$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33322e302f32322d3234203d3e20313331323734.roa File: 3130332e32302e33322e302f32322d3234203d3e20313331323734.roa (raw, json) Hash identifier: 1r18YrxhKa5d6hZJI28sikwvGeObAGwlYAw/FvaHPp4= Subject key identifier: 83:9A:12:DC:E6:41:CF:0F:56:47:79:E4:4D:FF:BB:42:DD:E3:42:2B Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 46A3D1540CDEA2E40DBBA6DFB811765085BEB105 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33322e302f32322d3234203d3e20313331323734.roa Signing time: Fri 17 Apr 2026 01:49:28 +0000 ROA not before: Fri 17 Apr 2026 01:44:28 +0000 ROA not after: Fri 16 Apr 2027 01:49:28 +0000 asID: 131274 IP address blocks: 103.20.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:a3:d1:54:0c:de:a2:e4:0d:bb:a6:df:b8:11:76:50:85:be:b1:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Apr 17 01:44:28 2026 GMT Not After : Apr 16 01:49:28 2027 GMT Subject: CN=839A12DCE641CF0F564779E44DFFBB42DDE3422B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:0c:9a:41:10:a4:70:c2:f3:96:4f:8d:ed:fb: df:5e:12:ef:45:f3:dc:20:de:ab:44:37:41:44:73: de:6d:33:e5:9d:6c:68:68:06:1b:b3:d1:a5:cf:b7: 53:ae:e9:b3:81:7d:8e:5d:5c:80:a0:c8:04:84:96: 5e:93:11:9f:d6:ee:91:2d:18:88:dd:00:fd:6c:bc: d0:68:f2:bd:2d:4f:a7:30:d7:9b:93:1b:41:ec:c2: 05:04:d0:33:b4:e2:54:a8:3d:03:35:a6:6c:8d:90: 5b:5f:35:53:87:50:c6:5e:22:40:74:51:e3:ed:ba: 15:e9:42:a4:fa:6f:2e:a4:61:8f:83:a7:1d:02:45: ef:b5:2e:21:f1:c5:69:01:ec:38:a1:98:bd:85:62: f6:1b:cd:4c:a2:6e:f5:4a:0c:e7:97:8a:4d:44:17: 39:7b:3c:79:80:c5:37:d6:70:66:52:9f:4d:08:81: c4:36:92:5c:36:96:4d:28:6d:72:6c:e4:b1:a9:cf: 25:70:4c:4e:e4:b4:c3:75:c7:04:9a:94:31:d6:85: 7f:89:6d:d3:91:90:42:d3:09:26:78:c7:87:46:4c: 8d:ba:d6:23:74:55:56:dc:c7:7f:b6:78:f2:4b:dd: c5:b9:19:0a:2d:4b:55:01:86:c0:b4:08:ca:10:ba: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:9A:12:DC:E6:41:CF:0F:56:47:79:E4:4D:FF:BB:42:DD:E3:42:2B X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e32302e33322e302f32322d3234203d3e20313331323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.32.0/22 Signature Algorithm: sha256WithRSAEncryption 07:09:4c:1a:ae:bc:21:72:40:65:e3:6a:1c:fc:f3:52:25:6e: 2b:56:60:b6:93:96:67:46:25:d3:5b:85:54:51:b1:c8:03:b0: c3:eb:27:d7:92:8c:36:d0:82:b7:18:d9:31:52:d6:89:70:52: c9:ca:35:dd:19:c8:c3:42:58:61:30:e1:58:23:21:24:66:72: 7c:cf:b1:6d:4a:78:e6:7f:df:e5:b2:18:f0:10:bb:3b:ce:78: 13:24:55:a3:95:b3:0b:e0:07:25:5d:c0:6c:fe:16:94:38:aa: fe:81:b1:3b:e4:63:e8:fd:e3:ad:e8:22:7a:5b:72:ba:79:45: c7:39:cd:c0:a8:66:3a:fc:27:f5:fd:ee:39:56:06:ea:cc:4a: 34:53:a5:5a:65:29:71:57:03:ac:56:ce:d6:94:39:6a:10:e5: 53:54:ba:44:90:9b:05:1b:17:e9:9c:48:cf:97:8b:a4:ca:0b: 2e:b0:9c:bf:38:da:f3:29:e7:be:dc:a4:e6:9a:a5:96:17:f5: 16:cf:5d:15:79:fe:87:89:16:2f:3f:54:a2:94:30:27:a4:1c: 73:95:41:0a:b2:a9:33:a8:5d:1f:f5:91:a6:14:f9:c3:dc:b9: 94:ea:ba:4d:26:4f:f0:5d:d2:7f:a4:06:94:64:9c:a1:fe:5a: d0:d3:22:e9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURqPRVAzeouQNu6bfuBF2UIW+sQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA0MTcwMTQ0MjhaFw0yNzA0MTYwMTQ5MjhaMDMxMTAvBgNV BAMTKDgzOUExMkRDRTY0MUNGMEY1NjQ3NzlFNDRERkZCQjQyRERFMzQyMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeDJpBEKRwwvOWT43t+99eEu9F 89wg3qtEN0FEc95tM+WdbGhoBhuz0aXPt1Ou6bOBfY5dXICgyASEll6TEZ/W7pEt GIjdAP1svNBo8r0tT6cw15uTG0HswgUE0DO04lSoPQM1pmyNkFtfNVOHUMZeIkB0 UePtuhXpQqT6by6kYY+Dpx0CRe+1LiHxxWkB7DihmL2FYvYbzUyibvVKDOeXik1E Fzl7PHmAxTfWcGZSn00IgcQ2klw2lk0obXJs5LGpzyVwTE7ktMN1xwSalDHWhX+J bdORkELTCSZ4x4dGTI261iN0VVbcx3+2ePJL3cW5GQotS1UBhsC0CMoQujNjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUg5oS3OZBzw9WR3nkTf+7Qt3jQiswHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzMxMzAzMzJlMzIz MDJlMzMzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTMyMzczNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmcUIDANBgkqhkiG9w0BAQsFAAOCAQEABwlMGq68IXJAZeNqHPzzUiVu K1ZgtpOWZ0Yl01uFVFGxyAOww+sn15KMNtCCtxjZMVLWiXBSyco13RnIw0JYYTDh WCMhJGZyfM+xbUp45n/f5bIY8BC7O854EyRVo5WzC+AHJV3AbP4WlDiq/oGxO+Rj 6P3jregieltyunlFxznNwKhmOvwn9f3uOVYG6sxKNFOlWmUpcVcDrFbO1pQ5ahDl U1S6RJCbBRsX6ZxIz5eLpMoLLrCcvzja8ynnvtyk5pqllhf1Fs9dFXn+h4kWLz9U opQwJ6Qcc5VBCrKpM6hdH/WRphT5w9y5lOq6TSZP8F3Sf6QGlGScof5a0NMi6Q== -----END CERTIFICATE-----Generated at Fri Apr 17 16:37:34 2026 by rpki-client