$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3130332e382e3230342e302f32322d3234203d3e2037363431.roa File: 3130332e382e3230342e302f32322d3234203d3e2037363431.roa (raw, json) Hash identifier: fRCmKfFljUbbyaEaLS5g5Xj6UYERJGVZeNrygItOFzc= Subject key identifier: B3:0B:43:2F:6C:A4:68:FF:F9:9B:4F:86:A9:B7:89:12:77:E7:11:FC Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 520014EE25EB632D116B62D88633BE6CCB80D85B Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3130332e382e3230342e302f32322d3234203d3e2037363431.roa Signing time: Wed 27 May 2026 07:34:56 +0000 ROA not before: Wed 27 May 2026 07:29:56 +0000 ROA not after: Wed 26 May 2027 07:34:56 +0000 asID: 7641 IP address blocks: 103.8.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:00:14:ee:25:eb:63:2d:11:6b:62:d8:86:33:be:6c:cb:80:d8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:56 2026 GMT Not After : May 26 07:34:56 2027 GMT Subject: CN=B30B432F6CA468FFF99B4F86A9B7891277E711FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3c:de:76:93:1c:5e:e0:1b:14:2f:e9:4f:ff: a9:b4:9d:55:87:40:ae:f2:d8:d5:53:e4:83:44:be: e6:ca:6b:a0:1d:36:27:25:3c:5f:fb:46:5a:b4:7c: f8:fa:50:b0:81:23:5c:fe:c2:fa:4d:0f:2b:90:12: 94:70:c0:45:47:9a:8c:4c:7f:35:aa:fd:fa:ab:3f: 03:69:dc:32:85:d7:b0:d4:1d:65:f1:e4:6a:c9:57: 8a:1d:ff:c4:55:1e:0a:79:1d:2d:00:0d:3d:b5:73: 19:15:82:3d:01:52:c5:d2:58:f5:19:7f:41:61:fc: 60:4b:c4:33:71:e6:4b:b7:d5:62:09:4d:0a:2f:5d: 62:96:ae:8b:d8:37:0f:09:e1:74:a8:73:77:37:bd: e9:a6:56:e6:83:f3:7d:34:44:2b:27:26:62:a1:ac: 3b:00:14:0c:4c:f1:11:4a:d3:b2:63:ef:d9:0a:f0: 4e:de:69:02:3b:bb:d4:3e:19:37:a3:f4:da:1c:06: 73:18:9b:0e:29:ce:51:c4:8a:d0:e6:01:db:ec:74: 3d:fd:d7:dd:fe:55:2f:1e:25:28:55:0d:56:e5:70: f7:89:4e:c5:9f:18:75:22:40:d2:c1:a7:cd:cc:9b: 20:e3:70:bd:c1:a2:f7:70:2d:41:8a:84:29:8a:f3: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:0B:43:2F:6C:A4:68:FF:F9:9B:4F:86:A9:B7:89:12:77:E7:11:FC X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3130332e382e3230342e302f32322d3234203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.8.204.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:cb:fd:d3:eb:5d:2d:b2:a9:5f:1b:0f:bf:ef:19:bd:4c:3a: 51:f2:67:1b:38:dc:6e:be:b7:b1:86:41:c8:71:6d:0e:5e:78: 70:37:44:7e:12:ab:fb:47:16:75:e5:4d:9b:91:8e:03:4a:5f: 0d:b3:dd:94:ba:03:9e:5c:1d:11:df:e8:94:d0:f0:ba:3a:3a: 58:57:b5:a9:30:14:57:8d:a5:7c:a3:c5:a1:06:a0:c3:12:ef: 16:27:82:dc:f7:52:8f:3a:92:59:c9:30:50:13:f0:cb:27:96: fd:c4:f4:29:31:62:11:f9:1c:44:59:ac:6b:9d:55:8a:a8:e3: ea:69:4e:9d:8e:32:42:bf:87:4f:27:69:47:3a:e2:19:4f:4d: 55:48:e1:e7:9b:9d:16:eb:8d:c2:f5:59:1e:f0:2d:b5:de:56: 0a:b3:3d:56:00:96:f5:cc:66:54:dc:9c:b7:af:10:0d:3f:c3: e0:e9:bb:8d:d4:b9:64:49:73:e4:7c:74:a2:bb:fb:19:a4:4b: 75:8b:20:6b:79:7e:ee:12:69:cd:17:d7:2f:72:fe:bf:f6:7f: 90:46:91:d3:d0:23:ae:03:be:38:aa:68:f0:f6:3f:27:12:87: 28:1f:50:2d:cd:48:99:67:cc:d6:1c:d7:3f:3a:b5:52:fe:f5: 5f:81:99:d1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUUgAU7iXrYy0Ra2LYhjO+bMuA2FswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTZaFw0yNzA1MjYwNzM0NTZaMDMxMTAvBgNV BAMTKEIzMEI0MzJGNkNBNDY4RkZGOTlCNEY4NkE5Qjc4OTEyNzdFNzExRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyPN52kxxe4BsUL+lP/6m0nVWH QK7y2NVT5INEvubKa6AdNiclPF/7Rlq0fPj6ULCBI1z+wvpNDyuQEpRwwEVHmoxM fzWq/fqrPwNp3DKF17DUHWXx5GrJV4od/8RVHgp5HS0ADT21cxkVgj0BUsXSWPUZ f0Fh/GBLxDNx5ku31WIJTQovXWKWrovYNw8J4XSoc3c3vemmVuaD8300RCsnJmKh rDsAFAxM8RFK07Jj79kK8E7eaQI7u9Q+GTej9NocBnMYmw4pzlHEitDmAdvsdD39 193+VS8eJShVDVblcPeJTsWfGHUiQNLBp83MmyDjcL3BovdwLUGKhCmK8ylxAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUswtDL2ykaP/5m0+GqbeJEnfnEfwwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzEzMDMzMmUzODJl MzIzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzczNjM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnCMwwDQYJKoZIhvcNAQELBQADggEBAIvL/dPrXS2yqV8bD7/vGb1MOlHyZxs4 3G6+t7GGQchxbQ5eeHA3RH4Sq/tHFnXlTZuRjgNKXw2z3ZS6A55cHRHf6JTQ8Lo6 OlhXtakwFFeNpXyjxaEGoMMS7xYngtz3Uo86klnJMFAT8Msnlv3E9CkxYhH5HERZ rGudVYqo4+ppTp2OMkK/h08naUc64hlPTVVI4eebnRbrjcL1WR7wLbXeVgqzPVYA lvXMZlTcnLevEA0/w+Dpu43UuWRJc+R8dKK7+xmkS3WLIGt5fu4Sac0X1y9y/r/2 f5BGkdPQI64DvjiqaPD2PycShygfUC3NSJlnzNYc1z86tVL+9V+BmdE= -----END CERTIFICATE-----Generated at Sat May 30 00:53:58 2026 by rpki-client