$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3135372e3231322e302f32332d3233203d3e2030.roa File: 3130332e3135372e3231322e302f32332d3233203d3e2030.roa (raw, json) Hash identifier: 8m0e57u2wVKxRF/YZ3RBUb/FB78IzUONuz1gdm7u3Aw= Subject key identifier: 0F:EF:82:46:55:0B:04:0A:89:85:88:02:22:66:9A:61:89:16:F7:30 Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 2E369749704963B204C78D1BBFEB636565A33D42 Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3135372e3231322e302f32332d3233203d3e2030.roa Signing time: Wed 15 Apr 2026 07:27:15 +0000 ROA not before: Wed 15 Apr 2026 07:22:15 +0000 ROA not after: Wed 14 Apr 2027 07:27:15 +0000 asID: 0 IP address blocks: 103.157.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 05:43:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:36:97:49:70:49:63:b2:04:c7:8d:1b:bf:eb:63:65:65:a3:3d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Apr 15 07:22:15 2026 GMT Not After : Apr 14 07:27:15 2027 GMT Subject: CN=0FEF8246550B040A8985880222669A618916F730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a2:57:9f:bc:cd:2c:29:63:54:9d:4d:91:79: 06:24:3b:3b:3b:7e:f2:13:0b:fb:c3:53:c6:b6:b0: 15:87:ce:e2:4a:0d:25:19:34:1f:61:c4:53:57:fb: 01:65:61:16:41:8b:0a:98:c1:bc:eb:22:84:d7:60: 45:e7:ab:35:30:5e:df:ff:c4:e9:fb:a9:25:e8:b7: 9d:5a:2d:09:9f:7b:48:f5:37:ca:fa:40:05:03:01: 01:10:f9:ad:d3:52:a0:1d:a3:9e:5d:fe:00:cf:d6: ae:b1:7e:fd:31:8c:35:13:84:ac:5b:6d:9f:99:09: 88:0e:0e:85:f4:9a:e3:56:07:41:e7:03:29:6b:a7: 21:ce:34:98:ff:9a:5d:d9:99:41:ab:0a:b1:37:de: 65:b4:3b:26:a1:74:eb:e8:b9:c0:bf:c8:3e:18:7f: c4:d9:23:32:c3:cf:ca:d1:27:9e:8d:dc:91:c9:f0: 0c:ea:80:b7:a6:41:d2:c1:42:8c:6f:9f:4e:f7:8d: fb:a3:4d:8c:90:10:7c:b7:51:8d:8c:f5:65:d4:34: 67:56:97:5b:3c:92:d2:d7:c0:c9:64:68:0e:5d:db: 4a:f5:60:bb:4a:d5:fc:3c:13:21:54:02:eb:39:54: 77:24:ee:e5:fc:d8:1e:ac:1c:5d:f3:51:d8:c1:56: 56:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:EF:82:46:55:0B:04:0A:89:85:88:02:22:66:9A:61:89:16:F7:30 X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3135372e3231322e302f32332d3233203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.212.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:8a:a1:4b:a7:00:7f:5c:1b:17:cf:cd:4c:dc:a4:bb:c9:57: be:75:dc:4d:08:b3:b2:df:55:5e:48:8e:14:7f:3f:3b:1a:78: 93:0d:35:f7:30:aa:ca:0e:d3:59:3e:44:e4:e5:46:8e:56:fa: bc:f3:46:1e:b6:81:14:07:06:23:4c:ac:f8:49:34:22:b2:bd: 2c:e3:cb:14:40:5b:3f:06:bd:02:51:3c:c7:22:4b:77:6a:72: 35:8f:57:77:06:db:ea:34:73:ee:30:c2:ce:9e:a2:30:85:54: d1:e7:f3:98:54:9d:64:21:da:49:5e:0c:9c:5d:c9:86:2c:10: 89:62:1f:c8:cb:d8:b8:ca:98:ad:e7:01:2d:ce:0d:03:22:f0: 57:25:4f:97:45:cb:71:e1:65:f5:79:02:66:88:43:dd:b8:61: 5e:e0:a4:7a:12:49:f0:19:b2:3f:8c:85:b1:b9:d6:77:c7:40: 77:76:5a:b9:b7:32:a7:fb:dc:ab:2a:10:12:10:f3:c5:32:fd: 6b:c9:53:bb:fe:f7:32:d2:7e:bb:8a:bb:65:61:03:e0:3a:b1: db:23:1c:cd:be:1a:5d:03:f0:89:c6:64:75:f2:29:ee:b6:f5: ec:67:d6:f9:a7:55:c8:8f:c9:66:b2:7c:b7:8b:91:f7:8a:1d: b3:c0:e9:33 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIULjaXSXBJY7IEx40bv+tjZWWjPUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjA0MTUwNzIyMTVaFw0yNzA0MTQwNzI3MTVaMDMxMTAvBgNV BAMTKDBGRUY4MjQ2NTUwQjA0MEE4OTg1ODgwMjIyNjY5QTYxODkxNkY3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDColefvM0sKWNUnU2ReQYkOzs7 fvITC/vDU8a2sBWHzuJKDSUZNB9hxFNX+wFlYRZBiwqYwbzrIoTXYEXnqzUwXt// xOn7qSXot51aLQmfe0j1N8r6QAUDAQEQ+a3TUqAdo55d/gDP1q6xfv0xjDUThKxb bZ+ZCYgODoX0muNWB0HnAylrpyHONJj/ml3ZmUGrCrE33mW0OyahdOvoucC/yD4Y f8TZIzLDz8rRJ56N3JHJ8AzqgLemQdLBQoxvn073jfujTYyQEHy3UY2M9WXUNGdW l1s8ktLXwMlkaA5d20r1YLtK1fw8EyFUAus5VHck7uX82B6sHF3zUdjBVlaFAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUD++CRlULBAqJhYgCImaaYYkW9zAwHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1Mjg5MjE3LzAvMzEzMDMzMmUzMTM1 MzcyZTMyMzEzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB Z53UMA0GCSqGSIb3DQEBCwUAA4IBAQBMiqFLpwB/XBsXz81M3KS7yVe+ddxNCLOy 31VeSI4Ufz87GniTDTX3MKrKDtNZPkTk5UaOVvq880YetoEUBwYjTKz4STQisr0s 48sUQFs/Br0CUTzHIkt3anI1j1d3BtvqNHPuMMLOnqIwhVTR5/OYVJ1kIdpJXgyc XcmGLBCJYh/Iy9i4ypit5wEtzg0DIvBXJU+XRctx4WX1eQJmiEPduGFe4KR6Eknw GbI/jIWxudZ3x0B3dlq5tzKn+9yrKhASEPPFMv1ryVO7/vcy0n67irtlYQPgOrHb IxzNvhpdA/CJxmR18inutvXsZ9b5p1XIj8lmsny3i5H3ih2zwOkz -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:36 2026 by rpki-client