$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3233352e3138342e302f32322d3232203d3e2030.roa File: 3130332e3233352e3138342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: XPCVxk8wrdPr0+HsLP2WlWWawH8V4P5eZRWw6QJ0Lt0= Subject key identifier: A8:54:27:50:CF:36:A9:A0:E7:5C:43:B2:BB:8B:1F:36:50:C1:C3:BE Certificate issuer: /CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Certificate serial: 7A26C245B8CBD634835EAA96ADBAA3C03DB696D7 Authority key identifier: 71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3233352e3138342e302f32322d3232203d3e2030.roa Signing time: Thu 28 May 2026 08:56:14 +0000 ROA not before: Thu 28 May 2026 08:51:14 +0000 ROA not after: Thu 27 May 2027 08:56:14 +0000 asID: 0 IP address blocks: 103.235.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:26:c2:45:b8:cb:d6:34:83:5e:aa:96:ad:ba:a3:c0:3d:b6:96:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0 Validity Not Before: May 28 08:51:14 2026 GMT Not After : May 27 08:56:14 2027 GMT Subject: CN=A8542750CF36A9A0E75C43B2BB8B1F3650C1C3BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6a:c3:66:04:60:c8:3f:96:f2:88:8a:14:0b: 4b:91:4d:61:dc:f6:3e:1f:75:d2:96:e4:18:d5:23: 13:db:36:e9:f0:0b:1e:fb:db:59:c0:5b:fa:8d:4e: 0e:8d:15:8d:a7:e2:6a:e0:17:e4:0e:7e:12:b3:da: b3:b2:3a:e5:db:99:14:2c:3b:71:71:4e:d9:a6:a8: 4f:56:5d:5d:e5:31:29:42:ae:3a:76:84:d3:27:0f: 1e:5b:1e:5b:8a:05:0f:dd:9f:c0:7f:9b:b7:0a:b3: 03:11:c9:5f:34:35:63:4a:ef:ca:e7:e2:02:e0:b2: b1:91:90:23:d8:98:a0:89:84:ab:28:3b:3d:20:14: d5:75:d6:c4:6d:82:d0:41:ca:1d:f5:fa:e9:58:e3: 06:6c:35:e9:16:c2:c9:af:36:b3:cc:9e:90:a3:f6: d3:cd:99:83:d9:87:d0:58:94:05:14:7f:4c:41:b4: 6a:8a:d2:fa:65:9d:c0:15:ad:fe:2f:d2:ad:46:bc: ec:83:e4:29:36:4e:75:43:73:ff:4d:d6:b6:d6:c4: 89:3c:1f:2c:fa:f8:63:51:0a:4b:d8:2c:04:18:a8: 6a:ca:f3:6d:32:f7:13:74:b2:aa:50:24:54:9b:3b: c7:29:20:34:6c:44:f0:da:ca:9b:90:c1:78:46:60: b7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:54:27:50:CF:36:A9:A0:E7:5C:43:B2:BB:8B:1F:36:50:C1:C3:BE X509v3 Authority Key Identifier: keyid:71:95:2B:0F:F9:BC:A7:CE:54:36:B0:DB:50:09:CA:09:F6:10:F3:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71952B0FF9BCA7CE5436B0DB5009CA09F610F3C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591195721400321/0/3130332e3233352e3138342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.184.0/22 Signature Algorithm: sha256WithRSAEncryption d3:12:8b:8d:bf:52:53:fb:47:fa:8d:45:f9:34:dd:d8:05:bc: be:61:0e:07:f7:65:0c:7e:98:6d:9d:1b:64:d0:e2:66:e1:38: 29:92:67:a4:55:93:e5:fc:c5:2d:0c:65:5e:a0:4d:18:c7:de: 64:b1:02:71:bd:ef:9d:3d:fe:29:e6:fe:53:68:53:ed:ce:5e: 89:60:a1:a2:0f:5f:35:c7:2b:70:a1:27:cc:3b:3d:45:d2:3f: 4c:ac:f2:ff:b0:ea:df:96:a7:ea:9c:de:75:06:76:3b:1f:71: ab:63:16:eb:11:97:dd:88:50:a4:8e:d1:13:01:f1:6e:1c:57: 82:4d:ee:6d:4f:75:45:cc:24:50:bd:42:68:85:e4:6f:ea:05: 54:fe:70:23:b9:b2:c8:a6:05:b0:20:ca:c2:5e:01:05:d7:2a: d8:1d:d1:eb:31:38:fd:17:05:6a:7a:94:3b:5d:e7:c6:80:bf: 90:f1:32:97:25:12:f7:7d:e3:f2:a1:e0:60:8d:27:ab:36:fa: 0d:4b:4e:97:b1:76:18:bc:40:de:e5:14:7c:f6:70:4f:c7:86: a3:ce:1f:13:64:70:98:e1:6e:4b:3f:33:e1:f3:a7:82:2c:a4: 10:9d:50:68:85:9b:c2:fc:99:9c:b1:9e:4e:7b:12:65:31:0b: 85:73:06:af -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUeibCRbjL1jSDXqqWrbqjwD22ltcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlG NjEwRjNDMDAeFw0yNjA1MjgwODUxMTRaFw0yNzA1MjcwODU2MTRaMDMxMTAvBgNV BAMTKEE4NTQyNzUwQ0YzNkE5QTBFNzVDNDNCMkJCOEIxRjM2NTBDMUMzQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7asNmBGDIP5byiIoUC0uRTWHc 9j4fddKW5BjVIxPbNunwCx7721nAW/qNTg6NFY2n4mrgF+QOfhKz2rOyOuXbmRQs O3FxTtmmqE9WXV3lMSlCrjp2hNMnDx5bHluKBQ/dn8B/m7cKswMRyV80NWNK78rn 4gLgsrGRkCPYmKCJhKsoOz0gFNV11sRtgtBByh31+ulY4wZsNekWwsmvNrPMnpCj 9tPNmYPZh9BYlAUUf0xBtGqK0vplncAVrf4v0q1GvOyD5Ck2TnVDc/9N1rbWxIk8 Hyz6+GNRCkvYLAQYqGrK820y9xN0sqpQJFSbO8cpIDRsRPDaypuQwXhGYLfzAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUqFQnUM82qaDnXEOyu4sfNlDBw74wHwYDVR0j BBgwFoAUcZUrD/m8p85UNrDbUAnKCfYQ88AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTE5NTcyMTQwMDMyMS8wLzcxOTUyQjBGRjlCQ0E3Q0U1NDM2QjBEQjUwMDlD QTA5RjYxMEYzQzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzE5NTJCMEZGOUJDQTdDRTU0MzZCMERCNTAwOUNBMDlGNjEwRjNDMC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTkxMTk1NzIxNDAwMzIxLzAvMzEzMDMzMmUzMjMz MzUyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z+u4MA0GCSqGSIb3DQEBCwUAA4IBAQDTEouNv1JT+0f6jUX5NN3YBby+YQ4H92UM fphtnRtk0OJm4TgpkmekVZPl/MUtDGVeoE0Yx95ksQJxve+dPf4p5v5TaFPtzl6J YKGiD181xytwoSfMOz1F0j9MrPL/sOrflqfqnN51BnY7H3GrYxbrEZfdiFCkjtET AfFuHFeCTe5tT3VFzCRQvUJoheRv6gVU/nAjubLIpgWwIMrCXgEF1yrYHdHrMTj9 FwVqepQ7XefGgL+Q8TKXJRL3fePyoeBgjSerNvoNS06XsXYYvEDe5RR89nBPx4aj zh8TZHCY4W5LPzPh86eCLKQQnVBohZvC/JmcsZ5OexJlMQuFcwav -----END CERTIFICATE-----Generated at Fri May 29 23:50:00 2026 by rpki-client