$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa File: 3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: jpxk8QYfaZ4Lq+wqbBKWvAn7PWKauaHwfOdE/GNQ1bA= Subject key identifier: 74:BE:56:8F:D8:00:FC:55:04:E8:AE:33:25:89:72:D3:5F:7F:44:70 Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 4542F00FB7D5D0CAC9F9ABC89EC8FD26BDDCC083 Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa Signing time: Wed 15 Apr 2026 14:51:10 +0000 ROA not before: Wed 15 Apr 2026 14:46:10 +0000 ROA not after: Wed 14 Apr 2027 14:51:10 +0000 asID: 4811 IP address blocks: 103.248.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:42:f0:0f:b7:d5:d0:ca:c9:f9:ab:c8:9e:c8:fd:26:bd:dc:c0:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 15 14:46:10 2026 GMT Not After : Apr 14 14:51:10 2027 GMT Subject: CN=74BE568FD800FC5504E8AE33258972D35F7F4470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c2:30:a8:9f:41:19:9d:bc:04:5a:6e:ee:6e: 79:18:3a:ea:b6:ac:ec:c5:26:aa:a4:c1:d1:ac:ae: 5f:c2:01:b4:1a:6b:81:32:e1:39:e1:3c:77:29:92: f0:e4:e3:1c:70:4f:76:36:ed:29:4b:3f:a0:50:26: fe:68:03:79:0a:17:0d:9a:14:9a:1a:d7:97:98:af: 54:3b:93:b6:98:6d:0c:3a:ba:90:e4:a3:11:d2:5a: cb:8c:eb:ba:8e:38:49:92:fc:99:c0:d9:d8:ea:74: 9e:1b:0e:05:32:de:23:74:92:4c:03:78:e9:07:a6: f5:58:2a:df:9b:b4:a3:f2:79:44:30:76:c3:48:de: 9b:11:eb:62:88:e5:dc:8f:f4:26:2a:da:8e:92:af: bc:6f:4f:34:90:a7:9f:52:5f:87:e2:d2:43:1d:88: 2f:ad:7f:45:69:6e:45:e5:68:18:0c:97:eb:97:7c: 20:a8:15:99:5a:41:6c:32:c1:38:ba:bf:37:35:6e: 6a:53:9d:15:ee:1e:0b:57:06:61:8b:7f:9e:ae:ac: 20:22:2c:70:25:0c:cf:b5:f8:de:9e:96:76:b6:3d: cd:1a:65:54:10:e6:37:0b:4b:a1:26:33:6f:b6:8e: ad:a4:c2:7c:c5:f2:50:7a:ca:7a:ab:1f:01:56:50: 6d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BE:56:8F:D8:00:FC:55:04:E8:AE:33:25:89:72:D3:5F:7F:44:70 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135332e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.153.0/24 Signature Algorithm: sha256WithRSAEncryption 86:63:1b:80:2c:e8:d7:59:98:0c:d8:5b:c0:36:fd:fe:15:6e: 85:54:f2:51:4a:6b:a1:42:bf:48:23:eb:c3:df:10:1d:94:b3: e2:45:ef:46:73:95:ef:7f:eb:06:5a:e5:46:df:30:3c:3c:6c: e0:37:cf:93:b9:44:86:53:df:b9:91:64:de:5c:fa:f8:fd:34: 9e:c2:8f:74:8c:ce:46:70:e8:13:11:62:ef:77:e4:c8:5d:09: 34:74:74:ff:a2:a2:1a:86:c3:19:8d:55:e3:51:2e:07:48:e5: ee:c0:44:7e:db:fb:ea:e8:db:df:39:96:e9:b9:56:e2:a4:ac: 8d:0e:2f:ad:ad:e9:ab:9b:b9:24:8c:09:b1:ef:12:74:43:10: 7b:2f:4a:99:7d:b0:3d:34:ba:c9:10:fc:3a:e9:fa:22:c5:6e: ce:f8:6b:16:7d:13:7a:38:ff:36:4c:a3:e8:46:52:33:7e:d3: 06:25:43:61:dd:34:e8:eb:86:d5:9f:f5:d3:33:a6:cd:ad:f5: 9a:27:26:19:79:39:07:19:c7:6d:fd:98:97:0c:7e:71:b1:2a: 93:ec:6b:02:57:b4:a2:f0:ff:08:4c:a8:c8:e2:7d:fe:7e:91: 59:cb:f3:61:73:07:54:56:68:82:a4:bb:54:49:5a:be:44:b1: 52:d6:dc:14 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURULwD7fV0MrJ+avInsj9Jr3cwIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTUxNDQ2MTBaFw0yNzA0MTQxNDUxMTBaMDMxMTAvBgNV BAMTKDc0QkU1NjhGRDgwMEZDNTUwNEU4QUUzMzI1ODk3MkQzNUY3RjQ0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjwjCon0EZnbwEWm7ubnkYOuq2 rOzFJqqkwdGsrl/CAbQaa4Ey4TnhPHcpkvDk4xxwT3Y27SlLP6BQJv5oA3kKFw2a FJoa15eYr1Q7k7aYbQw6upDkoxHSWsuM67qOOEmS/JnA2djqdJ4bDgUy3iN0kkwD eOkHpvVYKt+btKPyeUQwdsNI3psR62KI5dyP9CYq2o6Sr7xvTzSQp59SX4fi0kMd iC+tf0VpbkXlaBgMl+uXfCCoFZlaQWwywTi6vzc1bmpTnRXuHgtXBmGLf56urCAi LHAlDM+1+N6elna2Pc0aZVQQ5jcLS6EmM2+2jq2kwnzF8lB6ynqrHwFWUG2RAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUdL5Wj9gA/FUE6K4zJYly019/RHAwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNjk5NjM1NS8wLzMxMzAzMzJlMzIz NDM4MmUzMTM1MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGf4mTANBgkqhkiG9w0BAQsFAAOCAQEAhmMbgCzo11mYDNhbwDb9/hVu hVTyUUproUK/SCPrw98QHZSz4kXvRnOV73/rBlrlRt8wPDxs4DfPk7lEhlPfuZFk 3lz6+P00nsKPdIzORnDoExFi73fkyF0JNHR0/6KiGobDGY1V41EuB0jl7sBEftv7 6ujb3zmW6blW4qSsjQ4vra3pq5u5JIwJse8SdEMQey9KmX2wPTS6yRD8Oun6IsVu zvhrFn0Tejj/Nkyj6EZSM37TBiVDYd006OuG1Z/10zOmza31micmGXk5BxnHbf2Y lwx+cbEqk+xrAle0ovD/CEyoyOJ9/n6RWcvzYXMHVFZogqS7VElavkSxUtbcFA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:22:02 2026 by rpki-client