$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e31322e302f32322d3232203d3e2034383131.roa File: 3130332e3230322e31322e302f32322d3232203d3e2034383131.roa (raw, json) Hash identifier: hamL1jk+oPDDBD2/lA0b7Sp5HZ1+c99BKdrG97uBNtg= Subject key identifier: CE:DA:84:94:E6:54:F5:DE:AB:99:9C:5D:AF:9F:03:D9:48:AC:79:B2 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 2AEAD7D5B058F3E5984F1056FB3939AA783E9418 Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e31322e302f32322d3232203d3e2034383131.roa Signing time: Wed 13 May 2026 10:05:11 +0000 ROA not before: Wed 13 May 2026 10:00:11 +0000 ROA not after: Wed 12 May 2027 10:05:11 +0000 asID: 4811 IP address blocks: 103.202.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:ea:d7:d5:b0:58:f3:e5:98:4f:10:56:fb:39:39:aa:78:3e:94:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: May 13 10:00:11 2026 GMT Not After : May 12 10:05:11 2027 GMT Subject: CN=CEDA8494E654F5DEAB999C5DAF9F03D948AC79B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:18:fe:f0:69:d3:c5:95:93:a4:57:04:48:9a: 96:6a:31:c9:1c:ce:54:3a:d8:69:c8:74:3d:0e:68: ac:e1:b5:61:5d:49:0f:5e:9f:ad:da:bd:91:d6:85: 98:48:2d:13:6d:25:79:22:22:4f:5d:d4:ff:d9:fd: 57:15:a6:64:8a:33:38:4c:95:ad:1b:25:d9:56:03: 12:5d:41:24:6d:8b:39:03:ae:73:8f:e6:64:11:d1: d7:b2:e4:3d:52:b6:bb:36:db:a0:8f:80:dc:ba:b6: 16:e4:6d:a3:a2:34:fa:51:af:6e:c0:ae:be:c9:39: 19:70:b9:62:ae:89:8c:50:6b:00:c7:c7:13:31:08: 1d:c4:d4:c7:1b:81:65:d2:9e:bb:01:29:6c:23:a3: 18:16:5c:f8:f8:78:a2:da:23:0d:03:06:15:41:36: e2:86:3c:ec:4b:a9:2a:42:11:92:7a:c1:af:8f:cb: 9a:51:a9:76:a5:d4:b1:6e:a9:6b:35:65:d1:ab:29: fe:c9:de:d3:7a:66:1f:f8:12:e2:39:60:7f:e7:0e: 99:1b:43:4d:a5:b7:de:7a:2b:36:9a:c7:77:d7:07: 05:7a:f1:aa:b8:58:d6:22:a8:3a:09:f0:c2:57:ee: 2e:94:ae:09:d3:a8:fa:c6:45:81:75:e1:3f:47:f7: da:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DA:84:94:E6:54:F5:DE:AB:99:9C:5D:AF:9F:03:D9:48:AC:79:B2 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e31322e302f32322d3232203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.202.12.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:d0:83:0d:ec:62:87:0a:b3:69:26:07:b1:f8:8c:65:cf:0a: 0c:9e:bb:7e:12:5b:aa:48:61:04:bf:f3:1b:b4:c6:c7:34:43: 73:67:e2:e0:db:fa:4d:f5:96:0b:07:a8:3d:4a:68:20:ff:f9: 2b:de:1b:af:b4:c7:59:3c:e1:03:e2:d7:62:54:87:07:71:7a: 65:ab:35:83:02:19:52:79:a9:ad:30:a0:0b:39:b4:20:85:fa: 16:bb:49:32:7b:06:20:46:d8:1d:08:5a:e2:07:8e:9d:42:96: 6c:5d:86:a3:ac:4f:d0:0b:ff:b8:ec:ff:40:f2:0c:bb:9b:23: 41:49:c3:72:04:65:2f:b6:a4:a5:09:01:6e:bd:23:c2:33:0a: c6:54:ae:26:2e:61:90:af:82:4e:7a:79:a0:22:9e:ef:d7:cd: 33:e6:37:28:d8:70:6e:ae:90:9b:db:78:2b:31:d3:a2:1a:07: 77:21:1e:97:26:77:69:22:46:7b:83:fe:5d:a1:1b:69:2b:44: 05:59:8c:b5:9a:10:05:01:c0:34:a7:11:40:5b:5d:43:84:e6: 67:37:2e:c2:10:11:e1:a9:4b:e9:e8:52:e5:7b:98:62:72:f9: 3b:18:2c:c9:3e:b1:5c:f1:5b:0a:87:73:d1:c2:40:e2:0c:8d: 3b:9e:b7:41 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKurX1bBY8+WYTxBW+zk5qng+lBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA1MTMxMDAwMTFaFw0yNzA1MTIxMDA1MTFaMDMxMTAvBgNV BAMTKENFREE4NDk0RTY1NEY1REVBQjk5OUM1REFGOUYwM0Q5NDhBQzc5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFGP7wadPFlZOkVwRImpZqMckc zlQ62GnIdD0OaKzhtWFdSQ9en63avZHWhZhILRNtJXkiIk9d1P/Z/VcVpmSKMzhM la0bJdlWAxJdQSRtizkDrnOP5mQR0dey5D1Strs226CPgNy6thbkbaOiNPpRr27A rr7JORlwuWKuiYxQawDHxxMxCB3E1McbgWXSnrsBKWwjoxgWXPj4eKLaIw0DBhVB NuKGPOxLqSpCEZJ6wa+Py5pRqXal1LFuqWs1ZdGrKf7J3tN6Zh/4EuI5YH/nDpkb Q02lt956Kzaax3fXBwV68aq4WNYiqDoJ8MJX7i6UrgnTqPrGRYF14T9H99q1AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUztqElOZU9d6rmZxdr58D2UisebIwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2ODUxNTQ5NzEzMjY4NzU1LzAvMzEzMDMzMmUzMjMw MzIyZTMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfKDDANBgkqhkiG9w0BAQsFAAOCAQEAK9CDDexihwqzaSYHsfiMZc8KDJ67 fhJbqkhhBL/zG7TGxzRDc2fi4Nv6TfWWCweoPUpoIP/5K94br7THWTzhA+LXYlSH B3F6Zas1gwIZUnmprTCgCzm0IIX6FrtJMnsGIEbYHQha4geOnUKWbF2Go6xP0Av/ uOz/QPIMu5sjQUnDcgRlL7akpQkBbr0jwjMKxlSuJi5hkK+CTnp5oCKe79fNM+Y3 KNhwbq6Qm9t4KzHTohoHdyEelyZ3aSJGe4P+XaEbaStEBVmMtZoQBQHANKcRQFtd Q4TmZzcuwhAR4alL6ehS5XuYYnL5OxgsyT6xXPFbCodz0cJA4gyNO563QQ== -----END CERTIFICATE-----Generated at Wed May 13 21:34:36 2026 by rpki-client