$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e3130302e302f32332d3233203d3e203137363233.roa File: 3130332e3231392e3130302e302f32332d3233203d3e203137363233.roa (raw, json) Hash identifier: a2fwyzRSRqL4WwFa/yyzGlykbolRD7Y3AfnVVrYXKX4= Subject key identifier: 96:6B:A6:8F:08:6F:F3:84:3B:D8:D6:56:1C:28:F7:41:99:81:B0:A4 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 6ED670A47CED854D4D7BA8AEB095582787F6B8CB Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e3130302e302f32332d3233203d3e203137363233.roa Signing time: Thu 16 Apr 2026 04:05:08 +0000 ROA not before: Thu 16 Apr 2026 04:00:08 +0000 ROA not after: Thu 15 Apr 2027 04:05:08 +0000 asID: 17623 IP address blocks: 103.219.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:d6:70:a4:7c:ed:85:4d:4d:7b:a8:ae:b0:95:58:27:87:f6:b8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 16 04:00:08 2026 GMT Not After : Apr 15 04:05:08 2027 GMT Subject: CN=966BA68F086FF3843BD8D6561C28F7419981B0A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:fd:d4:27:cb:d1:fc:64:56:0a:a8:fb:c1: ae:64:fa:a8:81:a0:4f:23:e0:65:27:6a:89:cf:5a: 7d:77:fa:81:51:8d:ec:ec:e7:ea:ac:51:aa:1a:11: 58:f5:ab:7a:f4:8b:96:39:f2:4a:11:3e:66:90:0e: 97:40:79:59:62:02:39:f0:6d:4a:80:d5:b6:af:72: 03:01:ac:2c:77:08:46:2e:a9:a7:34:4f:a6:36:34: d1:13:22:62:19:a4:f9:30:48:af:3a:71:ed:8f:35: c6:68:63:ec:b6:3c:19:35:72:1e:4f:94:f1:b2:26: 3d:06:35:19:f5:4f:f6:e0:47:1d:46:40:b2:f7:44: bc:7e:a8:32:11:a8:ba:af:37:e7:6e:31:b1:56:bc: 9c:c1:95:cc:45:08:85:13:27:0f:68:62:30:47:33: 56:09:8a:98:31:7f:93:d7:53:60:94:7f:96:6a:22: 51:5b:1d:62:e2:cc:08:b3:e1:03:00:c2:bc:0a:1a: a3:bc:14:15:44:68:a5:a6:0d:0e:92:a4:47:7b:6f: 15:c1:43:4b:f7:9b:e6:af:38:86:d0:fb:36:1b:db: f9:e9:b2:35:d9:64:a7:ca:c0:bf:ae:1d:74:6c:6f: a9:26:08:a3:2f:1b:92:d1:4e:7e:19:c2:47:7c:1a: ce:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:6B:A6:8F:08:6F:F3:84:3B:D8:D6:56:1C:28:F7:41:99:81:B0:A4 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e3130302e302f32332d3233203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.100.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:e0:3b:9d:03:f4:c3:45:2e:fc:ea:49:a9:dd:c0:5c:99:a2: 58:55:f3:ef:af:68:e6:06:1c:ee:53:11:3c:b0:33:72:14:c9: 1d:90:c8:85:f0:07:2e:db:13:25:89:4f:f0:88:53:8d:46:cf: 86:57:e0:af:b8:d1:ac:7d:78:b7:0e:35:68:30:e4:e6:f9:f7: 70:5f:52:ae:0a:67:3c:73:9e:8c:65:49:ba:2f:f6:41:bf:0b: ad:ce:01:1e:26:20:a8:3f:9a:ac:40:ee:7f:5b:25:0d:9f:80: 4f:96:65:b3:2a:b9:62:48:69:71:49:7e:6e:60:75:84:a6:ef: b6:fc:81:5b:d0:bd:76:d9:ff:9d:00:63:38:4b:05:79:cb:fb: 3a:09:25:e7:6b:82:aa:98:17:8d:00:f3:ed:af:fd:53:fa:9b: 98:14:ae:ad:0f:02:ca:8a:f7:e4:43:d3:6d:e0:df:27:19:ea: 80:df:be:78:81:07:98:38:f8:6e:8e:03:83:7d:14:4e:c2:eb: c6:3c:0f:40:68:1a:b6:e4:88:04:e7:a7:d0:75:52:2a:9e:bd: df:0c:37:42:69:0e:42:c5:ba:d6:4b:70:e4:eb:18:79:de:65: cc:09:0e:83:73:15:b3:91:70:88:dc:de:3d:9e:b6:f9:cb:83: 96:3c:35:04 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUbtZwpHzthU1Ne6iusJVYJ4f2uMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MTYwNDAwMDhaFw0yNzA0MTUwNDA1MDhaMDMxMTAvBgNV BAMTKDk2NkJBNjhGMDg2RkYzODQzQkQ4RDY1NjFDMjhGNzQxOTk4MUIwQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZx/3UJ8vR/GRWCqj7wa5k+qiB oE8j4GUnaonPWn13+oFRjezs5+qsUaoaEVj1q3r0i5Y58koRPmaQDpdAeVliAjnw bUqA1bavcgMBrCx3CEYuqac0T6Y2NNETImIZpPkwSK86ce2PNcZoY+y2PBk1ch5P lPGyJj0GNRn1T/bgRx1GQLL3RLx+qDIRqLqvN+duMbFWvJzBlcxFCIUTJw9oYjBH M1YJipgxf5PXU2CUf5ZqIlFbHWLizAiz4QMAwrwKGqO8FBVEaKWmDQ6SpEd7bxXB Q0v3m+avOIbQ+zYb2/npsjXZZKfKwL+uHXRsb6kmCKMvG5LRTn4Zwkd8Gs73AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUlmumjwhv84Q72NZWHCj3QZmBsKQwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zMTMwMzMyZTMy MzEzOTJlMzEzMDMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM2MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfbZDANBgkqhkiG9w0BAQsFAAOCAQEAn+A7nQP0w0Uu/OpJqd3A XJmiWFXz769o5gYc7lMRPLAzchTJHZDIhfAHLtsTJYlP8IhTjUbPhlfgr7jRrH14 tw41aDDk5vn3cF9SrgpnPHOejGVJui/2Qb8Lrc4BHiYgqD+arEDuf1slDZ+AT5Zl syq5YkhpcUl+bmB1hKbvtvyBW9C9dtn/nQBjOEsFecv7Ogkl52uCqpgXjQDz7a/9 U/qbmBSurQ8Cyor35EPTbeDfJxnqgN++eIEHmDj4bo4Dg30UTsLrxjwPQGgatuSI BOen0HVSKp693ww3QmkOQsW61ktw5OsYed5lzAkOg3MVs5FwiNzePZ62+cuDljw1 BA== -----END CERTIFICATE-----Generated at Fri Apr 17 22:12:26 2026 by rpki-client