$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109291265821769749/0/3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa File: 3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa (raw, json) Hash identifier: E4wR4NLFggrLxHJQdf1KzP2OMs6lbWCeIqkEqlDy23g= Subject key identifier: BB:84:51:00:20:52:1E:EB:95:D1:65:1D:70:F5:F3:13:23:BF:8D:D7 Certificate issuer: /CN=B53E57671412C3144DC646263A3169FBAB466617 Certificate serial: 73BEBF8CF6F125AF8DB3509C330F9F8EC73FE483 Authority key identifier: B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa Signing time: Wed 20 May 2026 01:39:40 +0000 ROA not before: Wed 20 May 2026 01:34:40 +0000 ROA not after: Wed 19 May 2027 01:39:40 +0000 asID: 24400 IP address blocks: 103.253.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:be:bf:8c:f6:f1:25:af:8d:b3:50:9c:33:0f:9f:8e:c7:3f:e4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B53E57671412C3144DC646263A3169FBAB466617 Validity Not Before: May 20 01:34:40 2026 GMT Not After : May 19 01:39:40 2027 GMT Subject: CN=BB84510020521EEB95D1651D70F5F31323BF8DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:60:e0:6a:99:c3:88:e8:f0:9a:6e:b6:ca: 76:7b:85:8e:b8:ca:4d:10:7c:2a:a3:4e:68:fc:93: 5a:7a:02:22:c4:65:4c:1e:68:b5:c7:87:87:dc:ca: c0:ac:98:ee:33:07:d6:c8:9a:70:db:15:81:a3:d2: a7:42:4e:69:69:00:f4:8f:c1:2a:ae:00:d3:b7:f8: 0c:78:55:73:c5:6c:a6:49:58:13:3d:fd:b9:0b:a2: 98:fc:2e:f6:dc:93:b7:0f:19:4f:67:34:42:97:91: f6:c1:69:20:bf:38:56:68:77:95:d8:5b:78:13:44: fa:85:35:19:e0:1c:11:ab:7b:63:47:1b:80:cf:05: 4c:73:b5:3c:8d:04:ce:24:38:e6:e3:2c:06:8e:d0: 46:91:71:f0:3b:b3:53:44:37:11:80:3c:f8:47:67: 67:b2:44:d0:8f:55:26:b5:cd:85:2d:c5:0d:2b:d5: bf:33:b9:f5:f8:86:cf:ba:5c:16:57:b7:c1:dc:87: c2:ec:57:46:9d:d7:4f:8e:a5:7b:cd:28:5e:7f:70: 3f:ee:88:02:c0:6c:b5:e6:ef:31:c2:86:06:36:f4: b8:30:57:2f:79:ff:b5:31:c7:c1:e7:3a:67:39:27: 49:67:8d:b9:7a:22:e8:69:7f:4d:6a:df:59:b6:ab: 5e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:84:51:00:20:52:1E:EB:95:D1:65:1D:70:F5:F3:13:23:BF:8D:D7 X509v3 Authority Key Identifier: keyid:B5:3E:57:67:14:12:C3:14:4D:C6:46:26:3A:31:69:FB:AB:46:66:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/B53E57671412C3144DC646263A3169FBAB466617.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B53E57671412C3144DC646263A3169FBAB466617.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109291265821769749/0/3130332e3235332e3230342e302f32322d3234203d3e203234343030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.253.204.0/22 Signature Algorithm: sha256WithRSAEncryption 69:96:aa:39:b4:ff:9f:24:0f:7e:4e:39:cf:39:1b:f5:3c:ce: 59:74:74:d7:00:86:ad:be:63:e5:d6:56:8d:6b:e1:6f:1c:66: c5:d4:7c:55:7d:b6:83:25:92:44:02:84:ef:9f:bb:31:8d:cd: a9:89:a9:bc:67:6b:7f:99:51:f1:49:d0:d1:80:f8:ac:80:88: 32:3c:76:6f:5e:16:52:91:f4:7f:ae:28:21:f5:b1:b2:95:9b: 64:8a:4a:1a:83:b4:bc:89:c7:09:26:7b:83:b0:ca:ae:f8:9b: c9:f0:eb:99:cd:95:2d:85:76:e4:2f:55:d5:8c:93:b5:32:03: 5e:c4:68:40:98:c7:22:6d:e4:58:38:c3:19:38:6d:32:3c:4f: 5c:fe:90:72:bb:3f:8c:d0:88:f8:bd:d4:1a:0d:d6:88:f7:6a: 65:bd:87:47:7c:a9:2d:63:08:0f:e9:87:0f:fa:e3:f9:5e:4e: aa:a3:ad:f0:8d:26:13:30:9f:a4:82:96:03:65:c1:b6:29:9b: b2:ce:e9:0d:b2:b4:43:9d:86:1c:2a:a9:f7:ac:c5:11:c6:80: bc:30:06:20:9d:d3:83:de:85:d8:47:1b:a0:95:43:5d:1c:2e: f0:51:c4:43:8a:df:27:51:e1:0f:51:ac:de:b7:df:be:d1:93: c6:d4:58:db -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUc76/jPbxJa+Ns1CcMw+fjsc/5IMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJB QjQ2NjYxNzAeFw0yNjA1MjAwMTM0NDBaFw0yNzA1MTkwMTM5NDBaMDMxMTAvBgNV BAMTKEJCODQ1MTAwMjA1MjFFRUI5NUQxNjUxRDcwRjVGMzEzMjNCRjhERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBL2DgapnDiOjwmm62ynZ7hY64 yk0QfCqjTmj8k1p6AiLEZUweaLXHh4fcysCsmO4zB9bImnDbFYGj0qdCTmlpAPSP wSquANO3+Ax4VXPFbKZJWBM9/bkLopj8Lvbck7cPGU9nNEKXkfbBaSC/OFZod5XY W3gTRPqFNRngHBGre2NHG4DPBUxztTyNBM4kOObjLAaO0EaRcfA7s1NENxGAPPhH Z2eyRNCPVSa1zYUtxQ0r1b8zufX4hs+6XBZXt8Hch8LsV0ad10+OpXvNKF5/cD/u iALAbLXm7zHChgY29LgwVy95/7Uxx8HnOmc5J0lnjbl6Iuhpf01q31m2q14tAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUu4RRACBSHuuV0WUdcPXzEyO/jdcwHwYDVR0j BBgwFoAUtT5XZxQSwxRNxkYmOjFp+6tGZhcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTI5MTI2NTgyMTc2OTc0OS8wL0I1M0U1NzY3MTQxMkMzMTQ0REM2NDYyNjNBMzE2 OUZCQUI0NjY2MTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjUzRTU3NjcxNDEyQzMxNDREQzY0NjI2M0EzMTY5RkJBQjQ2NjYxNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDkyOTEyNjU4MjE3Njk3NDkvMC8zMTMwMzMyZTMy MzUzMzJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNDM0MzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmf9zDANBgkqhkiG9w0BAQsFAAOCAQEAaZaqObT/nyQPfk45zzkb 9TzOWXR01wCGrb5j5dZWjWvhbxxmxdR8VX22gyWSRAKE75+7MY3NqYmpvGdrf5lR 8UnQ0YD4rICIMjx2b14WUpH0f64oIfWxspWbZIpKGoO0vInHCSZ7g7DKrvibyfDr mc2VLYV25C9V1YyTtTIDXsRoQJjHIm3kWDjDGThtMjxPXP6Qcrs/jNCI+L3UGg3W iPdqZb2HR3ypLWMID+mHD/rj+V5OqqOt8I0mEzCfpIKWA2XBtimbss7pDbK0Q52G HCqp96zFEcaAvDAGIJ3Tg96F2EcboJVDXRwu8FHEQ4rfJ1HhD1Gs3rffvtGTxtRY 2w== -----END CERTIFICATE-----Generated at Fri May 29 23:53:03 2026 by rpki-client