$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3133362e302f32322d3232203d3e2034383131.roa File: 3130332e3230302e3133362e302f32322d3232203d3e2034383131.roa (raw, json) Hash identifier: 9nf5t96V1FGU8gqJjKRhc0VtbAR198i06rRtj+5dZK4= Subject key identifier: 68:41:3C:1B:44:0E:46:71:F8:11:29:80:D8:55:46:ED:F7:51:04:B3 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 717F0DE50183D04C1147F894A8DDECEA37790D8F Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3133362e302f32322d3232203d3e2034383131.roa Signing time: Wed 13 May 2026 10:01:25 +0000 ROA not before: Wed 13 May 2026 09:56:25 +0000 ROA not after: Wed 12 May 2027 10:01:25 +0000 asID: 4811 IP address blocks: 103.200.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:7f:0d:e5:01:83:d0:4c:11:47:f8:94:a8:dd:ec:ea:37:79:0d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: May 13 09:56:25 2026 GMT Not After : May 12 10:01:25 2027 GMT Subject: CN=68413C1B440E4671F8112980D85546EDF75104B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:25:1b:39:32:9f:25:a9:32:a3:5e:36:6b:cb: cb:c6:09:d6:86:51:7a:a9:bc:8a:50:b8:3b:d7:fb: 6c:01:fa:de:07:ea:67:0f:82:49:69:87:93:3c:ae: 94:14:3e:84:84:e5:c1:37:66:65:b2:d4:58:95:78: 40:b2:b0:57:02:85:e9:e8:fd:ab:bf:33:81:37:e5: 21:4b:5a:1f:d8:4e:83:db:ec:17:68:73:c8:50:e2: 6f:71:77:a0:dc:7f:61:7f:a6:51:d6:aa:6d:b1:26: e1:21:6f:27:72:b8:66:f0:ce:6f:4e:79:09:e0:69: 81:41:f2:4a:80:73:0c:79:75:ef:39:4f:ad:3a:dc: ed:63:46:fd:bb:0b:b9:29:76:d7:55:1e:45:b1:05: 03:37:d0:1a:d7:04:44:fc:f2:5f:37:2f:10:2e:a5: 4e:87:60:e9:66:06:b5:ff:05:33:97:f0:de:4b:f7: 82:e0:1a:16:68:09:c9:fc:0f:9f:7e:7d:a4:ca:66: fb:ff:c0:61:b0:f8:33:25:42:b4:3c:5f:a5:5a:fc: 5d:4f:4e:a2:c9:fe:09:d3:6a:b7:a4:e4:14:d3:26: 53:66:56:cb:e5:b8:ab:71:8b:0d:a7:a2:17:44:49: 86:18:9e:64:56:83:09:73:dd:67:72:f2:35:fe:3b: 89:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:41:3C:1B:44:0E:46:71:F8:11:29:80:D8:55:46:ED:F7:51:04:B3 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230302e3133362e302f32322d3232203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.200.136.0/22 Signature Algorithm: sha256WithRSAEncryption 0b:16:96:4e:8d:ed:44:08:f2:90:65:8f:a3:23:af:df:b7:44: 8e:ad:58:ce:e3:31:dc:93:a3:97:95:16:ac:42:70:09:d9:f9: cc:dc:c0:07:f9:e2:eb:55:af:47:54:f4:b3:17:ac:89:17:90: 2f:2e:23:8c:51:b6:b4:74:ed:76:c9:05:99:4f:a6:d5:03:52: 3e:40:67:58:a5:36:58:63:fa:9b:f9:71:ac:19:c0:8d:9a:8a: 29:fc:75:4c:23:66:3e:34:2d:97:c1:4b:84:db:76:2b:0b:cf: 83:0b:8d:1d:6d:48:ed:9d:fe:24:90:0c:26:ea:bc:88:11:4e: d6:5f:94:83:59:09:4e:83:20:ef:e1:28:68:48:d8:8a:b2:ec: 89:b2:05:9d:1e:88:58:33:ce:cb:cf:1c:f1:4e:e0:2b:63:26: 9d:d6:06:a8:75:7d:4f:e5:7d:50:e1:27:2f:23:bf:db:55:fd: 29:fd:6c:ac:70:cc:57:76:07:46:ca:1a:4c:9c:de:c2:f6:bb: 6c:34:6f:6c:79:07:e4:80:86:cf:5c:14:6a:f3:83:4a:f0:2f: a9:63:9d:89:60:c8:e3:ed:4c:bc:63:b5:dc:d9:7d:ed:46:ab: 36:96:55:bc:75:45:d5:a2:2a:e6:b3:5a:f3:aa:6c:63:6e:6b: f5:d6:b6:c4 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcX8N5QGD0EwRR/iUqN3s6jd5DY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA1MTMwOTU2MjVaFw0yNzA1MTIxMDAxMjVaMDMxMTAvBgNV BAMTKDY4NDEzQzFCNDQwRTQ2NzFGODExMjk4MEQ4NTU0NkVERjc1MTA0QjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOJRs5Mp8lqTKjXjZry8vGCdaG UXqpvIpQuDvX+2wB+t4H6mcPgklph5M8rpQUPoSE5cE3ZmWy1FiVeECysFcCheno /au/M4E35SFLWh/YToPb7Bdoc8hQ4m9xd6Dcf2F/plHWqm2xJuEhbydyuGbwzm9O eQngaYFB8kqAcwx5de85T6063O1jRv27C7kpdtdVHkWxBQM30BrXBET88l83LxAu pU6HYOlmBrX/BTOX8N5L94LgGhZoCcn8D59+faTKZvv/wGGw+DMlQrQ8X6Va/F1P TqLJ/gnTarek5BTTJlNmVsvluKtxiw2nohdESYYYnmRWgwlz3Wdy8jX+O4kJAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUaEE8G0QORnH4ESmA2FVG7fdRBLMwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwNjg1MTU0OTcxMzI2ODc1NS8wLzMxMzAzMzJlMzIz MDMwMmUzMTMzMzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfIiDANBgkqhkiG9w0BAQsFAAOCAQEACxaWTo3tRAjykGWPoyOv37dE jq1YzuMx3JOjl5UWrEJwCdn5zNzAB/ni61WvR1T0sxesiReQLy4jjFG2tHTtdskF mU+m1QNSPkBnWKU2WGP6m/lxrBnAjZqKKfx1TCNmPjQtl8FLhNt2KwvPgwuNHW1I 7Z3+JJAMJuq8iBFO1l+Ug1kJToMg7+EoaEjYirLsibIFnR6IWDPOy88c8U7gK2Mm ndYGqHV9T+V9UOEnLyO/21X9Kf1srHDMV3YHRsoaTJzewva7bDRvbHkH5ICGz1wU avODSvAvqWOdiWDI4+1MvGO13Nl97UarNpZVvHVF1aIq5rNa86psY25r9da2xA== -----END CERTIFICATE-----Generated at Wed May 13 21:34:37 2026 by rpki-client