$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e20313331323734.roa File: 3130332e34352e3232342e302f32322d3234203d3e20313331323734.roa (raw, json) Hash identifier: 0H5XYQ5RInx7z9zzI/VoM3ygBMsGSnBDwQ0a9O2e2UM= Subject key identifier: D5:B1:C5:7F:B3:CA:CF:BA:55:FB:C2:DB:9C:B7:91:67:F5:DA:C8:76 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 0A92663762C8AFF0F567BE59E9D778CA3CE68D24 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e20313331323734.roa Signing time: Fri 17 Apr 2026 01:52:51 +0000 ROA not before: Fri 17 Apr 2026 01:47:51 +0000 ROA not after: Fri 16 Apr 2027 01:52:51 +0000 asID: 131274 IP address blocks: 103.45.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 04:15:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:92:66:37:62:c8:af:f0:f5:67:be:59:e9:d7:78:ca:3c:e6:8d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: Apr 17 01:47:51 2026 GMT Not After : Apr 16 01:52:51 2027 GMT Subject: CN=D5B1C57FB3CACFBA55FBC2DB9CB79167F5DAC876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f9:cb:ea:f2:a0:ef:6e:16:44:d5:d6:2b:2a: 9d:fb:82:7c:97:60:4f:1e:92:5c:eb:68:d0:fa:1c: 5d:95:48:fe:36:5b:c0:69:b7:08:90:d7:3e:bd:44: 5d:f9:c6:93:40:b9:4c:22:12:52:4b:66:8b:58:8e: 4f:d0:ca:67:31:86:2f:9d:a7:07:a2:93:bd:b6:64: 6f:84:a5:85:73:dc:39:91:11:ef:9e:0e:eb:9a:aa: 37:f7:f7:fd:77:57:61:1a:e2:0c:f0:03:e9:8c:3f: 64:cf:4a:bf:74:17:93:7a:7f:0d:9f:11:72:69:40: dd:22:bd:0e:bd:50:91:20:bb:c9:1e:7c:86:b7:f5: db:d6:cc:b9:26:0f:8e:30:9e:c9:7d:12:68:e3:22: 3a:fb:76:c4:48:29:da:a9:4e:5b:21:90:6f:af:b4: 36:6a:06:d6:9f:6c:84:60:82:40:07:88:88:c6:59: 81:d5:7f:5a:85:c7:b9:15:4b:93:37:d7:7c:46:72: 6d:b4:43:c7:b0:30:60:6b:24:a1:7b:98:67:06:24: b3:b7:9c:cc:1c:45:5b:c5:8b:b0:fb:d8:e5:8c:83: 86:3b:b9:28:f3:d7:97:a1:cb:43:8f:fe:32:94:f5: 99:17:0f:bb:ed:90:67:09:e2:a2:15:97:f9:a9:89: 44:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B1:C5:7F:B3:CA:CF:BA:55:FB:C2:DB:9C:B7:91:67:F5:DA:C8:76 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/3130332e34352e3232342e302f32322d3234203d3e20313331323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.45.224.0/22 Signature Algorithm: sha256WithRSAEncryption a6:6d:d4:75:53:b4:8f:d6:4a:27:0e:29:85:4e:f9:fb:33:59: fc:48:33:2d:09:32:72:30:f7:65:ba:0f:b8:6f:c7:3f:6f:8d: 3c:4c:ff:4b:c7:6a:e6:c6:e9:c3:62:f5:54:58:27:2f:c7:8a: 31:04:a4:f7:f6:86:48:a1:23:30:94:78:e6:49:86:69:e5:68: 0b:75:4f:f3:54:b9:1d:3d:f9:ff:54:f0:df:f7:fd:d2:06:3b: 56:8f:81:1f:c1:29:0a:0c:16:e4:65:50:18:c9:f9:e4:fb:3e: 40:e9:1a:85:1e:31:3f:70:87:79:91:b3:c7:6a:1e:f6:c6:53: 1c:22:e3:9b:df:5a:e8:70:a6:5b:24:79:71:f7:5c:90:52:95: 82:34:a9:71:1a:1a:c2:f9:5e:9d:06:18:ba:12:b6:54:ae:26: 87:7e:7e:5d:58:f7:63:c5:8a:6a:cb:c1:8d:36:91:4b:a0:9f: 69:a3:19:61:21:4a:8c:14:26:0d:42:08:a2:ae:bd:97:4d:f1: 8f:20:df:7a:d8:0d:e7:bb:9b:84:df:cf:26:72:be:ad:8e:8d: f1:bb:6b:e8:42:46:b0:a9:48:e4:2c:ea:e9:81:dc:e2:5c:19: ff:eb:0a:99:44:df:cd:9a:93:78:70:38:76:87:92:63:29:b1: e2:0d:65:9a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCpJmN2LIr/D1Z75Z6dd4yjzmjSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA0MTcwMTQ3NTFaFw0yNzA0MTYwMTUyNTFaMDMxMTAvBgNV BAMTKEQ1QjFDNTdGQjNDQUNGQkE1NUZCQzJEQjlDQjc5MTY3RjVEQUM4NzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe+cvq8qDvbhZE1dYrKp37gnyX YE8eklzraND6HF2VSP42W8BptwiQ1z69RF35xpNAuUwiElJLZotYjk/Qymcxhi+d pweik722ZG+EpYVz3DmREe+eDuuaqjf39/13V2Ea4gzwA+mMP2TPSr90F5N6fw2f EXJpQN0ivQ69UJEgu8kefIa39dvWzLkmD44wnsl9EmjjIjr7dsRIKdqpTlshkG+v tDZqBtafbIRggkAHiIjGWYHVf1qFx7kVS5M313xGcm20Q8ewMGBrJKF7mGcGJLO3 nMwcRVvFi7D72OWMg4Y7uSjz15ehy0OP/jKU9ZkXD7vtkGcJ4qIVl/mpiURpAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU1bHFf7PKz7pV+8LbnLeRZ/XayHYwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1NzcyNDE5NDc2MDI5NDUvMC8zMTMwMzMyZTM0 MzUyZTMyMzIzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTMyMzczNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmct4DANBgkqhkiG9w0BAQsFAAOCAQEApm3UdVO0j9ZKJw4phU75 +zNZ/EgzLQkycjD3ZboPuG/HP2+NPEz/S8dq5sbpw2L1VFgnL8eKMQSk9/aGSKEj MJR45kmGaeVoC3VP81S5HT35/1Tw3/f90gY7Vo+BH8EpCgwW5GVQGMn55Ps+QOka hR4xP3CHeZGzx2oe9sZTHCLjm99a6HCmWyR5cfdckFKVgjSpcRoawvlenQYYuhK2 VK4mh35+XVj3Y8WKasvBjTaRS6CfaaMZYSFKjBQmDUIIoq69l03xjyDfetgN57ub hN/PJnK+rY6N8btr6EJGsKlI5Czq6YHc4lwZ/+sKmUTfzZqTeHA4doeSYymx4g1l mg== -----END CERTIFICATE-----Generated at Fri Apr 17 17:42:21 2026 by rpki-client