$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa File: 3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa (raw, json) Hash identifier: lUxvbUf3vyf4fNMsQgH2jFFsF7urmoVrC7TTHQeV5x8= Subject key identifier: A2:BB:92:55:EE:21:3C:F0:50:85:EB:F3:C2:6E:81:49:01:76:CB:6F Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Certificate serial: 46C3C6A317F685CD1685C51FB4C93754BC623E4C Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa Signing time: Wed 10 Jun 2026 02:45:29 +0000 ROA not before: Wed 10 Jun 2026 02:40:29 +0000 ROA not after: Wed 09 Jun 2027 02:45:29 +0000 asID: 4808 IP address blocks: 103.107.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:c3:c6:a3:17:f6:85:cd:16:85:c5:1f:b4:c9:37:54:bc:62:3e:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Validity Not Before: Jun 10 02:40:29 2026 GMT Not After : Jun 9 02:45:29 2027 GMT Subject: CN=A2BB9255EE213CF05085EBF3C26E81490176CB6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:01:09:c4:73:d6:2f:42:d4:32:c4:0a:b2:37: a5:22:68:cb:d1:c1:c0:52:53:2a:3f:35:20:48:be: 7d:2c:81:a9:eb:85:91:c1:10:e1:4c:65:38:64:33: f8:96:17:88:46:4f:b7:5b:49:c3:21:96:e1:d2:14: 1d:f8:f3:c4:d3:5d:1c:4b:46:00:63:58:0f:79:70: 00:1b:32:61:a5:79:b2:46:11:65:7e:85:83:6e:9f: e8:27:83:89:16:b2:6f:16:8f:d7:81:51:d8:6a:30: 9b:ba:10:e7:e9:a1:c0:bb:68:c8:5b:86:76:0b:c2: 18:09:22:40:03:34:24:a3:9f:9d:70:81:3d:f6:c1: a9:b0:e0:f5:bd:e9:b1:48:b9:d7:8e:a6:b5:0e:e7: f8:f9:1d:c8:8a:a7:e2:2e:aa:18:ac:be:90:2f:77: ff:13:07:91:0c:e3:9d:e1:86:5e:49:43:01:ec:41: fd:23:bf:db:5c:5c:f3:8f:6f:b3:a9:bd:7e:7f:9a: 68:e4:e9:ad:78:1f:0b:b6:a1:09:53:56:f5:6f:26: 49:bc:ca:69:61:2e:e1:45:53:9c:ec:c0:c8:81:5e: 18:e9:79:03:52:17:a3:35:e1:f7:cf:1d:ab:4f:cd: 79:95:cb:72:ec:2d:cf:43:60:4c:e5:f5:01:b3:6f: 07:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:BB:92:55:EE:21:3C:F0:50:85:EB:F3:C2:6E:81:49:01:76:CB:6F X509v3 Authority Key Identifier: keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/3130332e3130372e3232302e302f32322d3232203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.220.0/22 Signature Algorithm: sha256WithRSAEncryption 13:c9:e8:92:f1:00:94:43:98:f6:58:80:95:8d:30:2a:25:13: cf:94:be:98:14:b2:4f:f3:58:24:e0:30:89:02:d7:e3:9e:ed: d8:39:6a:8e:8d:d4:dd:0a:97:8f:77:0b:32:34:97:4b:cb:dc: 9a:34:cc:5e:cd:ab:61:ec:7e:df:4c:ec:07:49:f9:09:41:ce: 67:d3:3b:3a:c3:0d:97:29:b9:4e:e0:ba:23:c4:42:f3:9d:a8: be:eb:78:6e:ed:33:cc:56:6b:34:2a:54:8f:2b:84:37:5e:81: 01:65:61:08:25:ca:0c:bc:30:a3:b1:76:2b:34:b7:d7:fa:19: 4c:34:5a:4e:55:09:51:75:a9:38:47:7b:af:61:a9:ba:4f:38: 23:00:13:7f:50:9e:9e:d0:c2:c5:f6:a9:72:3a:a0:97:84:3d: 12:c6:63:70:36:b6:73:92:01:d6:6e:27:ae:c4:97:0c:02:a4: 51:a0:c9:bf:57:b4:99:c1:04:ca:86:06:84:af:1c:0c:c6:b6: 90:d5:35:d9:a3:00:1d:95:0e:4d:6c:16:cd:5d:9f:82:1e:3d: 28:66:02:3f:4a:ad:44:96:e8:98:54:66:62:f8:c2:1e:69:e0: 98:b7:5a:bb:d0:84:8c:ac:d5:e4:66:08:52:96:f7:ce:e7:52: 31:8d:cb:6e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURsPGoxf2hc0WhcUftMk3VLxiPkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD REMxMTdCNTAeFw0yNjA2MTAwMjQwMjlaFw0yNzA2MDkwMjQ1MjlaMDMxMTAvBgNV BAMTKEEyQkI5MjU1RUUyMTNDRjA1MDg1RUJGM0MyNkU4MTQ5MDE3NkNCNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAQnEc9YvQtQyxAqyN6UiaMvR wcBSUyo/NSBIvn0sganrhZHBEOFMZThkM/iWF4hGT7dbScMhluHSFB3488TTXRxL RgBjWA95cAAbMmGlebJGEWV+hYNun+gng4kWsm8Wj9eBUdhqMJu6EOfpocC7aMhb hnYLwhgJIkADNCSjn51wgT32wamw4PW96bFIudeOprUO5/j5HciKp+IuqhisvpAv d/8TB5EM453hhl5JQwHsQf0jv9tcXPOPb7OpvX5/mmjk6a14Hwu2oQlTVvVvJkm8 ymlhLuFFU5zswMiBXhjpeQNSF6M14ffPHatPzXmVy3LsLc9DYEzl9QGzbwelAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUoruSVe4hPPBQhevzwm6BSQF2y28wHwYDVR0j BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNDEwODU4MDY2MDc3Mjg4My8wLzMxMzAzMzJlMzEz MDM3MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmdr3DANBgkqhkiG9w0BAQsFAAOCAQEAE8nokvEAlEOY9liAlY0wKiUT z5S+mBSyT/NYJOAwiQLX457t2Dlqjo3U3QqXj3cLMjSXS8vcmjTMXs2rYex+30zs B0n5CUHOZ9M7OsMNlym5TuC6I8RC852ovut4bu0zzFZrNCpUjyuEN16BAWVhCCXK DLwwo7F2KzS31/oZTDRaTlUJUXWpOEd7r2Gpuk84IwATf1CentDCxfapcjqgl4Q9 EsZjcDa2c5IB1m4nrsSXDAKkUaDJv1e0mcEEyoYGhK8cDMa2kNU12aMAHZUOTWwW zV2fgh49KGYCP0qtRJbomFRmYvjCHmngmLdau9CEjKzV5GYIUpb3zudSMY3Lbg== -----END CERTIFICATE-----Generated at Fri Jun 12 02:23:47 2026 by rpki-client