$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38342e302f32322d3232203d3e2030.roa File: 3130332e3233352e38342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: J0B22rwAot8nFYFrBcKWzJwzevuyhfKQbE4Yq+wYF9o= Subject key identifier: 32:2A:62:CE:15:BB:45:FE:A2:D3:7A:99:DA:D7:E4:E9:BB:EE:D1:C7 Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 54575E389718EC9F6317447D849F7FAF9608A1E5 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38342e302f32322d3232203d3e2030.roa Signing time: Wed 15 Apr 2026 08:59:32 +0000 ROA not before: Wed 15 Apr 2026 08:54:32 +0000 ROA not after: Wed 14 Apr 2027 08:59:32 +0000 asID: 0 IP address blocks: 103.235.84.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 05:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:57:5e:38:97:18:ec:9f:63:17:44:7d:84:9f:7f:af:96:08:a1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Apr 15 08:54:32 2026 GMT Not After : Apr 14 08:59:32 2027 GMT Subject: CN=322A62CE15BB45FEA2D37A99DAD7E4E9BBEED1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:e1:2f:e9:ba:90:e3:3f:72:3e:55:c7:63: 01:7c:c2:0b:43:47:1a:49:38:55:78:d0:36:71:28: 32:05:0e:10:f6:97:3e:cd:72:03:b0:60:1c:a1:ed: b6:17:7c:30:d9:30:a7:99:60:cb:32:6e:c7:44:c7: 5a:8e:ec:70:b6:7b:45:b3:01:c4:f4:39:1b:b3:38: f4:3c:e3:2f:90:1a:6e:e4:3d:52:60:0e:4e:6c:f1: 84:bf:dd:56:b2:fb:b9:b8:74:bb:5d:80:55:8a:5b: d7:0f:7b:cb:3f:d0:63:e4:f3:4f:c7:85:c3:65:e7: 33:46:0c:5f:9c:c1:0e:51:5e:e9:ec:ae:e7:e3:19: 43:7d:f3:01:75:53:fd:27:50:02:dd:cc:3f:52:a3: b6:c5:b0:64:c1:ff:dc:99:bb:55:99:4d:5f:d6:78: 42:d6:9e:2a:c3:f0:61:dd:86:d7:29:50:a3:5a:d6: 01:d2:87:a7:da:8a:1f:f0:04:b2:55:c1:95:67:01: c1:86:e4:b0:f9:80:d6:2a:e4:aa:49:9c:66:c1:6b: cd:d1:5c:9d:5d:82:df:a4:53:c6:4c:ad:6a:5b:4e: 11:b2:2f:3e:5f:7b:15:37:c8:58:89:06:0f:ad:fe: 11:68:8f:23:8e:44:c8:7b:5b:1b:78:04:ac:2a:eb: 50:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2A:62:CE:15:BB:45:FE:A2:D3:7A:99:DA:D7:E4:E9:BB:EE:D1:C7 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.84.0/22 Signature Algorithm: sha256WithRSAEncryption 3c:e4:65:62:1f:22:c6:04:ff:38:14:e3:4e:96:fd:9d:79:9c: 0f:be:51:71:ec:35:57:0a:c7:a1:e5:1e:99:55:f5:da:64:04: 2f:e2:30:8d:a8:a9:ea:87:71:f1:6c:8f:01:7f:92:e8:91:c2: 03:26:95:4d:eb:77:1c:00:08:a3:a0:12:5c:ed:7e:94:95:2c: b9:91:25:fd:ed:2d:b3:ca:e9:c1:6d:82:d9:33:b0:a9:6d:16: 70:0f:cb:62:45:b5:eb:5d:2c:a0:87:8f:bf:ac:72:e3:db:fc: 36:c1:84:a2:d0:12:37:a9:fe:28:e8:07:6d:34:a0:80:79:49: 67:48:38:cf:9f:de:83:b2:ea:f8:70:19:c3:ba:24:d9:5f:75: 2b:6f:58:eb:da:28:41:d7:3b:0f:66:4a:25:89:07:27:43:7e: 95:e5:db:4c:d1:91:67:e9:9a:cf:82:8e:4b:93:d0:35:63:a5: 99:86:2c:b0:dd:6c:8e:51:e4:6d:8d:a7:86:83:5c:1e:78:9e: 35:64:c1:91:48:55:fc:f8:9d:48:56:c8:5d:86:23:3b:2e:12: 71:4a:6a:2f:7c:1f:43:4b:17:d2:ba:e9:02:fd:0b:fc:c6:6f: 8e:54:fd:3c:ed:47:ca:f0:e7:15:d4:fd:d0:43:70:f3:e3:c0: 4b:f8:dd:78 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUVFdeOJcY7J9jF0R9hJ9/r5YIoeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA0MTUwODU0MzJaFw0yNzA0MTQwODU5MzJaMDMxMTAvBgNV BAMTKDMyMkE2MkNFMTVCQjQ1RkVBMkQzN0E5OURBRDdFNEU5QkJFRUQxQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFK+Ev6bqQ4z9yPlXHYwF8wgtD RxpJOFV40DZxKDIFDhD2lz7NcgOwYByh7bYXfDDZMKeZYMsybsdEx1qO7HC2e0Wz AcT0ORuzOPQ84y+QGm7kPVJgDk5s8YS/3Vay+7m4dLtdgFWKW9cPe8s/0GPk80/H hcNl5zNGDF+cwQ5RXunsrufjGUN98wF1U/0nUALdzD9So7bFsGTB/9yZu1WZTV/W eELWnirD8GHdhtcpUKNa1gHSh6faih/wBLJVwZVnAcGG5LD5gNYq5KpJnGbBa83R XJ1dgt+kU8ZMrWpbThGyLz5fexU3yFiJBg+t/hFojyOORMh7Wxt4BKwq61DHAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUMipizhW7Rf6i03qZ2tfk6bvu0ccwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzAvMzEzMDMzMmUzMjMz MzUyZTM4MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfr VDANBgkqhkiG9w0BAQsFAAOCAQEAPORlYh8ixgT/OBTjTpb9nXmcD75Rcew1VwrH oeUemVX12mQEL+Iwjaip6odx8WyPAX+S6JHCAyaVTet3HAAIo6ASXO1+lJUsuZEl /e0ts8rpwW2C2TOwqW0WcA/LYkW1610soIePv6xy49v8NsGEotASN6n+KOgHbTSg gHlJZ0g4z5/eg7Lq+HAZw7ok2V91K29Y69ooQdc7D2ZKJYkHJ0N+leXbTNGRZ+ma z4KOS5PQNWOlmYYssN1sjlHkbY2nhoNcHnieNWTBkUhV/PidSFbIXYYjOy4ScUpq L3wfQ0sX0rrpAv0L/MZvjlT9PO1HyvDnFdT90ENw8+PAS/jdeA== -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:37 2026 by rpki-client