:90:A3:82:33:38:0B:45:F6:CF:69:08:E6:15:AD Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Certificate serial: 3266E1DA3D232B7C2E3303303AED5AF5520A8FD4 Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137362e302f32322d3232203d3e203535393932.roa Signing time: Wed 13 May 2026 02:27:15 +0000 ROA not before: Wed 13 May 2026 02:22:15 +0000 ROA not after: Wed 12 May 2027 02:27:15 +0000 asID: 55992 IP address blocks: 101.198.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:66:e1:da:3d:23:2b:7c:2e:33:03:30:3a:ed:5a:f5:52:0a:8f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Validity Not Before: May 13 02:22:15 2026 GMT Not After : May 12 02:27:15 2027 GMT Subject: CN=9B00307E10A790A38233380B45F6CF6908E615AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7d:94:45:e4:b0:24:d2:34:e4:87:e0:a5:25: 55:2f:47:e4:eb:dc:42:01:1c:5f:ca:7f:36:e2:77: 75:12:1a:ef:20:c7:33:0f:99:d4:1b:fe:67:58:35: b3:80:25:ee:91:e9:34:f8:2a:8e:58:ca:f6:de:cc: db:96:e5:85:31:28:9b:6f:42:a1:36:53:cc:fc:5b: fe:53:ca:88:14:f1:ce:06:46:26:d0:1a:34:a9:72: 1f:2a:ee:49:c5:7e:d6:6f:58:49:b0:3d:79:1b:3a: 14:33:c8:0c:61:a5:6c:02:24:ae:1a:45:c8:1e:dd: f2:41:9c:dd:22:35:72:58:a4:e6:3e:a9:fe:39:19: 11:00:c3:42:6f:0d:13:b5:30:ed:d3:df:59:c6:d8: 8f:f7:93:45:0f:77:b9:40:c9:5b:cc:13:83:07:2d: 68:cd:59:c9:ed:02:fa:25:54:06:89:65:d9:66:da: 72:37:10:29:f9:b5:2e:39:b4:4b:6d:d1:3c:e5:d9: 10:b1:e9:c1:6c:d8:67:65:72:3e:98:57:76:dc:b9: 42:8b:46:94:ca:b0:f3:43:0e:d2:f0:e0:b4:eb:e1: 4b:13:f4:03:1e:9f:53:7f:f1:d1:b7:8f:c1:4b:9b: de:d6:5e:36:a7:f4:b9:22:22:a9:20:56:06:11:fb: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:00:30:7E:10:A7:90:A3:82:33:38:0B:45:F6:CF:69:08:E6:15:AD X509v3 Authority Key Identifier: keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3137362e302f32322d3232203d3e203535393932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.198.176.0/22 Signature Algorithm: sha256WithRSAEncryption 88:93:e1:2c:1a:d8:fa:c7:c7:52:b5:ec:e0:b4:88:68:95:7b: 3c:7c:98:c7:de:cf:87:f2:d9:65:06:f9:bd:bf:51:0d:46:31: d2:a7:75:61:85:ef:7d:97:f9:52:c1:de:d0:d7:91:19:33:f8: 52:ba:70:90:05:3a:ff:7c:9e:33:20:86:54:81:07:8b:96:1c: 98:e6:39:84:f7:1e:c3:d6:60:bc:cc:93:36:3a:b8:06:59:19: 3c:82:07:16:16:bc:cf:9e:a5:3b:c0:60:2c:6b:3a:69:1d:0a: d3:7d:03:a3:e8:85:66:9b:05:82:9b:36:27:a8:5b:64:24:8f: fa:f5:76:c7:81:67:c6:f5:e2:2e:42:91:08:60:72:4a:0f:99: 41:3a:17:3c:ba:83:1e:ab:36:ed:c0:a0:6a:47:33:52:ec:f8: c2:b6:2f:8d:6b:d0:f1:9c:cc:c8:75:d1:b5:f5:7c:26:17:db: 79:59:e2:77:f6:ca:73:84:ab:f2:b4:d9:8e:42:09:9d:af:71: ef:0c:4f:50:fa:a4:08:65:c1:53:ea:65:74:67:c4:bf:bf:7f: a4:99:b8:2f:96:9f:aa:74:d9:09:82:b4:fe:91:5e:cc:e0:e2: 86:95:76:c1:58:38:7b:d4:d0:eb:0f:6a:32:72:b4:a6:8f:ee: 74:3a:81:0e -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUMmbh2j0jK3wuMwMwOu1a9VIKj9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2 OUZERjk4NDAeFw0yNjA1MTMwMjIyMTVaFw0yNzA1MTIwMjI3MTVaMDMxMTAvBgNV BAMTKDlCMDAzMDdFMTBBNzkwQTM4MjMzMzgwQjQ1RjZDRjY5MDhFNjE1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+fZRF5LAk0jTkh+ClJVUvR+Tr 3EIBHF/Kfzbid3USGu8gxzMPmdQb/mdYNbOAJe6R6TT4Ko5YyvbezNuW5YUxKJtv QqE2U8z8W/5TyogU8c4GRibQGjSpch8q7knFftZvWEmwPXkbOhQzyAxhpWwCJK4a Rcge3fJBnN0iNXJYpOY+qf45GREAw0JvDRO1MO3T31nG2I/3k0UPd7lAyVvME4MH LWjNWcntAvolVAaJZdlm2nI3ECn5tS45tEtt0Tzl2RCx6cFs2Gdlcj6YV3bcuUKL RpTKsPNDDtLw4LTr4UsT9AMen1N/8dG3j8FLm97WXjan9LkiIqkgVgYR+0ZVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmwAwfhCnkKOCMzgLRfbPaQjmFa0wHwYDVR0j BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDY3NjcwODQ5MjQxNzQzNTUvMC8zMTMwMzEyZTMx MzkzODJlMzEzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNTM5MzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmXGsDANBgkqhkiG9w0BAQsFAAOCAQEAiJPhLBrY+sfHUrXs4LSI aJV7PHyYx97Ph/LZZQb5vb9RDUYx0qd1YYXvfZf5UsHe0NeRGTP4UrpwkAU6/3ye MyCGVIEHi5YcmOY5hPcew9ZgvMyTNjq4BlkZPIIHFha8z56lO8BgLGs6aR0K030D o+iFZpsFgps2J6hbZCSP+vV2x4FnxvXiLkKRCGBySg+ZQToXPLqDHqs27cCgakcz Uuz4wrYvjWvQ8ZzMyHXRtfV8JhfbeVnid/bKc4Sr8rTZjkIJna9x7wxPUPqkCGXB U+pldGfEv79/pJm4L5afqnTZCYK0/pFezODihpV2wVg4e9TQ6w9qMnK0po/udDqB Dg== -----END CERTIFICATE-----Generated at Wed May 13 14:58:23 2026 by rpki-client