$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109324607057297425/0/3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa File: 3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa (raw, json) Hash identifier: Bnb9RRsUIMbIuX9xAKmgIkjBimfagN7UjlIM0KyoYeI= Subject key identifier: C4:02:4D:9B:17:68:75:89:08:89:A6:A0:A3:6B:DA:80:EA:EF:7B:50 Certificate issuer: /CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Certificate serial: 34B5CA1991DBB4F2C72356206441EEA9A901C5 Authority key identifier: 14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa Signing time: Mon 01 Jun 2026 09:49:27 +0000 ROA not before: Mon 01 Jun 2026 09:44:27 +0000 ROA not after: Mon 31 May 2027 09:49:27 +0000 asID: 134760 IP address blocks: 103.149.246.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b5:ca:19:91:db:b4:f2:c7:23:56:20:64:41:ee:a9:a9:01:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1405209D8B1B0656C25CCB7CBE2728F5B974058A Validity Not Before: Jun 1 09:44:27 2026 GMT Not After : May 31 09:49:27 2027 GMT Subject: CN=C4024D9B176875890889A6A0A36BDA80EAEF7B50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:b0:f2:52:30:ce:f6:34:23:73:16:e7:af:4b: fd:01:e4:8f:3d:78:9f:e9:0a:ad:79:a3:a1:69:ff: 63:97:a6:a6:e8:d4:fd:b8:8f:27:44:42:a3:35:6d: 17:3a:d4:b3:0d:ea:80:1f:5d:21:66:cb:50:ea:83: 59:25:38:a6:cb:0c:84:f6:3e:80:a0:80:25:6e:63: 7c:2c:75:40:91:31:2c:71:89:9b:a7:98:e7:14:98: 4e:14:36:cf:25:45:d6:8e:9d:70:a3:6c:a4:25:e5: a8:b1:44:01:c2:70:74:29:93:b9:8d:1c:a9:52:52: 4e:6f:aa:53:18:f2:b2:5c:1e:e1:fe:b0:0f:c3:cd: 68:77:17:8a:67:7a:1f:20:50:e4:3c:66:46:f5:45: fe:ac:fe:75:8f:ec:1e:12:b3:02:21:20:89:41:4f: eb:38:2d:39:13:0b:c4:4a:0c:52:ea:6b:6f:c3:71: 77:8b:38:04:45:50:7a:be:56:66:0f:3c:19:2c:95: 2b:c3:74:9f:a7:b8:84:60:9e:f0:05:b4:49:e7:37: b3:61:41:b5:14:26:e7:a9:f5:f9:f0:f5:41:91:12: 75:4b:ee:79:b6:73:c8:c5:88:3d:fd:fe:10:56:d5: cf:67:f8:80:57:db:51:34:28:95:08:24:31:00:fd: a4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:02:4D:9B:17:68:75:89:08:89:A6:A0:A3:6B:DA:80:EA:EF:7B:50 X509v3 Authority Key Identifier: keyid:14:05:20:9D:8B:1B:06:56:C2:5C:CB:7C:BE:27:28:F5:B9:74:05:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/1405209D8B1B0656C25CCB7CBE2728F5B974058A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1405209D8B1B0656C25CCB7CBE2728F5B974058A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109324607057297425/0/3130332e3134392e3234362e302f32332d3233203d3e20313334373630.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.149.246.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:23:5c:25:23:8a:4c:14:79:1b:9f:e6:6b:0b:8b:0a:65:da: 16:2f:21:0e:8f:42:6d:0f:6d:34:c8:53:bf:d0:43:24:ab:97: b7:a5:84:30:e4:b6:56:c1:be:32:83:59:c1:a9:76:2c:27:84: 39:ab:54:e7:12:e4:f2:94:b6:b3:3d:5c:43:16:c0:63:cc:27: c7:66:0e:91:15:e5:aa:f3:a8:44:e3:fc:4f:a2:ce:5c:f4:55: c5:51:5d:1a:f1:9f:8f:c0:25:c0:1d:cd:5d:5d:03:67:05:38: 71:31:27:8f:d0:05:9a:1f:0a:b6:bd:62:2f:f1:3f:bd:5f:80: 7f:ca:e7:14:8b:b1:fe:64:f0:ba:40:b7:9d:3f:c1:bb:06:c1: 36:7a:f5:b1:16:c2:7d:29:5b:c5:a4:50:1c:8e:6b:a8:fa:8d: ba:a8:9b:a1:69:66:64:d0:80:23:56:9a:9c:7b:c1:4c:c8:56: 87:63:2f:aa:91:55:33:d9:06:f4:cc:51:84:48:8f:b2:5c:d1: 4b:d2:94:f1:4b:9f:d9:a6:3b:3b:72:7a:a0:16:14:46:7f:3d: 0a:f2:98:80:32:28:bc:ab:87:b0:e6:b8:11:5b:7f:de:91:5f: 40:f7:01:51:b8:0a:80:9c:c2:93:82:91:d2:5a:ba:e4:fb:89: a3:88:eb:d7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgITNLXKGZHbtPLHI1YgZEHuqakBxTANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygxNDA1MjA5RDhCMUIwNjU2QzI1Q0NCN0NCRTI3MjhGNUI5 NzQwNThBMB4XDTI2MDYwMTA5NDQyN1oXDTI3MDUzMTA5NDkyN1owMzExMC8GA1UE AxMoQzQwMjREOUIxNzY4NzU4OTA4ODlBNkEwQTM2QkRBODBFQUVGN0I1MDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPmw8lIwzvY0I3MW569L/QHkjz14 n+kKrXmjoWn/Y5empujU/biPJ0RCozVtFzrUsw3qgB9dIWbLUOqDWSU4pssMhPY+ gKCAJW5jfCx1QJExLHGJm6eY5xSYThQ2zyVF1o6dcKNspCXlqLFEAcJwdCmTuY0c qVJSTm+qUxjyslwe4f6wD8PNaHcXimd6HyBQ5DxmRvVF/qz+dY/sHhKzAiEgiUFP 6zgtORMLxEoMUuprb8Nxd4s4BEVQer5WZg88GSyVK8N0n6e4hGCe8AW0Sec3s2FB tRQm56n1+fD1QZESdUvuebZzyMWIPf3+EFbVz2f4gFfbUTQolQgkMQD9pMcCAwEA AaOCAhowggIWMB0GA1UdDgQWBBTEAk2bF2h1iQiJpqCja9qA6u97UDAfBgNVHSME GDAWgBQUBSCdixsGVsJcy3y+Jyj1uXQFijAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMTA5 MzI0NjA3MDU3Mjk3NDI1LzAvMTQwNTIwOUQ4QjFCMDY1NkMyNUNDQjdDQkUyNzI4 RjVCOTc0MDU4QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS8xNDA1MjA5RDhCMUIwNjU2QzI1Q0NCN0NCRTI3MjhGNUI5NzQwNThBLmNlcjCB kwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDkzMjQ2MDcwNTcyOTc0MjUvMC8zMTMwMzMyZTMx MzQzOTJlMzIzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzMzM0MzczNjMw LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw DjAMBAIAATAGAwQBZ5X2MA0GCSqGSIb3DQEBCwUAA4IBAQCLI1wlI4pMFHkbn+Zr C4sKZdoWLyEOj0JtD200yFO/0EMkq5e3pYQw5LZWwb4yg1nBqXYsJ4Q5q1TnEuTy lLazPVxDFsBjzCfHZg6RFeWq86hE4/xPos5c9FXFUV0a8Z+PwCXAHc1dXQNnBThx MSeP0AWaHwq2vWIv8T+9X4B/yucUi7H+ZPC6QLedP8G7BsE2evWxFsJ9KVvFpFAc jmuo+o26qJuhaWZk0IAjVpqce8FMyFaHYy+qkVUz2Qb0zFGESI+yXNFL0pTxS5/Z pjs7cnqgFhRGfz0K8piAMii8q4ew5rgRW3/ekV9A9wFRuAqAnMKTgpHSWrrk+4mj iOvX -----END CERTIFICATE-----Generated at Sun Jun 14 06:31:55 2026 by rpki-client