$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34392e3130382e302f32322d3232203d3e203539303337.roa File: 3130332e34392e3130382e302f32322d3232203d3e203539303337.roa (raw, json) Hash identifier: Pe7NMueOxrfJXqC0NHkvbeXsXiRDcuwLlpUM9Y9uVJQ= Subject key identifier: 3A:86:BD:CE:C3:89:4D:93:E8:10:04:6C:8A:D9:2B:6B:14:0E:CF:47 Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 2B85F8EAF94EF336BEA0C1E1C0BD2E13FEF08D74 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34392e3130382e302f32322d3232203d3e203539303337.roa Signing time: Wed 27 May 2026 06:56:11 +0000 ROA not before: Wed 27 May 2026 06:51:11 +0000 ROA not after: Wed 26 May 2027 06:56:11 +0000 asID: 59037 IP address blocks: 103.49.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:85:f8:ea:f9:4e:f3:36:be:a0:c1:e1:c0:bd:2e:13:fe:f0:8d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: May 27 06:51:11 2026 GMT Not After : May 26 06:56:11 2027 GMT Subject: CN=3A86BDCEC3894D93E810046C8AD92B6B140ECF47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fe:ee:05:bd:09:7d:e2:04:75:c6:4e:c1:bf: 16:9d:83:e7:05:6b:2e:ae:4f:c4:6a:06:a3:38:92: 21:2f:e9:1b:27:d6:d5:2c:93:39:72:ab:ae:ea:30: 35:07:6e:fb:92:4d:8a:e2:ee:90:85:ff:bb:a1:3e: 54:b2:cb:f5:f0:6c:ee:50:01:b4:60:23:52:52:1b: 05:d2:cb:47:ec:bb:b7:76:95:66:28:82:7c:30:c7: a3:fc:55:77:d0:8e:0e:cb:aa:b8:7d:80:3a:19:00: a4:b1:c6:94:5c:cb:db:5b:2e:e8:0b:41:0b:7f:82: 70:4d:07:c2:0a:f2:6b:68:96:d0:6c:73:00:c6:2d: 10:2c:0f:0b:7e:2e:fb:20:41:ae:04:2f:60:7d:99: 43:39:34:ad:b5:51:f5:a9:8b:7f:78:6a:3b:e2:4d: a3:bb:56:5b:d9:c6:19:6d:b1:c5:68:de:a6:56:1a: 41:92:9c:1a:e4:01:c3:6e:65:6a:24:da:54:18:e5: f7:2c:55:4e:93:55:09:b9:66:b3:7e:52:64:71:07: 6a:cd:cb:33:bc:08:b0:dc:72:a4:60:98:c2:0a:eb: 98:05:6b:d0:e1:59:c3:cc:d8:f8:31:da:2c:6b:df: 97:e0:be:d7:eb:29:64:54:ab:4f:44:2b:c1:cc:95: d8:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:BD:CE:C3:89:4D:93:E8:10:04:6C:8A:D9:2B:6B:14:0E:CF:47 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/3130332e34392e3130382e302f32322d3232203d3e203539303337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.49.108.0/22 Signature Algorithm: sha256WithRSAEncryption 61:5b:a2:75:d3:ee:8f:21:04:2b:e5:aa:61:2b:51:42:13:0a: 90:a4:e5:df:7e:b5:b5:23:fa:11:e5:67:09:86:04:92:f7:e9: 54:21:e3:6c:7b:5b:c6:60:74:cf:40:8d:dd:ca:ab:5b:7b:35: 42:fe:50:b6:d8:a5:ca:a6:90:e7:ae:56:81:25:56:7c:7f:25: 18:bb:6c:69:71:bb:2d:ad:fb:29:42:68:4b:39:ff:ef:7a:f2: 9c:22:40:bd:eb:6e:9f:c8:9e:39:06:a2:42:a3:fd:06:fa:d3: b1:ca:a6:22:db:d7:99:da:d0:a7:ec:cb:bf:0e:80:e1:a7:af: 45:0b:d9:f6:92:ba:e1:4f:24:d6:30:85:ba:ac:c1:03:0b:c0: d1:f5:5d:6f:b8:01:05:76:12:ea:1d:33:64:0a:23:62:1a:2a: 4e:56:11:07:29:ed:67:ad:44:6c:fd:28:49:d4:03:ca:fe:d5: 75:1a:81:4e:2d:ce:59:df:28:56:5f:d0:65:4c:97:e6:79:87: 26:d4:e9:cc:5f:f9:56:29:ce:74:36:0c:75:f2:c9:a7:5b:4d: 63:b9:90:89:09:4c:2b:64:08:36:5c:f3:01:5c:c7:27:00:ff: 67:54:ba:12:fb:5e:96:45:25:d9:79:23:a3:30:1c:81:55:18: 2d:b3:cf:06 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUK4X46vlO8za+oMHhwL0uE/7wjXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjA1MjcwNjUxMTFaFw0yNzA1MjYwNjU2MTFaMDMxMTAvBgNV BAMTKDNBODZCRENFQzM4OTREOTNFODEwMDQ2QzhBRDkyQjZCMTQwRUNGNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv/u4FvQl94gR1xk7Bvxadg+cF ay6uT8RqBqM4kiEv6Rsn1tUskzlyq67qMDUHbvuSTYri7pCF/7uhPlSyy/XwbO5Q AbRgI1JSGwXSy0fsu7d2lWYognwwx6P8VXfQjg7Lqrh9gDoZAKSxxpRcy9tbLugL QQt/gnBNB8IK8mtoltBscwDGLRAsDwt+LvsgQa4EL2B9mUM5NK21UfWpi394ajvi TaO7VlvZxhltscVo3qZWGkGSnBrkAcNuZWok2lQY5fcsVU6TVQm5ZrN+UmRxB2rN yzO8CLDccqRgmMIK65gFa9DhWcPM2Pgx2ixr35fgvtfrKWRUq09EK8HMldjTAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOoa9zsOJTZPoEARsitkraxQOz0cwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMwMTE0OTM3MzM5OTA0MS8xLzMxMzAzMzJlMzQz OTJlMzEzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmcxbDANBgkqhkiG9w0BAQsFAAOCAQEAYVuiddPujyEEK+WqYStRQhMK kKTl3361tSP6EeVnCYYEkvfpVCHjbHtbxmB0z0CN3cqrW3s1Qv5QttilyqaQ565W gSVWfH8lGLtsaXG7La37KUJoSzn/73rynCJAvetun8ieOQaiQqP9BvrTscqmItvX mdrQp+zLvw6A4aevRQvZ9pK64U8k1jCFuqzBAwvA0fVdb7gBBXYS6h0zZAojYhoq TlYRByntZ61EbP0oSdQDyv7VdRqBTi3OWd8oVl/QZUyX5nmHJtTpzF/5VinOdDYM dfLJp1tNY7mQiQlMK2QINlzzAVzHJwD/Z1S6EvtelkUl2XkjozAcgVUYLbPPBg== -----END CERTIFICATE-----Generated at Fri May 29 22:56:34 2026 by rpki-client