$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3130332e3233352e3134382e302f32322d3232203d3e2030.roa File: 3130332e3233352e3134382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: Y0YyaYjGyKIlIKXTKEIEynRYQ5GTL8UjVEAC8Ds5ChE= Subject key identifier: 0E:71:A0:0D:C3:3B:A2:09:4C:76:2D:BC:91:07:CD:04:E5:96:92:D2 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 39931CD78E9C8188552419E9805E7D70AE02AE8D Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3130332e3233352e3134382e302f32322d3232203d3e2030.roa Signing time: Mon 13 Apr 2026 09:58:59 +0000 ROA not before: Mon 13 Apr 2026 09:53:59 +0000 ROA not after: Mon 12 Apr 2027 09:58:59 +0000 asID: 0 IP address blocks: 103.235.148.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 12:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:93:1c:d7:8e:9c:81:88:55:24:19:e9:80:5e:7d:70:ae:02:ae:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 13 09:53:59 2026 GMT Not After : Apr 12 09:58:59 2027 GMT Subject: CN=0E71A00DC33BA2094C762DBC9107CD04E59692D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:fe:f2:f0:61:26:cf:f6:ff:63:11:48:97: 84:04:04:13:25:98:39:25:0e:31:20:fd:8b:5c:2d: dd:70:37:17:8a:11:80:06:9b:2e:14:91:00:35:aa: 01:4a:13:e3:a4:aa:31:36:06:19:3f:5f:33:b6:6e: 34:55:be:23:4d:84:2b:31:8b:59:1c:e3:21:c0:55: 32:5a:1c:4c:b9:33:a9:6e:c3:b1:30:81:a2:0a:0b: 5f:b6:36:8f:23:f0:6d:58:24:dc:4b:d8:3a:e3:08: 7e:3c:56:b1:14:32:09:29:c9:37:db:d1:ab:61:c8: 5e:12:e4:24:c7:af:e4:c7:7e:ed:b0:9f:a1:ca:7e: f8:cc:72:ed:a1:8a:73:56:d8:3a:ee:67:9a:5a:db: 4e:57:2f:2d:3b:b1:c7:fd:a8:5b:97:1b:dd:99:79: 43:e3:f2:58:6c:6c:d6:ea:33:ed:a1:a7:4e:56:37: 43:54:b1:35:ee:3e:ff:20:04:80:fb:01:cb:82:fc: 6f:13:93:3e:9d:fa:77:f8:77:14:85:6e:f9:dd:2e: 72:71:ff:08:d0:e8:00:63:fd:7c:72:65:a7:26:68: 63:68:35:35:7c:e6:e5:65:65:a0:3f:e4:f0:54:99: da:03:2f:9e:03:1b:ea:79:88:f8:bd:d3:66:a4:8c: 32:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:71:A0:0D:C3:3B:A2:09:4C:76:2D:BC:91:07:CD:04:E5:96:92:D2 X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/3130332e3233352e3134382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.148.0/22 Signature Algorithm: sha256WithRSAEncryption a8:7b:f0:e3:fc:86:07:c8:06:4f:7c:7f:33:de:15:fa:cb:ba: 98:d7:ae:e0:d1:15:5c:45:87:31:66:b6:9a:91:54:76:ae:a9: 59:5a:56:27:0c:38:bd:d8:75:f2:b0:3a:c9:eb:ef:bb:51:d1: 69:a2:2f:45:b9:82:26:ef:17:a0:27:a5:c3:09:d1:0d:46:42: 1e:b3:f3:03:26:17:e8:ce:32:a5:98:94:ce:96:34:98:b9:e1: 2d:2e:de:67:94:05:36:78:0b:08:d1:71:a7:d4:3d:56:a2:7d: 91:84:a5:62:32:72:9b:b0:4d:ad:35:47:86:14:c1:14:1d:74: d8:9c:47:ec:b6:31:ae:c2:6b:05:24:29:c9:8d:78:3e:47:93: 89:42:e5:01:d0:e6:f7:c2:e5:8a:72:06:93:08:bb:a9:a4:f9: 60:ef:da:c0:9f:4d:85:25:48:ba:b8:b9:4f:df:d8:f6:5a:18: 15:3e:2e:0f:cd:33:f9:d8:e0:8a:f9:62:04:0a:62:e7:99:1d: cd:2c:83:9e:39:5f:5e:d9:ea:61:59:8f:dd:34:10:52:b3:be: a9:90:43:06:44:f2:6e:68:3d:7b:35:40:17:fb:4c:6d:e3:16: 54:f3:69:6a:32:97:06:70:11:a6:11:a9:aa:7b:a1:47:c0:81: c9:1e:10:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUOZMc146cgYhVJBnpgF59cK4Cro0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTMwOTUzNTlaFw0yNzA0MTIwOTU4NTlaMDMxMTAvBgNV BAMTKDBFNzFBMDBEQzMzQkEyMDk0Qzc2MkRCQzkxMDdDRDA0RTU5NjkyRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+P7y8GEmz/b/YxFIl4QEBBMl mDklDjEg/YtcLd1wNxeKEYAGmy4UkQA1qgFKE+OkqjE2Bhk/XzO2bjRVviNNhCsx i1kc4yHAVTJaHEy5M6luw7EwgaIKC1+2No8j8G1YJNxL2DrjCH48VrEUMgkpyTfb 0athyF4S5CTHr+THfu2wn6HKfvjMcu2hinNW2DruZ5pa205XLy07scf9qFuXG92Z eUPj8lhsbNbqM+2hp05WN0NUsTXuPv8gBID7AcuC/G8Tkz6d+nf4dxSFbvndLnJx /wjQ6ABj/XxyZacmaGNoNTV85uVlZaA/5PBUmdoDL54DG+p5iPi902akjDIrAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUDnGgDcM7oglMdi28kQfNBOWWktIwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzEzMDMzMmUzMjMz MzUyZTMxMzQzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z+uUMA0GCSqGSIb3DQEBCwUAA4IBAQCoe/Dj/IYHyAZPfH8z3hX6y7qY167g0RVc RYcxZraakVR2rqlZWlYnDDi92HXysDrJ6++7UdFpoi9FuYIm7xegJ6XDCdENRkIe s/MDJhfozjKlmJTOljSYueEtLt5nlAU2eAsI0XGn1D1Won2RhKViMnKbsE2tNUeG FMEUHXTYnEfstjGuwmsFJCnJjXg+R5OJQuUB0Ob3wuWKcgaTCLuppPlg79rAn02F JUi6uLlP39j2WhgVPi4PzTP52OCK+WIECmLnmR3NLIOeOV9e2ephWY/dNBBSs76p kEMGRPJuaD17NUAX+0xt4xZU82lqMpcGcBGmEamqe6FHwIHJHhBG -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:06 2026 by rpki-client