$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa File: 3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: S9wm7V1jEKsdWPhliBOnVYmKnnehtzWifE6l9yAwEJg= Subject key identifier: 3A:8D:48:ED:3E:50:C2:56:F8:7D:7E:94:C8:84:CF:CD:2F:08:80:32 Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 64C62773E3DCFF35FAEFA642C76BA79EDFCB7C20 Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa Signing time: Wed 15 Apr 2026 14:51:09 +0000 ROA not before: Wed 15 Apr 2026 14:46:09 +0000 ROA not after: Wed 14 Apr 2027 14:51:09 +0000 asID: 4811 IP address blocks: 103.248.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c6:27:73:e3:dc:ff:35:fa:ef:a6:42:c7:6b:a7:9e:df:cb:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 15 14:46:09 2026 GMT Not After : Apr 14 14:51:09 2027 GMT Subject: CN=3A8D48ED3E50C256F87D7E94C884CFCD2F088032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:f7:2e:9b:7e:b8:b7:e7:46:a7:52:04:ba:7d: 20:85:c4:68:5a:10:fb:52:81:7c:d9:07:43:14:66: 64:a5:6f:63:ae:cb:b6:67:53:54:90:e5:1e:97:59: c5:e9:6b:2c:51:a0:11:d3:07:a8:87:9b:f6:36:e5: 11:64:c6:d8:84:08:ef:aa:bb:80:e4:26:eb:f6:d5: 3c:44:bc:a6:5a:5e:ad:21:f6:32:db:e8:56:d7:6c: 0c:35:af:41:e5:3e:5f:5a:8d:dd:2d:10:75:9f:f3: 67:ac:76:14:86:94:0c:62:23:ba:31:72:14:d4:94: c0:fe:ef:d6:39:29:83:db:41:00:cc:d3:dd:20:56: c0:01:27:cb:67:e3:0d:db:cd:20:fc:cc:37:8a:74: 54:0f:29:04:ed:a7:37:ed:82:ae:8e:d5:6e:93:82: 38:1d:dd:16:73:76:3e:c5:46:cf:91:e5:d2:dc:8c: 2c:e2:1e:ae:e3:f0:8b:7d:e8:ac:28:91:94:36:92: 39:73:90:d3:1b:46:1b:06:06:6e:22:83:de:ca:b3: 32:fe:35:ad:07:36:f5:f5:8b:76:2d:6d:4f:02:ae: 7b:14:62:d1:3b:9d:fa:c7:3f:a2:d9:2a:59:d9:9f: e8:63:ad:b6:8f:30:ae:e6:0b:1d:69:41:3a:d3:68: 02:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8D:48:ED:3E:50:C2:56:F8:7D:7E:94:C8:84:CF:CD:2F:08:80:32 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3130332e3234382e3135352e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.248.155.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:ef:16:b3:bf:b6:d8:0f:5a:e4:54:ee:98:57:4a:34:6c:93: 2f:11:08:c9:6b:71:0b:e2:51:59:c5:88:c6:90:c3:a8:cf:ab: 2f:59:eb:73:78:2b:63:ea:1a:e0:db:6b:b1:74:bb:77:fb:06: 61:2e:b5:22:1c:dc:e6:d4:17:10:21:de:73:d4:a5:9c:7c:5d: ef:78:4b:cb:03:f2:b2:ec:86:7f:20:4a:43:91:a7:a9:28:85: 20:86:5a:86:7d:55:92:06:3d:81:98:3d:1c:70:5a:7b:2b:23: 4e:db:27:60:fe:56:d2:cd:5e:80:fd:4c:90:07:42:52:64:43: 61:03:1d:ff:b0:d6:9c:34:b3:9d:c7:02:83:bd:fd:5f:60:d5: ee:bb:5d:85:99:ff:fe:e4:97:21:b1:d8:52:ab:d2:ef:23:d3: 6c:a5:55:bf:ed:1e:6f:31:12:79:e2:75:7e:6e:52:2d:d8:e3: a9:43:b9:0d:09:34:82:6d:f6:0e:e4:3c:56:27:9a:e3:6b:73: 44:8e:97:2e:3a:e1:6b:45:29:48:40:ad:ce:76:33:79:12:b5: 88:51:7b:2c:9b:1a:56:a7:97:9d:cf:17:bf:5b:63:a4:75:8a: 01:ca:12:b6:5c:30:a7:41:36:0b:06:40:3a:41:88:7e:8b:26: df:2c:a5:54 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZMYnc+Pc/zX676ZCx2unnt/LfCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTUxNDQ2MDlaFw0yNzA0MTQxNDUxMDlaMDMxMTAvBgNV BAMTKDNBOEQ0OEVEM0U1MEMyNTZGODdEN0U5NEM4ODRDRkNEMkYwODgwMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn9y6bfri350anUgS6fSCFxGha EPtSgXzZB0MUZmSlb2Ouy7ZnU1SQ5R6XWcXpayxRoBHTB6iHm/Y25RFkxtiECO+q u4DkJuv21TxEvKZaXq0h9jLb6FbXbAw1r0HlPl9ajd0tEHWf82esdhSGlAxiI7ox chTUlMD+79Y5KYPbQQDM090gVsABJ8tn4w3bzSD8zDeKdFQPKQTtpzftgq6O1W6T gjgd3RZzdj7FRs+R5dLcjCziHq7j8It96KwokZQ2kjlzkNMbRhsGBm4ig97KszL+ Na0HNvX1i3YtbU8CrnsUYtE7nfrHP6LZKlnZn+hjrbaPMK7mCx1pQTrTaAIlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOo1I7T5Qwlb4fX6UyITPzS8IgDIwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTkxMTIxNjk5NjM1NS8wLzMxMzAzMzJlMzIz NDM4MmUzMTM1MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGf4mzANBgkqhkiG9w0BAQsFAAOCAQEAnO8Ws7+22A9a5FTumFdKNGyT LxEIyWtxC+JRWcWIxpDDqM+rL1nrc3grY+oa4NtrsXS7d/sGYS61Ihzc5tQXECHe c9SlnHxd73hLywPysuyGfyBKQ5GnqSiFIIZahn1VkgY9gZg9HHBaeysjTtsnYP5W 0s1egP1MkAdCUmRDYQMd/7DWnDSznccCg739X2DV7rtdhZn//uSXIbHYUqvS7yPT bKVVv+0ebzESeeJ1fm5SLdjjqUO5DQk0gm32DuQ8Viea42tzRI6XLjrha0UpSECt znYzeRK1iFF7LJsaVqeXnc8Xv1tjpHWKAcoStlwwp0E2CwZAOkGIfosm3yylVA== -----END CERTIFICATE-----Generated at Fri Apr 17 19:18:07 2026 by rpki-client