$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034383337.roa File: 3130332e3230352e3235322e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: Qgn8X3tNB15B818SBAVLSWknICiEsLXnI+1nPatn5fM= Subject key identifier: 24:5B:6E:13:F5:F0:2D:A5:54:57:18:5D:D9:97:C6:F0:32:DF:5A:FD Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 55AE2495CDFE1635ECAD45F8394A24D3B7839D9F Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034383337.roa Signing time: Tue 14 Apr 2026 07:32:00 +0000 ROA not before: Tue 14 Apr 2026 07:27:00 +0000 ROA not after: Tue 13 Apr 2027 07:32:00 +0000 asID: 4837 IP address blocks: 103.205.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 15:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ae:24:95:cd:fe:16:35:ec:ad:45:f8:39:4a:24:d3:b7:83:9d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 14 07:27:00 2026 GMT Not After : Apr 13 07:32:00 2027 GMT Subject: CN=245B6E13F5F02DA55457185DD997C6F032DF5AFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c2:18:91:34:cf:db:fb:3a:5b:a6:28:78:9c: 84:ca:e7:e1:1e:f0:54:a6:0c:55:85:f1:cb:fd:3a: bf:81:28:74:09:f7:b6:84:4f:27:2c:d3:51:03:df: 65:2b:94:ac:14:c9:f5:fa:1a:22:6e:f8:3d:33:17: ca:da:43:a9:e5:05:47:ed:32:e5:5e:b4:bc:db:3d: 7d:af:4e:96:14:fc:55:e4:61:eb:c0:1a:ef:0e:18: 16:73:34:60:a3:f0:e5:6b:31:60:dc:32:7c:11:81: c9:b3:4b:73:1b:94:9a:e3:9d:dd:2e:11:17:14:d1: 44:d7:c7:a3:80:78:ae:b6:ab:6d:fe:97:f4:de:59: 76:ef:0e:6f:ca:41:fb:d8:8f:56:9f:20:d2:57:c4: fd:85:ca:71:fd:34:98:d2:d7:30:97:3f:93:e1:ff: a4:58:2f:f7:a5:92:f0:26:be:37:c3:82:ed:ed:51: 18:bd:fb:24:2e:3f:c8:35:7c:87:9c:f1:6f:3f:ca: 27:e3:c5:bd:3b:97:1b:34:b0:89:55:36:14:bb:b6: 09:de:e2:42:4a:f5:8b:bb:a1:bf:bc:70:17:2b:20: 98:f9:43:e7:24:0d:2e:54:56:31:c5:32:8d:59:76: 8f:9a:89:06:16:a2:26:8e:a6:1e:b9:dc:2b:c6:cd: 68:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5B:6E:13:F5:F0:2D:A5:54:57:18:5D:D9:97:C6:F0:32:DF:5A:FD X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3230352e3235322e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.205.252.0/22 Signature Algorithm: sha256WithRSAEncryption b6:b7:58:e6:89:cf:17:07:78:d8:9c:02:fd:91:41:ae:a4:c8: fa:46:65:d8:9b:b1:6a:e0:c0:56:3d:90:64:38:ff:2d:71:0a: 99:50:28:7e:b2:c4:74:fc:7c:a0:a5:1f:d4:49:db:1b:9c:2b: 11:91:36:24:44:ae:72:20:be:2c:70:da:c4:cc:b7:69:fe:b7: 98:d5:21:bf:22:2e:ce:f3:0d:a9:6e:28:dd:77:3e:c9:c8:f6: 18:6b:8f:c7:f6:ae:42:48:84:1d:6e:dc:a1:3b:0b:13:81:fa: f4:22:aa:1f:30:4a:1b:e1:1f:ea:15:1e:b0:01:7a:80:0d:8f: 01:67:e7:63:f7:c3:b3:5b:3a:63:01:0a:03:a9:89:e5:b7:48: 4c:e0:26:3e:54:41:5d:04:ef:b3:66:e0:a0:1b:dc:35:ae:20: c8:3d:c6:d5:f5:4e:7c:e7:65:58:61:53:21:4d:b7:cd:ad:4d: 49:56:23:43:b5:18:04:9c:fa:bb:81:62:8f:5d:92:a8:32:9e: 65:ef:25:4b:e6:d9:8d:42:0d:b7:5f:91:85:4d:fa:22:82:e8: 24:5a:88:8b:0c:30:54:36:3d:41:4d:a1:90:77:c3:5c:65:9d: 0b:55:d9:da:d2:1d:09:ff:f7:65:a0:83:47:70:8e:e5:85:26: a2:82:e4:a2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVa4klc3+FjXsrUX4OUok07eDnZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTQwNzI3MDBaFw0yNzA0MTMwNzMyMDBaMDMxMTAvBgNV BAMTKDI0NUI2RTEzRjVGMDJEQTU1NDU3MTg1REQ5OTdDNkYwMzJERjVBRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswhiRNM/b+zpbpih4nITK5+Ee 8FSmDFWF8cv9Or+BKHQJ97aETycs01ED32UrlKwUyfX6GiJu+D0zF8raQ6nlBUft MuVetLzbPX2vTpYU/FXkYevAGu8OGBZzNGCj8OVrMWDcMnwRgcmzS3MblJrjnd0u ERcU0UTXx6OAeK62q23+l/TeWXbvDm/KQfvYj1afINJXxP2FynH9NJjS1zCXP5Ph /6RYL/elkvAmvjfDgu3tURi9+yQuP8g1fIec8W8/yifjxb07lxs0sIlVNhS7tgne 4kJK9Yu7ob+8cBcrIJj5Q+ckDS5UVjHFMo1Zdo+aiQYWoiaOph653CvGzWiVAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUJFtuE/XwLaVUVxhd2ZfG8DLfWv0wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDc4NTc5NS8wLzMxMzAzMzJlMzIz MDM1MmUzMjM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfN/DANBgkqhkiG9w0BAQsFAAOCAQEAtrdY5onPFwd42JwC/ZFBrqTI +kZl2JuxauDAVj2QZDj/LXEKmVAofrLEdPx8oKUf1EnbG5wrEZE2JESuciC+LHDa xMy3af63mNUhvyIuzvMNqW4o3Xc+ycj2GGuPx/auQkiEHW7coTsLE4H69CKqHzBK G+Ef6hUesAF6gA2PAWfnY/fDs1s6YwEKA6mJ5bdITOAmPlRBXQTvs2bgoBvcNa4g yD3G1fVOfOdlWGFTIU23za1NSVYjQ7UYBJz6u4Fij12SqDKeZe8lS+bZjUINt1+R hU36IoLoJFqIiwwwVDY9QU2hkHfDXGWdC1XZ2tIdCf/3ZaCDR3CO5YUmooLkog== -----END CERTIFICATE-----Generated at Fri Apr 17 01:49:20 2026 by rpki-client