$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3130332e3232322e3139322e302f32322d3232203d3e2030.roa File: 3130332e3232322e3139322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: kSZsRPKkn+fO9KmuamYn7A4rJ1w7FiU1lG47DtciKdk= Subject key identifier: 79:E3:80:29:FF:5C:66:7E:EC:AE:F7:52:88:6F:88:51:60:5C:AB:DC Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 40F0E7A583FCB06CA8CAA54646E94B41C5E2FC8F Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3130332e3232322e3139322e302f32322d3232203d3e2030.roa Signing time: Mon 13 Apr 2026 09:58:59 +0000 ROA not before: Mon 13 Apr 2026 09:53:59 +0000 ROA not after: Mon 12 Apr 2027 09:58:59 +0000 asID: 0 IP address blocks: 103.222.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 12:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f0:e7:a5:83:fc:b0:6c:a8:ca:a5:46:46:e9:4b:41:c5:e2:fc:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 13 09:53:59 2026 GMT Not After : Apr 12 09:58:59 2027 GMT Subject: CN=79E38029FF5C667EECAEF752886F8851605CABDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:45:7e:70:ec:0f:5e:9d:69:f3:d7:f0:fc:22: 9b:90:1d:cd:3b:6f:22:6b:07:f9:ea:07:95:39:aa: f2:17:af:87:b3:17:b3:53:7e:70:40:73:a8:0c:d9: 7d:e7:56:e9:68:b4:58:1f:00:27:b8:78:af:b4:07: 62:3e:9e:51:4e:be:ef:f5:3d:57:1e:81:69:de:05: 6e:32:14:44:4c:7f:26:92:81:8e:48:e4:96:a6:1e: ad:b1:6d:09:62:93:8a:a6:4b:bb:e0:06:38:84:2f: 7c:1c:ec:59:21:30:ac:17:1d:5e:d4:78:b1:19:1a: 49:74:7c:b7:c6:4c:3e:9d:fe:db:23:d2:73:d8:03: 48:d8:21:2f:c7:a7:8f:9c:b6:31:f1:f2:af:c7:f9: db:ea:b4:00:db:46:c7:45:5d:4a:d7:7f:70:e1:71: be:9e:ef:65:71:ff:e7:fb:5b:03:e4:f5:ea:01:58: a8:05:b5:38:54:62:31:df:3c:0f:89:c7:75:a0:8b: 0d:65:20:e0:fa:7d:fc:3d:8e:57:26:ae:de:f7:b8: ba:9b:dd:ff:dd:e2:a7:73:20:2d:26:b3:fb:cb:9a: ce:11:f4:f1:e6:25:1a:89:49:48:7b:ee:2b:5d:3a: 13:91:fb:48:81:93:c2:3c:a3:61:31:a9:9d:78:7e: bf:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E3:80:29:FF:5C:66:7E:EC:AE:F7:52:88:6F:88:51:60:5C:AB:DC X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3130332e3232322e3139322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.222.192.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:34:fa:1d:16:4a:cb:b4:39:6e:04:19:ca:d0:0a:5a:56:28: 8d:8b:24:19:b7:40:36:37:15:d3:d0:39:8c:1c:e7:39:40:2e: ec:2b:fe:b9:23:af:c1:46:a3:33:70:2e:41:03:90:8a:19:79: 41:35:33:20:3c:59:f4:6d:fa:c5:9e:2c:35:6c:a0:d1:15:c8: ba:d4:f5:c7:97:17:e7:70:98:9c:10:86:58:5d:1a:4f:96:56: cd:2b:74:a4:c9:c8:ab:8e:9d:a1:a7:6e:c4:8d:68:06:c5:a7: f8:d9:b2:7b:97:df:40:87:3d:97:71:8e:36:ec:f4:88:54:72: 37:c0:bd:3c:aa:e6:0a:14:34:d2:de:0c:71:0f:b6:44:51:46: 35:92:a0:d7:5f:5c:99:a2:a7:66:f4:1b:f1:52:f3:f4:93:2d: cd:f3:09:de:91:4f:91:d9:b0:64:d8:df:a1:d7:40:f0:da:42: c2:2d:e1:36:ff:cf:b3:01:ef:6d:71:d5:7f:2d:e2:4f:7d:2b: 69:cd:a4:37:74:67:96:d4:46:df:73:69:4b:c1:02:b2:24:d1: d0:05:fc:83:ba:62:d5:ca:ca:f6:25:da:d7:1b:52:a3:7e:a9: f4:30:98:cf:08:84:ef:4d:13:b6:dc:fc:8f:b6:0a:a8:f6:70: 3c:3e:2b:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUQPDnpYP8sGyoyqVGRulLQcXi/I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTMwOTUzNTlaFw0yNzA0MTIwOTU4NTlaMDMxMTAvBgNV BAMTKDc5RTM4MDI5RkY1QzY2N0VFQ0FFRjc1Mjg4NkY4ODUxNjA1Q0FCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZRX5w7A9enWnz1/D8IpuQHc07 byJrB/nqB5U5qvIXr4ezF7NTfnBAc6gM2X3nVulotFgfACe4eK+0B2I+nlFOvu/1 PVcegWneBW4yFERMfyaSgY5I5JamHq2xbQlik4qmS7vgBjiEL3wc7FkhMKwXHV7U eLEZGkl0fLfGTD6d/tsj0nPYA0jYIS/Hp4+ctjHx8q/H+dvqtADbRsdFXUrXf3Dh cb6e72Vx/+f7WwPk9eoBWKgFtThUYjHfPA+Jx3Wgiw1lIOD6ffw9jlcmrt73uLqb 3f/d4qdzIC0ms/vLms4R9PHmJRqJSUh77itdOhOR+0iBk8I8o2ExqZ14fr9nAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUeeOAKf9cZn7srvdSiG+IUWBcq9wwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzEzMDMzMmUzMjMy MzIyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z97AMA0GCSqGSIb3DQEBCwUAA4IBAQB6NPodFkrLtDluBBnK0ApaViiNiyQZt0A2 NxXT0DmMHOc5QC7sK/65I6/BRqMzcC5BA5CKGXlBNTMgPFn0bfrFniw1bKDRFci6 1PXHlxfncJicEIZYXRpPllbNK3Skycirjp2hp27EjWgGxaf42bJ7l99Ahz2XcY42 7PSIVHI3wL08quYKFDTS3gxxD7ZEUUY1kqDXX1yZoqdm9BvxUvP0ky3N8wnekU+R 2bBk2N+h10Dw2kLCLeE2/8+zAe9tcdV/LeJPfStpzaQ3dGeW1Ebfc2lLwQKyJNHQ BfyDumLVysr2JdrXG1Kjfqn0MJjPCITvTRO23PyPtgqo9nA8PiuL -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:06 2026 by rpki-client