$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa File: 3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa (raw, json) Hash identifier: o8HMGS9kzgCp9mgs2gxP2h4xE9GBcQPF4KHqqwWWjXQ= Subject key identifier: 2C:8E:18:27:DF:63:0C:B3:2B:93:32:EE:27:56:BB:96:E0:D1:04:D1 Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 2CDC6E10A2C11CFD12F721D48B3D972F4EE04F62 Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa Signing time: Tue 14 Apr 2026 09:24:46 +0000 ROA not before: Tue 14 Apr 2026 09:19:46 +0000 ROA not after: Tue 13 Apr 2027 09:24:46 +0000 asID: 131516 IP address blocks: 103.239.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:dc:6e:10:a2:c1:1c:fd:12:f7:21:d4:8b:3d:97:2f:4e:e0:4f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 14 09:19:46 2026 GMT Not After : Apr 13 09:24:46 2027 GMT Subject: CN=2C8E1827DF630CB32B9332EE2756BB96E0D104D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:8d:f6:e1:b5:aa:fb:fa:19:f4:30:81:fe: 1c:f5:c3:1d:cd:14:e3:90:a3:9b:c8:b1:0b:ae:4e: 94:91:aa:50:2a:f8:b0:1c:32:2f:42:3c:60:f5:3d: 20:bf:d1:29:bc:1a:f5:95:02:01:f1:a2:23:68:c9: 2e:0b:c6:d0:67:a9:ee:f1:5c:b2:56:1e:6e:88:4b: 8b:e4:e1:8e:65:68:25:eb:da:e0:49:49:65:c6:69: ed:95:3a:71:83:bf:86:89:4c:1c:90:1e:57:2d:bb: 11:67:78:dd:92:1d:6e:9e:3d:50:71:4c:fe:73:bd: 24:20:47:52:14:91:89:c7:4f:f9:2c:09:26:3d:da: 13:e2:41:f1:7c:42:de:66:a1:c7:99:a0:a0:75:dc: b7:88:f2:a2:46:b6:b2:6e:99:47:79:33:27:b4:57: ab:25:03:d8:3e:65:c5:58:82:52:6a:80:d0:62:39: 06:70:93:1c:3d:d0:8c:6e:11:35:38:d3:97:76:dc: 4d:2b:ba:fc:50:e1:f0:ec:f6:69:24:21:81:19:87: b0:95:a2:36:a1:b4:1e:63:72:10:47:50:8b:94:bf: fa:ab:85:f6:e6:7f:93:bf:63:42:dd:bd:84:00:e9: 9e:08:fa:7f:5c:f8:59:e3:93:8a:39:c4:40:0b:75: 5b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:8E:18:27:DF:63:0C:B3:2B:93:32:EE:27:56:BB:96:E0:D1:04:D1 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3233392e3138342e302f32322d3234203d3e20313331353136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.184.0/22 Signature Algorithm: sha256WithRSAEncryption 80:50:0d:22:8b:f5:ce:0c:33:40:e0:b6:d4:ff:46:67:fe:61: 13:c4:f7:15:9b:e9:fd:44:43:e7:d5:29:9b:19:b4:b8:bd:79: 69:1e:cf:54:4c:7f:ac:ab:38:20:85:6d:49:2a:79:25:de:be: de:e8:f6:f7:9d:08:e0:5b:71:c7:68:af:f7:05:5a:e7:71:37: 65:0c:0a:11:ec:82:e6:9b:02:3b:fa:a9:2e:2f:ae:1e:4b:48: 4c:a4:d0:94:12:d2:db:8f:7c:2c:b5:db:d8:e6:bb:be:e6:14: 83:41:9a:a5:7f:cc:a3:ec:97:ca:80:b0:c1:db:db:5c:11:34: 55:50:67:b7:dd:4f:30:e4:5c:ea:f6:de:c5:04:1f:f0:fc:a2: a7:e7:a0:6c:04:04:33:ec:92:86:80:2c:30:29:f9:6b:b4:05: 7f:85:9a:5c:85:55:fb:12:0d:ee:32:ad:86:14:bf:14:0a:9c: 2b:c4:a3:29:c6:fd:34:9d:62:2c:da:55:ed:0e:4e:e5:70:ff: 26:fd:28:cb:bf:61:d8:01:38:82:47:aa:a0:f9:18:b6:a0:79: ed:b1:5a:2d:b5:77:16:6a:a6:5b:1c:fe:ca:00:51:61:4f:80: 70:78:03:84:d7:24:24:15:67:0d:40:0e:b1:05:76:6a:e5:a3: 92:0d:d1:04 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIULNxuEKLBHP0S9yHUiz2XL07gT2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTQwOTE5NDZaFw0yNzA0MTMwOTI0NDZaMDMxMTAvBgNV BAMTKDJDOEUxODI3REY2MzBDQjMyQjkzMzJFRTI3NTZCQjk2RTBEMTA0RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGY324bWq+/oZ9DCB/hz1wx3N FOOQo5vIsQuuTpSRqlAq+LAcMi9CPGD1PSC/0Sm8GvWVAgHxoiNoyS4LxtBnqe7x XLJWHm6IS4vk4Y5laCXr2uBJSWXGae2VOnGDv4aJTByQHlctuxFneN2SHW6ePVBx TP5zvSQgR1IUkYnHT/ksCSY92hPiQfF8Qt5moceZoKB13LeI8qJGtrJumUd5Mye0 V6slA9g+ZcVYglJqgNBiOQZwkxw90IxuETU405d23E0ruvxQ4fDs9mkkIYEZh7CV ojahtB5jchBHUIuUv/qrhfbmf5O/Y0LdvYQA6Z4I+n9c+Fnjk4o5xEALdVunAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQULI4YJ99jDLMrkzLuJ1a7luDRBNEwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE2OTk2MzU1LzAvMzEzMDMzMmUz MjMzMzkyZTMxMzgzNDJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzEz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfvuDANBgkqhkiG9w0BAQsFAAOCAQEAgFANIov1zgwzQOC2 1P9GZ/5hE8T3FZvp/URD59Upmxm0uL15aR7PVEx/rKs4IIVtSSp5Jd6+3uj2950I 4Ftxx2iv9wVa53E3ZQwKEeyC5psCO/qpLi+uHktITKTQlBLS2498LLXb2Oa7vuYU g0GapX/Mo+yXyoCwwdvbXBE0VVBnt91PMORc6vbexQQf8Pyip+egbAQEM+yShoAs MCn5a7QFf4WaXIVV+xIN7jKthhS/FAqcK8SjKcb9NJ1iLNpV7Q5O5XD/Jv0oy79h 2AE4gkeqoPkYtqB57bFaLbV3FmqmWxz+ygBRYU+AcHgDhNckJBVnDUAOsQV2auWj kg3RBA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:42:28 2026 by rpki-client