$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132302e302f32322d3232203d3e2034383337.roa File: 3130332e3233362e3132302e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: tuXYqVmE6ECVrR2hePGUfUEvZDi/5Mnaky6gOdgaZss= Subject key identifier: B9:C1:35:2C:D9:A8:9E:AB:E2:4F:CF:B6:DA:CA:5E:D2:CA:F6:AA:2D Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Certificate serial: 2DD4FA9E43A84A2B1BE06DDBDDC3D104E2C8F01A Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132302e302f32322d3232203d3e2034383337.roa Signing time: Wed 03 Jun 2026 01:59:16 +0000 ROA not before: Wed 03 Jun 2026 01:54:16 +0000 ROA not after: Wed 02 Jun 2027 01:59:16 +0000 asID: 4837 IP address blocks: 103.236.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 04:35:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d4:fa:9e:43:a8:4a:2b:1b:e0:6d:db:dd:c3:d1:04:e2:c8:f0:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Validity Not Before: Jun 3 01:54:16 2026 GMT Not After : Jun 2 01:59:16 2027 GMT Subject: CN=B9C1352CD9A89EABE24FCFB6DACA5ED2CAF6AA2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c6:77:e1:6a:a3:dc:18:f7:76:78:e7:02:d8: c2:21:6c:9f:41:06:c2:c7:fc:69:0b:59:82:e2:e5: 00:d7:90:0f:95:37:f7:76:18:e2:a7:94:ce:df:c6: 51:a9:9e:c8:7e:88:42:aa:e0:85:a4:98:ae:3a:aa: 71:bf:02:29:3e:f1:e1:25:3d:7e:7e:9e:59:97:15: 24:94:f1:fe:dc:3a:8d:71:58:ad:c1:8e:92:0c:39: 77:e4:9d:9a:09:fe:82:44:3f:dc:f7:5b:40:ac:d5: 54:e6:0a:63:ca:d1:8c:b3:1a:8d:7b:7e:48:60:6a: 8a:bc:66:11:36:29:a4:77:b8:00:83:9c:b3:d6:43: cd:4d:d1:52:12:80:d6:42:cf:c3:9c:2f:60:95:34: e2:e7:8d:76:99:23:37:4f:28:ef:e5:6c:9f:c5:a4: 2e:ae:06:98:64:d7:dd:27:fd:84:e2:63:12:9c:c1: 11:30:54:fe:7e:04:dc:68:ff:80:f7:dc:49:fc:41: 76:0a:1e:a1:d7:47:f2:86:bc:77:bf:ea:1d:99:0f: fd:46:9e:cc:6a:05:99:19:97:6f:e4:c8:ff:ea:f5: a9:b7:93:94:43:5e:e6:0c:51:a8:36:4c:4c:ed:12: 34:cc:40:f4:f8:75:6f:6b:70:d8:cd:67:8a:25:c2: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C1:35:2C:D9:A8:9E:AB:E2:4F:CF:B6:DA:CA:5E:D2:CA:F6:AA:2D X509v3 Authority Key Identifier: keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132302e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.120.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:df:dd:cd:6c:e0:ce:d7:14:9f:ae:24:78:b2:b5:20:71:04: d1:25:7a:8a:4e:a8:25:02:42:1b:59:7b:92:3a:41:bf:d0:16: 36:c5:22:ce:27:37:19:1f:fa:a7:76:b3:f2:cb:ef:28:f2:16: d7:1c:fb:b7:d7:1b:86:9e:9f:4d:25:ec:68:41:e3:0e:12:b5: bc:5b:5f:dc:ff:4d:9c:fa:34:35:52:0c:a9:8a:4b:25:39:9a: 13:85:db:5c:d4:f4:ce:e3:8f:97:c1:6c:04:6c:48:6f:d7:a9: 7d:27:cc:b1:f8:30:62:79:b8:69:7a:90:70:7c:7e:b1:9a:89: f1:0d:ea:48:3e:a9:6a:96:7f:6d:3a:f0:be:8a:54:8e:dd:72: 3b:38:85:3a:12:de:10:97:5e:e1:7e:01:89:9e:d1:e8:77:f2: 11:68:04:c3:35:3e:7b:8b:b5:2f:ee:15:fd:e4:5a:eb:b3:60: 5d:25:64:7a:10:e5:51:17:64:86:96:36:57:38:49:fd:5d:83: e4:0b:56:bb:d9:78:ef:7b:31:00:be:7e:ab:6b:ac:18:a2:03: ab:6c:13:ed:7d:4f:93:26:db:dc:2b:d2:0e:1c:6f:6d:fa:99: cd:00:e1:0d:fb:06:8f:d8:1a:12:97:8c:fe:6d:03:e8:36:dd: b8:85:68:f3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULdT6nkOoSisb4G3b3cPRBOLI8BowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2 NTM3MTk4RjAeFw0yNjA2MDMwMTU0MTZaFw0yNzA2MDIwMTU5MTZaMDMxMTAvBgNV BAMTKEI5QzEzNTJDRDlBODlFQUJFMjRGQ0ZCNkRBQ0E1RUQyQ0FGNkFBMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDixnfhaqPcGPd2eOcC2MIhbJ9B BsLH/GkLWYLi5QDXkA+VN/d2GOKnlM7fxlGpnsh+iEKq4IWkmK46qnG/Aik+8eEl PX5+nlmXFSSU8f7cOo1xWK3BjpIMOXfknZoJ/oJEP9z3W0Cs1VTmCmPK0YyzGo17 fkhgaoq8ZhE2KaR3uACDnLPWQ81N0VISgNZCz8OcL2CVNOLnjXaZIzdPKO/lbJ/F pC6uBphk190n/YTiYxKcwREwVP5+BNxo/4D33En8QXYKHqHXR/KGvHe/6h2ZD/1G nsxqBZkZl2/kyP/q9am3k5RDXuYMUag2TEztEjTMQPT4dW9rcNjNZ4olwsVzAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUucE1LNmonqviT8+22spe0sr2qi0wHwYDVR0j BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjY4OTMyMDY4MjU4NjExNC8wLzMxMzAzMzJlMzIz MzM2MmUzMTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfseDANBgkqhkiG9w0BAQsFAAOCAQEAP9/dzWzgztcUn64keLK1IHEE 0SV6ik6oJQJCG1l7kjpBv9AWNsUizic3GR/6p3az8svvKPIW1xz7t9cbhp6fTSXs aEHjDhK1vFtf3P9NnPo0NVIMqYpLJTmaE4XbXNT0zuOPl8FsBGxIb9epfSfMsfgw Ynm4aXqQcHx+sZqJ8Q3qSD6papZ/bTrwvopUjt1yOziFOhLeEJde4X4BiZ7R6Hfy EWgEwzU+e4u1L+4V/eRa67NgXSVkehDlURdkhpY2VzhJ/V2D5AtWu9l473sxAL5+ q2usGKIDq2wT7X1Pkybb3CvSDhxvbfqZzQDhDfsGj9gaEpeM/m0D6DbduIVo8w== -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:35 2026 by rpki-client