$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa File: 3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa (raw, json) Hash identifier: 1iXEnXLh1xjdmjgXZ+Zf2vht0HF5V9Iqk2Y4dx/afiY= Subject key identifier: 7C:A0:D7:FF:B2:7D:8E:07:EB:33:C7:32:9A:0F:68:87:60:C8:39:50 Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 6A3E52FAD4A85458E82A592A3C7BE951E3C52CBA Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa Signing time: Wed 15 Apr 2026 14:51:09 +0000 ROA not before: Wed 15 Apr 2026 14:46:09 +0000 ROA not after: Wed 14 Apr 2027 14:51:09 +0000 asID: 131516 IP address blocks: 103.248.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:3e:52:fa:d4:a8:54:58:e8:2a:59:2a:3c:7b:e9:51:e3:c5:2c:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 15 14:46:09 2026 GMT Not After : Apr 14 14:51:09 2027 GMT Subject: CN=7CA0D7FFB27D8E07EB33C7329A0F688760C83950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f0:db:59:57:25:6f:d7:94:fa:3b:b8:8e:13: 90:e6:ed:e3:52:55:0b:a4:48:7b:79:7e:60:2a:b2: 43:96:0f:0e:1b:f6:20:5c:e6:b2:8f:57:37:4d:0f: 8f:af:d2:dd:aa:c8:e5:7c:b3:80:86:9d:d0:b1:17: 01:8b:50:f0:6f:46:ad:ed:77:0c:8f:8a:a4:24:37: 5e:3a:85:3b:71:c0:26:b3:34:8f:c0:dd:7e:3c:ca: 1d:08:42:3a:ac:39:ad:17:a1:e1:fb:d8:4b:41:5f: e4:c5:c9:6c:f7:22:45:8e:aa:c9:98:70:f4:84:11: de:f6:73:4d:86:79:a4:f0:83:0c:88:ce:62:a9:c8: 93:f9:e8:bd:23:db:8a:d4:2a:88:4f:22:c4:8d:35: 1b:c0:28:e0:9c:b2:76:b4:d3:69:72:d2:ee:1e:0a: 8c:a2:eb:a4:83:70:c0:ed:8c:50:8b:08:d8:92:8a: 57:93:e7:d2:09:0b:6d:1e:0b:f1:2b:95:3a:84:04: 05:de:c2:4d:bb:f7:00:7a:5a:7f:3d:6d:16:62:14: 45:86:db:5f:15:68:66:ad:8e:74:7b:0e:27:e7:a2: ca:c4:22:16:39:94:26:d9:ab:41:80:9a:6d:da:db: 89:2c:01:dd:94:f3:24:b4:c6:82:d3:af:5f:96:4c: 38:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A0:D7:FF:B2:7D:8E:07:EB:33:C7:32:9A:0F:68:87:60:C8:39:50 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e20313331353136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.153.0/24 Signature Algorithm: sha256WithRSAEncryption 04:b7:9d:17:b2:80:3a:cc:b9:07:d0:fd:39:b3:3f:26:01:07: 2a:e5:17:d1:52:a6:31:fe:6b:1f:7b:1e:64:a6:12:17:4e:cc: 21:e4:3b:81:6e:29:26:51:bf:e5:55:c5:82:ae:54:56:4d:b0: 16:6e:9f:5a:54:ec:6c:23:6a:f4:5e:3f:2f:f3:cf:bc:55:93: a7:f1:83:d4:97:15:e5:a7:54:dc:21:e1:29:02:22:27:db:b7: 39:d6:7a:e9:65:3c:41:f9:dd:1c:3f:80:56:8e:7a:71:48:64: cb:a6:7f:fc:84:3c:75:af:21:46:a0:1a:d9:e7:54:2c:53:68: 57:7e:d3:17:f9:ce:62:5b:e2:42:ce:75:f4:0d:c5:70:05:f1: e0:50:ce:c1:82:57:f7:55:a8:da:22:da:e2:d6:d8:52:80:05: f7:e8:5d:22:14:c0:c2:72:bb:42:4b:ab:1e:20:5a:fc:13:b1: 85:61:82:0c:50:84:04:a6:25:77:84:ca:b7:49:3f:4c:ad:79: 3b:5b:55:86:7a:45:83:82:94:f7:33:3e:ae:8f:93:5e:00:5c: 2c:5c:c0:df:c2:e8:25:44:58:10:7d:92:af:36:65:52:3c:1e: ad:45:76:2b:8f:6d:a9:ac:e0:6f:4c:00:7b:d1:56:56:ce:f0: fd:61:72:a3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUaj5S+tSoVFjoKlkqPHvpUePFLLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTUxNDQ2MDlaFw0yNzA0MTQxNDUxMDlaMDMxMTAvBgNV BAMTKDdDQTBEN0ZGQjI3RDhFMDdFQjMzQzczMjlBMEY2ODg3NjBDODM5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8NtZVyVv15T6O7iOE5Dm7eNS VQukSHt5fmAqskOWDw4b9iBc5rKPVzdND4+v0t2qyOV8s4CGndCxFwGLUPBvRq3t dwyPiqQkN146hTtxwCazNI/A3X48yh0IQjqsOa0XoeH72EtBX+TFyWz3IkWOqsmY cPSEEd72c02GeaTwgwyIzmKpyJP56L0j24rUKohPIsSNNRvAKOCcsna002ly0u4e Coyi66SDcMDtjFCLCNiSileT59IJC20eC/ErlTqEBAXewk279wB6Wn89bRZiFEWG 218VaGatjnR7DifnosrEIhY5lCbZq0GAmm3a24ksAd2U8yS0xoLTr1+WTDiJAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUfKDX/7J9jgfrM8cymg9oh2DIOVAwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE2OTk2MzU1LzAvMzEzMDMzMmUz MjM0MzgyZTMxMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzEz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGf4mTANBgkqhkiG9w0BAQsFAAOCAQEABLedF7KAOsy5B9D9 ObM/JgEHKuUX0VKmMf5rH3seZKYSF07MIeQ7gW4pJlG/5VXFgq5UVk2wFm6fWlTs bCNq9F4/L/PPvFWTp/GD1JcV5adU3CHhKQIiJ9u3OdZ66WU8QfndHD+AVo56cUhk y6Z//IQ8da8hRqAa2edULFNoV37TF/nOYlviQs519A3FcAXx4FDOwYJX91Wo2iLa 4tbYUoAF9+hdIhTAwnK7QkurHiBa/BOxhWGCDFCEBKYld4TKt0k/TK15O1tVhnpF g4KU9zM+ro+TXgBcLFzA38LoJURYEH2SrzZlUjwerUV2K49tqazgb0wAe9FWVs7w /WFyow== -----END CERTIFICATE-----Generated at Sat Apr 18 07:28:35 2026 by rpki-client