$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e203536303438.roa File: 3130332e3233382e302e302f32322d3332203d3e203536303438.roa (raw, json) Hash identifier: zjWupKFn+Rq4sUjDxU2QIc6giBG1zVO8GuFEp9ODEEc= Subject key identifier: 65:ED:36:F3:87:BE:F4:E3:0C:7B:C8:82:CC:8C:9D:D7:0E:15:E9:EA Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 36F0C13E7C5425111732FC8983F2333DECC3CCB8 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e203536303438.roa Signing time: Wed 15 Apr 2026 07:48:13 +0000 ROA not before: Wed 15 Apr 2026 07:43:13 +0000 ROA not after: Wed 14 Apr 2027 07:48:13 +0000 asID: 56048 IP address blocks: 103.238.0.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f0:c1:3e:7c:54:25:11:17:32:fc:89:83:f2:33:3d:ec:c3:cc:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 15 07:43:13 2026 GMT Not After : Apr 14 07:48:13 2027 GMT Subject: CN=65ED36F387BEF4E30C7BC882CC8C9DD70E15E9EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:60:82:9e:f0:c8:4e:2e:e5:44:4d:17:fc:e1: 2c:47:90:c6:1c:ae:8f:98:5a:f5:5e:72:ad:3e:c2: d2:92:9d:45:70:84:5f:cc:17:b1:c4:55:05:c1:1f: f5:cd:c5:ea:e2:17:f2:0c:86:bf:e2:c1:3b:7d:f5: 40:c7:87:d3:84:a9:05:37:71:05:bd:fd:16:89:34: f5:32:b3:93:27:41:b4:7c:c2:36:47:a9:b3:22:dd: 37:6d:65:47:e4:33:03:89:1a:15:e1:1c:3e:61:2d: 8b:37:d4:28:49:32:34:d5:fb:3c:66:df:75:2e:1c: 38:a9:54:4b:ec:ce:77:fe:89:28:71:70:7a:df:1d: 77:4d:89:e5:af:30:ea:4f:f5:6f:2e:dc:af:26:07: f2:22:bb:78:d7:37:82:07:df:1c:17:c1:20:3e:7e: 5f:54:87:58:0c:f0:48:6a:47:0a:68:55:9a:b4:68: 25:d2:82:44:d2:bf:9e:b4:3b:98:5c:d9:bf:f1:48: e5:af:67:52:c9:15:7f:fa:0c:4e:e0:cc:b5:e9:50: cd:1d:91:07:5e:e0:84:c7:07:54:19:d7:a0:07:a5: f4:26:ad:aa:7b:c2:bc:7a:6f:69:dc:d7:be:c4:4f: 01:23:86:ff:35:32:be:10:9f:5c:0e:e3:c2:3f:70: 61:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:ED:36:F3:87:BE:F4:E3:0C:7B:C8:82:CC:8C:9D:D7:0E:15:E9:EA X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e302e302f32322d3332203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.0.0/22 Signature Algorithm: sha256WithRSAEncryption 25:15:40:57:ad:78:54:4e:84:71:b1:80:4c:82:fc:ca:23:9a: ed:13:2a:3e:23:f5:34:a1:58:e3:16:3a:2f:62:81:f4:d9:c5: e8:9b:20:3c:aa:f3:fb:53:f9:f4:28:58:1c:4d:34:4c:34:20: 8c:74:82:68:de:27:3c:83:20:5d:c6:87:fb:b9:73:1f:48:77: 3d:fc:39:94:d6:41:a7:3d:41:0a:a5:50:f8:cb:3d:4e:24:c3: 39:ab:43:fa:98:14:3c:65:00:20:c6:88:5e:5f:c9:9c:a9:31: d0:80:1d:49:c4:0f:b7:16:20:68:bd:52:1e:bd:a3:44:f2:b8: e4:64:50:2a:b3:34:73:99:6c:e1:c7:6c:68:90:00:dd:5f:d5: 6e:2a:23:ad:b7:dc:25:d9:ff:d7:47:b5:60:d2:60:32:be:3c: 4c:10:8f:85:77:ed:1a:52:3d:d2:ed:e3:99:e5:72:6e:1a:0a: 00:7e:69:12:89:a6:54:1c:54:1c:94:b3:86:2a:d2:73:1d:31: 3d:99:e2:b2:20:7d:03:1e:cb:7c:ef:67:96:db:e3:74:b7:d1: 0a:78:be:ba:1f:64:3c:7d:2b:fc:6e:70:c4:eb:b2:e3:54:63: 1f:35:c1:07:6e:f1:28:a0:ca:95:a4:a1:38:ca:a5:5b:bb:51: 9c:f1:d7:4a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUNvDBPnxUJREXMvyJg/IzPezDzLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTUwNzQzMTNaFw0yNzA0MTQwNzQ4MTNaMDMxMTAvBgNV BAMTKDY1RUQzNkYzODdCRUY0RTMwQzdCQzg4MkNDOEM5REQ3MEUxNUU5RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuYIKe8MhOLuVETRf84SxHkMYc ro+YWvVecq0+wtKSnUVwhF/MF7HEVQXBH/XNxeriF/IMhr/iwTt99UDHh9OEqQU3 cQW9/RaJNPUys5MnQbR8wjZHqbMi3TdtZUfkMwOJGhXhHD5hLYs31ChJMjTV+zxm 33UuHDipVEvsznf+iShxcHrfHXdNieWvMOpP9W8u3K8mB/Iiu3jXN4IH3xwXwSA+ fl9Uh1gM8EhqRwpoVZq0aCXSgkTSv560O5hc2b/xSOWvZ1LJFX/6DE7gzLXpUM0d kQde4ITHB1QZ16AHpfQmrap7wrx6b2nc177ETwEjhv81Mr4Qn1wO48I/cGFPAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZe0284e+9OMMe8iCzIyd1w4V6eowHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTg0Mjk0NzY3MDk5OTA1LzAvMzEzMDMzMmUzMjMz MzgyZTMwMmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzNjMwMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfuADANBgkqhkiG9w0BAQsFAAOCAQEAJRVAV614VE6EcbGATIL8yiOa7RMq PiP1NKFY4xY6L2KB9NnF6JsgPKrz+1P59ChYHE00TDQgjHSCaN4nPIMgXcaH+7lz H0h3Pfw5lNZBpz1BCqVQ+Ms9TiTDOatD+pgUPGUAIMaIXl/JnKkx0IAdScQPtxYg aL1SHr2jRPK45GRQKrM0c5ls4cdsaJAA3V/VbiojrbfcJdn/10e1YNJgMr48TBCP hXftGlI90u3jmeVybhoKAH5pEommVBxUHJSzhirScx0xPZnisiB9Ax7LfO9nltvj dLfRCni+uh9kPH0r/G5wxOuy41RjHzXBB27xKKDKlaShOMqlW7tRnPHXSg== -----END CERTIFICATE-----Generated at Fri Apr 17 22:26:25 2026 by rpki-client