$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e38382e302f32322d3232203d3e2030.roa File: 3130332e37372e38382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: fR4BJhyIgU9EzBWn21D2hiiwP5vaUp6WzpNrB0SQRaY= Subject key identifier: 2A:03:23:5F:2F:29:1A:EC:31:E0:FF:13:58:FB:FF:5C:45:7C:02:8B Certificate issuer: /CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Certificate serial: 18ED98B4945A466AF41386BF4E8A4DE9B082C6B5 Authority key identifier: D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e38382e302f32322d3232203d3e2030.roa Signing time: Thu 16 Apr 2026 07:09:23 +0000 ROA not before: Thu 16 Apr 2026 07:04:23 +0000 ROA not after: Thu 15 Apr 2027 07:09:23 +0000 asID: 0 IP address blocks: 103.77.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 13:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ed:98:b4:94:5a:46:6a:f4:13:86:bf:4e:8a:4d:e9:b0:82:c6:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D9EB5C6DC17682949F5243587DA38740C3EEA953 Validity Not Before: Apr 16 07:04:23 2026 GMT Not After : Apr 15 07:09:23 2027 GMT Subject: CN=2A03235F2F291AEC31E0FF1358FBFF5C457C028B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cc:c6:95:d5:f8:4a:35:dc:32:76:c0:03:b6: 82:ed:da:85:30:9f:57:dc:38:26:f8:9b:ef:f0:22: c6:a1:9d:71:8a:86:a1:c6:72:85:22:46:65:3f:1e: cf:ed:94:5e:9a:48:1b:4b:e7:20:b0:69:57:e6:3d: 46:96:35:b9:b3:cf:78:da:a0:5f:a2:27:82:a4:21: e8:d1:c2:2b:c2:6f:ae:a1:ed:89:3d:ee:30:ea:9a: 13:f3:cb:f9:b0:26:65:2a:e1:7a:a4:d7:ae:62:0b: d8:a7:cf:00:a9:fd:c0:fd:85:57:5b:75:3b:ca:10: 29:0b:af:4b:ec:77:89:44:4a:cf:f0:3c:62:49:de: ee:b4:e3:61:65:a1:e4:d4:7c:e3:ca:0d:52:c2:13: 07:54:56:d9:25:f5:e4:62:aa:0b:47:ac:b6:b2:82: 43:52:f2:21:91:fe:d6:6d:1f:69:27:6f:d0:9f:9f: 16:d0:6c:18:05:80:68:25:f8:d4:6d:09:5d:d1:f1: ab:06:05:46:e9:04:1f:79:09:16:f0:29:c2:86:c1: 85:c2:1b:d6:cb:5d:e8:9a:57:05:14:22:ee:04:09: e9:07:64:d9:ef:ef:1d:96:6a:df:cb:ba:09:58:38: ca:6e:75:4f:23:b8:ef:c4:ee:a3:56:e3:c3:94:19: a7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:03:23:5F:2F:29:1A:EC:31:E0:FF:13:58:FB:FF:5C:45:7C:02:8B X509v3 Authority Key Identifier: keyid:D9:EB:5C:6D:C1:76:82:94:9F:52:43:58:7D:A3:87:40:C3:EE:A9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/D9EB5C6DC17682949F5243587DA38740C3EEA953.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D9EB5C6DC17682949F5243587DA38740C3EEA953.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346864641/0/3130332e37372e38382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.77.88.0/22 Signature Algorithm: sha256WithRSAEncryption 09:e1:64:01:31:ce:74:00:81:8b:ae:71:5f:8c:de:e3:a9:6a: 18:ba:06:94:de:2c:ac:33:cf:35:3d:11:04:a8:b3:4c:2e:81: bd:13:54:67:68:87:79:89:d8:1d:a9:67:1b:91:03:44:31:a2: f1:2f:93:d2:e9:3d:28:71:7e:1f:8d:60:f5:e5:cc:6c:b2:46: 0b:f5:2a:06:0f:44:b7:32:e4:5d:54:a4:26:20:db:1e:0a:70: 76:ae:85:fc:bd:6a:c3:50:9c:52:27:84:72:b5:45:63:57:9d: b4:19:18:7c:49:ba:55:72:8d:2b:42:e3:ff:7d:26:c1:f6:a5: c5:6a:9b:69:e8:e6:ae:a0:e2:d9:ad:91:b1:c2:64:e6:a7:30: ef:15:1c:a4:96:c7:27:23:f2:ac:06:53:7e:3a:47:1a:e7:69: 92:2c:f1:75:15:59:c4:69:77:e0:41:2b:dc:6f:c0:f0:1f:5e: 32:e7:dd:6a:2c:8e:eb:23:a4:3b:59:42:68:08:77:24:07:ef: e8:71:b7:40:89:07:3c:cf:ea:ca:5a:51:87:6d:93:5d:32:8b: 93:1a:74:fc:e4:59:bf:5e:63:43:90:ec:a7:13:08:d3:cf:18: 59:ec:85:b6:9a:16:e3:50:df:f9:e8:f1:a5:3b:30:09:2c:71: 51:9c:94:09 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUGO2YtJRaRmr0E4a/TopN6bCCxrUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBD M0VFQTk1MzAeFw0yNjA0MTYwNzA0MjNaFw0yNzA0MTUwNzA5MjNaMDMxMTAvBgNV BAMTKDJBMDMyMzVGMkYyOTFBRUMzMUUwRkYxMzU4RkJGRjVDNDU3QzAyOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSzMaV1fhKNdwydsADtoLt2oUw n1fcOCb4m+/wIsahnXGKhqHGcoUiRmU/Hs/tlF6aSBtL5yCwaVfmPUaWNbmzz3ja oF+iJ4KkIejRwivCb66h7Yk97jDqmhPzy/mwJmUq4Xqk165iC9inzwCp/cD9hVdb dTvKECkLr0vsd4lESs/wPGJJ3u6042FloeTUfOPKDVLCEwdUVtkl9eRiqgtHrLay gkNS8iGR/tZtH2knb9CfnxbQbBgFgGgl+NRtCV3R8asGBUbpBB95CRbwKcKGwYXC G9bLXeiaVwUUIu4ECekHZNnv7x2Wat/LuglYOMpudU8juO/E7qNW48OUGadJAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUKgMjXy8pGuwx4P8TWPv/XEV8AoswHwYDVR0j BBgwFoAU2etcbcF2gpSfUkNYfaOHQMPuqVMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njg2NDY0MS8wL0Q5RUI1QzZEQzE3NjgyOTQ5RjUyNDM1ODdEQTM4 NzQwQzNFRUE5NTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDlFQjVDNkRDMTc2ODI5NDlGNTI0MzU4N0RBMzg3NDBDM0VFQTk1My5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2ODY0NjQxLzAvMzEzMDMzMmUzNzM3 MmUzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnTVgw DQYJKoZIhvcNAQELBQADggEBAAnhZAExznQAgYuucV+M3uOpahi6BpTeLKwzzzU9 EQSos0wugb0TVGdoh3mJ2B2pZxuRA0QxovEvk9LpPShxfh+NYPXlzGyyRgv1KgYP RLcy5F1UpCYg2x4KcHauhfy9asNQnFInhHK1RWNXnbQZGHxJulVyjStC4/99JsH2 pcVqm2no5q6g4tmtkbHCZOanMO8VHKSWxycj8qwGU346RxrnaZIs8XUVWcRpd+BB K9xvwPAfXjLn3WosjusjpDtZQmgIdyQH7+hxt0CJBzzP6spaUYdtk10yi5MadPzk Wb9eY0OQ7KcTCNPPGFnshbaaFuNQ3/no8aU7MAkscVGclAk= -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:44 2026 by rpki-client