$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34362e302f32342d3234203d3e2034383337.roa File: 3130332e39382e34362e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: pdaxHWdOuRBAWfL/FGtz87TD/hrM06v4KX2lrE9t4Q8= Subject key identifier: EC:F3:05:F1:A7:7F:3A:CF:A3:63:D5:B9:C4:B8:22:0F:CA:CE:D0:D5 Certificate issuer: /CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Certificate serial: 300764F695B9A3196BB17DB67FBC82A730284A77 Authority key identifier: 34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34362e302f32342d3234203d3e2034383337.roa Signing time: Sat 30 May 2026 01:57:38 +0000 ROA not before: Sat 30 May 2026 01:52:38 +0000 ROA not after: Sat 29 May 2027 01:57:38 +0000 asID: 4837 IP address blocks: 103.98.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:07:64:f6:95:b9:a3:19:6b:b1:7d:b6:7f:bc:82:a7:30:28:4a:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342BA3B0AF4AD34F3E0178834205F1AFC539192B Validity Not Before: May 30 01:52:38 2026 GMT Not After : May 29 01:57:38 2027 GMT Subject: CN=ECF305F1A77F3ACFA363D5B9C4B8220FCACED0D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:28:29:32:e2:ee:b9:3c:77:2d:9f:69:cf:a7: c6:fd:70:3c:08:ad:93:b7:9a:f6:30:3a:51:93:6e: ba:a1:fb:f8:d1:40:1e:79:a0:bc:96:e6:33:07:02: cd:27:8d:71:d4:b7:5a:27:cd:76:db:83:6c:bd:9b: 17:49:32:e2:1b:2d:a1:f9:a1:8e:a4:d9:92:ff:c0: 81:72:90:2a:f9:67:09:df:0e:11:e8:f2:15:48:fd: 5a:77:cf:fb:ee:cf:7d:4e:7e:60:54:4a:00:69:d9: 69:4a:cb:b7:77:43:d1:53:d2:72:88:d5:ed:e0:eb: d3:8f:26:40:d0:03:39:8d:89:13:91:87:89:f4:f7: c3:b5:4c:19:8c:5b:88:dd:9b:84:46:58:12:41:cf: 6b:9b:48:38:d4:6b:b6:9e:ec:ca:cd:51:bb:b8:3b: d2:09:a3:a8:77:e6:b2:33:7d:da:3b:3e:a1:cd:cc: 09:60:c7:5b:af:90:07:ff:e3:85:82:54:bb:10:9a: 9b:85:bb:12:98:2c:4a:26:97:b6:8f:3b:43:64:21: 12:ac:13:cd:c5:3e:a6:72:dc:6f:69:48:9f:b4:c2: 26:b2:c2:51:1a:4d:16:b9:88:bd:f4:38:a8:39:70: 85:d3:2a:28:38:2e:ef:03:d3:17:85:97:fe:76:8b: 3a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F3:05:F1:A7:7F:3A:CF:A3:63:D5:B9:C4:B8:22:0F:CA:CE:D0:D5 X509v3 Authority Key Identifier: keyid:34:2B:A3:B0:AF:4A:D3:4F:3E:01:78:83:42:05:F1:AF:C5:39:19:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/342BA3B0AF4AD34F3E0178834205F1AFC539192B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/342BA3B0AF4AD34F3E0178834205F1AFC539192B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096408594477219842/0/3130332e39382e34362e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.46.0/24 Signature Algorithm: sha256WithRSAEncryption ae:a8:ee:07:e2:b8:2e:80:ef:27:04:47:b7:07:28:b7:93:2e: 1e:4b:34:1c:63:32:69:12:97:e0:f6:e7:53:d3:90:ed:12:f3: 23:1a:94:af:67:1a:8e:64:95:44:c8:1a:3c:ae:83:28:fd:4f: 86:d3:65:b8:48:de:9f:9d:1c:95:c3:9f:88:9f:17:64:9e:e9: 73:59:82:79:d0:59:04:49:d6:54:db:50:f5:92:a9:00:ee:0a: 23:ea:fe:63:ec:d1:46:03:29:3e:71:11:53:e4:51:02:04:6e: 0b:f0:5c:f8:84:2c:26:59:01:10:07:13:66:b6:b6:68:30:e1: cc:8c:c1:7c:c9:ee:43:f2:5d:13:a2:c1:37:0c:bc:e4:10:69: fe:41:cf:2b:21:38:a2:1c:e2:51:f8:ca:b1:1f:78:47:77:15: 93:fb:5c:aa:7d:d5:69:5e:9a:97:85:c2:06:00:63:79:f4:bf: e1:f6:79:60:bc:1f:13:17:59:ce:55:b1:fe:68:7b:fb:03:60: b8:28:c3:11:3a:e7:c1:f3:0b:89:2e:dc:fd:87:76:c3:0c:02: bc:43:d2:0d:1c:6e:c9:18:06:c3:7a:28:a7:94:fd:bb:eb:49: 68:cc:c5:cb:fd:c0:08:0e:01:1b:cf:a7:67:32:64:96:9c:08: 7a:38:bc:a9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUMAdk9pW5oxlrsX22f7yCpzAoSncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZD NTM5MTkyQjAeFw0yNjA1MzAwMTUyMzhaFw0yNzA1MjkwMTU3MzhaMDMxMTAvBgNV BAMTKEVDRjMwNUYxQTc3RjNBQ0ZBMzYzRDVCOUM0QjgyMjBGQ0FDRUQwRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKCky4u65PHctn2nPp8b9cDwI rZO3mvYwOlGTbrqh+/jRQB55oLyW5jMHAs0njXHUt1onzXbbg2y9mxdJMuIbLaH5 oY6k2ZL/wIFykCr5ZwnfDhHo8hVI/Vp3z/vuz31OfmBUSgBp2WlKy7d3Q9FT0nKI 1e3g69OPJkDQAzmNiRORh4n098O1TBmMW4jdm4RGWBJBz2ubSDjUa7ae7MrNUbu4 O9IJo6h35rIzfdo7PqHNzAlgx1uvkAf/44WCVLsQmpuFuxKYLEoml7aPO0NkIRKs E83FPqZy3G9pSJ+0wiaywlEaTRa5iL30OKg5cIXTKig4Lu8D0xeFl/52izqJAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU7PMF8ad/Os+jY9W5xLgiD8rO0NUwHwYDVR0j BBgwFoAUNCujsK9K008+AXiDQgXxr8U5GSswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjQwODU5NDQ3NzIxOTg0Mi8wLzM0MkJBM0IwQUY0QUQzNEYzRTAxNzg4MzQyMDVG MUFGQzUzOTE5MkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzQyQkEzQjBBRjRBRDM0RjNFMDE3ODgzNDIwNUYxQUZDNTM5MTkyQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NDA4NTk0NDc3MjE5ODQyLzAvMzEzMDMzMmUzOTM4 MmUzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnYi4wDQYJKoZIhvcNAQELBQADggEBAK6o7gfiuC6A7ycER7cHKLeTLh5LNBxj MmkSl+D251PTkO0S8yMalK9nGo5klUTIGjyugyj9T4bTZbhI3p+dHJXDn4ifF2Se 6XNZgnnQWQRJ1lTbUPWSqQDuCiPq/mPs0UYDKT5xEVPkUQIEbgvwXPiELCZZARAH E2a2tmgw4cyMwXzJ7kPyXROiwTcMvOQQaf5BzyshOKIc4lH4yrEfeEd3FZP7XKp9 1WlempeFwgYAY3n0v+H2eWC8HxMXWc5Vsf5oe/sDYLgowxE658HzC4ku3P2HdsMM ArxD0g0cbskYBsN6KKeU/bvrSWjMxcv9wAgOARvPp2cyZJacCHo4vKk= -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:35 2026 by rpki-client