$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232322e302f32332d3233203d3e20313430373137.roa File: 3130332e3231312e3232322e302f32332d3233203d3e20313430373137.roa (raw, json) Hash identifier: JsRHRr7a+XWN0UpoW7UiPZO9jdgQJpouiIsX8ub8x10= Subject key identifier: 21:52:1B:7B:91:92:CD:33:44:9F:63:A2:E5:18:84:F8:C6:97:57:E8 Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Certificate serial: 2E3A1B85DC005490E9D382B4D0AAF630CCA68948 Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232322e302f32332d3233203d3e20313430373137.roa Signing time: Wed 03 Jun 2026 06:30:11 +0000 ROA not before: Wed 03 Jun 2026 06:25:11 +0000 ROA not after: Wed 02 Jun 2027 06:30:11 +0000 asID: 140717 IP address blocks: 103.211.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:45:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3a:1b:85:dc:00:54:90:e9:d3:82:b4:d0:aa:f6:30:cc:a6:89:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD Validity Not Before: Jun 3 06:25:11 2026 GMT Not After : Jun 2 06:30:11 2027 GMT Subject: CN=21521B7B9192CD33449F63A2E51884F8C69757E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:af:cd:d5:14:86:9f:15:3a:f3:f0:61:1d:04: 5b:b1:10:1c:f8:ed:4f:ae:b6:7d:d0:9c:d1:ab:8c: 54:53:20:08:d6:47:90:4a:7d:43:80:c1:b7:c0:33: d2:48:74:a9:e4:dc:04:cf:46:26:e8:ea:2d:e4:fe: 15:bc:b0:f3:64:20:6e:63:7c:2f:36:88:44:e5:70: 43:95:a8:f8:ef:30:dc:24:56:aa:88:ac:61:fa:c2: f2:10:14:09:d9:50:96:43:16:63:5f:f6:25:f1:b7: ec:38:dd:a9:d2:c5:38:4a:a9:a9:52:34:e6:8c:c9: a5:a6:7d:91:39:e6:da:37:cb:63:b9:c3:b0:fe:65: 21:a1:3e:8c:b8:c1:cf:32:de:c2:2e:61:8f:32:18: 22:62:95:d3:1d:21:f5:0b:d7:f6:3d:f9:e5:cd:e8: 3f:68:4e:c2:d1:7c:13:97:55:64:c8:8c:7a:32:af: b2:02:27:a0:f9:1c:49:5f:32:e5:83:49:d2:7c:ae: 70:d7:5e:0c:ef:09:97:78:28:bf:79:60:c6:89:98: 81:71:f7:02:3c:1c:d5:6b:1e:49:af:0d:3f:f6:30: 48:0d:e5:3d:59:b1:fa:c0:f6:6b:c2:e6:b7:2e:a3: 08:3b:89:72:44:af:d3:90:b4:9c:11:3d:f1:6c:5f: e0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:52:1B:7B:91:92:CD:33:44:9F:63:A2:E5:18:84:F8:C6:97:57:E8 X509v3 Authority Key Identifier: keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3130332e3231312e3232322e302f32332d3233203d3e20313430373137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.211.222.0/23 Signature Algorithm: sha256WithRSAEncryption b8:82:54:d6:c6:77:ab:c5:a1:62:2c:c9:37:ba:1b:08:b5:e8: 54:95:aa:8c:8c:3b:f2:09:7c:7e:15:2c:9a:36:6c:8f:67:4f: 5a:c6:b1:57:27:48:74:f8:86:3d:d7:8a:d3:60:39:38:f9:a1: cb:a5:a0:7f:86:90:e3:80:dc:09:60:d1:0c:b1:9e:1d:97:1d: c7:83:96:37:d0:fa:54:27:66:89:25:0e:cb:db:a2:29:ee:f5: e3:a0:7e:e7:89:a7:83:72:ff:79:39:29:28:4f:59:39:72:80: f3:db:d0:1c:16:75:24:1f:0b:bd:ca:bb:c5:07:1e:6c:9f:a3: bd:80:bb:73:01:8f:ca:5e:75:42:34:4b:92:c6:7d:04:b5:85: d3:af:25:6e:4b:84:74:02:8d:52:0e:10:b2:00:88:6d:c3:62: 8a:c4:c5:da:f1:99:ac:3a:06:72:59:78:24:6d:d3:4f:30:f1: 4d:9d:c5:f7:a0:f8:c2:67:13:4d:c7:d9:9c:95:6c:08:32:9e: 7d:e9:23:4f:f1:32:58:f9:a0:82:6d:8f:74:de:e7:f0:ce:00: 10:8c:65:5a:c8:25:d5:bb:6d:39:c3:f5:22:97:6b:f8:98:d4: 9b:44:84:32:0a:81:53:e5:68:4d:f8:71:a4:10:ed:d7:4e:a0: ba:9c:fd:46 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIULjobhdwAVJDp04K00Kr2MMymiUgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz NUI3ODFERDAeFw0yNjA2MDMwNjI1MTFaFw0yNzA2MDIwNjMwMTFaMDMxMTAvBgNV BAMTKDIxNTIxQjdCOTE5MkNEMzM0NDlGNjNBMkU1MTg4NEY4QzY5NzU3RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5r83VFIafFTrz8GEdBFuxEBz4 7U+utn3QnNGrjFRTIAjWR5BKfUOAwbfAM9JIdKnk3ATPRibo6i3k/hW8sPNkIG5j fC82iETlcEOVqPjvMNwkVqqIrGH6wvIQFAnZUJZDFmNf9iXxt+w43anSxThKqalS NOaMyaWmfZE55to3y2O5w7D+ZSGhPoy4wc8y3sIuYY8yGCJildMdIfUL1/Y9+eXN 6D9oTsLRfBOXVWTIjHoyr7ICJ6D5HElfMuWDSdJ8rnDXXgzvCZd4KL95YMaJmIFx 9wI8HNVrHkmvDT/2MEgN5T1ZsfrA9mvC5rcuowg7iXJEr9OQtJwRPfFsX+CjAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUIVIbe5GSzTNEn2Oi5RiE+MaXV+gwHwYDVR0j BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5 RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTE0MzU2ODU2MjY1OTY1NTg1LzAvMzEzMDMzMmUz MjMxMzEyZTMyMzIzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzQzMDM3MzEz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWfT3jANBgkqhkiG9w0BAQsFAAOCAQEAuIJU1sZ3q8WhYizJ N7obCLXoVJWqjIw78gl8fhUsmjZsj2dPWsaxVydIdPiGPdeK02A5OPmhy6Wgf4aQ 44DcCWDRDLGeHZcdx4OWN9D6VCdmiSUOy9uiKe7146B+54mng3L/eTkpKE9ZOXKA 89vQHBZ1JB8Lvcq7xQcebJ+jvYC7cwGPyl51QjRLksZ9BLWF068lbkuEdAKNUg4Q sgCIbcNiisTF2vGZrDoGcll4JG3TTzDxTZ3F96D4wmcTTcfZnJVsCDKefekjT/Ey WPmggm2PdN7n8M4AEIxlWsgl1bttOcP1Ipdr+JjUm0SEMgqBU+VoTfhxpBDt106g upz9Rg== -----END CERTIFICATE-----Generated at Fri Jun 12 08:43:58 2026 by rpki-client