$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3230302e302f32342d3234203d3e203137363232.roa File: 3130332e3230312e3230302e302f32342d3234203d3e203137363232.roa (raw, json) Hash identifier: 2+7lt25KraihSAy7LXBu5v4TazOUkR60gy3Wn7eydgI= Subject key identifier: AE:43:6B:24:A6:9A:F0:19:50:76:5F:1F:A0:B9:CF:7E:7D:78:8C:4E Certificate issuer: /CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Certificate serial: 421FABABAD4A0206FBB51A15943A53919E23FDA1 Authority key identifier: 8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3230302e302f32342d3234203d3e203137363232.roa Signing time: Fri 17 Apr 2026 02:24:46 +0000 ROA not before: Fri 17 Apr 2026 02:19:46 +0000 ROA not after: Fri 16 Apr 2027 02:24:46 +0000 asID: 17622 IP address blocks: 103.201.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:1f:ab:ab:ad:4a:02:06:fb:b5:1a:15:94:3a:53:91:9e:23:fd:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE Validity Not Before: Apr 17 02:19:46 2026 GMT Not After : Apr 16 02:24:46 2027 GMT Subject: CN=AE436B24A69AF01950765F1FA0B9CF7E7D788C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:23:3d:21:54:52:bb:dd:ed:99:b7:d4:f5:18: 40:40:f6:0d:88:5c:96:1a:e7:61:f0:7a:d8:46:3e: 03:2c:a5:47:1a:4a:ed:ec:7d:73:df:ca:cf:12:b5: be:58:a1:75:6d:64:25:ec:89:0f:0b:70:fb:c1:d0: e4:a7:62:bf:7f:03:59:f5:21:e4:0e:7a:87:68:70: 71:b0:fc:1d:06:cb:5e:f2:29:55:86:31:5d:cb:f5: c6:e5:e8:f3:7d:cb:a8:0c:d0:4b:79:3f:e7:0b:92: 98:b9:47:26:d2:26:77:bf:93:3f:c3:e3:14:3c:c5: 19:37:bb:82:19:ed:df:ce:46:7a:f9:4e:5c:2e:78: 83:aa:f3:18:a2:a1:1e:4a:a2:b8:ea:9c:31:d8:0a: 04:9c:00:3d:98:9d:d9:df:5e:81:59:74:7d:6c:0f: ee:ca:67:be:96:4e:23:9f:4a:7c:54:08:42:6a:8c: 55:ba:74:40:1a:92:c7:9a:20:52:15:02:1b:62:c0: 8d:3e:f2:c8:d2:62:b4:53:3a:63:e3:22:2c:fb:5c: 44:1c:76:53:7a:b6:b7:b8:f9:78:7c:84:4e:dc:59: 7a:f8:5f:eb:3e:99:7b:c3:d1:0a:96:44:4d:d8:f2: 23:0f:45:e6:5c:60:0a:36:7d:ab:93:fb:9d:e7:81: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:43:6B:24:A6:9A:F0:19:50:76:5F:1F:A0:B9:CF:7E:7D:78:8C:4E X509v3 Authority Key Identifier: keyid:8D:47:3B:7B:41:E3:D6:22:DF:B3:B6:0D:5E:B9:46:99:8F:BE:7E:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D473B7B41E3D622DFB3B60D5EB946998FBE7EAE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372179458/0/3130332e3230312e3230302e302f32342d3234203d3e203137363232.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.201.200.0/24 Signature Algorithm: sha256WithRSAEncryption cc:3f:78:07:20:ad:eb:23:76:8c:1a:2c:35:fc:79:ac:04:51: b5:d7:70:13:f3:04:5f:6a:fa:2c:ce:09:5e:de:c1:71:8d:2a: e3:14:02:c2:64:43:a8:8b:ab:a4:70:f3:dc:b1:0b:36:b7:60: 8f:ee:97:4e:cf:df:89:37:8f:41:6d:15:22:97:89:c8:ed:ad: ca:bf:0a:75:9c:1c:1b:da:5d:d9:8e:5e:59:0c:fb:73:81:df: 66:8b:03:dc:8b:a8:72:52:da:1f:b3:1c:9c:5e:88:dd:66:84: a5:09:dd:aa:85:f7:10:ac:58:d1:a0:3c:00:27:5e:a7:d9:91: 48:e5:ee:0d:b7:d5:17:76:b5:43:ca:95:45:2a:b3:80:51:69: c8:21:53:d6:3d:2e:87:2f:a6:9e:55:59:9b:06:e7:c3:8b:5b: 2a:64:ef:29:d7:8e:f3:e3:90:2b:6f:e0:15:14:c5:7a:60:04: 69:6f:6d:af:2a:0e:3f:53:8b:ca:a5:6a:25:fa:c3:bf:54:5a: a9:ea:d6:c9:22:49:62:68:52:b6:37:f0:49:ef:63:5e:4a:9b: b9:98:bd:69:f7:fb:a9:2f:33:6a:0c:65:05:cf:0f:66:1a:c5: 61:47:9f:47:de:e3:7c:82:2b:59:77:df:b3:93:22:e7:65:4e: 1d:8e:1e:ee -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQh+rq61KAgb7tRoVlDpTkZ4j/aEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4 RkJFN0VBRTAeFw0yNjA0MTcwMjE5NDZaFw0yNzA0MTYwMjI0NDZaMDMxMTAvBgNV BAMTKEFFNDM2QjI0QTY5QUYwMTk1MDc2NUYxRkEwQjlDRjdFN0Q3ODhDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbIz0hVFK73e2Zt9T1GEBA9g2I XJYa52HwethGPgMspUcaSu3sfXPfys8Stb5YoXVtZCXsiQ8LcPvB0OSnYr9/A1n1 IeQOeodocHGw/B0Gy17yKVWGMV3L9cbl6PN9y6gM0Et5P+cLkpi5RybSJne/kz/D 4xQ8xRk3u4IZ7d/ORnr5TlwueIOq8xiioR5KorjqnDHYCgScAD2YndnfXoFZdH1s D+7KZ76WTiOfSnxUCEJqjFW6dEAakseaIFIVAhtiwI0+8sjSYrRTOmPjIiz7XEQc dlN6tre4+Xh8hE7cWXr4X+s+mXvD0QqWRE3Y8iMPReZcYAo2fauT+53ngbXPAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUrkNrJKaa8BlQdl8foLnPfn14jE4wHwYDVR0j BBgwFoAUjUc7e0Hj1iLfs7YNXrlGmY++fq4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjcyMzM3MjE3OTQ1OC8wLzhENDczQjdCNDFFM0Q2MjJERkIzQjYwRDVFQjk0 Njk5OEZCRTdFQUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ0NzNCN0I0MUUzRDYyMkRGQjNCNjBENUVCOTQ2OTk4RkJFN0VBRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzY3MjMzNzIxNzk0NTgvMC8zMTMwMzMyZTMy MzAzMTJlMzIzMDMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfJyDANBgkqhkiG9w0BAQsFAAOCAQEAzD94ByCt6yN2jBosNfx5 rARRtddwE/MEX2r6LM4JXt7BcY0q4xQCwmRDqIurpHDz3LELNrdgj+6XTs/fiTeP QW0VIpeJyO2tyr8KdZwcG9pd2Y5eWQz7c4HfZosD3IuoclLaH7McnF6I3WaEpQnd qoX3EKxY0aA8ACdep9mRSOXuDbfVF3a1Q8qVRSqzgFFpyCFT1j0uhy+mnlVZmwbn w4tbKmTvKdeO8+OQK2/gFRTFemAEaW9tryoOP1OLyqVqJfrDv1RaqerWySJJYmhS tjfwSe9jXkqbuZi9aff7qS8zagxlBc8PZhrFYUefR97jfIIrWXffs5Mi52VOHY4e 7g== -----END CERTIFICATE-----Generated at Sat Apr 18 00:22:19 2026 by rpki-client