$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e33322e302f32322d3232203d3e2034383131.roa File: 3130332e3230322e33322e302f32322d3232203d3e2034383131.roa (raw, json) Hash identifier: IulUFjp/z18PIa7fZirUjpITSJke+7fBDITEm4XpcQk= Subject key identifier: BD:43:3A:C5:00:5C:BF:1E:84:FD:49:15:88:00:27:49:0A:0E:8F:EC Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 1E18F88D11638F21CFD50C65B3BAB23F133ECD56 Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e33322e302f32322d3232203d3e2034383131.roa Signing time: Wed 13 May 2026 10:11:15 +0000 ROA not before: Wed 13 May 2026 10:06:15 +0000 ROA not after: Wed 12 May 2027 10:11:15 +0000 asID: 4811 IP address blocks: 103.202.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:18:f8:8d:11:63:8f:21:cf:d5:0c:65:b3:ba:b2:3f:13:3e:cd:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: May 13 10:06:15 2026 GMT Not After : May 12 10:11:15 2027 GMT Subject: CN=BD433AC5005CBF1E84FD4915880027490A0E8FEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:83:4e:19:d2:f4:2d:7e:37:36:c1:0a:55:5a: cf:c4:59:f2:e6:59:38:1e:e3:0d:f6:37:b6:32:bf: 50:d8:6e:81:66:71:c7:28:03:92:0f:38:bf:62:10: cd:9e:36:4c:8f:d3:97:32:1d:69:93:58:0f:34:e3: d6:4b:2c:48:f1:b9:37:8f:6f:f6:49:69:9c:c1:bf: ed:c6:b5:7d:c3:7e:7e:33:0e:7f:93:b6:3a:f9:80: 08:af:b7:60:ba:a5:af:43:ba:e0:06:92:4b:a3:bd: 00:47:96:91:19:eb:b2:4a:11:2c:13:57:74:55:b2: ac:f4:b4:eb:45:99:1d:fd:da:19:dc:4e:d1:79:41: c2:2b:89:05:f2:2e:65:ab:b3:f5:52:d2:bf:25:78: e6:51:23:e8:a9:58:dc:32:07:ab:71:ad:67:e9:33: 2d:87:fc:02:0a:00:95:2e:4a:c9:12:ef:e9:14:a3: 32:15:3a:a3:23:4d:d6:8f:34:54:1e:4e:2a:45:b4: af:98:fb:42:16:db:db:22:17:c3:2b:55:66:73:76: 2c:a3:ce:32:b7:84:08:23:65:dc:04:3f:6a:1b:31: 6d:99:01:5e:99:c5:cf:09:f8:08:d2:90:19:89:21: 18:f7:6e:50:39:15:e1:e8:92:18:96:44:bb:7e:66: 19:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:43:3A:C5:00:5C:BF:1E:84:FD:49:15:88:00:27:49:0A:0E:8F:EC X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e33322e302f32322d3232203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.202.32.0/22 Signature Algorithm: sha256WithRSAEncryption 87:0b:01:c0:72:5d:fa:b5:d3:b6:d2:84:a2:79:ec:6f:bd:36: 1f:28:60:32:8e:dc:fd:e5:1b:59:87:59:7a:b0:99:9d:11:b1: 1e:bc:9d:ff:ae:de:6f:e4:de:44:4b:25:3d:79:ac:b9:63:ba: c1:13:d2:f6:11:97:fe:23:b6:89:06:13:f6:03:e2:8b:86:b8: db:85:07:80:69:f3:dc:51:73:39:69:48:de:e8:c2:e9:34:8b: b9:2e:b5:cf:b3:2d:11:7e:a6:7d:41:16:b4:62:6e:be:46:4a: 5c:93:f4:f5:70:19:83:01:9c:8b:7a:5e:33:91:e9:d7:95:62: cd:49:78:72:90:76:2f:b9:bf:21:1e:5b:08:08:d6:54:63:78: 3a:09:44:84:56:e7:db:1b:6b:62:23:c5:af:02:9e:c3:6f:e0: 12:c5:4f:60:ec:af:8c:d4:55:b0:04:bc:8a:96:35:e5:45:aa: ea:4c:6a:5a:65:ed:1e:86:02:87:34:bd:ab:1c:b7:f1:bc:35: 95:a4:11:85:be:d6:d0:f6:61:15:ed:ab:42:1e:a6:52:82:04: 70:75:6c:f1:0e:e4:1e:5f:8f:fe:75:25:ef:e0:71:0d:2a:f8: cd:bd:4f:8f:b4:2b:e2:67:ed:bc:0c:1c:91:17:51:a1:77:63: e4:8b:f5:8f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHhj4jRFjjyHP1Qxls7qyPxM+zVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA1MTMxMDA2MTVaFw0yNzA1MTIxMDExMTVaMDMxMTAvBgNV BAMTKEJENDMzQUM1MDA1Q0JGMUU4NEZENDkxNTg4MDAyNzQ5MEEwRThGRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcg04Z0vQtfjc2wQpVWs/EWfLm WTge4w32N7Yyv1DYboFmcccoA5IPOL9iEM2eNkyP05cyHWmTWA8049ZLLEjxuTeP b/ZJaZzBv+3GtX3Dfn4zDn+Ttjr5gAivt2C6pa9DuuAGkkujvQBHlpEZ67JKESwT V3RVsqz0tOtFmR392hncTtF5QcIriQXyLmWrs/VS0r8leOZRI+ipWNwyB6txrWfp My2H/AIKAJUuSskS7+kUozIVOqMjTdaPNFQeTipFtK+Y+0IW29siF8MrVWZzdiyj zjK3hAgjZdwEP2obMW2ZAV6Zxc8J+AjSkBmJIRj3blA5FeHokhiWRLt+ZhmZAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUvUM6xQBcvx6E/UkViAAnSQoOj+wwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2ODUxNTQ5NzEzMjY4NzU1LzAvMzEzMDMzMmUzMjMw MzIyZTMzMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfKIDANBgkqhkiG9w0BAQsFAAOCAQEAhwsBwHJd+rXTttKEonnsb702Hyhg Mo7c/eUbWYdZerCZnRGxHryd/67eb+TeREslPXmsuWO6wRPS9hGX/iO2iQYT9gPi i4a424UHgGnz3FFzOWlI3ujC6TSLuS61z7MtEX6mfUEWtGJuvkZKXJP09XAZgwGc i3peM5Hp15VizUl4cpB2L7m/IR5bCAjWVGN4OglEhFbn2xtrYiPFrwKew2/gEsVP YOyvjNRVsAS8ipY15UWq6kxqWmXtHoYChzS9qxy38bw1laQRhb7W0PZhFe2rQh6m UoIEcHVs8Q7kHl+P/nUl7+BxDSr4zb1Pj7Qr4mftvAwckRdRoXdj5Iv1jw== -----END CERTIFICATE-----Generated at Wed May 13 21:34:34 2026 by rpki-client