$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130322e302f32332d3233203d3e2030.roa File: 3136302e3235302e3130322e302f32332d3233203d3e2030.roa (raw, json) Hash identifier: JW88x4+4fxDvop6T+azr09az/tjTTipb/R1jsOGCEb4= Subject key identifier: 9E:5D:E2:12:F3:9D:60:D4:1E:66:6D:01:05:2D:49:7A:01:7E:54:31 Certificate issuer: /CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Certificate serial: 25E8015265F81E2795F19E98997A323CF481338F Authority key identifier: AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130322e302f32332d3233203d3e2030.roa Signing time: Fri 29 May 2026 02:17:23 +0000 ROA not before: Fri 29 May 2026 02:12:23 +0000 ROA not after: Fri 28 May 2027 02:17:23 +0000 asID: 0 IP address blocks: 160.250.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 05 Jun 2026 03:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:e8:01:52:65:f8:1e:27:95:f1:9e:98:99:7a:32:3c:f4:81:33:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF8AE9490786553AE0E938D309A2AA7DAEA238D0 Validity Not Before: May 29 02:12:23 2026 GMT Not After : May 28 02:17:23 2027 GMT Subject: CN=9E5DE212F39D60D41E666D01052D497A017E5431 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b6:b9:24:46:04:f0:00:e1:f2:98:75:a0:dd: 4d:7e:d9:a1:c5:33:27:cb:9a:b9:5c:c9:03:42:eb: fa:d4:c0:ee:52:5b:7b:db:3a:b6:79:17:40:f1:8c: 14:38:2f:44:6c:e9:c7:a5:76:85:17:eb:91:86:63: cd:74:66:c3:c5:13:6d:59:08:cf:c1:f4:37:9b:8b: 7a:0f:71:fe:be:dc:c4:3b:6c:36:ad:31:5e:6c:85: e8:0e:ae:ec:2e:a7:7e:b7:bd:c4:12:94:00:0a:02: aa:c9:4e:75:f7:52:3d:c7:55:42:c9:1a:07:25:17: c1:87:74:98:d1:b7:2e:0a:ae:60:8f:70:da:84:12: 95:f1:0f:62:66:47:23:ea:71:fa:37:45:8c:71:26: bf:1e:10:d4:08:79:8f:0a:98:e8:9b:8e:99:1f:1c: dd:a5:19:d2:4a:b9:fc:a2:d9:08:15:e9:72:dc:25: 81:63:60:95:a1:d7:2d:11:a3:2f:3b:a3:f0:c9:5e: 7a:75:77:3b:a8:fa:29:80:c4:0a:4f:93:2f:1a:ff: 83:38:7c:1e:e0:1f:3e:52:cb:2a:14:25:bb:2b:6b: ee:e6:3e:dc:0e:36:45:7a:06:40:db:47:14:d8:91: e3:f2:50:62:c4:56:8d:c1:1c:16:d7:b5:fd:d5:b6: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5D:E2:12:F3:9D:60:D4:1E:66:6D:01:05:2D:49:7A:01:7E:54:31 X509v3 Authority Key Identifier: keyid:AF:8A:E9:49:07:86:55:3A:E0:E9:38:D3:09:A2:AA:7D:AE:A2:38:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AF8AE9490786553AE0E938D309A2AA7DAEA238D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112563710250975249/0/3136302e3235302e3130322e302f32332d3233203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 160.250.102.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:6b:5c:3f:7c:f0:a1:15:ae:c8:fa:82:4a:a1:a9:12:95:06: 7b:a0:c8:4c:de:27:58:b5:fa:71:74:78:aa:8f:04:c6:29:0a: 1f:03:51:7a:a1:02:5e:16:ec:df:5c:ed:f0:db:5b:0f:44:c8: eb:74:43:5b:5f:1b:44:88:31:d2:cc:cd:97:59:e5:e6:07:f8: 08:1b:cc:60:27:3b:3f:94:b7:a8:59:2c:f3:15:54:78:35:12: f1:30:61:35:3b:06:c7:8e:44:a4:a9:49:b1:c0:06:55:62:4b: 9e:ce:dd:1c:c9:1b:a5:e2:58:9e:86:e9:6d:cf:c5:17:56:58: fc:2a:0c:65:50:4d:62:2c:e4:97:fc:69:39:d5:5d:39:ec:9d: cc:0c:2a:87:4f:53:9d:ca:00:dc:84:62:65:ad:cf:9d:eb:39: bd:d7:a3:29:34:e3:30:e8:21:ae:05:87:b5:e4:e3:da:08:8f: f8:99:3a:0d:30:70:00:4e:bf:d5:bd:98:1c:36:e9:bd:3b:62: ee:b2:4c:49:63:44:46:42:aa:a0:ad:b1:a7:aa:22:4c:ce:a5: fd:a0:f5:68:33:ef:47:cb:78:b8:54:25:1e:2b:1a:c2:db:c5: d6:0e:a1:2f:61:d9:36:af:f6:7d:de:52:b6:96:f9:66:20:be: 5d:8c:11:8e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUJegBUmX4HieV8Z6YmXoyPPSBM48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RB RUEyMzhEMDAeFw0yNjA1MjkwMjEyMjNaFw0yNzA1MjgwMjE3MjNaMDMxMTAvBgNV BAMTKDlFNURFMjEyRjM5RDYwRDQxRTY2NkQwMTA1MkQ0OTdBMDE3RTU0MzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDctrkkRgTwAOHymHWg3U1+2aHF MyfLmrlcyQNC6/rUwO5SW3vbOrZ5F0DxjBQ4L0Rs6celdoUX65GGY810ZsPFE21Z CM/B9Debi3oPcf6+3MQ7bDatMV5shegOruwup363vcQSlAAKAqrJTnX3Uj3HVULJ GgclF8GHdJjRty4KrmCPcNqEEpXxD2JmRyPqcfo3RYxxJr8eENQIeY8KmOibjpkf HN2lGdJKufyi2QgV6XLcJYFjYJWh1y0Roy87o/DJXnp1dzuo+imAxApPky8a/4M4 fB7gHz5SyyoUJbsra+7mPtwONkV6BkDbRxTYkePyUGLEVo3BHBbXtf3VttgnAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUnl3iEvOdYNQeZm0BBS1JegF+VDEwHwYDVR0j BBgwFoAUr4rpSQeGVTrg6TjTCaKqfa6iONAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjU2MzcxMDI1MDk3NTI0OS8wL0FGOEFFOTQ5MDc4NjU1M0FFMEU5MzhEMzA5QTJB QTdEQUVBMjM4RDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQUY4QUU5NDkwNzg2NTUzQUUwRTkzOEQzMDlBMkFBN0RBRUEyMzhEMC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTEyNTYzNzEwMjUwOTc1MjQ5LzAvMzEzNjMwMmUzMjM1 MzAyZTMxMzAzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB oPpmMA0GCSqGSIb3DQEBCwUAA4IBAQAaa1w/fPChFa7I+oJKoakSlQZ7oMhM3idY tfpxdHiqjwTGKQofA1F6oQJeFuzfXO3w21sPRMjrdENbXxtEiDHSzM2XWeXmB/gI G8xgJzs/lLeoWSzzFVR4NRLxMGE1OwbHjkSkqUmxwAZVYkuezt0cyRul4liehult z8UXVlj8KgxlUE1iLOSX/Gk51V057J3MDCqHT1OdygDchGJlrc+d6zm916MpNOMw 6CGuBYe15OPaCI/4mToNMHAATr/VvZgcNum9O2LuskxJY0RGQqqgrbGnqiJMzqX9 oPVoM+9Hy3i4VCUeKxrC28XWDqEvYdk2r/Z93lK2lvlmIL5djBGO -----END CERTIFICATE-----Generated at Thu Jun 4 15:59:22 2026 by rpki-client