$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3136312e3235352e302f32342d3234203d3e20313436373732.roa File: 3130332e3136312e3235352e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: gOtBt5dxmbqpIh35k3uBcEVYq2I9ADjt7aYmNTPxKwo= Subject key identifier: 3A:BE:5F:D9:91:14:9D:3A:F4:17:64:89:A5:7E:A7:58:08:E5:43:59 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 4B731F12AE51BB08CB6D6622D2F276B32FBE937B Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3136312e3235352e302f32342d3234203d3e20313436373732.roa Signing time: Thu 16 Apr 2026 04:06:43 +0000 ROA not before: Thu 16 Apr 2026 04:01:43 +0000 ROA not after: Thu 15 Apr 2027 04:06:43 +0000 asID: 146772 IP address blocks: 103.161.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:73:1f:12:ae:51:bb:08:cb:6d:66:22:d2:f2:76:b3:2f:be:93:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 16 04:01:43 2026 GMT Not After : Apr 15 04:06:43 2027 GMT Subject: CN=3ABE5FD991149D3AF4176489A57EA75808E54359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:00:0c:9c:bc:63:b6:50:06:e1:89:19:c9:75: 09:63:8d:9b:77:c0:87:ed:fb:73:23:e4:0e:4d:3c: 4d:84:83:50:91:ea:be:6a:f9:4a:24:31:9a:11:92: 39:0c:f4:98:5c:83:2e:cd:58:75:96:1d:84:51:db: 11:93:eb:72:f3:b1:75:3c:a8:85:32:8d:0f:72:13: 68:d6:66:32:c5:b8:3f:ab:96:48:53:6d:36:3d:4d: 79:76:bd:0d:0c:36:5f:58:a4:d9:dc:a4:b6:07:c3: be:8e:9c:60:96:52:f0:de:7a:18:3e:95:75:74:df: 1f:c7:65:b6:08:57:80:38:fc:f3:c5:b7:70:84:09: b0:ea:7b:08:b4:71:13:13:cb:b0:f7:22:9d:66:05: e0:9f:1c:94:4c:38:5b:85:2e:b1:d5:25:0f:12:c2: 72:b2:a4:44:67:70:f6:3f:2c:17:66:db:95:1b:32: a3:8d:18:91:fe:de:73:7e:86:26:03:b6:ac:fc:db: 6e:c0:ac:5a:a2:07:26:00:31:3c:5c:fc:3d:ae:fe: 61:a4:38:0b:0d:52:75:88:7c:5f:a5:1c:70:a1:19: 0f:c2:48:19:0b:71:62:b9:38:41:ca:05:db:fa:3b: 37:01:e9:85:cb:8a:90:ae:a4:a6:96:10:e6:0a:54: 4d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BE:5F:D9:91:14:9D:3A:F4:17:64:89:A5:7E:A7:58:08:E5:43:59 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3136312e3235352e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.161.255.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:b0:70:58:5d:af:f4:8d:fa:17:55:cc:da:40:4b:23:f5:ea: cd:f2:83:d5:08:b6:ea:56:f8:86:a2:f9:59:4b:8b:ab:cc:34: 85:d2:43:86:7b:b9:c2:76:10:35:3c:f2:e1:a8:64:17:e7:95: 9d:11:1c:12:ae:08:f0:52:85:f9:80:7b:07:e7:06:18:1b:9b: e3:8c:73:81:b4:71:d4:bb:75:ec:d7:40:95:14:fb:d7:e4:6b: 11:85:77:6a:bf:0e:54:6d:61:c9:d3:7a:ad:be:fa:dc:31:3a: 17:07:13:55:e5:bc:f4:b6:4f:22:35:bd:1c:0c:75:61:ec:de: ee:68:c6:5b:30:2c:a2:f9:7b:dd:26:e4:7e:4c:c2:c6:7a:7f: ca:bc:c4:3a:31:74:80:0d:c9:90:df:22:87:76:6a:6b:7e:4e: dc:f6:82:e7:b6:f6:ac:44:42:41:84:c9:56:13:99:9c:50:c8: b9:13:2f:45:ac:c2:38:66:a9:b7:50:54:7c:a5:dc:e2:0e:8f: f4:31:74:f3:23:13:67:56:96:48:55:39:1d:0c:a4:c0:b1:18: c0:fa:05:a2:db:21:45:4e:a2:6a:45:50:8f:2f:5a:48:a5:59: d8:7f:25:52:30:74:a0:50:b8:2d:d6:f7:de:83:de:41:53:f2: 0d:e5:91:77 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUS3MfEq5RuwjLbWYi0vJ2sy++k3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MTYwNDAxNDNaFw0yNzA0MTUwNDA2NDNaMDMxMTAvBgNV BAMTKDNBQkU1RkQ5OTExNDlEM0FGNDE3NjQ4OUE1N0VBNzU4MDhFNTQzNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYAAycvGO2UAbhiRnJdQljjZt3 wIft+3Mj5A5NPE2Eg1CR6r5q+UokMZoRkjkM9Jhcgy7NWHWWHYRR2xGT63LzsXU8 qIUyjQ9yE2jWZjLFuD+rlkhTbTY9TXl2vQ0MNl9YpNncpLYHw76OnGCWUvDeehg+ lXV03x/HZbYIV4A4/PPFt3CECbDqewi0cRMTy7D3Ip1mBeCfHJRMOFuFLrHVJQ8S wnKypERncPY/LBdm25UbMqONGJH+3nN+hiYDtqz8227ArFqiByYAMTxc/D2u/mGk OAsNUnWIfF+lHHChGQ/CSBkLcWK5OEHKBdv6OzcB6YXLipCupKaWEOYKVE1zAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUOr5f2ZEUnTr0F2SJpX6nWAjlQ1kwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1NDIwMjg5LzAvMzEzMDMzMmUz MTM2MzEyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3Mzcz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeh/zANBgkqhkiG9w0BAQsFAAOCAQEAn7BwWF2v9I36F1XM 2kBLI/XqzfKD1Qi26lb4hqL5WUuLq8w0hdJDhnu5wnYQNTzy4ahkF+eVnREcEq4I 8FKF+YB7B+cGGBub44xzgbRx1Lt17NdAlRT71+RrEYV3ar8OVG1hydN6rb763DE6 FwcTVeW89LZPIjW9HAx1Yeze7mjGWzAsovl73SbkfkzCxnp/yrzEOjF0gA3JkN8i h3Zqa35O3PaC57b2rERCQYTJVhOZnFDIuRMvRazCOGapt1BUfKXc4g6P9DF08yMT Z1aWSFU5HQykwLEYwPoFotshRU6iakVQjy9aSKVZ2H8lUjB0oFC4Ldb33oPeQVPy DeWRdw== -----END CERTIFICATE-----Generated at Sat Apr 18 02:43:16 2026 by rpki-client