$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3230302e302f32322d3232203d3e203535393932.roa File: 3130312e3139382e3230302e302f32322d3232203d3e203535393932.roa (raw, json) Hash identifier: 3jZZIGgHNNPdExy6+4ba6lwGGqONFoWQ+/8Ou/P8x7Q= Subject key identifier: A6:85:23:AB:65:F0:6C:10:F4:A8:82:3E:BD:AE:BA:78:73:7C:F0:9E Certificate issuer: /CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Certificate serial: 1C90014F8C3820808C82A8C180D18EF7BCE1BC7B Authority key identifier: C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3230302e302f32322d3232203d3e203535393932.roa Signing time: Wed 13 May 2026 02:37:04 +0000 ROA not before: Wed 13 May 2026 02:32:04 +0000 ROA not after: Wed 12 May 2027 02:37:04 +0000 asID: 55992 IP address blocks: 101.198.200.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:90:01:4f:8c:38:20:80:8c:82:a8:c1:80:d1:8e:f7:bc:e1:bc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C527EEF22ED4B9034949C91E3D39B24A69FDF984 Validity Not Before: May 13 02:32:04 2026 GMT Not After : May 12 02:37:04 2027 GMT Subject: CN=A68523AB65F06C10F4A8823EBDAEBA78737CF09E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:de:62:f2:7b:33:26:71:98:fe:41:e7:04:c4: 03:d1:c2:d3:64:26:08:3f:40:cd:98:6d:55:64:97: 87:6e:0a:fd:17:64:57:32:dd:f7:62:b9:40:a7:c0: d5:f0:33:d3:a7:23:6b:72:71:0f:5f:7b:93:6d:b8: 4c:f5:65:8e:79:3e:81:ca:86:2b:57:32:38:5b:bf: b7:9d:e3:2d:b3:db:e6:6a:4d:89:4d:89:61:ca:b2: e9:91:5f:04:3a:af:75:2e:b5:c9:f8:89:ca:b7:c8: ec:ac:a6:e7:5a:e8:8c:8c:8e:d1:e8:9f:74:06:af: 51:20:ac:20:4a:35:d8:55:41:3e:50:32:4a:5a:35: 3a:1e:27:49:5a:6c:04:83:0c:04:7a:98:1c:3c:7f: c3:39:54:61:ba:2d:64:9a:1e:32:dc:3c:f5:3d:9e: d8:74:50:03:60:a4:4c:9c:fa:c8:3a:5a:90:16:6d: 6e:cd:89:52:9c:9d:d5:85:22:b5:a4:a9:b0:bb:26: 87:b4:15:ad:c5:10:cd:f6:10:47:06:81:81:7d:45: 8f:71:cf:30:72:c6:67:8e:32:6a:c9:ec:dd:44:b5: 21:35:d1:73:4e:a4:5b:8d:ab:cd:20:44:19:8d:6b: 56:7c:3d:4d:51:e8:be:b6:3e:36:7e:6e:7a:f9:d2: b0:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:85:23:AB:65:F0:6C:10:F4:A8:82:3E:BD:AE:BA:78:73:7C:F0:9E X509v3 Authority Key Identifier: keyid:C5:27:EE:F2:2E:D4:B9:03:49:49:C9:1E:3D:39:B2:4A:69:FD:F9:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/C527EEF22ED4B9034949C91E3D39B24A69FDF984.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C527EEF22ED4B9034949C91E3D39B24A69FDF984.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106767084924174355/0/3130312e3139382e3230302e302f32322d3232203d3e203535393932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.198.200.0/22 Signature Algorithm: sha256WithRSAEncryption b3:9b:ab:98:1e:9e:4a:21:02:b5:a5:01:2f:6c:96:f4:0e:11: 00:a7:8c:1e:ba:27:33:47:f1:cd:19:12:da:56:a9:68:33:4b: 21:46:81:21:15:65:01:0e:fc:37:a9:93:0f:cb:84:79:07:54: bd:d7:57:75:19:33:61:f7:cf:d0:9c:bc:21:f3:3b:2b:d4:8e: ca:59:c6:56:87:67:76:5f:df:b9:86:7a:8d:fa:6e:c7:10:ae: 64:65:1e:5d:25:13:42:f6:37:af:f1:c4:e1:c4:e1:a5:f4:fb: bc:17:c5:8d:a5:63:55:45:35:1e:6d:13:db:97:63:79:b2:c8: f6:27:9c:be:fc:7a:ec:8a:59:49:c1:d6:1c:90:6b:f7:3b:f1: 93:62:54:8b:9d:0f:57:ad:48:7b:17:79:1f:08:af:2b:53:cc: 47:13:a6:9a:3d:7f:ab:d6:35:fa:59:a1:3e:5b:38:b4:27:c8: 1c:14:06:f2:dd:c9:f7:c7:4f:3a:87:ef:9c:f6:03:33:4a:d2: 6c:44:f8:e7:06:09:49:01:80:b0:e4:ea:55:99:d4:03:14:9c: fd:cb:bb:b5:0e:41:94:08:b5:21:0d:b0:cf:bb:b2:ee:45:d1: a3:17:bd:83:46:ed:b3:ff:a1:c3:75:b9:1d:b8:cc:6e:ae:74: c8:57:92:51 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUHJABT4w4IICMgqjBgNGO97zhvHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2 OUZERjk4NDAeFw0yNjA1MTMwMjMyMDRaFw0yNzA1MTIwMjM3MDRaMDMxMTAvBgNV BAMTKEE2ODUyM0FCNjVGMDZDMTBGNEE4ODIzRUJEQUVCQTc4NzM3Q0YwOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH3mLyezMmcZj+QecExAPRwtNk Jgg/QM2YbVVkl4duCv0XZFcy3fdiuUCnwNXwM9OnI2tycQ9fe5NtuEz1ZY55PoHK hitXMjhbv7ed4y2z2+ZqTYlNiWHKsumRXwQ6r3Uutcn4icq3yOyspuda6IyMjtHo n3QGr1EgrCBKNdhVQT5QMkpaNToeJ0labASDDAR6mBw8f8M5VGG6LWSaHjLcPPU9 nth0UANgpEyc+sg6WpAWbW7NiVKcndWFIrWkqbC7Joe0Fa3FEM32EEcGgYF9RY9x zzByxmeOMmrJ7N1EtSE10XNOpFuNq80gRBmNa1Z8PU1R6L62PjZ+bnr50rDTAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUpoUjq2XwbBD0qII+va66eHN88J4wHwYDVR0j BBgwFoAUxSfu8i7UuQNJSckePTmySmn9+YQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njc2NzA4NDkyNDE3NDM1NS8wL0M1MjdFRUYyMkVENEI5MDM0OTQ5QzkxRTNEMzlC MjRBNjlGREY5ODQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzUyN0VFRjIyRUQ0QjkwMzQ5NDlDOTFFM0QzOUIyNEE2OUZERjk4NC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDY3NjcwODQ5MjQxNzQzNTUvMC8zMTMwMzEyZTMx MzkzODJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNTM5MzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmXGyDANBgkqhkiG9w0BAQsFAAOCAQEAs5urmB6eSiECtaUBL2yW 9A4RAKeMHronM0fxzRkS2lapaDNLIUaBIRVlAQ78N6mTD8uEeQdUvddXdRkzYffP 0Jy8IfM7K9SOylnGVodndl/fuYZ6jfpuxxCuZGUeXSUTQvY3r/HE4cThpfT7vBfF jaVjVUU1Hm0T25djebLI9iecvvx67IpZScHWHJBr9zvxk2JUi50PV61Iexd5Hwiv K1PMRxOmmj1/q9Y1+lmhPls4tCfIHBQG8t3J98dPOofvnPYDM0rSbET45wYJSQGA sOTqVZnUAxSc/cu7tQ5BlAi1IQ2wz7uy7kXRoxe9g0bts/+hw3W5HbjMbq50yFeS UQ== -----END CERTIFICATE-----Generated at Wed May 13 14:47:27 2026 by rpki-client