$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034383337.roa File: 3130332e34302e31322e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: hbtRgIS1u/fNB9ZGYkTlDM91pfGBBv5fpAuTLPIVrmQ= Subject key identifier: D3:D4:1D:51:99:3C:13:37:66:38:F7:15:77:65:C6:2E:B3:C2:FE:B1 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 5E5A806B4DD3BF549CA441F9910E4A27FD16F126 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034383337.roa Signing time: Tue 14 Apr 2026 07:34:10 +0000 ROA not before: Tue 14 Apr 2026 07:29:10 +0000 ROA not after: Tue 13 Apr 2027 07:34:10 +0000 asID: 4837 IP address blocks: 103.40.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 02:49:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5a:80:6b:4d:d3:bf:54:9c:a4:41:f9:91:0e:4a:27:fd:16:f1:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 14 07:29:10 2026 GMT Not After : Apr 13 07:34:10 2027 GMT Subject: CN=D3D41D51993C13376638F7157765C62EB3C2FEB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:be:02:56:45:62:53:7a:46:21:34:66:c6:15: d7:e3:95:d1:77:9f:fb:fd:72:c6:7c:81:a3:51:62: 1b:b1:2f:02:2e:c5:dd:ec:ca:04:03:79:ac:41:5c: f7:1b:d2:9f:e4:cf:65:dd:3d:ad:9a:7c:d1:ac:e9: 43:99:11:64:b5:fe:df:c9:3a:a2:f8:f9:8b:32:44: 59:d5:20:65:ef:2f:c1:21:b6:5b:38:26:8a:5e:89: b2:a6:dd:79:f9:5b:8e:75:45:ac:01:64:5c:c8:d6: 82:90:42:41:08:f9:49:0b:28:5b:5f:df:06:a5:8a: ec:3b:50:de:8c:07:50:08:96:fc:05:ad:da:92:ea: 5b:b3:10:b9:9c:32:57:72:7d:0b:fa:ca:f4:aa:e2: df:d1:d1:0d:d2:20:c4:df:9a:bd:03:3d:db:de:2c: 35:17:c8:12:57:51:cb:db:fb:c8:4d:27:69:44:a6: b9:5a:f3:62:81:32:db:4f:df:03:e4:fc:94:35:a4: 3f:d3:7a:a0:f3:fe:d2:40:e6:61:c1:60:df:f6:b0: d1:df:a9:2e:5d:9d:ba:a3:18:2c:d3:91:4c:34:fc: 19:09:6c:ee:37:d3:73:ea:23:ef:10:46:7b:08:ff: 3f:71:37:39:56:d9:26:b8:7a:c0:6f:39:a2:33:55: f2:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D4:1D:51:99:3C:13:37:66:38:F7:15:77:65:C6:2E:B3:C2:FE:B1 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.12.0/22 Signature Algorithm: sha256WithRSAEncryption 61:d0:09:aa:64:6b:16:17:b5:63:4f:ce:2c:b7:52:76:e4:1b: 37:89:cd:5a:26:a9:72:bf:68:f2:78:f1:33:67:48:6c:13:da: 6b:5e:25:71:f1:fd:ca:ab:2d:47:dc:11:15:91:5e:07:a7:2a: 38:22:3d:5b:69:92:16:48:9c:a8:e1:d2:ec:5d:49:94:73:a4: e3:1c:9a:6e:9e:80:4d:d2:d6:09:ab:0d:33:09:6e:01:6a:85: a5:aa:25:a0:e3:d5:f9:18:56:33:f1:df:87:d4:70:50:5f:bb: 27:13:33:da:26:c6:11:87:fc:2b:7b:af:57:63:fc:7e:4d:b7: 3d:f8:87:55:ed:a8:63:ea:e9:78:ed:e9:e5:ed:b4:9b:b8:85: 1e:f5:55:44:ce:a9:d6:11:f3:f4:5e:3e:99:bb:57:36:68:e5: 33:20:74:b7:43:0c:05:f9:7b:1b:86:00:94:bb:ab:a8:b7:e9: 7a:48:f6:80:8f:07:3c:28:3a:a8:92:6f:90:ff:9f:53:50:2b: 00:9f:3b:f2:42:76:38:1b:1b:8b:ba:ab:29:a7:9f:a0:80:68: 82:97:ec:8a:e8:b1:a9:50:63:4a:94:2b:0e:a6:c6:65:0f:21: 70:33:d7:48:ba:7d:d9:6a:4a:0f:7b:de:49:70:02:71:9d:09: 1e:5c:f3:e0 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUXlqAa03Tv1ScpEH5kQ5KJ/0W8SYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MTQwNzI5MTBaFw0yNzA0MTMwNzM0MTBaMDMxMTAvBgNV BAMTKEQzRDQxRDUxOTkzQzEzMzc2NjM4RjcxNTc3NjVDNjJFQjNDMkZFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvgJWRWJTekYhNGbGFdfjldF3 n/v9csZ8gaNRYhuxLwIuxd3sygQDeaxBXPcb0p/kz2XdPa2afNGs6UOZEWS1/t/J OqL4+YsyRFnVIGXvL8Ehtls4JopeibKm3Xn5W451RawBZFzI1oKQQkEI+UkLKFtf 3waliuw7UN6MB1AIlvwFrdqS6luzELmcMldyfQv6yvSq4t/R0Q3SIMTfmr0DPdve LDUXyBJXUcvb+8hNJ2lEprla82KBMttP3wPk/JQ1pD/TeqDz/tJA5mHBYN/2sNHf qS5dnbqjGCzTkUw0/BkJbO4303PqI+8QRnsI/z9xNzlW2Sa4esBvOaIzVfKNAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU09QdUZk8EzdmOPcVd2XGLrPC/rEwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzNDMw MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnKAwwDQYJKoZIhvcNAQELBQADggEBAGHQCapkaxYXtWNPziy3UnbkGzeJzVom qXK/aPJ48TNnSGwT2mteJXHx/cqrLUfcERWRXgenKjgiPVtpkhZInKjh0uxdSZRz pOMcmm6egE3S1gmrDTMJbgFqhaWqJaDj1fkYVjPx34fUcFBfuycTM9omxhGH/Ct7 r1dj/H5Ntz34h1XtqGPq6Xjt6eXttJu4hR71VUTOqdYR8/RePpm7VzZo5TMgdLdD DAX5exuGAJS7q6i36XpI9oCPBzwoOqiSb5D/n1NQKwCfO/JCdjgbG4u6qymnn6CA aIKX7IrosalQY0qUKw6mxmUPIXAz10i6fdlqSg973klwAnGdCR5c8+A= -----END CERTIFICATE-----Generated at Fri Apr 17 17:13:52 2026 by rpki-client