$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa File: 3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa (raw, json) Hash identifier: QGcOEyqrBJ3PPCiPQOipz0wt0v1HfOvL8EHHTR6ZiCE= Subject key identifier: DE:2F:3E:6D:67:F6:CD:B7:A1:9C:68:AA:53:F8:27:1E:F2:52:2B:E7 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 0CA9B7B69146D83FD73E891CBD693D0F98E448B7 Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa Signing time: Wed 13 May 2026 10:05:12 +0000 ROA not before: Wed 13 May 2026 10:00:12 +0000 ROA not after: Wed 12 May 2027 10:05:12 +0000 asID: 17621 IP address blocks: 103.202.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a9:b7:b6:91:46:d8:3f:d7:3e:89:1c:bd:69:3d:0f:98:e4:48:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: May 13 10:00:12 2026 GMT Not After : May 12 10:05:12 2027 GMT Subject: CN=DE2F3E6D67F6CDB7A19C68AA53F8271EF2522BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e5:e6:8f:72:73:44:d3:69:47:66:52:d4:96: fc:02:18:5b:2f:2f:26:38:f6:86:12:18:6d:16:4b: af:60:50:96:33:77:2c:45:3b:e1:71:7b:cd:70:46: cd:71:4a:b6:76:43:9a:90:2c:58:86:23:fc:14:3a: dd:46:e6:c2:52:3b:7e:5c:13:40:ad:d2:5e:95:1f: 40:13:7a:bb:64:a2:3f:d3:b5:df:13:a3:4a:16:ac: 95:f2:02:77:15:5a:db:be:78:b3:65:8a:91:98:23: 0c:52:f5:1f:ed:3b:dc:5f:ff:8e:61:60:af:17:74: 82:02:63:6a:99:9a:93:23:54:0f:dc:61:a2:a0:8b: e6:a2:64:c7:f1:34:a0:c6:dd:6f:99:b3:8b:d6:ac: d4:b0:e9:da:55:4e:2e:c4:d6:5a:d6:6c:d2:71:e3: 7c:15:c1:ff:6f:d1:88:a7:00:34:14:79:e2:b7:23: 8a:4a:55:2c:91:89:3e:4f:ce:72:02:5f:ca:e5:91: 08:16:5f:9d:3f:1e:c3:c1:84:87:0f:7b:92:21:3d: 30:c6:62:e6:8b:ee:4c:7a:aa:99:a0:81:7f:8b:e7: 6f:7f:b7:79:28:8b:38:03:35:72:b2:8e:13:bb:96: 65:7c:6b:04:22:3f:14:45:7c:16:99:ce:0a:f4:a4: d5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2F:3E:6D:67:F6:CD:B7:A1:9C:68:AA:53:F8:27:1E:F2:52:2B:E7 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.202.108.0/22 Signature Algorithm: sha256WithRSAEncryption 9c:2d:34:13:4e:7e:28:e9:da:c4:3f:4f:83:ba:c8:33:51:89: 18:96:70:89:7a:b4:e9:85:ab:c6:65:53:a8:53:0f:7b:86:0b: 31:ed:4f:61:76:89:a6:74:ba:82:3e:4f:e3:92:f0:21:e9:de: 32:8f:3d:d1:1d:b6:0f:11:c8:cb:42:31:6c:54:d3:e7:cd:a3: 0f:65:83:a4:16:34:cf:72:d8:c3:37:16:55:03:38:58:d9:da: 98:19:7f:d0:41:0a:0d:8d:8e:4e:1d:c5:32:a0:c9:4b:a8:17: ac:c7:88:00:6b:cd:ea:1f:4a:ba:62:3d:de:ae:3f:ef:20:e4: 30:4c:50:4b:9f:e8:53:6d:c2:c5:ba:65:95:7e:1c:e4:1f:68: d9:c3:90:b5:a0:fe:80:88:73:1c:2a:bf:f7:38:c1:76:cb:7c: 02:70:96:2b:df:b4:33:83:8b:8e:73:9b:9b:21:1a:e7:be:e0: 34:e6:e4:09:f9:ea:4f:07:4a:fa:66:95:db:61:8a:ba:cd:ba: fd:e3:a3:39:36:ef:f9:b8:9d:bc:68:55:b7:1d:1d:7c:53:c3: 5d:bc:2a:94:e1:7e:a6:08:f6:f0:ac:8d:93:a2:bb:9d:cf:c0: 7b:17:66:02:27:48:7b:02:a7:dd:8b:e7:24:70:21:4f:f1:c3: 2b:6f:12:d9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUDKm3tpFG2D/XPokcvWk9D5jkSLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA1MTMxMDAwMTJaFw0yNzA1MTIxMDA1MTJaMDMxMTAvBgNV BAMTKERFMkYzRTZENjdGNkNEQjdBMTlDNjhBQTUzRjgyNzFFRjI1MjJCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx5eaPcnNE02lHZlLUlvwCGFsv LyY49oYSGG0WS69gUJYzdyxFO+Fxe81wRs1xSrZ2Q5qQLFiGI/wUOt1G5sJSO35c E0Ct0l6VH0ATertkoj/Ttd8To0oWrJXyAncVWtu+eLNlipGYIwxS9R/tO9xf/45h YK8XdIICY2qZmpMjVA/cYaKgi+aiZMfxNKDG3W+Zs4vWrNSw6dpVTi7E1lrWbNJx 43wVwf9v0YinADQUeeK3I4pKVSyRiT5PznICX8rlkQgWX50/HsPBhIcPe5IhPTDG YuaL7kx6qpmggX+L529/t3koizgDNXKyjhO7lmV8awQiPxRFfBaZzgr0pNW/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU3i8+bWf2zbehnGiqU/gnHvJSK+cwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy MzAzMjJlMzEzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfKbDANBgkqhkiG9w0BAQsFAAOCAQEAnC00E05+KOnaxD9Pg7rI M1GJGJZwiXq06YWrxmVTqFMPe4YLMe1PYXaJpnS6gj5P45LwIeneMo890R22DxHI y0IxbFTT582jD2WDpBY0z3LYwzcWVQM4WNnamBl/0EEKDY2OTh3FMqDJS6gXrMeI AGvN6h9KumI93q4/7yDkMExQS5/oU23CxbpllX4c5B9o2cOQtaD+gIhzHCq/9zjB dst8AnCWK9+0M4OLjnObmyEa577gNObkCfnqTwdK+maV22GKus26/eOjOTbv+bid vGhVtx0dfFPDXbwqlOF+pgj28KyNk6K7nc/AexdmAidIewKn3YvnJHAhT/HDK28S 2Q== -----END CERTIFICATE-----Generated at Wed May 13 21:34:32 2026 by rpki-client