$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa File: 3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa (raw, json) Hash identifier: blG8oZ0jKcSv+4hd0s1sGF3zjL6c5Ja6X6kwjMXUUH8= Subject key identifier: 42:D4:4D:CA:B8:A0:80:75:71:7E:EE:D8:10:E3:25:5C:9A:9B:C9:21 Certificate issuer: /CN=4D87AFCA5675517956358C896C21C3E70D906F20 Certificate serial: 59B2939DE8DD33B619BF7A53A9999E260BC5B602 Authority key identifier: 4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa Signing time: Thu 11 Jun 2026 15:59:30 +0000 ROA not before: Thu 11 Jun 2026 15:54:30 +0000 ROA not after: Thu 10 Jun 2027 15:59:30 +0000 asID: 17621 IP address blocks: 103.202.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 16:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:b2:93:9d:e8:dd:33:b6:19:bf:7a:53:a9:99:9e:26:0b:c5:b6:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D87AFCA5675517956358C896C21C3E70D906F20 Validity Not Before: Jun 11 15:54:30 2026 GMT Not After : Jun 10 15:59:30 2027 GMT Subject: CN=42D44DCAB8A08075717EEED810E3255C9A9BC921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:01:2a:f3:a3:d9:ae:4a:d3:36:80:a2:3a: 23:cd:c7:b3:61:02:b8:67:13:97:fc:3f:8d:38:af: 8c:1a:7e:a2:48:f9:e7:0d:6b:5a:c9:3b:ef:86:1b: aa:ee:a0:64:8e:6c:a4:ae:45:91:61:b9:7d:27:e7: 04:4b:ae:d2:6d:9a:0e:56:a1:7b:2e:13:99:59:f2: a2:44:80:05:69:98:1b:26:9e:d0:28:8c:bf:b6:83: b0:9d:07:42:29:73:73:78:62:10:0e:4c:f7:e7:c0: 18:15:fe:d1:3e:1a:4a:77:eb:c8:f5:5e:27:53:2b: 6b:5d:aa:25:ee:a4:bc:d1:b5:a0:f8:0a:13:b2:96: 10:c3:9c:93:67:9a:3c:f4:6c:e7:04:f4:d8:91:ef: b1:02:46:5b:03:11:cb:dd:5f:ac:26:79:86:f8:5f: 91:db:21:3c:93:ab:cf:2b:a4:33:ab:3a:1b:1e:88: 0e:b3:38:20:44:bf:4a:03:9a:69:0e:95:a1:83:b4: ab:93:c1:f6:1d:db:f4:9b:9b:a5:b7:9a:85:38:8b: a4:0c:50:65:25:06:fa:42:66:53:a3:8b:64:ae:41: f1:ce:53:6c:e1:fc:52:f0:ad:fc:cb:7e:af:b2:c8: 09:9c:2b:7f:a0:20:16:0e:16:82:f1:a5:47:5d:d0: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:D4:4D:CA:B8:A0:80:75:71:7E:EE:D8:10:E3:25:5C:9A:9B:C9:21 X509v3 Authority Key Identifier: keyid:4D:87:AF:CA:56:75:51:79:56:35:8C:89:6C:21:C3:E7:0D:90:6F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/4D87AFCA5675517956358C896C21C3E70D906F20.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4D87AFCA5675517956358C896C21C3E70D906F20.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106851549713268755/0/3130332e3230322e3130382e302f32322d3232203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.202.108.0/22 Signature Algorithm: sha256WithRSAEncryption 96:7d:a4:bc:f8:67:49:22:72:b6:a4:16:39:48:3e:2a:b6:5a: 4b:62:4c:fc:1a:36:96:44:11:7a:ea:e1:06:38:b5:1c:c8:e0: b4:a8:f2:17:fd:63:05:8d:25:61:e1:e5:d8:73:10:33:08:0e: 24:39:e0:54:3b:42:c8:47:f1:92:ff:77:2a:72:5e:ff:e3:69: a8:ee:02:0a:3e:10:24:ae:d1:ff:50:3f:52:7b:10:1a:b9:b2: 8d:33:fe:e9:18:15:15:b3:ed:8b:b3:65:c3:04:73:24:54:67: bd:6c:48:65:15:44:14:bd:de:af:01:e6:1d:42:53:c6:72:30: af:ab:c8:9f:e2:06:3b:c0:a0:fb:1f:73:a5:68:53:f9:ab:01: 2c:e6:84:1a:36:6e:bc:64:27:45:7c:ad:66:a0:b3:6c:32:f3: 38:4d:43:f1:89:52:b0:af:97:43:62:5b:86:f0:51:db:11:a5: b1:08:63:e3:bc:14:c8:63:93:e6:4b:b7:20:0b:4e:f0:78:cc: 15:f8:d0:d4:61:5a:74:55:d5:e6:33:19:69:3c:47:83:79:ef: a2:a1:35:75:b4:7f:ab:56:2c:c7:4f:f3:75:ec:e4:cc:ce:46: 31:9b:ba:f9:3f:68:d1:2b:19:92:68:e9:39:4f:0c:e3:a2:4b: e6:cf:cb:38 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWbKTnejdM7YZv3pTqZmeJgvFtgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcw RDkwNkYyMDAeFw0yNjA2MTExNTU0MzBaFw0yNzA2MTAxNTU5MzBaMDMxMTAvBgNV BAMTKDQyRDQ0RENBQjhBMDgwNzU3MTdFRUVEODEwRTMyNTVDOUE5QkM5MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaegEq86PZrkrTNoCiOiPNx7Nh ArhnE5f8P404r4wafqJI+ecNa1rJO++GG6ruoGSObKSuRZFhuX0n5wRLrtJtmg5W oXsuE5lZ8qJEgAVpmBsmntAojL+2g7CdB0Ipc3N4YhAOTPfnwBgV/tE+Gkp368j1 XidTK2tdqiXupLzRtaD4ChOylhDDnJNnmjz0bOcE9NiR77ECRlsDEcvdX6wmeYb4 X5HbITyTq88rpDOrOhseiA6zOCBEv0oDmmkOlaGDtKuTwfYd2/Sbm6W3moU4i6QM UGUlBvpCZlOji2SuQfHOU2zh/FLwrfzLfq+yyAmcK3+gIBYOFoLxpUdd0NUbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQtRNyriggHVxfu7YEOMlXJqbySEwHwYDVR0j BBgwFoAUTYevylZ1UXlWNYyJbCHD5w2QbyAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw Njg1MTU0OTcxMzI2ODc1NS8wLzREODdBRkNBNTY3NTUxNzk1NjM1OEM4OTZDMjFD M0U3MEQ5MDZGMjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNEQ4N0FGQ0E1Njc1NTE3OTU2MzU4Qzg5NkMyMUMzRTcwRDkwNkYyMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDY4NTE1NDk3MTMyNjg3NTUvMC8zMTMwMzMyZTMy MzAzMjJlMzEzMDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfKbDANBgkqhkiG9w0BAQsFAAOCAQEAln2kvPhnSSJytqQWOUg+ KrZaS2JM/Bo2lkQReurhBji1HMjgtKjyF/1jBY0lYeHl2HMQMwgOJDngVDtCyEfx kv93KnJe/+NpqO4CCj4QJK7R/1A/UnsQGrmyjTP+6RgVFbPti7NlwwRzJFRnvWxI ZRVEFL3erwHmHUJTxnIwr6vIn+IGO8Cg+x9zpWhT+asBLOaEGjZuvGQnRXytZqCz bDLzOE1D8YlSsK+XQ2JbhvBR2xGlsQhj47wUyGOT5ku3IAtO8HjMFfjQ1GFadFXV 5jMZaTxHg3nvoqE1dbR/q1Ysx0/zdezkzM5GMZu6+T9o0SsZkmjpOU8M46JL5s/L OA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:22 2026 by rpki-client