$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108600868493590547/0/3137352e3130362e3132382e302f31372d3137203d3e2030.roa File: 3137352e3130362e3132382e302f31372d3137203d3e2030.roa (raw, json) Hash identifier: fD0xUei3xaWM82AvTPTnAOAQbXn529olbNLU1cHevWU= Subject key identifier: 03:19:38:8C:88:BC:E6:E6:AE:B3:3F:A0:50:D4:8C:83:A8:DF:8A:35 Certificate issuer: /CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Certificate serial: 4166E01BCB9A693F224B410A6F3BB01E1685DB59 Authority key identifier: AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/3137352e3130362e3132382e302f31372d3137203d3e2030.roa Signing time: Mon 18 May 2026 04:00:44 +0000 ROA not before: Mon 18 May 2026 03:55:44 +0000 ROA not after: Mon 17 May 2027 04:00:44 +0000 asID: 0 IP address blocks: 175.106.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 17:32:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:66:e0:1b:cb:9a:69:3f:22:4b:41:0a:6f:3b:b0:1e:16:85:db:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC68C3A56C2B8FB70DEE75D5F58493ACBE260538 Validity Not Before: May 18 03:55:44 2026 GMT Not After : May 17 04:00:44 2027 GMT Subject: CN=0319388C88BCE6E6AEB33FA050D48C83A8DF8A35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6f:92:a8:22:27:ea:c1:13:99:07:7b:61:a0: 24:a9:8c:81:db:54:ad:49:5b:8d:81:8b:7f:41:61: 74:18:7a:5e:6a:fc:e1:59:83:f9:e8:80:25:be:b9: 57:b5:d3:77:e2:e9:b1:82:63:d7:6f:fc:23:db:23: 4d:94:14:18:e5:a7:83:41:6f:4e:04:ef:08:67:09: dd:53:6e:27:ca:17:6e:64:ad:53:e9:d4:0b:e7:7b: 71:59:e1:ea:3e:4b:22:3e:ef:64:47:8f:56:36:5f: 33:41:c5:2c:cc:32:13:0d:30:9c:31:f6:ba:79:8e: b6:a4:bb:e0:45:4b:cd:d7:59:3f:b8:40:ff:2f:a5: c4:47:8d:f6:c1:1a:b7:75:9e:98:44:76:d8:10:de: 7a:b5:71:be:52:57:97:b2:7c:22:8d:38:08:c4:2e: e4:ce:d1:65:47:c7:ab:75:5d:ea:1c:fe:91:1a:df: 78:91:b7:8c:0b:f5:35:1d:c6:9b:f5:ea:cf:0b:cf: c8:45:8f:40:70:7e:2c:c3:5e:0e:70:b9:57:97:d3: dc:6c:49:00:6a:42:ca:cb:ba:21:77:33:4e:9c:df: e0:cb:ac:9c:79:51:ed:fd:43:85:81:cd:03:dc:02: d0:15:26:42:ee:f8:d9:18:b5:f2:88:f1:e0:78:63: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:19:38:8C:88:BC:E6:E6:AE:B3:3F:A0:50:D4:8C:83:A8:DF:8A:35 X509v3 Authority Key Identifier: keyid:AC:68:C3:A5:6C:2B:8F:B7:0D:EE:75:D5:F5:84:93:AC:BE:26:05:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AC68C3A56C2B8FB70DEE75D5F58493ACBE260538.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108600868493590547/0/3137352e3130362e3132382e302f31372d3137203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 175.106.128.0/17 Signature Algorithm: sha256WithRSAEncryption a7:75:a9:62:7f:48:83:7f:02:aa:dc:c3:25:91:5c:ad:d1:82: 7d:f0:d7:5a:9d:79:71:af:6c:b9:aa:46:8d:67:b1:46:8f:45: 4f:97:39:db:12:e9:05:8d:ad:76:ec:27:2f:02:e7:5a:aa:94: 68:cd:25:99:77:a8:68:61:c1:3b:85:38:c7:e8:21:2b:af:44: 58:b2:33:b5:cd:05:b6:08:92:d3:4f:8f:78:ca:b9:43:fd:9e: 08:be:e3:8c:52:a4:af:de:88:7c:8f:53:9b:64:ea:f9:72:0f: e6:cf:f4:1b:18:b5:e6:38:84:a2:2b:93:b2:6d:2a:c4:0a:22: 0f:e0:3f:06:60:48:ae:64:3a:7a:ae:90:f0:3c:9b:cd:c7:65: f2:49:dc:32:cb:02:da:e3:b0:64:7f:1d:c4:36:c9:c3:50:45: ea:d3:d9:99:14:9b:a0:21:6c:7e:d2:e5:a6:51:85:5b:7d:bd: 2a:f6:9b:21:7e:0d:4f:ce:c1:57:80:bb:26:eb:d3:22:97:52: d1:70:a2:71:75:c6:6b:21:50:a6:57:ac:21:99:b6:62:d1:24: 29:f4:8f:12:e4:ca:46:05:8c:51:11:fc:7a:d7:9e:9b:9f:f3: fa:d8:38:ba:55:b4:04:64:af:7b:f1:06:97:38:2a:ff:18:f1: 19:68:27:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUQWbgG8uaaT8iS0EKbzuwHhaF21kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNC RTI2MDUzODAeFw0yNjA1MTgwMzU1NDRaFw0yNzA1MTcwNDAwNDRaMDMxMTAvBgNV BAMTKDAzMTkzODhDODhCQ0U2RTZBRUIzM0ZBMDUwRDQ4QzgzQThERjhBMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjb5KoIifqwROZB3thoCSpjIHb VK1JW42Bi39BYXQYel5q/OFZg/nogCW+uVe103fi6bGCY9dv/CPbI02UFBjlp4NB b04E7whnCd1TbifKF25krVPp1Avne3FZ4eo+SyI+72RHj1Y2XzNBxSzMMhMNMJwx 9rp5jraku+BFS83XWT+4QP8vpcRHjfbBGrd1nphEdtgQ3nq1cb5SV5eyfCKNOAjE LuTO0WVHx6t1Xeoc/pEa33iRt4wL9TUdxpv16s8Lz8hFj0BwfizDXg5wuVeX09xs SQBqQsrLuiF3M06c3+DLrJx5Ue39Q4WBzQPcAtAVJkLu+NkYtfKI8eB4YzSvAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUAxk4jIi85uausz+gUNSMg6jfijUwHwYDVR0j BBgwFoAUrGjDpWwrj7cN7nXV9YSTrL4mBTgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODYwMDg2ODQ5MzU5MDU0Ny8wL0FDNjhDM0E1NkMyQjhGQjcwREVFNzVENUY1ODQ5 M0FDQkUyNjA1MzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUM2OEMzQTU2QzJCOEZCNzBERUU3NUQ1RjU4NDkzQUNCRTI2MDUzOC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA4NjAwODY4NDkzNTkwNTQ3LzAvMzEzNzM1MmUzMTMw MzYyZTMxMzIzODJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH r2qAMA0GCSqGSIb3DQEBCwUAA4IBAQCndalif0iDfwKq3MMlkVyt0YJ98NdanXlx r2y5qkaNZ7FGj0VPlznbEukFja127CcvAudaqpRozSWZd6hoYcE7hTjH6CErr0RY sjO1zQW2CJLTT494yrlD/Z4IvuOMUqSv3oh8j1ObZOr5cg/mz/QbGLXmOISiK5Oy bSrECiIP4D8GYEiuZDp6rpDwPJvNx2XySdwyywLa47Bkfx3ENsnDUEXq09mZFJug IWx+0uWmUYVbfb0q9pshfg1PzsFXgLsm69Mil1LRcKJxdcZrIVCmV6whmbZi0SQp 9I8S5MpGBYxREfx6156bn/P62Di6VbQEZK978QaXOCr/GPEZaCdG -----END CERTIFICATE-----Generated at Sat May 23 03:04:06 2026 by rpki-client