$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa File: 3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa (raw, json) Hash identifier: 63AwH0JNDe88UgRiEZk11mXrDuOfakAl/Ic20VC4H+s= Subject key identifier: 96:B5:E3:E3:7F:B3:13:76:96:59:C0:13:C0:2F:97:66:AE:4B:0B:C4 Certificate issuer: /CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Certificate serial: 2DE792DD23D618AF1A462DE0ED41B3B26BC3520B Authority key identifier: 6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa Signing time: Wed 15 Apr 2026 07:22:56 +0000 ROA not before: Wed 15 Apr 2026 07:17:56 +0000 ROA not after: Wed 14 Apr 2027 07:22:56 +0000 asID: 55991 IP address blocks: 103.192.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 01:40:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e7:92:dd:23:d6:18:af:1a:46:2d:e0:ed:41:b3:b2:6b:c3:52:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6A45D8322C3648F91E212472F604CAFDBA7019BB Validity Not Before: Apr 15 07:17:56 2026 GMT Not After : Apr 14 07:22:56 2027 GMT Subject: CN=96B5E3E37FB313769659C013C02F9766AE4B0BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7b:e1:1b:29:87:45:76:14:8f:e8:0a:59:2a: fb:1f:7e:38:81:d9:64:67:a0:47:54:f7:e0:3b:49: 10:e9:cc:d9:44:03:08:ec:0b:0b:e4:93:e4:b6:f6: 16:0a:67:b0:00:de:92:2f:2e:c1:e0:bc:c0:9c:a4: bc:17:e0:44:6b:f9:15:91:7c:ef:5e:9b:a1:b2:17: cd:06:1a:7c:06:a6:45:d0:7f:0e:90:72:0b:e3:d7: 41:42:5e:4c:ed:5b:ff:45:53:11:7d:b8:89:a5:cf: c7:20:9f:5f:1f:0b:d3:64:b6:fd:e3:57:bb:4e:ee: 62:fc:3e:44:ba:98:89:94:d5:8d:97:e3:d3:3f:4f: ab:70:c2:6e:39:06:0d:23:d5:c2:56:1f:b7:b2:72: 11:f5:8e:1a:a0:39:1d:ca:fd:2e:d1:3f:aa:9f:b0: 77:4c:54:fd:14:2c:f3:42:12:bd:a7:75:58:a6:25: fe:f2:cf:d1:e3:3e:f4:5e:1f:a4:7e:33:6a:bf:11: 48:57:4a:46:75:fd:74:2a:1b:a0:93:87:db:78:74: eb:40:ce:38:63:67:da:c4:a0:48:55:1d:40:48:5a: 40:b7:80:4c:34:78:fe:c7:52:f5:1e:e4:74:79:00: e9:58:73:60:88:19:45:e0:47:9b:9e:d0:a6:95:3a: 7e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:B5:E3:E3:7F:B3:13:76:96:59:C0:13:C0:2F:97:66:AE:4B:0B:C4 X509v3 Authority Key Identifier: keyid:6A:45:D8:32:2C:36:48:F9:1E:21:24:72:F6:04:CA:FD:BA:70:19:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/6A45D8322C3648F91E212472F604CAFDBA7019BB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A45D8322C3648F91E212472F604CAFDBA7019BB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265289217/0/3130332e3139322e3231302e302f32342d3234203d3e203535393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.192.210.0/24 Signature Algorithm: sha256WithRSAEncryption 67:2c:ff:2d:cc:79:30:2b:80:5e:87:cb:ed:5d:ab:ae:20:2e: cb:e3:cc:73:1e:e1:dc:e8:3e:b5:47:7f:3e:28:2f:88:a3:43: 78:e8:59:db:f6:cc:ae:aa:f4:12:41:df:42:b3:96:dd:5c:20: 31:61:eb:34:e7:71:3d:41:95:d5:0e:51:f0:5a:7d:04:b1:d5: 2d:07:9d:50:41:a9:2f:be:c7:41:6e:16:0c:72:76:d4:68:3c: aa:b9:17:b0:52:4c:e1:2f:45:da:a1:05:3d:ea:7d:db:6a:b6: 33:d9:69:4f:3b:4e:92:ed:5e:71:79:d9:66:dd:42:46:39:70: 1a:7a:5e:94:23:ad:2b:c5:ee:d9:73:7c:d6:af:35:76:ca:21: d9:14:aa:c6:9a:b2:9d:a8:ce:30:a5:49:80:dc:80:b8:56:ce: 72:b3:74:5b:9f:64:76:92:44:76:40:79:fb:a4:24:3d:ee:85: a7:e7:f2:14:b3:72:0f:97:0a:25:4c:f5:0e:5a:15:8b:1a:0f: 8a:25:c9:c5:bf:93:77:0c:7d:ed:f5:03:4a:46:47:75:78:13: 83:4c:7f:de:f3:50:e5:10:df:8e:7d:30:f4:69:6b:07:c7:34: f0:a3:15:e7:13:1c:b4:c3:fd:bb:84:8d:93:6d:a5:5e:8a:56: 52:de:a7:dd -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIULeeS3SPWGK8aRi3g7UGzsmvDUgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRC QTcwMTlCQjAeFw0yNjA0MTUwNzE3NTZaFw0yNzA0MTQwNzIyNTZaMDMxMTAvBgNV BAMTKDk2QjVFM0UzN0ZCMzEzNzY5NjU5QzAxM0MwMkY5NzY2QUU0QjBCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCee+EbKYdFdhSP6ApZKvsffjiB 2WRnoEdU9+A7SRDpzNlEAwjsCwvkk+S29hYKZ7AA3pIvLsHgvMCcpLwX4ERr+RWR fO9em6GyF80GGnwGpkXQfw6Qcgvj10FCXkztW/9FUxF9uImlz8cgn18fC9Nktv3j V7tO7mL8PkS6mImU1Y2X49M/T6twwm45Bg0j1cJWH7eychH1jhqgOR3K/S7RP6qf sHdMVP0ULPNCEr2ndVimJf7yz9HjPvReH6R+M2q/EUhXSkZ1/XQqG6CTh9t4dOtA zjhjZ9rEoEhVHUBIWkC3gEw0eP7HUvUe5HR5AOlYc2CIGUXgR5ue0KaVOn7xAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUlrXj43+zE3aWWcATwC+XZq5LC8QwHwYDVR0j BBgwFoAUakXYMiw2SPkeISRy9gTK/bpwGbswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTI4OTIxNy8wLzZBNDVEODMyMkMzNjQ4RjkxRTIxMjQ3MkY2MDRD QUZEQkE3MDE5QkIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkE0NUQ4MzIyQzM2NDhGOTFFMjEyNDcyRjYwNENBRkRCQTcwMTlCQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyODkyMTcvMC8zMTMwMzMyZTMx MzkzMjJlMzIzMTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfA0jANBgkqhkiG9w0BAQsFAAOCAQEAZyz/Lcx5MCuAXofL7V2r riAuy+PMcx7h3Og+tUd/PigviKNDeOhZ2/bMrqr0EkHfQrOW3VwgMWHrNOdxPUGV 1Q5R8Fp9BLHVLQedUEGpL77HQW4WDHJ21Gg8qrkXsFJM4S9F2qEFPep922q2M9lp TztOku1ecXnZZt1CRjlwGnpelCOtK8Xu2XN81q81dsoh2RSqxpqynajOMKVJgNyA uFbOcrN0W59kdpJEdkB5+6QkPe6Fp+fyFLNyD5cKJUz1DloVixoPiiXJxb+Tdwx9 7fUDSkZHdXgTg0x/3vNQ5RDfjn0w9GlrB8c08KMV5xMctMP9u4SNk22lXopWUt6n 3Q== -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:36 2026 by rpki-client