$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa File: 3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: PY+ClSSe7FsRUgsLEHUWmvZxgE87mH+i5+iDE+XZpYc= Subject key identifier: 3E:EA:7A:89:23:F7:36:5F:F6:2C:5D:10:AF:16:56:8C:11:34:8D:9F Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 0F380E824D43F2D8F84942FDD4BD807B6763531E Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa Signing time: Wed 15 Apr 2026 14:51:09 +0000 ROA not before: Wed 15 Apr 2026 14:46:09 +0000 ROA not after: Wed 14 Apr 2027 14:51:09 +0000 asID: 4837 IP address blocks: 103.248.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:38:0e:82:4d:43:f2:d8:f8:49:42:fd:d4:bd:80:7b:67:63:53:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 15 14:46:09 2026 GMT Not After : Apr 14 14:51:09 2027 GMT Subject: CN=3EEA7A8923F7365FF62C5D10AF16568C11348D9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5d:4e:73:67:10:e0:1d:b3:53:cd:52:a2:d4: 73:fc:3b:d4:0e:48:71:eb:93:81:c2:6f:f8:ad:f8: ee:86:0b:eb:50:7f:5e:f8:14:31:39:5b:d3:ec:3b: eb:56:ce:f7:06:7d:b5:5a:63:98:98:4d:d0:39:44: 0e:3c:d5:57:c6:9d:0b:4a:89:a3:ab:f5:bc:7e:53: c2:11:f2:29:8a:85:a5:8f:ae:b7:d1:c6:c6:74:82: 52:b3:ba:d9:7f:61:fe:d2:de:ac:14:85:3a:84:2e: b6:b2:08:48:6b:83:f5:bd:76:ba:cf:23:7d:4e:e5: 03:be:b0:f0:3b:97:b3:ec:45:f9:6b:bd:37:68:fb: cf:6e:85:3b:67:90:ce:da:bb:8f:45:fc:ae:8b:7f: fa:c6:ca:14:85:db:ec:57:77:d3:39:db:47:70:65: 35:da:80:10:fb:6f:0b:b2:c6:65:62:f2:e0:f6:96: e6:11:38:85:ea:e3:16:50:52:72:fe:6d:1e:aa:dc: cf:73:f8:98:e8:11:7b:f7:78:9a:e5:90:b4:eb:e1: 73:8c:d6:a3:2c:5d:a2:a1:d8:22:0c:22:b7:80:b6: b7:d4:bf:20:97:29:08:9b:89:0b:be:95:59:49:cd: b9:33:36:35:6a:25:31:31:5a:50:94:21:c0:19:6c: c3:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EA:7A:89:23:F7:36:5F:F6:2C:5D:10:AF:16:56:8C:11:34:8D:9F X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135342e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.154.0/24 Signature Algorithm: sha256WithRSAEncryption 94:6d:1b:04:be:76:14:0e:c6:67:29:44:92:52:73:64:71:87: 9c:bd:35:16:78:62:05:61:07:ec:bd:6a:0b:8e:bc:81:8e:64: ff:50:c8:5b:e8:de:58:13:ff:7e:99:bd:7f:e1:b7:49:bb:53: 78:f7:5b:81:c2:bf:7b:db:a6:08:93:d6:51:c5:47:6b:2f:1b: 5f:69:a5:02:86:5e:70:cf:38:1f:1e:78:d8:dd:1d:4d:3e:5e: 33:fd:da:80:1d:33:72:fb:41:3d:4f:3c:3a:82:d4:ce:13:f1: 22:d5:10:3f:e2:75:bd:58:b6:9b:11:52:5e:cf:66:58:bf:e0: 24:cb:ad:5f:4e:87:7a:ac:b7:3a:29:e5:4e:0a:47:b8:0d:9e: aa:07:81:a9:2f:69:65:b8:c0:e1:73:24:66:58:47:4d:5c:f6: de:fc:6f:29:54:15:9c:45:c4:df:d7:0c:9d:4a:08:5e:d0:74: 16:52:92:07:34:a0:b2:35:13:b4:4b:c2:a9:88:3e:04:e7:34: 0f:aa:10:f5:be:d6:e2:b8:53:4e:a2:ac:2b:14:54:0d:76:fd: 0b:69:04:c5:39:96:fe:57:b6:34:9b:e9:1b:78:08:9e:92:c9: 27:86:a8:2f:cf:e9:7b:57:a9:a5:2b:6c:4b:ba:ab:14:fe:40: c7:5a:74:40 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDzgOgk1D8tj4SUL91L2Ae2djUx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTUxNDQ2MDlaFw0yNzA0MTQxNDUxMDlaMDMxMTAvBgNV BAMTKDNFRUE3QTg5MjNGNzM2NUZGNjJDNUQxMEFGMTY1NjhDMTEzNDhEOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKXU5zZxDgHbNTzVKi1HP8O9QO SHHrk4HCb/it+O6GC+tQf174FDE5W9PsO+tWzvcGfbVaY5iYTdA5RA481VfGnQtK iaOr9bx+U8IR8imKhaWPrrfRxsZ0glKzutl/Yf7S3qwUhTqELrayCEhrg/W9drrP I31O5QO+sPA7l7PsRflrvTdo+89uhTtnkM7au49F/K6Lf/rGyhSF2+xXd9M520dw ZTXagBD7bwuyxmVi8uD2luYROIXq4xZQUnL+bR6q3M9z+JjoEXv3eJrlkLTr4XOM 1qMsXaKh2CIMIreAtrfUvyCXKQibiQu+lVlJzbkzNjVqJTExWlCUIcAZbMNNAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUPup6iSP3Nl/2LF0QrxZWjBE0jZ8wHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNjk5NjM1NS8wLzMxMzAzMzJlMzIz NDM4MmUzMTM1MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGf4mjANBgkqhkiG9w0BAQsFAAOCAQEAlG0bBL52FA7GZylEklJzZHGH nL01FnhiBWEH7L1qC468gY5k/1DIW+jeWBP/fpm9f+G3SbtTePdbgcK/e9umCJPW UcVHay8bX2mlAoZecM84Hx542N0dTT5eM/3agB0zcvtBPU88OoLUzhPxItUQP+J1 vVi2mxFSXs9mWL/gJMutX06Heqy3OinlTgpHuA2eqgeBqS9pZbjA4XMkZlhHTVz2 3vxvKVQVnEXE39cMnUoIXtB0FlKSBzSgsjUTtEvCqYg+BOc0D6oQ9b7W4rhTTqKs KxRUDXb9C2kExTmW/le2NJvpG3gInpLJJ4aoL8/pe1eppStsS7qrFP5Ax1p0QA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:52:35 2026 by rpki-client