$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa File: 3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa (raw, json) Hash identifier: /PgaPba1/7Kbi7BZ/3tFqF9WntWkEN70FFd0MzHegfI= Subject key identifier: 10:69:D1:93:EA:34:39:05:10:6A:59:17:67:AC:5C:DC:9E:5F:A8:16 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 1BB6BACC71238A586D4793410740012242AB2F5C Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa Signing time: Wed 13 May 2026 10:05:12 +0000 ROA not before: Wed 13 May 2026 10:00:12 +0000 ROA not after: Wed 12 May 2027 10:05:12 +0000 asID: 17621 IP address blocks: 103.202.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b6:ba:cc:71:23:8a:58:6d:47:93:41:07:40:01:22:42:ab:2f:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: May 13 10:00:12 2026 GMT Not After : May 12 10:05:12 2027 GMT Subject: CN=1069D193EA343905106A591767AC5CDC9E5FA816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:3e:b2:f0:85:00:06:21:f4:d8:ee:8e:0c: aa:ba:89:4f:61:36:07:56:f1:34:99:17:16:8c:d0: d5:38:75:51:2a:b3:f0:2c:46:f3:5c:e4:cb:e9:64: e3:c1:2d:07:a4:7d:5e:a8:5f:fa:fb:0c:f7:51:8c: a1:e1:ef:fd:82:11:69:57:05:c8:58:5e:b9:95:f6: 53:57:63:50:f6:f7:b2:c7:3a:cb:99:1b:36:2c:8a: 62:81:22:61:13:06:23:2f:86:98:2c:cc:69:5b:99: a4:d1:91:c2:d6:d7:b1:6e:df:46:b2:c6:27:f6:dd: e9:13:7f:d2:f3:8d:d3:9c:f6:6a:75:bf:4b:bb:54: 24:98:47:6e:75:94:81:1b:9c:2e:19:66:01:92:46: 15:c5:66:95:6d:0b:0d:97:0c:07:dc:75:03:bf:7c: f3:dc:c2:90:d0:82:55:cc:2b:75:d7:56:ec:d2:77: 2c:84:90:d7:06:8b:3d:1a:cb:2e:4d:b3:53:84:5f: 23:c1:1f:68:01:50:c1:56:81:a5:3f:c3:04:00:0e: 6d:bb:fe:d2:bd:5c:2b:95:86:0b:52:33:0b:d7:dd: ff:d5:49:01:13:a9:60:f1:96:fc:47:ad:81:58:cf: 5f:96:1b:30:40:96:81:e6:86:77:ce:a3:bf:8e:9d: 56:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:69:D1:93:EA:34:39:05:10:6A:59:17:67:AC:5C:DC:9E:5F:A8:16 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3132302e302f32322d3232203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.202.120.0/22 Signature Algorithm: sha256WithRSAEncryption 91:9c:f3:df:dc:f0:e5:e4:6f:f8:81:bd:44:f3:9f:a0:da:a1: eb:33:a9:e5:23:8a:b1:69:bb:ea:a0:fa:bc:da:57:09:ef:1c: 8b:15:df:e3:3f:cb:ed:26:9e:b2:71:34:20:fb:a8:93:eb:97: de:92:34:64:4d:e6:73:39:74:a7:46:2e:e0:03:26:8a:e1:8b: 8c:9a:34:03:b1:52:7d:91:f1:98:39:f2:74:c2:81:c9:0a:58: 5e:4a:f5:9e:d7:09:fd:ef:39:14:f1:39:e1:3b:6e:98:3d:98: 8e:f8:c5:bb:d2:9d:2f:41:6a:2c:b8:61:27:38:3f:d2:52:1f: 83:47:45:eb:12:0a:af:fd:68:2a:08:78:a9:68:97:c4:fd:31: 5e:19:21:bb:08:a3:98:9e:3e:1c:e0:b1:df:ec:2a:4d:f6:83: 38:b1:02:7d:fe:13:2c:1a:9e:81:18:a7:f2:bc:e7:c9:23:ca: 47:ac:7c:cf:0f:3f:06:a4:ef:8c:b3:13:81:0f:b6:73:76:e9: 65:ad:2b:32:72:ec:65:9d:5a:68:c0:e1:19:34:ed:1a:74:37: 8f:55:b0:24:44:43:3b:a4:41:38:c0:9b:bc:00:62:10:54:7f: 4f:59:8e:f4:fc:6b:36:e2:30:b2:31:61:92:fb:c3:fd:36:83: d0:ca:1e:0a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUG7a6zHEjilhtR5NBB0ABIkKrL1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA1MTMxMDAwMTJaFw0yNzA1MTIxMDA1MTJaMDMxMTAvBgNV BAMTKDEwNjlEMTkzRUEzNDM5MDUxMDZBNTkxNzY3QUM1Q0RDOUU1RkE4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMD6y8IUABiH02O6ODKq6iU9h NgdW8TSZFxaM0NU4dVEqs/AsRvNc5MvpZOPBLQekfV6oX/r7DPdRjKHh7/2CEWlX BchYXrmV9lNXY1D297LHOsuZGzYsimKBImETBiMvhpgszGlbmaTRkcLW17Fu30ay xif23ekTf9LzjdOc9mp1v0u7VCSYR251lIEbnC4ZZgGSRhXFZpVtCw2XDAfcdQO/ fPPcwpDQglXMK3XXVuzSdyyEkNcGiz0ayy5Ns1OEXyPBH2gBUMFWgaU/wwQADm27 /tK9XCuVhgtSMwvX3f/VSQETqWDxlvxHrYFYz1+WGzBAloHmhnfOo7+OnVYfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUEGnRk+o0OQUQalkXZ6xc3J5fqBYwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy MzAzMjJlMzEzMjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfKeDANBgkqhkiG9w0BAQsFAAOCAQEAkZzz39zw5eRv+IG9RPOf oNqh6zOp5SOKsWm76qD6vNpXCe8cixXf4z/L7SaesnE0IPuok+uX3pI0ZE3mczl0 p0Yu4AMmiuGLjJo0A7FSfZHxmDnydMKByQpYXkr1ntcJ/e85FPE54TtumD2YjvjF u9KdL0FqLLhhJzg/0lIfg0dF6xIKr/1oKgh4qWiXxP0xXhkhuwijmJ4+HOCx3+wq TfaDOLECff4TLBqegRin8rznySPKR6x8zw8/BqTvjLMTgQ+2c3bpZa0rMnLsZZ1a aMDhGTTtGnQ3j1WwJERDO6RBOMCbvABiEFR/T1mO9PxrNuIwsjFhkvvD/TaD0Moe Cg== -----END CERTIFICATE-----Generated at Wed May 13 21:34:34 2026 by rpki-client