$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa File: 3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa (raw, json) Hash identifier: kdMSI7H2ZF0ixCXxfO8yDt/xWXxAZNZYRzbfktETBsw= Subject key identifier: DA:8D:C3:15:15:86:58:8A:EC:6B:93:7C:15:5C:A3:E2:64:F4:F8:DB Certificate issuer: /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0 Certificate serial: 3EBFB36324874295A7345BCCEE44D98B0597A985 Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa Signing time: Fri 29 May 2026 10:04:06 +0000 ROA not before: Fri 29 May 2026 09:59:06 +0000 ROA not after: Fri 28 May 2027 10:04:06 +0000 asID: 63621 IP address blocks: 103.222.185.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:53:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:bf:b3:63:24:87:42:95:a7:34:5b:cc:ee:44:d9:8b:05:97:a9:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0 Validity Not Before: May 29 09:59:06 2026 GMT Not After : May 28 10:04:06 2027 GMT Subject: CN=DA8DC3151586588AEC6B937C155CA3E264F4F8DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:5f:44:9d:65:5f:20:6f:f9:46:eb:88:b7: 6f:4e:0e:b8:de:c3:f4:45:07:ba:d3:d0:ec:96:8e: 7e:07:c0:84:6b:0c:78:f5:38:32:6a:32:d7:b4:99: 4d:86:df:8d:04:ba:96:ab:c6:85:9e:d9:cd:bd:ae: 45:75:8e:61:9f:79:1c:87:89:94:9a:48:b0:99:05: 90:b9:d0:c8:96:bc:65:9e:10:4f:60:13:1e:0a:92: 2e:dc:ff:27:89:7a:5f:51:41:10:e0:e0:df:62:5d: b2:71:bf:cb:4e:39:f9:99:f8:03:12:4c:24:cf:cf: 9a:ba:c8:53:44:bf:6d:cc:bb:ed:0a:ac:4d:a4:50: 49:33:40:3e:06:d9:8e:a9:e7:65:fe:bb:04:c2:f9: 57:f0:bc:25:d1:74:f8:7d:80:a8:07:b7:e1:52:f4: 4f:b9:78:f3:44:a2:50:87:25:74:d9:6e:c2:a8:c3: b2:48:ac:b4:49:30:ea:af:4b:9d:c5:3c:4d:98:92: 31:b9:65:b4:c5:58:60:eb:fc:32:82:2d:d5:21:e5: cc:76:59:23:e5:e5:ad:8e:a2:7e:8a:8d:78:57:f2: 00:bb:89:93:1e:ed:0f:86:9f:74:6f:da:01:59:64: 85:87:ed:5d:d2:d2:a1:b7:fd:bf:6f:e6:e8:ad:a5: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:8D:C3:15:15:86:58:8A:EC:6B:93:7C:15:5C:A3:E2:64:F4:F8:DB X509v3 Authority Key Identifier: keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/3130332e3232322e3138352e302f32342d3332203d3e203633363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.222.185.0/24 Signature Algorithm: sha256WithRSAEncryption 43:5c:27:0f:e7:59:ab:c1:3d:39:47:78:54:36:10:59:e0:a8: e6:ea:31:8e:54:f0:dd:76:95:45:70:70:64:6a:22:fa:91:b1: 0a:7f:cd:56:d8:85:7c:9d:de:87:9a:96:f5:d7:e4:86:c8:1b: 85:cc:5b:1e:41:6d:31:e3:12:c1:9b:a5:a0:2a:23:45:3f:ba: be:04:89:e7:c0:52:03:41:d1:5b:38:c7:5c:c1:36:89:a3:e7: 6c:ea:e5:49:89:3c:79:45:ba:6a:7b:1c:ca:1f:a3:7a:2a:ec: 11:ec:ba:f2:c9:94:e0:4e:87:22:12:4c:e8:c2:bb:61:e4:ad: 39:80:f9:9c:c5:5b:e4:25:a3:13:de:37:1f:73:cd:fa:0a:7f: 41:d9:0c:f5:1c:ea:1b:4b:4a:25:5e:f5:16:94:44:50:07:72: 62:78:a8:0e:d3:d6:ad:bc:16:f5:09:ce:55:31:5c:39:e2:9d: 10:6a:f0:cb:12:03:2f:4d:b3:71:ff:f5:62:d3:0f:9a:e2:d4: c5:e0:12:a2:16:2e:c9:c1:a1:b9:66:ab:31:7f:01:fb:6a:13: 97:ab:0e:b7:d0:f2:42:be:37:1a:6b:05:2f:13:4b:04:56:d6: aa:a5:f9:a7:93:a7:a6:c9:35:62:ef:e0:0b:a8:cc:ac:09:9e: 51:5b:19:f7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUPr+zYySHQpWnNFvM7kTZiwWXqYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2 NTZCRjVDMDAeFw0yNjA1MjkwOTU5MDZaFw0yNzA1MjgxMDA0MDZaMDMxMTAvBgNV BAMTKERBOERDMzE1MTU4NjU4OEFFQzZCOTM3QzE1NUNBM0UyNjRGNEY4REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyV9EnWVfIG/5RuuIt29ODrje w/RFB7rT0OyWjn4HwIRrDHj1ODJqMte0mU2G340EuparxoWe2c29rkV1jmGfeRyH iZSaSLCZBZC50MiWvGWeEE9gEx4Kki7c/yeJel9RQRDg4N9iXbJxv8tOOfmZ+AMS TCTPz5q6yFNEv23Mu+0KrE2kUEkzQD4G2Y6p52X+uwTC+VfwvCXRdPh9gKgHt+FS 9E+5ePNEolCHJXTZbsKow7JIrLRJMOqvS53FPE2YkjG5ZbTFWGDr/DKCLdUh5cx2 WSPl5a2Oon6KjXhX8gC7iZMe7Q+Gn3Rv2gFZZIWH7V3S0qG3/b9v5uitpRRvAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU2o3DFRWGWIrsa5N8FVyj4mT0+NswHwYDVR0j BBgwFoAUMgGIs/o42g9BkvcgGtfTd2Vr9cAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjY4MDAyMzg5MTkwMjQ4MS8wLzMyMDE4OEIzRkEzOERBMEY0MTkyRjcyMDFBRDdE Mzc3NjU2QkY1QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzIwMTg4QjNGQTM4REEwRjQxOTJGNzIwMUFEN0QzNzc2NTZCRjVDMC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMTI2ODAwMjM4OTE5MDI0ODEvMC8zMTMwMzMyZTMy MzIzMjJlMzEzODM1MmUzMDJmMzIzNDJkMzMzMjIwM2QzZTIwMzYzMzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfeuTANBgkqhkiG9w0BAQsFAAOCAQEAQ1wnD+dZq8E9OUd4VDYQ WeCo5uoxjlTw3XaVRXBwZGoi+pGxCn/NVtiFfJ3eh5qW9dfkhsgbhcxbHkFtMeMS wZuloCojRT+6vgSJ58BSA0HRWzjHXME2iaPnbOrlSYk8eUW6anscyh+jeirsEey6 8smU4E6HIhJM6MK7YeStOYD5nMVb5CWjE943H3PN+gp/QdkM9RzqG0tKJV71FpRE UAdyYnioDtPWrbwW9QnOVTFcOeKdEGrwyxIDL02zcf/1YtMPmuLUxeASohYuycGh uWarMX8B+2oTl6sOt9DyQr43GmsFLxNLBFbWqqX5p5Onpsk1Yu/gC6jMrAmeUVsZ 9w== -----END CERTIFICATE-----Generated at Fri May 29 23:53:56 2026 by rpki-client