$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa File: 3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa (raw, json) Hash identifier: kf3mOTfWdqMAc7++hEIzjHUYbE4uqDdGjabvW8aWspA= Subject key identifier: CE:9D:BD:FB:30:CD:D0:63:DF:95:9D:18:4D:29:96:2A:F4:EA:95:48 Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 4281B3972B6B339762DE3A5F7E963E51E787B0A7 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa Signing time: Wed 15 Apr 2026 08:59:32 +0000 ROA not before: Wed 15 Apr 2026 08:54:32 +0000 ROA not after: Wed 14 Apr 2027 08:59:32 +0000 asID: 134366 IP address blocks: 103.235.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:81:b3:97:2b:6b:33:97:62:de:3a:5f:7e:96:3e:51:e7:87:b0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Apr 15 08:54:32 2026 GMT Not After : Apr 14 08:59:32 2027 GMT Subject: CN=CE9DBDFB30CDD063DF959D184D29962AF4EA9548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:08:22:31:0b:99:ff:34:de:6b:85:00:95: a5:6f:78:d3:5e:33:7a:5d:c6:6a:58:66:0a:e0:94: ee:2e:02:ad:43:7e:e8:4a:61:d5:08:02:8a:a1:39: 8b:cd:ea:1b:8f:69:6b:06:8c:be:70:21:26:5f:3b: 30:90:a1:ea:70:a7:5a:cd:14:06:38:75:57:a4:a9: 28:f0:fd:53:eb:3a:5c:19:d2:91:5f:2c:d5:66:e4: 9b:1e:4c:0d:a8:82:a0:98:9c:10:fd:71:12:f3:8b: dd:1e:cd:7c:8b:3e:6b:79:e0:5f:52:9f:42:f1:16: d3:b2:8c:28:28:20:cc:23:e4:61:f7:13:b3:22:fd: 3b:43:94:81:82:c1:1b:9d:f8:37:cb:32:d5:4d:9f: fd:13:72:59:f5:02:09:24:3f:75:26:cd:33:02:9c: c0:1e:67:65:d3:49:12:31:a4:b8:ef:71:19:16:71: 48:a2:e3:ef:45:c2:e9:8a:ab:ce:16:2d:63:a1:43: 65:53:cc:3a:5a:7d:1c:04:17:e6:78:91:48:56:62: 32:0f:a3:8f:59:ad:3b:70:a9:8a:f9:15:04:92:2a: 72:1c:a6:c7:66:e6:f3:57:98:ee:94:4c:a9:7a:c4: df:2e:18:e9:68:05:e8:46:b6:46:29:9f:f6:dd:1c: 08:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9D:BD:FB:30:CD:D0:63:DF:95:9D:18:4D:29:96:2A:F4:EA:95:48 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38342e302f32342d3234203d3e20313334333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.84.0/24 Signature Algorithm: sha256WithRSAEncryption 86:1f:b9:07:99:31:c8:8c:b6:0d:44:6d:d9:0a:27:21:8c:c9: f1:4b:b7:d9:42:2e:6a:4a:fb:aa:11:1f:2f:ab:fc:ef:ea:00: 45:b3:1f:e0:7d:51:a2:d0:1a:5f:ac:35:42:b8:fe:e6:4e:1a: b7:35:c0:08:df:21:60:1b:ad:0d:1e:a0:85:93:17:52:6a:93: d1:40:0a:3b:80:a4:1a:39:0f:11:8f:ba:24:09:dd:84:a2:0e: a0:0c:44:b9:71:48:92:24:d6:05:ca:3f:eb:9f:7f:e7:74:ee: 6b:f4:60:88:2b:16:3d:67:65:f6:c4:52:8c:ce:40:5d:4e:40: 61:6f:cc:60:c3:8b:2d:c4:f2:36:19:2a:dc:c7:c4:59:6b:d3: ad:a7:91:c1:8d:69:a6:80:45:99:16:ec:12:21:44:cd:a4:61: 29:3d:6f:06:7a:e7:fc:0e:4e:f4:28:d5:a4:0a:45:d7:cf:3e: 54:4c:d6:44:5c:cc:06:56:92:d5:9b:be:91:7b:58:6c:58:a0: 02:42:c1:96:9d:6e:5a:ed:f3:07:c0:19:0a:d9:2f:82:80:f6: 66:be:44:a3:6d:be:84:eb:51:d8:b0:05:a8:3d:c3:68:1c:eb: 0c:2a:bd:e5:68:af:f0:90:14:43:0e:a1:9a:99:fb:ae:f9:c5: 9d:6d:9b:d6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQoGzlytrM5di3jpffpY+UeeHsKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA0MTUwODU0MzJaFw0yNzA0MTQwODU5MzJaMDMxMTAvBgNV BAMTKENFOURCREZCMzBDREQwNjNERjk1OUQxODREMjk5NjJBRjRFQTk1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDPggiMQuZ/zTea4UAlaVveNNe M3pdxmpYZgrglO4uAq1DfuhKYdUIAoqhOYvN6huPaWsGjL5wISZfOzCQoepwp1rN FAY4dVekqSjw/VPrOlwZ0pFfLNVm5JseTA2ogqCYnBD9cRLzi90ezXyLPmt54F9S n0LxFtOyjCgoIMwj5GH3E7Mi/TtDlIGCwRud+DfLMtVNn/0Tcln1AgkkP3UmzTMC nMAeZ2XTSRIxpLjvcRkWcUii4+9FwumKq84WLWOhQ2VTzDpafRwEF+Z4kUhWYjIP o49ZrTtwqYr5FQSSKnIcpsdm5vNXmO6UTKl6xN8uGOloBehGtkYpn/bdHAjbAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUzp29+zDN0GPflZ0YTSmWKvTqlUgwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zMTMwMzMyZTMy MzMzNTJlMzgzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDMzMzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfrVDANBgkqhkiG9w0BAQsFAAOCAQEAhh+5B5kxyIy2DURt2Qon IYzJ8Uu32UIuakr7qhEfL6v87+oARbMf4H1RotAaX6w1Qrj+5k4atzXACN8hYBut DR6ghZMXUmqT0UAKO4CkGjkPEY+6JAndhKIOoAxEuXFIkiTWBco/659/53Tua/Rg iCsWPWdl9sRSjM5AXU5AYW/MYMOLLcTyNhkq3MfEWWvTraeRwY1ppoBFmRbsEiFE zaRhKT1vBnrn/A5O9CjVpApF188+VEzWRFzMBlaS1Zu+kXtYbFigAkLBlp1uWu3z B8AZCtkvgoD2Zr5Eo22+hOtR2LAFqD3DaBzrDCq95Wiv8JAUQw6hmpn7rvnFnW2b 1g== -----END CERTIFICATE-----Generated at Fri Apr 17 19:26:13 2026 by rpki-client