$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139362e302f32342d3234203d3e20313331333134.roa File: 3130332e3230312e3139362e302f32342d3234203d3e20313331333134.roa (raw, json) Hash identifier: vdGDhwok1qRiJRjWfJyT/g3HhQboLjLY+o17n8AApW4= Subject key identifier: AA:21:A7:71:6E:5F:18:03:D1:F7:75:83:94:DB:FE:78:A8:0E:21:28 Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 1770D3CD4DD35B0F5A6DB5DA9837F97C39592404 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139362e302f32342d3234203d3e20313331333134.roa Signing time: Fri 17 Apr 2026 02:24:46 +0000 ROA not before: Fri 17 Apr 2026 02:19:46 +0000 ROA not after: Fri 16 Apr 2027 02:24:46 +0000 asID: 131314 IP address blocks: 103.201.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:70:d3:cd:4d:d3:5b:0f:5a:6d:b5:da:98:37:f9:7c:39:59:24:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Apr 17 02:19:46 2026 GMT Not After : Apr 16 02:24:46 2027 GMT Subject: CN=AA21A7716E5F1803D1F7758394DBFE78A80E2128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d3:20:53:a1:6c:8e:4b:c8:59:06:aa:97:2d: ac:0c:fc:38:09:4a:55:b4:2b:1a:89:f3:f3:00:e3: 09:7a:41:c7:ab:41:24:96:ca:d4:27:46:a5:c3:d3: 1e:68:79:7e:34:ef:b2:10:00:24:9d:20:2b:34:89: cc:05:87:58:08:e7:4d:54:3d:2f:b9:21:c3:9e:23: 3d:a5:14:0d:08:71:8e:bf:1f:94:e5:9c:a6:bb:1c: c5:48:64:65:18:67:64:06:ad:50:3f:11:4d:62:fb: 46:07:01:7a:c0:46:2f:ee:2b:67:ad:77:4e:6e:9b: fa:06:aa:e0:c6:19:04:30:11:08:42:b3:a2:33:0d: 7a:23:01:4c:d3:e7:59:64:5a:4c:7e:66:1f:a9:ea: 20:29:bf:4c:99:ae:ff:bc:de:2c:8c:85:c6:ba:d5: 83:df:bb:c3:5b:2f:9f:bf:4b:06:4b:13:73:57:f5: a2:f8:23:78:f6:de:6e:e6:c8:3a:d7:6b:67:de:ec: b9:18:8b:ec:82:b6:02:3f:58:85:3c:f9:b5:33:b8: c3:d4:ff:ad:0b:a8:4a:a5:61:f4:6c:4e:c5:e6:d5: 5f:cb:98:62:b5:0f:4e:7c:5a:22:cf:ff:88:ec:33: 87:87:e9:eb:50:f8:fb:92:ff:6b:4b:18:4e:93:2b: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:21:A7:71:6E:5F:18:03:D1:F7:75:83:94:DB:FE:78:A8:0E:21:28 X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3139362e302f32342d3234203d3e20313331333134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.201.196.0/24 Signature Algorithm: sha256WithRSAEncryption 28:36:8c:7a:77:1a:c5:84:f5:27:eb:17:04:62:60:d4:07:2c: 12:ae:e7:1f:88:8e:a4:81:c6:85:f4:7b:c6:56:50:98:37:a8: cb:b4:85:c0:c9:41:7f:98:80:6f:a0:a2:2b:fd:88:49:1c:9d: 2f:49:61:62:83:31:e1:82:94:42:cd:b4:c6:33:6a:f7:15:37: be:6f:94:7c:9e:af:95:ac:ea:d8:46:9c:5d:a1:de:9f:7d:94: d0:1c:09:ed:a0:e0:4d:2a:62:7d:ba:5a:e6:5a:b6:2f:f9:6b: f4:5f:b4:29:15:a3:df:6d:05:f6:05:d4:4a:b5:60:65:3a:57: d6:53:73:b8:15:cc:24:22:f9:b5:13:b1:66:2b:9a:ba:fd:95: 0e:91:6d:ea:cb:ed:47:4e:6b:1b:e3:79:35:67:15:36:f1:66: 57:e9:be:a9:93:2e:c1:3a:03:43:14:a8:64:df:31:d9:01:63: 19:6f:5a:82:26:0e:a6:43:5a:cf:03:c9:d8:fa:96:06:9a:69: 17:68:c7:48:02:40:4a:8d:f1:bf:00:19:3f:9c:31:ea:3c:f7: 33:d8:66:e0:99:e2:d8:ce:60:12:80:5e:03:87:b7:e9:7f:fc: 0c:d8:dd:75:7f:c5:03:45:90:d5:50:0b:2e:a7:b6:9a:6a:5c: 88:bb:2d:de -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUF3DTzU3TWw9abbXamDf5fDlZJAQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA0MTcwMjE5NDZaFw0yNzA0MTYwMjI0NDZaMDMxMTAvBgNV BAMTKEFBMjFBNzcxNkU1RjE4MDNEMUY3NzU4Mzk0REJGRTc4QTgwRTIxMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC30yBToWyOS8hZBqqXLawM/DgJ SlW0KxqJ8/MA4wl6QcerQSSWytQnRqXD0x5oeX4077IQACSdICs0icwFh1gI501U PS+5IcOeIz2lFA0IcY6/H5TlnKa7HMVIZGUYZ2QGrVA/EU1i+0YHAXrARi/uK2et d05um/oGquDGGQQwEQhCs6IzDXojAUzT51lkWkx+Zh+p6iApv0yZrv+83iyMhca6 1YPfu8NbL5+/SwZLE3NX9aL4I3j23m7myDrXa2fe7LkYi+yCtgI/WIU8+bUzuMPU /60LqEqlYfRsTsXm1V/LmGK1D058WiLP/4jsM4eH6etQ+PuS/2tLGE6TKz0jAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUqiGncW5fGAPR93WDlNv+eKgOISgwHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMTc5NDU4LzAvMzEzMDMzMmUz MjMwMzEyZTMxMzkzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTMzMzEz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfJxDANBgkqhkiG9w0BAQsFAAOCAQEAKDaMencaxYT1J+sX BGJg1AcsEq7nH4iOpIHGhfR7xlZQmDeoy7SFwMlBf5iAb6CiK/2ISRydL0lhYoMx 4YKUQs20xjNq9xU3vm+UfJ6vlazq2EacXaHen32U0BwJ7aDgTSpifbpa5lq2L/lr 9F+0KRWj320F9gXUSrVgZTpX1lNzuBXMJCL5tROxZiuauv2VDpFt6svtR05rG+N5 NWcVNvFmV+m+qZMuwToDQxSoZN8x2QFjGW9agiYOpkNazwPJ2PqWBpppF2jHSAJA So3xvwAZP5wx6jz3M9hm4Jni2M5gEoBeA4e36X/8DNjddX/FA0WQ1VALLqe2mmpc iLst3g== -----END CERTIFICATE-----Generated at Sat Apr 18 00:22:15 2026 by rpki-client