$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e203233373234.roa File: 3130332e3233382e302e302f32322d3332203d3e203233373234.roa (raw, json) Hash identifier: K0whk0Vf3B/fS221zljEn2qu9FvjJx3u4ndcAwqzswA= Subject key identifier: 67:35:8B:C8:20:E0:89:39:91:84:F6:12:91:D2:FE:9C:1B:9B:AB:80 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 742F593DD38B301514832794C81DD2EB280CE27C Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e203233373234.roa Signing time: Wed 15 Apr 2026 07:55:58 +0000 ROA not before: Wed 15 Apr 2026 07:50:58 +0000 ROA not after: Wed 14 Apr 2027 07:55:58 +0000 asID: 23724 IP address blocks: 103.238.0.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2f:59:3d:d3:8b:30:15:14:83:27:94:c8:1d:d2:eb:28:0c:e2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 15 07:50:58 2026 GMT Not After : Apr 14 07:55:58 2027 GMT Subject: CN=67358BC820E089399184F61291D2FE9C1B9BAB80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b4:00:f3:eb:ce:50:3f:71:62:a4:d5:25:fe: 06:b2:92:71:98:f1:3e:38:58:ac:cf:0c:90:fd:53: 7b:3a:e0:8e:5a:74:fd:fb:ab:39:82:b2:a2:7a:56: a3:43:d5:e7:7d:46:56:32:a7:b0:61:d7:93:05:84: 11:d2:4e:57:de:eb:3e:5c:3b:3f:bb:5e:39:d2:91: 2e:24:d4:c4:be:b5:5a:2e:a6:1b:af:68:bb:11:1a: 03:ec:d8:ad:17:ed:48:03:9a:0f:86:f3:12:48:4f: f6:9b:9c:59:99:31:eb:12:73:80:fc:59:55:00:db: e8:67:40:be:90:e0:57:fc:42:a1:93:8a:43:7d:99: 83:9f:d8:ae:2e:2e:a2:ed:97:c6:9d:a6:6c:aa:d9: 57:20:31:cf:3b:cd:3d:9e:91:66:b4:6d:28:ef:5d: d0:29:e2:ed:61:04:81:d0:82:2e:b0:17:7f:d4:22: 19:c8:bc:d0:88:14:e8:72:6d:1f:c9:1c:e2:00:c9: cc:5d:cc:23:68:80:2f:52:7c:a3:53:62:05:ff:14: ac:ef:0f:9f:be:d7:f9:c5:ca:9a:6f:57:c7:92:cd: 7b:d0:b2:66:8b:82:d7:c1:4a:97:71:9d:70:7f:0f: 64:1a:6f:8c:18:13:1c:b4:41:be:15:7f:d8:e9:fa: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:35:8B:C8:20:E0:89:39:91:84:F6:12:91:D2:FE:9C:1B:9B:AB:80 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.0.0/22 Signature Algorithm: sha256WithRSAEncryption 00:26:f9:f8:6b:8e:d0:23:76:50:9d:7b:52:4f:a3:e7:48:db: 54:bb:33:83:a5:35:b2:2c:6f:3e:5b:f2:18:41:26:1c:d3:6b: 2a:71:85:bd:9a:a2:70:5d:37:3b:57:ad:21:23:cb:4e:f7:fb: 74:37:21:79:07:4d:72:32:9c:af:53:45:60:20:79:cc:cc:db: 88:03:9e:f6:fc:35:56:ca:b1:1f:af:14:6b:38:10:a9:b8:a1: fe:22:66:75:2f:98:75:41:5e:a7:1a:24:de:a1:a3:b1:07:4d: d6:7d:69:e0:5d:9b:6b:4f:4b:8c:23:aa:21:87:bb:d1:44:77: 46:b0:d4:24:d2:63:3c:53:77:01:aa:81:82:6e:e5:60:dd:ab: 7a:1e:6e:30:44:62:e3:ee:10:91:30:fb:66:75:30:44:80:5b: f4:4f:1b:4b:e3:13:0e:9c:bf:a2:68:56:09:63:b8:2f:ec:3c: 1a:d6:26:c7:7a:a9:63:e1:db:3e:10:df:78:9f:db:82:e7:bb: 8c:8d:7b:a4:8b:dd:da:37:c4:29:b5:0b:04:04:29:86:9c:73: 2c:61:69:38:38:c6:3b:39:2d:92:e8:33:a1:87:a1:43:b1:88: 61:f7:34:b9:51:31:ad:f0:46:8a:de:23:e7:b6:78:67:81:ff: 6f:76:51:ee -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdC9ZPdOLMBUUgyeUyB3S6ygM4nwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTUwNzUwNThaFw0yNzA0MTQwNzU1NThaMDMxMTAvBgNV BAMTKDY3MzU4QkM4MjBFMDg5Mzk5MTg0RjYxMjkxRDJGRTlDMUI5QkFCODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCctADz685QP3FipNUl/gayknGY 8T44WKzPDJD9U3s64I5adP37qzmCsqJ6VqND1ed9RlYyp7Bh15MFhBHSTlfe6z5c Oz+7XjnSkS4k1MS+tVouphuvaLsRGgPs2K0X7UgDmg+G8xJIT/abnFmZMesSc4D8 WVUA2+hnQL6Q4Ff8QqGTikN9mYOf2K4uLqLtl8adpmyq2VcgMc87zT2ekWa0bSjv XdAp4u1hBIHQgi6wF3/UIhnIvNCIFOhybR/JHOIAycxdzCNogC9SfKNTYgX/FKzv D5++1/nFyppvV8eSzXvQsmaLgtfBSpdxnXB/D2Qab4wYExy0Qb4Vf9jp+hI5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZzWLyCDgiTmRhPYSkdL+nBubq4AwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTg0Mjk0NzY3MDk5OTA1LzAvMzEzMDMzMmUzMjMz MzgyZTMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfuADANBgkqhkiG9w0BAQsFAAOCAQEAACb5+GuO0CN2UJ17Uk+j50jbVLsz g6U1sixvPlvyGEEmHNNrKnGFvZqicF03O1etISPLTvf7dDcheQdNcjKcr1NFYCB5 zMzbiAOe9vw1VsqxH68UazgQqbih/iJmdS+YdUFepxok3qGjsQdN1n1p4F2ba09L jCOqIYe70UR3RrDUJNJjPFN3AaqBgm7lYN2reh5uMERi4+4QkTD7ZnUwRIBb9E8b S+MTDpy/omhWCWO4L+w8GtYmx3qpY+HbPhDfeJ/bgue7jI17pIvd2jfEKbULBAQp hpxzLGFpODjGOzktkugzoYehQ7GIYfc0uVExrfBGit4j57Z4Z4H/b3ZR7g== -----END CERTIFICATE-----Generated at Fri Apr 17 22:26:22 2026 by rpki-client