$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139342e302f32342d3234203d3e2030.roa File: 3130332e3133352e3139342e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: tNE2sE5td1Glu+aUyjN/xEKrnS8pe0d3FhptniluBys= Subject key identifier: 21:3F:0D:F3:7D:FC:2B:5A:4C:13:37:F3:8E:40:34:3D:27:5B:F9:18 Certificate issuer: /CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Certificate serial: 01066D00A6F99382E887680E1A5CF445B3E43218 Authority key identifier: A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139342e302f32342d3234203d3e2030.roa Signing time: Tue 26 May 2026 10:20:45 +0000 ROA not before: Tue 26 May 2026 10:15:45 +0000 ROA not after: Tue 25 May 2027 10:20:45 +0000 asID: 0 IP address blocks: 103.135.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:06:6d:00:a6:f9:93:82:e8:87:68:0e:1a:5c:f4:45:b3:e4:32:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A687EA30FD9E95B0BB466DADF0E27AF98F217CF7 Validity Not Before: May 26 10:15:45 2026 GMT Not After : May 25 10:20:45 2027 GMT Subject: CN=213F0DF37DFC2B5A4C1337F38E40343D275BF918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:11:3b:16:be:0d:c5:56:d2:19:3d:f7:e4: 01:e1:2c:ba:c9:bf:8a:91:0d:86:bd:6b:4f:4a:53: a1:fb:0e:23:7f:02:4a:56:98:b6:37:5d:1f:d5:28: cc:80:2b:dd:62:d1:d9:42:bc:c8:ca:eb:a8:37:05: d8:b4:24:09:c1:a3:e5:d5:b9:0b:2f:6c:36:77:14: 86:8a:dc:1a:9b:3f:0f:da:2b:12:40:fe:e0:62:69: 64:17:f4:94:54:59:0b:34:23:ef:a9:7d:e7:b7:90: d1:32:62:bd:19:a8:70:94:ac:ad:e6:94:8c:20:4a: 6e:81:06:07:42:e6:8c:37:98:84:7c:0a:4a:32:8e: 10:a5:2d:05:d9:73:12:b3:db:90:fc:18:5e:8c:af: 2d:28:fe:b0:ab:b0:dc:a1:24:69:22:e0:cb:89:db: 85:7c:ca:65:a8:e2:3d:e0:4e:f8:45:0e:c2:be:1f: d0:bf:50:67:43:35:a9:79:58:0d:0d:5d:c4:96:60: 9f:ed:27:0e:18:d4:14:9e:1d:60:d3:23:2a:af:23: 47:2c:19:26:fa:ba:ec:a0:34:3a:8d:54:da:65:b0: 40:07:d5:c7:a3:be:8f:1a:ae:9e:73:4d:57:0c:41: 27:14:3a:75:6a:84:a6:62:41:17:69:b3:c8:db:d6: 5b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3F:0D:F3:7D:FC:2B:5A:4C:13:37:F3:8E:40:34:3D:27:5B:F9:18 X509v3 Authority Key Identifier: keyid:A6:87:EA:30:FD:9E:95:B0:BB:46:6D:AD:F0:E2:7A:F9:8F:21:7C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A687EA30FD9E95B0BB466DADF0E27AF98F217CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111552433223434259/0/3130332e3133352e3139342e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.135.194.0/24 Signature Algorithm: sha256WithRSAEncryption 95:6e:6b:6f:af:55:b9:e6:58:84:17:cd:b5:5e:7f:07:83:15: b3:e6:24:87:33:62:ae:d6:e7:75:03:b6:e4:85:0a:0c:f0:1b: c1:ec:22:c7:5a:ac:74:d2:94:3a:d8:93:c4:53:0a:bb:d3:d6: 3e:e5:65:d7:30:76:01:2d:55:cf:47:7b:a8:43:5c:7d:bb:14: 64:46:80:06:cc:5b:de:2e:8d:60:54:81:7c:7e:a5:72:69:31: df:91:4a:3a:62:1b:5c:75:b8:ed:79:07:f1:ac:39:14:41:1e: 2a:30:cc:53:be:04:a3:d7:ed:3b:e5:c5:53:42:36:ec:d0:9d: 50:fa:0d:da:96:a3:9e:d7:97:47:c2:7e:65:24:93:16:b7:2c: 55:c4:dc:af:4e:b4:c1:d9:9f:10:48:09:c8:b3:b1:e1:df:80: 81:78:b0:10:0f:6f:75:4b:0b:54:9e:ef:2e:fb:ec:62:70:a5: 7e:43:9b:5c:ae:4f:0e:60:0b:06:bf:69:ef:eb:25:6a:05:6a: 69:0d:5a:d7:c1:8d:7d:15:4c:27:03:ec:e6:1d:71:be:a8:f8: 02:7a:e2:0d:db:fc:6c:5f:a5:62:c3:4d:ec:ee:b4:9b:ca:8d: 95:37:20:fd:3f:ff:ca:32:e6:e4:ae:7d:b2:2e:dd:cc:00:85: f0:82:bf:21 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUAQZtAKb5k4Loh2gOGlz0RbPkMhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4 RjIxN0NGNzAeFw0yNjA1MjYxMDE1NDVaFw0yNzA1MjUxMDIwNDVaMDMxMTAvBgNV BAMTKDIxM0YwREYzN0RGQzJCNUE0QzEzMzdGMzhFNDAzNDNEMjc1QkY5MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRRE7Fr4NxVbSGT335AHhLLrJ v4qRDYa9a09KU6H7DiN/AkpWmLY3XR/VKMyAK91i0dlCvMjK66g3Bdi0JAnBo+XV uQsvbDZ3FIaK3BqbPw/aKxJA/uBiaWQX9JRUWQs0I++pfee3kNEyYr0ZqHCUrK3m lIwgSm6BBgdC5ow3mIR8CkoyjhClLQXZcxKz25D8GF6Mry0o/rCrsNyhJGki4MuJ 24V8ymWo4j3gTvhFDsK+H9C/UGdDNal5WA0NXcSWYJ/tJw4Y1BSeHWDTIyqvI0cs GSb6uuygNDqNVNplsEAH1cejvo8arp5zTVcMQScUOnVqhKZiQRdps8jb1ludAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUIT8N8338K1pMEzfzjkA0PSdb+RgwHwYDVR0j BBgwFoAUpofqMP2elbC7Rm2t8OJ6+Y8hfPcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MTU1MjQzMzIyMzQzNDI1OS8wL0E2ODdFQTMwRkQ5RTk1QjBCQjQ2NkRBREYwRTI3 QUY5OEYyMTdDRjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTY4N0VBMzBGRDlFOTVCMEJCNDY2REFERjBFMjdBRjk4RjIxN0NGNy5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTExNTUyNDMzMjIzNDM0MjU5LzAvMzEzMDMzMmUzMTMz MzUyZTMxMzkzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Z4fCMA0GCSqGSIb3DQEBCwUAA4IBAQCVbmtvr1W55liEF821Xn8HgxWz5iSHM2Ku 1ud1A7bkhQoM8BvB7CLHWqx00pQ62JPEUwq709Y+5WXXMHYBLVXPR3uoQ1x9uxRk RoAGzFveLo1gVIF8fqVyaTHfkUo6YhtcdbjteQfxrDkUQR4qMMxTvgSj1+075cVT Qjbs0J1Q+g3alqOe15dHwn5lJJMWtyxVxNyvTrTB2Z8QSAnIs7Hh34CBeLAQD291 SwtUnu8u++xicKV+Q5tcrk8OYAsGv2nv6yVqBWppDVrXwY19FUwnA+zmHXG+qPgC euIN2/xsX6Viw03s7rSbyo2VNyD9P//KMubkrn2yLt3MAIXwgr8h -----END CERTIFICATE-----Generated at Fri May 29 22:56:23 2026 by rpki-client