$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112322197881421841/0/3130332e3132332e342e302f32332d3233203d3e2034383337.roa File: 3130332e3132332e342e302f32332d3233203d3e2034383337.roa (raw, json) Hash identifier: k74aKc9hrGjjKtFfU03UFmb5lbVypa9TVHs7t7K9DFc= Subject key identifier: 67:80:03:EE:42:C4:22:DD:AE:A8:98:DE:89:DC:1F:6C:11:9D:3F:0C Certificate issuer: /CN=A9120CDE0000/serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472 Certificate serial: 1DA8F0E1B688C47A5D181608AA3BA18007ABAEB5 Authority key identifier: D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/3130332e3132332e342e302f32332d3233203d3e2034383337.roa Signing time: Thu 04 Jun 2026 10:43:27 +0000 ROA not before: Thu 04 Jun 2026 10:38:27 +0000 ROA not after: Thu 03 Jun 2027 10:43:27 +0000 asID: 4837 IP address blocks: 103.123.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 01:33:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:a8:f0:e1:b6:88:c4:7a:5d:18:16:08:aa:3b:a1:80:07:ab:ae:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9120CDE0000, serialNumber=D0EA0AA8C346FE673C6867F2B9CA06819F58C472 Validity Not Before: Jun 4 10:38:27 2026 GMT Not After : Jun 3 10:43:27 2027 GMT Subject: CN=678003EE42C422DDAEA898DE89DC1F6C119D3F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b1:84:26:00:55:a6:69:84:63:d4:7b:69:bc: 97:19:f3:fd:d7:e6:ef:b4:35:9c:e0:18:04:9a:59: 54:fc:a7:83:59:b1:08:09:60:a0:32:ca:42:6c:8f: 7c:2b:3d:64:ee:29:b5:98:77:72:3f:95:d4:7d:a3: b3:43:a1:af:72:3f:ef:f8:80:d8:24:c3:8b:32:1f: 96:94:93:8c:14:2c:1c:02:c4:59:01:08:1e:63:f0: e4:48:1a:87:18:32:7c:dc:ec:44:98:c0:aa:9e:b5: 6f:a7:d3:8b:96:b1:96:bf:f6:7d:fc:2c:69:22:0e: 3f:89:84:fb:0b:16:82:d3:38:12:82:10:f1:7d:76: cc:82:da:58:04:0e:ea:39:79:dd:94:79:03:8b:f8: a2:b5:aa:53:a9:87:d6:0e:2e:a7:3b:af:cc:52:c7: d5:5f:9f:dd:b1:75:9c:64:f0:7b:b6:79:3e:f5:01: 12:df:1d:a0:c9:58:7a:76:4b:4d:1e:fa:c7:7d:6e: 20:b5:52:38:65:f8:9f:23:48:e4:7b:ce:2e:92:f2: a4:96:74:5a:81:19:34:6b:3d:9c:4a:5a:5e:3d:93: 69:b9:55:7d:49:71:01:4c:90:3e:32:de:1f:55:6f: ce:c3:20:0f:b8:d7:9d:9a:79:a1:22:a8:1c:03:10: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:80:03:EE:42:C4:22:DD:AE:A8:98:DE:89:DC:1F:6C:11:9D:3F:0C X509v3 Authority Key Identifier: keyid:D0:EA:0A:A8:C3:46:FE:67:3C:68:67:F2:B9:CA:06:81:9F:58:C4:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/D0EA0AA8C346FE673C6867F2B9CA06819F58C472.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0OoKqMNG_mc8aGfyucoGgZ9YxHI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112322197881421841/0/3130332e3132332e342e302f32332d3233203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.123.4.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:67:2f:87:06:6a:37:96:36:6a:90:ba:34:4d:01:7c:62:7c: a3:6b:e9:1f:47:a5:a6:0d:28:19:00:79:e2:18:08:c9:c1:9d: 1a:45:e1:1a:dc:8b:77:16:fd:fd:6c:b4:48:9a:2c:1a:14:f8: 83:ce:18:6c:55:0f:ea:32:4e:31:d7:fd:98:af:54:6b:84:d2: 0a:6f:30:56:83:28:21:bc:40:8e:48:40:ab:1d:d5:23:5d:ca: 0e:18:cb:b2:96:f7:36:31:88:ea:bc:e6:38:15:6e:33:46:0a: 47:d3:81:cc:df:a4:b2:dc:44:35:4e:8a:4f:4a:be:25:c9:24: b8:09:a7:be:f4:b7:e5:83:52:f7:9f:3b:11:af:66:87:93:40: b0:cb:23:bb:b8:50:6d:47:48:cb:e3:b1:76:b3:f2:05:4c:37: 8b:69:65:97:fe:19:93:67:30:4c:f8:b4:e1:30:1f:47:f5:3f: 42:b5:8c:58:bc:c6:f2:07:ac:d8:fe:43:df:36:0e:16:ee:ad: e4:17:65:04:ac:c0:98:94:be:99:f3:74:48:49:80:f3:68:92: 9c:12:ee:35:43:60:a7:8a:1e:d9:48:89:0d:4c:2e:95:0c:43: 7b:5c:88:05:93:7d:b8:63:7a:54:7f:a7:d4:ec:d8:99:de:41: 50:f6:28:1d -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgIUHajw4baIxHpdGBYIqjuhgAerrrUwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjBDREUwMDAwMTEwLwYDVQQFEyhEMEVBMEFBOEMz NDZGRTY3M0M2ODY3RjJCOUNBMDY4MTlGNThDNDcyMB4XDTI2MDYwNDEwMzgyN1oX DTI3MDYwMzEwNDMyN1owMzExMC8GA1UEAxMoNjc4MDAzRUU0MkM0MjJEREFFQTg5 OERFODlEQzFGNkMxMTlEM0YwQzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJSxhCYAVaZphGPUe2m8lxnz/dfm77Q1nOAYBJpZVPyng1mxCAlgoDLKQmyP fCs9ZO4ptZh3cj+V1H2js0Ohr3I/7/iA2CTDizIflpSTjBQsHALEWQEIHmPw5Ega hxgyfNzsRJjAqp61b6fTi5axlr/2ffwsaSIOP4mE+wsWgtM4EoIQ8X12zILaWAQO 6jl53ZR5A4v4orWqU6mH1g4upzuvzFLH1V+f3bF1nGTwe7Z5PvUBEt8doMlYenZL TR76x31uILVSOGX4nyNI5HvOLpLypJZ0WoEZNGs9nEpaXj2TablVfUlxAUyQPjLe H1VvzsMgD7jXnZp5oSKoHAMQPB8CAwEAAaOCAg8wggILMB0GA1UdDgQWBBRngAPu QsQi3a6omN6J3B9sEZ0/DDAfBgNVHSMEGDAWgBTQ6gqow0b+ZzxoZ/K5ygaBn1jE cjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMTEyMzIyMTk3ODgxNDIxODQxLzAvRDBFQTBB QThDMzQ2RkU2NzNDNjg2N0YyQjlDQTA2ODE5RjU4QzQ3Mi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvME9vS3FNTkdf bWM4YUdmeXVjb0dnWjlZeEhJLmNlcjCBiAYIKwYBBQUHAQsEfDB6MHgGCCsGAQUF BzALhmxyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTExMTIzMjIxOTc4 ODE0MjE4NDEvMC8zMTMwMzMyZTMxMzIzMzJlMzQyZTMwMmYzMjMzMmQzMjMzMjAz ZDNlMjAzNDM4MzMzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggr BgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWd7BDANBgkqhkiG9w0BAQsFAAOCAQEA XWcvhwZqN5Y2apC6NE0BfGJ8o2vpH0elpg0oGQB54hgIycGdGkXhGtyLdxb9/Wy0 SJosGhT4g84YbFUP6jJOMdf9mK9Ua4TSCm8wVoMoIbxAjkhAqx3VI13KDhjLspb3 NjGI6rzmOBVuM0YKR9OBzN+kstxENU6KT0q+JckkuAmnvvS35YNS9587Ea9mh5NA sMsju7hQbUdIy+OxdrPyBUw3i2lll/4Zk2cwTPi04TAfR/U/QrWMWLzG8ges2P5D 3zYOFu6t5BdlBKzAmJS+mfN0SEmA82iSnBLuNUNgp4oe2UiJDUwulQxDe1yIBZN9 uGN6VH+n1OzYmd5BUPYoHQ== -----END CERTIFICATE-----Generated at Fri Jun 12 06:44:24 2026 by rpki-client