$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e302e302f32322d3232203d3e2034383131.roa File: 3130332e3230322e302e302f32322d3232203d3e2034383131.roa (raw, json) Hash identifier: gzGpKkI41HE4+LfhxQ42A3QIORfsdRhP8WQuUpuxEQ0= Subject key identifier: 18:79:6F:AE:1B:83:69:04:37:78:F6:52:61:68:83:B6:53:6A:D4:B6 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 09FC3F42172CE1F7D94F1E969A9CCD91B6E12D93 Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e302e302f32322d3232203d3e2034383131.roa Signing time: Wed 13 May 2026 10:01:25 +0000 ROA not before: Wed 13 May 2026 09:56:25 +0000 ROA not after: Wed 12 May 2027 10:01:25 +0000 asID: 4811 IP address blocks: 103.202.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:fc:3f:42:17:2c:e1:f7:d9:4f:1e:96:9a:9c:cd:91:b6:e1:2d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: May 13 09:56:25 2026 GMT Not After : May 12 10:01:25 2027 GMT Subject: CN=18796FAE1B8369043778F652616883B6536AD4B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4d:13:f8:3f:0f:99:9a:49:da:1c:4e:0d:de: 1f:8f:45:1b:cc:11:4f:69:8d:e6:ed:16:8f:f1:e6: c7:0a:99:71:1d:46:c0:21:5b:3e:da:5e:e7:67:1a: 26:fe:f9:3c:11:d9:df:58:12:21:df:8b:ec:2f:dc: ea:e7:45:d0:c3:cb:67:69:8d:da:fe:81:14:4b:99: 8f:ca:39:fc:8f:11:5b:eb:b4:52:c8:93:c1:e6:83: 4b:a2:d3:52:d6:cc:76:ad:25:5f:60:e3:8b:74:f8: fc:e1:82:77:f8:29:12:de:dc:84:fe:2f:c5:0c:ee: 64:cd:a6:35:6c:83:37:7a:08:1d:ea:f8:6b:6e:75: f4:9b:70:d9:af:c3:b2:ab:bb:1c:fa:50:48:d7:0e: 45:bd:07:40:e7:5c:82:81:7e:bf:ef:80:46:5f:56: d9:10:16:7a:cf:cd:79:d1:c7:6d:63:d8:3a:dd:e1: 34:6c:16:6d:89:8d:15:0b:50:b4:19:38:70:a6:bd: 46:79:1d:37:4f:34:69:99:7f:d9:8c:97:8b:b8:19: 2d:dc:32:46:f4:e7:0b:9f:54:36:d2:83:be:60:86: f6:78:59:d1:3f:fb:4d:5a:cf:22:c4:cf:6b:b4:68: a5:ca:ef:e6:4f:75:4a:9d:72:fa:ba:2d:ae:c8:c2: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:79:6F:AE:1B:83:69:04:37:78:F6:52:61:68:83:B6:53:6A:D4:B6 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e302e302f32322d3232203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.202.0.0/22 Signature Algorithm: sha256WithRSAEncryption 13:70:d3:7d:ed:ff:0b:2d:cd:a5:de:82:66:dd:cb:61:ae:0f: 4a:e8:d6:c0:19:a0:10:af:1c:e5:fc:74:23:2a:94:08:77:e3: af:7d:06:cb:05:83:48:c5:f2:cb:77:a7:b5:a6:fb:1d:ce:1a: 2e:69:1b:d6:a1:38:41:eb:3e:61:8a:a6:72:93:a4:26:41:1d: 95:d0:d6:24:b3:a6:6b:19:f2:9b:d9:9e:e6:74:77:60:02:82: 03:26:14:31:7b:ab:04:66:24:7b:8b:cb:1b:d7:58:a9:72:50: 06:b8:d2:86:38:cb:aa:6a:ab:6c:f0:ca:df:99:70:fe:c1:f6: bf:d4:d0:f3:bf:a2:11:af:a8:61:ed:2a:ba:77:25:84:fa:40: 67:0e:ac:e5:85:e4:63:b1:09:bd:56:21:2f:dd:71:5d:5e:5e: c0:5e:99:bf:0d:fc:7c:11:97:50:25:49:c3:0a:2f:30:6c:d0: 23:89:63:1e:dc:ca:a8:3d:1a:6f:bd:2f:eb:18:11:62:8b:dc: 4e:a5:e6:01:f0:3d:69:b6:73:9e:f4:ac:a6:11:48:fd:e6:23: f8:ee:26:92:40:67:be:b6:bb:62:b7:a2:86:f6:91:d6:4f:cf: c0:80:19:2a:68:5a:86:29:aa:8a:37:0b:51:b3:26:5d:60:71: e8:ae:15:82 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUCfw/Qhcs4ffZTx6WmpzNkbbhLZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA1MTMwOTU2MjVaFw0yNzA1MTIxMDAxMjVaMDMxMTAvBgNV BAMTKDE4Nzk2RkFFMUI4MzY5MDQzNzc4RjY1MjYxNjg4M0I2NTM2QUQ0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TRP4Pw+ZmknaHE4N3h+PRRvM EU9pjebtFo/x5scKmXEdRsAhWz7aXudnGib++TwR2d9YEiHfi+wv3OrnRdDDy2dp jdr+gRRLmY/KOfyPEVvrtFLIk8Hmg0ui01LWzHatJV9g44t0+Pzhgnf4KRLe3IT+ L8UM7mTNpjVsgzd6CB3q+GtudfSbcNmvw7Kruxz6UEjXDkW9B0DnXIKBfr/vgEZf VtkQFnrPzXnRx21j2Drd4TRsFm2JjRULULQZOHCmvUZ5HTdPNGmZf9mMl4u4GS3c Mkb05wufVDbSg75ghvZ4WdE/+01azyLEz2u0aKXK7+ZPdUqdcvq6La7IwvBFAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUGHlvrhuDaQQ3ePZSYWiDtlNq1LYwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2ODUxNTQ5NzEzMjY4NzU1LzAvMzEzMDMzMmUzMjMw MzIyZTMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnygAwDQYJKoZIhvcNAQELBQADggEBABNw033t/wstzaXegmbdy2GuD0ro1sAZ oBCvHOX8dCMqlAh34699BssFg0jF8st3p7Wm+x3OGi5pG9ahOEHrPmGKpnKTpCZB HZXQ1iSzpmsZ8pvZnuZ0d2ACggMmFDF7qwRmJHuLyxvXWKlyUAa40oY4y6pqq2zw yt+ZcP7B9r/U0PO/ohGvqGHtKrp3JYT6QGcOrOWF5GOxCb1WIS/dcV1eXsBemb8N /HwRl1AlScMKLzBs0COJYx7cyqg9Gm+9L+sYEWKL3E6l5gHwPWm2c570rKYRSP3m I/juJpJAZ762u2K3oob2kdZPz8CAGSpoWoYpqoo3C1GzJl1gceiuFYI= -----END CERTIFICATE-----Generated at Wed May 13 21:34:37 2026 by rpki-client