$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa File: 3130332e3139372e332e302f32342d3234203d3e203538353432.roa (raw, json) Hash identifier: Tiot9gTmfW4mbsFI5eO85lBTutqwIwcHnCwypNjuCNE= Subject key identifier: AB:0E:E8:0A:D5:E4:07:01:50:75:23:4E:17:B0:37:0F:C1:B0:E2:C7 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 3DDC587A3816C81B6D464CF78B272CBFCF837938 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa Signing time: Fri 17 Apr 2026 02:12:46 +0000 ROA not before: Fri 17 Apr 2026 02:07:46 +0000 ROA not after: Fri 16 Apr 2027 02:12:46 +0000 asID: 58542 IP address blocks: 103.197.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:dc:58:7a:38:16:c8:1b:6d:46:4c:f7:8b:27:2c:bf:cf:83:79:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Apr 17 02:07:46 2026 GMT Not After : Apr 16 02:12:46 2027 GMT Subject: CN=AB0EE80AD5E407015075234E17B0370FC1B0E2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b2:94:6f:45:74:3a:f0:be:8a:ee:18:dd:5c: 0c:c0:44:22:39:ad:06:74:5d:19:6a:ea:8d:12:6e: 66:53:74:29:b5:5e:03:67:1e:68:d3:6b:90:18:5d: 0d:74:db:0e:b9:6c:04:8d:ee:1b:4e:d3:26:2a:d2: c6:67:5a:71:af:be:1c:0b:3c:34:e0:71:0d:6c:74: c7:59:88:8d:d5:b3:3e:75:9f:20:6d:10:56:f1:57: 92:33:4f:0f:63:f4:e6:04:c3:36:1b:54:9f:db:e3: 5a:1b:1c:cc:9e:4d:33:7e:43:81:18:4d:5b:0c:c1: 85:32:58:e1:38:42:87:73:ce:dc:99:59:72:24:5c: 10:af:a1:62:a8:af:af:ae:b4:6b:6e:44:38:21:b4: 83:82:48:92:8c:ba:a0:10:b1:4c:10:1e:87:84:d8: 18:6a:9d:59:ae:8a:b8:06:f9:82:d2:b9:a2:6d:b0: cf:eb:f5:55:1f:6b:91:d6:30:62:93:3d:4e:ec:e6: 56:ac:9b:69:4a:28:53:c4:90:94:b9:9d:9f:5f:80: 0d:91:92:50:80:df:94:66:99:76:ee:a8:e2:13:66: 43:6b:ee:b1:57:b3:50:32:cc:18:f5:6e:9e:3f:d8: 94:24:28:44:b0:3d:15:27:b5:9b:43:7a:9f:40:4f: 2c:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0E:E8:0A:D5:E4:07:01:50:75:23:4E:17:B0:37:0F:C1:B0:E2:C7 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e3139372e332e302f32342d3234203d3e203538353432.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.197.3.0/24 Signature Algorithm: sha256WithRSAEncryption 3a:ba:a4:47:2a:7e:a1:45:24:6b:2a:6b:32:12:d7:49:2a:73: 47:50:b8:8f:7b:e0:b1:52:5a:4d:55:30:31:57:f4:43:ba:e1: c7:82:e1:a8:c6:29:10:cc:3a:f3:83:6f:2c:63:61:75:29:51: 84:99:64:4b:4c:2a:af:16:dc:3a:cf:8e:84:23:8b:f2:ba:d2: 2f:09:23:ea:cb:83:56:22:ce:33:8a:c5:04:bc:ee:1a:e9:a4: 55:00:bf:34:f1:51:55:91:78:6a:ac:e0:5d:09:d7:59:57:21: ec:ad:35:f8:53:cc:93:0d:6d:d6:7a:53:0d:ca:99:ac:80:3d: 73:34:ae:f5:ca:1e:f2:32:34:7b:f8:47:d8:91:ed:d8:9b:10: 32:28:3e:c9:ab:6b:20:89:0a:ff:0f:4e:c9:64:d5:ac:4e:0b: 4d:7e:4f:f2:c5:69:0f:71:9d:fb:41:e0:ad:98:cf:2e:1f:94: b9:33:54:d1:e8:56:a4:47:67:b4:fa:5f:77:f6:b2:f1:d4:40: ff:71:df:db:c7:2c:a4:9b:f3:c7:6d:1b:62:c3:2f:21:f9:26: d1:0b:52:75:d4:75:09:99:b7:89:1f:ef:be:82:97:df:c8:83: 4e:7d:5a:24:19:3e:e6:78:c1:c8:7a:88:22:25:39:66:71:b1: 2c:fb:5b:43 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPdxYejgWyBttRkz3iycsv8+DeTgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA0MTcwMjA3NDZaFw0yNzA0MTYwMjEyNDZaMDMxMTAvBgNV BAMTKEFCMEVFODBBRDVFNDA3MDE1MDc1MjM0RTE3QjAzNzBGQzFCMEUyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2spRvRXQ68L6K7hjdXAzARCI5 rQZ0XRlq6o0SbmZTdCm1XgNnHmjTa5AYXQ102w65bASN7htO0yYq0sZnWnGvvhwL PDTgcQ1sdMdZiI3Vsz51nyBtEFbxV5IzTw9j9OYEwzYbVJ/b41obHMyeTTN+Q4EY TVsMwYUyWOE4QodzztyZWXIkXBCvoWKor6+utGtuRDghtIOCSJKMuqAQsUwQHoeE 2BhqnVmuirgG+YLSuaJtsM/r9VUfa5HWMGKTPU7s5lasm2lKKFPEkJS5nZ9fgA2R klCA35RmmXbuqOITZkNr7rFXs1AyzBj1bp4/2JQkKESwPRUntZtDep9ATywFAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUqw7oCtXkBwFQdSNOF7A3D8Gw4scwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzEzMDMzMmUzMTM5 MzcyZTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM1MzQzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGfFAzANBgkqhkiG9w0BAQsFAAOCAQEAOrqkRyp+oUUkayprMhLXSSpzR1C4 j3vgsVJaTVUwMVf0Q7rhx4LhqMYpEMw684NvLGNhdSlRhJlkS0wqrxbcOs+OhCOL 8rrSLwkj6suDViLOM4rFBLzuGumkVQC/NPFRVZF4aqzgXQnXWVch7K01+FPMkw1t 1npTDcqZrIA9czSu9coe8jI0e/hH2JHt2JsQMig+yatrIIkK/w9OyWTVrE4LTX5P 8sVpD3Gd+0HgrZjPLh+UuTNU0ehWpEdntPpfd/ay8dRA/3Hf28cspJvzx20bYsMv Ifkm0QtSddR1CZm3iR/vvoKX38iDTn1aJBk+5njByHqIIiU5ZnGxLPtbQw== -----END CERTIFICATE-----Generated at Fri Apr 17 18:49:27 2026 by rpki-client