$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e203539303438.roa File: 3130332e3235352e3230302e302f32322d3234203d3e203539303438.roa (raw, json) Hash identifier: gOiZTUVOyq4onUlyh1mFjdWkav1xY00AkAMnkgJhbb0= Subject key identifier: B1:D0:55:28:07:61:EC:91:4C:88:F2:05:4F:E7:4F:41:D5:E7:FE:2B Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 58DF866E9F142D3D76A674BC832C24470B0AD02A Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e203539303438.roa Signing time: Thu 16 Apr 2026 02:18:14 +0000 ROA not before: Thu 16 Apr 2026 02:13:14 +0000 ROA not after: Thu 15 Apr 2027 02:18:14 +0000 asID: 59048 IP address blocks: 103.255.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:df:86:6e:9f:14:2d:3d:76:a6:74:bc:83:2c:24:47:0b:0a:d0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: Apr 16 02:13:14 2026 GMT Not After : Apr 15 02:18:14 2027 GMT Subject: CN=B1D055280761EC914C88F2054FE74F41D5E7FE2B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:31:fd:d7:92:03:13:4f:c8:5a:b0:c5:08:63: cc:73:8d:3f:17:63:b5:fc:2f:ee:fe:95:a0:a9:a1: 38:be:19:0a:95:ac:28:5b:36:0a:dd:ac:06:9a:01: ae:43:dc:cb:cd:e4:af:8b:42:79:b8:86:6b:fb:d6: dc:62:cf:29:c1:ae:29:b2:d3:cb:92:8b:78:cf:96: 59:7f:e0:ab:96:2e:ba:e3:ad:ae:09:56:b6:ba:b6: 0e:2f:2a:f5:7f:09:f8:98:bd:13:c8:ff:f0:9c:44: 84:f5:07:3f:f8:3e:59:82:70:51:46:74:a7:e6:f8: a4:47:14:f7:08:09:4a:89:ac:b9:67:98:12:28:af: 81:b4:5b:9b:aa:3a:37:78:11:1b:1b:a3:35:47:0b: 46:f4:16:21:83:49:0e:df:21:4d:ef:6b:84:17:15: 03:37:67:5b:5c:6e:38:b8:ce:7e:51:b4:12:8e:f7: 63:f2:76:1d:1a:1d:9d:30:58:4b:3c:98:19:18:2b: a3:e4:88:7c:8d:ae:ab:ae:ce:8f:90:db:14:d7:bd: e4:fe:6c:58:a9:f5:05:8e:c9:ee:0b:bb:a2:86:be: a4:fa:dc:2f:3b:c6:73:bd:1c:ac:81:88:09:a4:07: 22:95:8a:15:7a:eb:01:d9:96:4f:56:27:3a:a9:29: be:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D0:55:28:07:61:EC:91:4C:88:F2:05:4F:E7:4F:41:D5:E7:FE:2B X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/3130332e3235352e3230302e302f32322d3234203d3e203539303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.255.200.0/22 Signature Algorithm: sha256WithRSAEncryption 64:f9:d7:85:61:0e:8e:ec:24:92:40:62:0d:86:07:8c:92:58: 59:6e:74:55:59:a7:f4:ae:f4:32:59:3b:0b:a5:dd:72:6c:11: 98:d6:c8:90:05:75:80:5b:ed:2f:32:4a:f5:7c:04:9b:59:2f: 6d:86:24:88:71:b3:d9:5e:1e:dc:e9:8d:0b:99:70:9f:c4:97: 94:d8:ac:67:af:48:83:f7:11:e7:80:4e:a8:2f:07:94:c5:5e: c9:d7:22:01:94:8f:85:95:33:01:a8:d7:2c:a8:e1:03:94:0b: 78:10:e5:c2:4a:6b:f5:61:4c:89:84:ad:9a:a9:e1:b4:1d:2a: 3a:af:68:45:39:73:6f:ff:23:0d:7d:71:95:90:9f:c1:88:90: 96:0d:88:01:7d:90:32:0d:bc:aa:4d:50:f0:d0:67:7f:2f:e3: e8:8e:22:9c:d3:11:45:7a:f3:c5:7b:a4:2c:98:d6:fa:dc:f3: f4:68:9d:c8:15:de:ea:17:93:d2:94:cf:cb:6b:e3:d7:42:d6: 52:0d:6e:f2:f4:5f:f9:e3:34:d2:f2:9f:69:c2:7a:d8:af:c2: 5e:ba:4b:42:ba:1c:e5:f9:ae:71:95:49:e7:46:81:fb:85:dd: f5:ef:db:90:3c:78:cf:51:4d:cb:df:df:52:23:b4:8c:9e:50: 5b:99:77:5d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWN+Gbp8ULT12pnS8gywkRwsK0CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA0MTYwMjEzMTRaFw0yNzA0MTUwMjE4MTRaMDMxMTAvBgNV BAMTKEIxRDA1NTI4MDc2MUVDOTE0Qzg4RjIwNTRGRTc0RjQxRDVFN0ZFMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Mf3XkgMTT8hasMUIY8xzjT8X Y7X8L+7+laCpoTi+GQqVrChbNgrdrAaaAa5D3MvN5K+LQnm4hmv71txizynBrimy 08uSi3jPlll/4KuWLrrjra4JVra6tg4vKvV/CfiYvRPI//CcRIT1Bz/4PlmCcFFG dKfm+KRHFPcICUqJrLlnmBIor4G0W5uqOjd4ERsbozVHC0b0FiGDSQ7fIU3va4QX FQM3Z1tcbji4zn5RtBKO92Pydh0aHZ0wWEs8mBkYK6PkiHyNrquuzo+Q2xTXveT+ bFip9QWOye4Lu6KGvqT63C87xnO9HKyBiAmkByKVihV66wHZlk9WJzqpKb6XAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUsdBVKAdh7JFMiPIFT+dPQdXn/iswHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MTI0MTA4NTk5NjIzNzEvMC8zMTMwMzMyZTMy MzUzNTJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmf/yDANBgkqhkiG9w0BAQsFAAOCAQEAZPnXhWEOjuwkkkBiDYYH jJJYWW50VVmn9K70Mlk7C6XdcmwRmNbIkAV1gFvtLzJK9XwEm1kvbYYkiHGz2V4e 3OmNC5lwn8SXlNisZ69Ig/cR54BOqC8HlMVeydciAZSPhZUzAajXLKjhA5QLeBDl wkpr9WFMiYStmqnhtB0qOq9oRTlzb/8jDX1xlZCfwYiQlg2IAX2QMg28qk1Q8NBn fy/j6I4inNMRRXrzxXukLJjW+tzz9GidyBXe6heT0pTPy2vj10LWUg1u8vRf+eM0 0vKfacJ62K/CXrpLQroc5fmucZVJ50aB+4Xd9e/bkDx4z1FNy9/fUiO0jJ5QW5l3 XQ== -----END CERTIFICATE-----Generated at Sat Apr 18 01:21:21 2026 by rpki-client