$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3136302e302f32302d3230203d3e20313333373735.roa File: 3130312e3235312e3136302e302f32302d3230203d3e20313333373735.roa (raw, json) Hash identifier: QJDkhLGgfSypbwaj05Gpo9M5bbx4nXjwmYBgxDKuGG4= Subject key identifier: 8A:E3:01:D9:47:46:9F:6E:D3:FA:EA:B8:85:09:CF:BC:0B:FC:E6:50 Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Certificate serial: 0CC6E8E5E6C05B5F4F4E30A401D845C88CCC0E3C Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3136302e302f32302d3230203d3e20313333373735.roa Signing time: Mon 25 May 2026 06:51:03 +0000 ROA not before: Mon 25 May 2026 06:46:03 +0000 ROA not after: Mon 24 May 2027 06:51:03 +0000 asID: 133775 IP address blocks: 101.251.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c6:e8:e5:e6:c0:5b:5f:4f:4e:30:a4:01:d8:45:c8:8c:cc:0e:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9 Validity Not Before: May 25 06:46:03 2026 GMT Not After : May 24 06:51:03 2027 GMT Subject: CN=8AE301D947469F6ED3FAEAB88509CFBC0BFCE650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:c0:70:77:ac:a7:e2:8b:ad:a2:8e:35:d4: 2e:b8:da:cb:2c:39:14:dd:9f:59:05:47:36:02:d8: 3d:de:f9:a3:3e:77:66:1d:fd:89:5c:1c:ad:ab:73: eb:b7:a5:ba:5d:9d:cf:13:29:dc:a4:d5:6e:78:a7: 5b:63:37:90:2e:9b:a7:43:43:59:b4:e7:df:94:ba: 9c:83:48:a8:4d:a4:c5:fc:6b:2f:4f:f0:d5:a1:20: 3a:c9:14:81:11:60:83:4e:98:b2:5c:68:a1:62:22: 22:9e:c0:2d:e9:64:19:0e:f7:fe:37:8e:ee:96:6f: 33:01:a5:79:07:6f:7f:ec:c1:2a:1b:80:44:68:4e: 06:9e:cb:03:0e:e0:b8:e9:64:dc:66:59:6f:43:0b: 3b:69:bc:9b:21:ce:97:2a:2d:a8:37:a9:b4:55:7e: f2:ed:d7:5f:0d:cf:95:64:82:42:54:e5:83:e6:f9: 83:85:e8:6d:df:e8:76:27:14:8d:50:b2:4e:87:e3: b3:97:30:2c:10:81:1d:cb:e1:e1:76:54:d4:9b:e7: 14:57:a9:15:06:24:d6:e9:f2:24:e2:11:dc:a9:97: b8:c6:62:f8:15:ad:75:36:83:fe:66:e4:e1:bc:9d: 3d:c1:dd:84:fa:ae:c9:62:68:0a:44:37:61:08:48: b5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E3:01:D9:47:46:9F:6E:D3:FA:EA:B8:85:09:CF:BC:0B:FC:E6:50 X509v3 Authority Key Identifier: keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/3130312e3235312e3136302e302f32302d3230203d3e20313333373735.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.251.160.0/20 Signature Algorithm: sha256WithRSAEncryption 0c:df:bf:99:e8:7b:f4:8b:32:c4:7a:f2:46:cd:a2:e7:a5:e4: 20:45:54:17:16:98:db:8b:ce:0b:18:af:6d:f4:46:15:29:12: 69:76:f3:28:2d:e0:57:e1:29:e1:46:6e:fe:89:91:ea:49:01: de:e5:8e:f0:a7:ac:6a:8a:8a:9e:c4:3d:cd:ca:ff:5d:3c:8e: f0:4c:c4:b2:d0:a7:2c:1c:80:0d:2c:92:36:68:1c:76:a3:d7: 35:e0:cd:42:1d:17:51:bf:78:04:a8:88:51:dd:3f:a3:c5:10: 5d:10:d7:17:9a:ce:31:53:16:d7:f4:1d:f2:ae:69:37:3b:f6: 1d:45:ca:7d:a3:75:e6:82:37:7a:de:86:54:8d:6b:0c:65:c5: 36:53:04:0d:34:b3:6f:d8:7c:f7:18:91:e4:e3:dc:94:a1:2d: f3:96:ed:5e:e7:80:f9:d0:02:fb:d6:82:f1:78:26:ed:ba:2c: 4c:83:be:fc:6f:e5:63:f2:b5:66:04:b4:ad:7a:e8:e6:6e:35: 6e:6e:4b:66:c9:3e:56:e0:18:4b:4e:65:a3:52:2b:14:d9:28: 31:1c:06:28:7c:2d:ff:d8:76:33:6b:df:a6:ab:6d:1d:17:21: 44:2b:37:c7:fd:46:6e:0d:29:f0:18:bb:c2:33:2b:ff:ad:82: 12:51:01:bb -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUDMbo5ebAW19PTjCkAdhFyIzMDjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZC MzE4QUJGOTAeFw0yNjA1MjUwNjQ2MDNaFw0yNzA1MjQwNjUxMDNaMDMxMTAvBgNV BAMTKDhBRTMwMUQ5NDc0NjlGNkVEM0ZBRUFCODg1MDlDRkJDMEJGQ0U2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUZ8Bwd6yn4outoo411C642sss ORTdn1kFRzYC2D3e+aM+d2Yd/YlcHK2rc+u3pbpdnc8TKdyk1W54p1tjN5Aum6dD Q1m059+UupyDSKhNpMX8ay9P8NWhIDrJFIERYINOmLJcaKFiIiKewC3pZBkO9/43 ju6WbzMBpXkHb3/swSobgERoTgaeywMO4LjpZNxmWW9DCztpvJshzpcqLag3qbRV fvLt118Nz5VkgkJU5YPm+YOF6G3f6HYnFI1Qsk6H47OXMCwQgR3L4eF2VNSb5xRX qRUGJNbp8iTiEdypl7jGYvgVrXU2g/5m5OG8nT3B3YT6rsliaApEN2EISLUjAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUiuMB2UdGn27T+uq4hQnPvAv85lAwHwYDVR0j BBgwFoAUd/Evz70fHF7lQQKmY+JGprMYq/kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3NDI1MjE5NDEwMzI5Ny8wLzc3RjEyRkNGQkQxRjFDNUVFNTQxMDJBNjYzRTI0 NkE2QjMxOEFCRjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzdGMTJGQ0ZCRDFGMUM1RUU1NDEwMkE2NjNFMjQ2QTZCMzE4QUJGOS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1OTc0MjUyMTk0MTAzMjk3LzAvMzEzMDMxMmUz MjM1MzEyZTMxMzYzMDJlMzAyZjMyMzAyZDMyMzAyMDNkM2UyMDMxMzMzMzM3Mzcz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEBGX7oDANBgkqhkiG9w0BAQsFAAOCAQEADN+/meh79IsyxHry Rs2i56XkIEVUFxaY24vOCxivbfRGFSkSaXbzKC3gV+Ep4UZu/omR6kkB3uWO8Kes aoqKnsQ9zcr/XTyO8EzEstCnLByADSySNmgcdqPXNeDNQh0XUb94BKiIUd0/o8UQ XRDXF5rOMVMW1/Qd8q5pNzv2HUXKfaN15oI3et6GVI1rDGXFNlMEDTSzb9h89xiR 5OPclKEt85btXueA+dAC+9aC8Xgm7bosTIO+/G/lY/K1ZgS0rXro5m41bm5LZsk+ VuAYS05lo1IrFNkoMRwGKHwt/9h2M2vfpqttHRchRCs3x/1Gbg0p8Bi7wjMr/62C ElEBuw== -----END CERTIFICATE-----Generated at Fri May 29 22:57:12 2026 by rpki-client