$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3134322e302f32332d3233203d3e2034383437.roa File: 3130312e39362e3134322e302f32332d3233203d3e2034383437.roa (raw, json) Hash identifier: GfoCWx5sl+tSN4OQ9uHej6sNYOh8bKKVWlXIiY9CVU8= Subject key identifier: 86:F5:24:33:B9:6E:42:C7:B9:42:3B:F6:5A:BC:47:9C:A5:DF:F2:A8 Certificate issuer: /CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Certificate serial: 5B8F4C883B42CE300F3618FF838D8E96761EFED4 Authority key identifier: 92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3134322e302f32332d3233203d3e2034383437.roa Signing time: Wed 20 May 2026 03:53:22 +0000 ROA not before: Wed 20 May 2026 03:48:22 +0000 ROA not after: Wed 19 May 2027 03:53:22 +0000 asID: 4847 IP address blocks: 101.96.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 May 2026 02:27:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:8f:4c:88:3b:42:ce:30:0f:36:18:ff:83:8d:8e:96:76:1e:fe:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB Validity Not Before: May 20 03:48:22 2026 GMT Not After : May 19 03:53:22 2027 GMT Subject: CN=86F52433B96E42C7B9423BF65ABC479CA5DFF2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:db:af:02:00:67:f9:75:2b:e7:f3:e3:f9:54: 92:dc:05:7c:e4:2b:7a:62:87:5d:35:09:13:0b:3f: c1:5d:8e:f9:34:32:cd:2e:e4:19:a7:ea:91:f3:ef: 75:28:02:fd:48:82:f4:a6:b3:66:89:21:3c:21:2f: 09:70:15:5c:ba:5a:e7:2f:e8:b7:d5:cf:f5:6f:9c: 53:8b:62:9b:f1:1a:f1:fc:4f:73:15:67:8e:77:8c: b3:9e:07:bc:2c:9a:7d:22:ab:7a:e2:d9:0d:2f:d4: 68:bd:81:c5:8b:cd:57:e6:8d:18:33:d0:31:1f:55: af:65:2d:2e:49:8f:cc:a0:11:42:03:e8:83:d0:fb: 07:61:6f:aa:e6:96:a4:f1:f3:13:6e:74:21:26:4d: 3f:ae:fa:b5:e4:88:57:ca:37:61:df:b1:c1:cb:3b: 33:1e:f8:df:15:11:12:fd:b0:e8:fd:d3:26:64:68: c1:fb:9d:7b:08:32:8f:bc:c1:ca:ab:46:6f:60:d8: ff:aa:98:a5:c1:29:d0:0c:9a:ae:57:64:ad:6c:37: 84:57:aa:68:ff:11:8a:67:f0:24:3e:e0:6f:03:f2: 10:a8:4e:a9:a3:24:35:7f:c1:eb:6d:d7:2a:09:5d: 13:7e:26:cb:0b:07:b5:75:e4:01:6f:8e:32:a9:b1: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:F5:24:33:B9:6E:42:C7:B9:42:3B:F6:5A:BC:47:9C:A5:DF:F2:A8 X509v3 Authority Key Identifier: keyid:92:1E:7C:CE:FA:DC:9A:05:BF:BE:8A:8B:9E:ED:4C:95:D4:BA:75:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/921E7CCEFADC9A05BFBE8A8B9EED4C95D4BA75EB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104968095178424325/0/3130312e39362e3134322e302f32332d3233203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.96.142.0/23 Signature Algorithm: sha256WithRSAEncryption 73:88:6b:5f:31:2f:12:41:47:17:39:6a:ad:04:d1:37:4b:18: 06:b6:2f:88:56:cc:e4:9f:c5:ee:fd:93:cf:84:2d:92:56:f5: d6:f0:3d:1b:97:2a:41:12:64:ee:b8:f9:d1:98:78:5c:a0:52: df:24:86:b7:6d:62:95:5f:94:f2:ce:80:1b:15:fb:05:56:ad: c7:63:43:99:6c:56:a8:aa:df:b2:d0:78:b3:d8:66:b4:45:0b: 86:40:fc:80:6e:25:4d:b3:68:f2:4d:06:e1:63:7a:ba:79:14: a9:71:4f:82:f1:ef:79:7c:78:2e:99:6d:5b:e7:fe:5e:53:e6: 61:39:b8:e2:c6:fd:2a:ef:fd:d9:ed:d5:49:37:da:79:71:8e: b0:70:38:f3:cd:df:a9:21:49:a4:a7:40:dc:19:c0:79:0d:a9: 23:b8:fd:4b:c2:ed:53:af:07:05:a3:f9:e2:49:7a:94:13:73: 88:c5:41:af:9a:84:31:6f:7c:57:9c:2f:fe:5a:94:fe:21:6c: d2:f5:17:1e:7f:9e:b1:28:a6:32:6c:20:e4:9c:e5:2c:db:3f: 23:ff:55:40:01:ad:1c:4e:04:43:c6:09:d0:9f:43:58:f9:98: b6:e2:1c:00:95:b8:83:65:0d:db:bd:4a:1d:f0:6d:95:fd:7f: 36:30:5a:d3 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUW49MiDtCzjAPNhj/g42OlnYe/tQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVE NEJBNzVFQjAeFw0yNjA1MjAwMzQ4MjJaFw0yNzA1MTkwMzUzMjJaMDMxMTAvBgNV BAMTKDg2RjUyNDMzQjk2RTQyQzdCOTQyM0JGNjVBQkM0NzlDQTVERkYyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK268CAGf5dSvn8+P5VJLcBXzk K3pih101CRMLP8Fdjvk0Ms0u5Bmn6pHz73UoAv1IgvSms2aJITwhLwlwFVy6Wucv 6LfVz/VvnFOLYpvxGvH8T3MVZ453jLOeB7wsmn0iq3ri2Q0v1Gi9gcWLzVfmjRgz 0DEfVa9lLS5Jj8ygEUID6IPQ+wdhb6rmlqTx8xNudCEmTT+u+rXkiFfKN2HfscHL OzMe+N8VERL9sOj90yZkaMH7nXsIMo+8wcqrRm9g2P+qmKXBKdAMmq5XZK1sN4RX qmj/EYpn8CQ+4G8D8hCoTqmjJDV/wett1yoJXRN+JssLB7V15AFvjjKpsdMNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUhvUkM7luQse5Qjv2WrxHnKXf8qgwHwYDVR0j BBgwFoAUkh58zvrcmgW/voqLnu1MldS6deswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDk2ODA5NTE3ODQyNDMyNS8wLzkyMUU3Q0NFRkFEQzlBMDVCRkJFOEE4QjlFRUQ0 Qzk1RDRCQTc1RUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTIxRTdDQ0VGQURDOUEwNUJGQkU4QThCOUVFRDRDOTVENEJBNzVFQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA0OTY4MDk1MTc4NDI0MzI1LzAvMzEzMDMxMmUzOTM2 MmUzMTM0MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWVgjjANBgkqhkiG9w0BAQsFAAOCAQEAc4hrXzEvEkFHFzlqrQTRN0sYBrYv iFbM5J/F7v2Tz4Qtklb11vA9G5cqQRJk7rj50Zh4XKBS3ySGt21ilV+U8s6AGxX7 BVatx2NDmWxWqKrfstB4s9hmtEULhkD8gG4lTbNo8k0G4WN6unkUqXFPgvHveXx4 LpltW+f+XlPmYTm44sb9Ku/92e3VSTfaeXGOsHA4883fqSFJpKdA3BnAeQ2pI7j9 S8LtU68HBaP54kl6lBNziMVBr5qEMW98V5wv/lqU/iFs0vUXHn+esSimMmwg5Jzl LNs/I/9VQAGtHE4EQ8YJ0J9DWPmYtuIcAJW4g2UN271KHfBtlf1/NjBa0w== -----END CERTIFICATE-----Generated at Sat May 23 04:26:04 2026 by rpki-client