$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa File: 3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa (raw, json) Hash identifier: JA+7kTjp2WRlf/AXz0FiSp2zY6KqTrgLwGsSbayo5U8= Subject key identifier: 1C:67:0E:E2:F5:97:B8:C7:0B:FD:F9:54:75:35:50:FC:D4:57:46:0C Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 05149A37CB52D3310EBE3A07C8D6271E30B057F7 Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa Signing time: Wed 15 Apr 2026 07:27:15 +0000 ROA not before: Wed 15 Apr 2026 07:22:15 +0000 ROA not after: Wed 14 Apr 2027 07:27:15 +0000 asID: 55989 IP address blocks: 103.157.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:14:9a:37:cb:52:d3:31:0e:be:3a:07:c8:d6:27:1e:30:b0:57:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Apr 15 07:22:15 2026 GMT Not After : Apr 14 07:27:15 2027 GMT Subject: CN=1C670EE2F597B8C70BFDF954753550FCD457460C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:f5:07:d4:76:e0:16:e1:57:e8:cb:58:32: 34:73:08:e4:90:a5:d1:cc:7f:c4:e1:50:47:e7:92: a3:37:20:0c:ae:5a:f7:8a:90:c5:fd:12:18:04:b8: 65:14:3e:13:de:78:dd:a7:34:ed:4e:25:10:b0:ac: 38:7a:cd:4b:64:4a:80:57:10:53:50:7d:10:5c:48: 98:44:3e:e1:60:f7:cc:b9:fe:d4:71:ce:4f:bb:54: 23:c4:6e:90:42:0d:64:65:84:31:00:62:b4:2e:05: ed:f9:89:63:ea:d0:ed:bc:e2:9e:50:46:28:d4:f7: f2:97:04:eb:22:36:23:db:20:e4:c4:8c:6f:19:4a: 66:26:f3:34:3d:7d:d2:1a:2e:52:5e:24:74:c0:59: 16:fa:6d:84:dd:91:ae:de:09:cd:61:82:85:78:79: 94:38:1a:12:22:01:f4:8d:62:1f:b7:41:78:cf:6a: b0:37:3b:2e:a7:8f:78:73:d5:e6:e8:c4:14:67:5f: 03:bf:9d:33:6e:ad:8c:5f:eb:f7:0d:b6:a4:62:2c: 8f:76:94:6d:c2:e4:88:1a:c0:4f:81:b1:1a:cc:95: 05:9a:7f:cc:e5:4c:37:93:5e:f2:c0:84:0c:fd:13: bf:70:ee:c8:b5:ff:c1:96:d0:31:e1:ec:22:2a:f7: 9e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:67:0E:E2:F5:97:B8:C7:0B:FD:F9:54:75:35:50:FC:D4:57:46:0C X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3135372e3231332e302f32342d3234203d3e203535393839.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.157.213.0/24 Signature Algorithm: sha256WithRSAEncryption 31:f2:73:1e:ea:eb:d1:4d:9a:15:b0:9a:65:67:b5:25:e9:6a: f0:a5:6c:ce:d0:a0:53:57:97:49:d3:16:cb:72:68:31:7b:99: 60:8a:78:ab:86:b9:b3:dc:e7:9a:fa:ec:c5:eb:99:a2:20:5c: 4c:c1:10:f4:a2:84:d6:e3:fc:ed:e7:ed:ab:e9:58:5e:5a:ce: a8:48:f8:c3:da:07:d8:a0:1c:a9:11:10:c1:c8:0b:03:e9:3b: 00:ab:52:74:da:a1:cb:08:f7:57:42:48:59:0a:13:60:45:a3: 5e:e8:21:bf:51:82:df:24:df:f0:d7:1b:ad:f3:1e:db:db:b4: e2:11:69:d0:ef:c5:08:88:ef:c4:e1:e5:c0:14:06:8a:d3:e6: 0c:8d:b0:3b:b8:b2:1a:b4:6f:58:eb:8e:3b:d6:f7:9c:5b:71: cf:60:d7:74:d4:48:75:26:93:46:e5:22:1e:a7:e5:46:1c:cd: 66:24:b9:32:69:e2:72:8f:bb:79:cd:ac:f2:4f:69:0f:cd:30: c6:0d:38:92:cf:69:f2:d0:c5:a0:a2:91:1d:bc:83:32:59:3d: c7:8d:65:e2:ec:0c:f2:f8:64:3a:1e:6e:9b:72:20:f7:62:59: 3e:f8:ea:7a:8a:ea:9b:fd:68:60:4e:2c:04:c5:78:50:42:b4: c6:bc:df:6a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBRSaN8tS0zEOvjoHyNYnHjCwV/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjA0MTUwNzIyMTVaFw0yNzA0MTQwNzI3MTVaMDMxMTAvBgNV BAMTKDFDNjcwRUUyRjU5N0I4QzcwQkZERjk1NDc1MzU1MEZDRDQ1NzQ2MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCogfUH1HbgFuFX6MtYMjRzCOSQ pdHMf8ThUEfnkqM3IAyuWveKkMX9EhgEuGUUPhPeeN2nNO1OJRCwrDh6zUtkSoBX EFNQfRBcSJhEPuFg98y5/tRxzk+7VCPEbpBCDWRlhDEAYrQuBe35iWPq0O284p5Q RijU9/KXBOsiNiPbIOTEjG8ZSmYm8zQ9fdIaLlJeJHTAWRb6bYTdka7eCc1hgoV4 eZQ4GhIiAfSNYh+3QXjParA3Oy6nj3hz1eboxBRnXwO/nTNurYxf6/cNtqRiLI92 lG3C5IgawE+BsRrMlQWaf8zlTDeTXvLAhAz9E79w7si1/8GW0DHh7CIq954vAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUHGcO4vWXuMcL/flUdTVQ/NRXRgwwHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC8zMTMwMzMyZTMx MzUzNzJlMzIzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzgzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGed1TANBgkqhkiG9w0BAQsFAAOCAQEAMfJzHurr0U2aFbCaZWe1 Jelq8KVsztCgU1eXSdMWy3JoMXuZYIp4q4a5s9znmvrsxeuZoiBcTMEQ9KKE1uP8 7eftq+lYXlrOqEj4w9oH2KAcqREQwcgLA+k7AKtSdNqhywj3V0JIWQoTYEWjXugh v1GC3yTf8NcbrfMe29u04hFp0O/FCIjvxOHlwBQGitPmDI2wO7iyGrRvWOuOO9b3 nFtxz2DXdNRIdSaTRuUiHqflRhzNZiS5Mmnico+7ec2s8k9pD80wxg04ks9p8tDF oKKRHbyDMlk9x41l4uwM8vhkOh5um3Ig92JZPvjqeorqm/1oYE4sBMV4UEK0xrzf ag== -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:51 2026 by rpki-client