$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3133302e302f32342d3234203d3e2039383038.roa File: 3131332e31382e3133302e302f32342d3234203d3e2039383038.roa (raw, json) Hash identifier: zDOWeX9XcM9h2tJJRyjYjzukX9m6ydEOUWtBszIYs2I= Subject key identifier: 65:CC:B3:8D:F5:30:07:34:63:EC:D6:8B:98:9E:F0:9B:9C:EF:29:03 Certificate issuer: /CN=373B103C68D9B84455801815E437C49839794406 Certificate serial: 1FBF7E3A4456B3099F835A9A31324C8B79A3A073 Authority key identifier: 37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3133302e302f32342d3234203d3e2039383038.roa Signing time: Fri 17 Apr 2026 08:52:43 +0000 ROA not before: Fri 17 Apr 2026 08:47:43 +0000 ROA not after: Fri 16 Apr 2027 08:52:43 +0000 asID: 9808 IP address blocks: 113.18.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 11:25:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bf:7e:3a:44:56:b3:09:9f:83:5a:9a:31:32:4c:8b:79:a3:a0:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=373B103C68D9B84455801815E437C49839794406 Validity Not Before: Apr 17 08:47:43 2026 GMT Not After : Apr 16 08:52:43 2027 GMT Subject: CN=65CCB38DF530073463ECD68B989EF09B9CEF2903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:22:30:ec:43:92:a8:c3:98:df:b5:20:c7: 17:e2:18:4c:22:56:ee:1e:76:06:e1:78:92:a1:f2: f3:9c:81:7c:f4:7b:6d:31:8a:25:c8:f5:f8:cd:fc: f7:34:de:fd:59:07:dc:9b:fa:ed:f1:4d:8d:ed:24: e1:a6:67:47:65:07:5f:5b:99:b8:fa:ab:ab:b6:78: 3c:72:c4:aa:b5:6e:56:03:e2:69:2b:17:b0:58:ac: d4:90:98:43:50:c7:a0:3f:10:f4:cf:11:2c:14:c6: 80:c3:da:63:5a:0f:f6:af:be:4f:23:d6:e4:65:d9: b7:36:ca:62:10:32:20:1f:cd:3a:a5:8f:83:b6:ff: 90:99:4f:05:28:13:59:c6:b0:d9:b4:b5:21:b4:32: 41:2b:ae:fc:7f:b1:a6:a7:0f:c7:20:d6:d4:78:12: 3b:49:46:84:c6:30:85:a9:b5:63:20:df:52:cc:9b: e2:bb:91:66:8b:22:0c:67:84:04:f7:8e:2b:27:73: de:62:b3:16:17:bd:79:e8:a3:02:8d:7d:5e:1f:8f: b8:f1:10:2b:48:9b:a1:98:3d:4e:23:42:d1:b7:7d: 17:21:c5:ab:f1:6d:03:89:3c:23:92:4f:37:c5:e9: 03:47:ee:a5:01:bd:83:7a:5c:d0:b6:70:d5:b8:68: 28:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:CC:B3:8D:F5:30:07:34:63:EC:D6:8B:98:9E:F0:9B:9C:EF:29:03 X509v3 Authority Key Identifier: keyid:37:3B:10:3C:68:D9:B8:44:55:80:18:15:E4:37:C4:98:39:79:44:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/373B103C68D9B84455801815E437C49839794406.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/373B103C68D9B84455801815E437C49839794406.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948468227/0/3131332e31382e3133302e302f32342d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 113.18.130.0/24 Signature Algorithm: sha256WithRSAEncryption 97:93:03:67:37:10:c4:fa:74:25:83:98:74:4f:7f:22:48:56: 7d:66:43:36:dc:72:9a:f1:ee:f1:6f:7d:dd:8a:67:95:b7:64: cd:9f:42:29:f8:7b:cc:05:2c:12:94:e5:3f:4e:ba:11:c5:05: f1:a0:ec:fd:24:d4:56:12:46:94:35:a6:a0:5e:21:34:cb:d1: 27:db:c5:dd:4c:3b:2a:b4:20:f9:a7:21:fc:dd:61:46:73:1d: 7a:36:87:d7:ba:ec:45:d8:9f:34:ff:16:26:de:79:48:11:b9: 10:99:f3:49:09:84:c2:24:4d:d8:db:f9:72:e5:c7:d2:22:b0: 1c:70:3d:0e:c0:e4:ca:51:43:c7:8f:1f:d7:df:32:0e:f4:1b: b0:1a:7d:73:18:02:9c:13:3b:09:b7:be:c1:82:90:b7:98:0a: e2:75:59:84:23:49:a0:0e:84:0d:6e:f6:61:16:38:f2:bb:10: c1:f3:cc:d2:85:e4:77:74:ad:1c:43:4c:28:7d:77:26:d1:86: dd:6b:38:98:be:d4:4d:3b:6f:ff:e1:ee:3c:1d:62:02:08:d8: 8a:27:55:73:e0:a1:7e:2c:ff:0b:92:01:e8:a0:4c:44:59:47: c8:65:4a:e3:57:11:07:40:51:ec:74:56:9b:a6:94:03:a0:58: 0c:51:b1:c6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUH79+OkRWswmfg1qaMTJMi3mjoHMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgz OTc5NDQwNjAeFw0yNjA0MTcwODQ3NDNaFw0yNzA0MTYwODUyNDNaMDMxMTAvBgNV BAMTKDY1Q0NCMzhERjUzMDA3MzQ2M0VDRDY4Qjk4OUVGMDlCOUNFRjI5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFCIw7EOSqMOY37UgxxfiGEwi Vu4edgbheJKh8vOcgXz0e20xiiXI9fjN/Pc03v1ZB9yb+u3xTY3tJOGmZ0dlB19b mbj6q6u2eDxyxKq1blYD4mkrF7BYrNSQmENQx6A/EPTPESwUxoDD2mNaD/avvk8j 1uRl2bc2ymIQMiAfzTqlj4O2/5CZTwUoE1nGsNm0tSG0MkErrvx/saanD8cg1tR4 EjtJRoTGMIWptWMg31LMm+K7kWaLIgxnhAT3jisnc95isxYXvXnoowKNfV4fj7jx ECtIm6GYPU4jQtG3fRchxavxbQOJPCOSTzfF6QNH7qUBvYN6XNC2cNW4aChFAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZcyzjfUwBzRj7NaLmJ7wm5zvKQMwHwYDVR0j BBgwFoAUNzsQPGjZuERVgBgV5DfEmDl5RAYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0ODQ2ODIyNy8wLzM3M0IxMDNDNjhEOUI4NDQ1NTgwMTgxNUU0MzdD NDk4Mzk3OTQ0MDYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzczQjEwM0M2OEQ5Qjg0NDU1ODAxODE1RTQzN0M0OTgzOTc5NDQwNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4NDY4MjI3LzAvMzEzMTMzMmUzMTM4 MmUzMTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAHESgjANBgkqhkiG9w0BAQsFAAOCAQEAl5MDZzcQxPp0JYOYdE9/IkhWfWZD NtxymvHu8W993YpnlbdkzZ9CKfh7zAUsEpTlP066EcUF8aDs/STUVhJGlDWmoF4h NMvRJ9vF3Uw7KrQg+ach/N1hRnMdejaH17rsRdifNP8WJt55SBG5EJnzSQmEwiRN 2Nv5cuXH0iKwHHA9DsDkylFDx48f198yDvQbsBp9cxgCnBM7Cbe+wYKQt5gK4nVZ hCNJoA6EDW72YRY48rsQwfPM0oXkd3StHENMKH13JtGG3Ws4mL7UTTtv/+HuPB1i AgjYiidVc+Chfiz/C5IB6KBMRFlHyGVK41cRB0BR7HRWm6aUA6BYDFGxxg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:37:43 2026 by rpki-client