$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e203233373234.roa File: 3130332e3233382e342e302f32322d3332203d3e203233373234.roa (raw, json) Hash identifier: ZnKtKYiBnUUSTNvN6M2vxi145uCIypRtFdR+UvbpvNs= Subject key identifier: 07:BF:2C:EA:FA:70:9D:68:F4:8F:26:CA:14:15:F1:78:BE:0E:B5:B7 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 780BB0060F25C0D00AE162CC95A84A7C3481BA92 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e203233373234.roa Signing time: Wed 15 Apr 2026 07:56:18 +0000 ROA not before: Wed 15 Apr 2026 07:51:18 +0000 ROA not after: Wed 14 Apr 2027 07:56:18 +0000 asID: 23724 IP address blocks: 103.238.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:0b:b0:06:0f:25:c0:d0:0a:e1:62:cc:95:a8:4a:7c:34:81:ba:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 15 07:51:18 2026 GMT Not After : Apr 14 07:56:18 2027 GMT Subject: CN=07BF2CEAFA709D68F48F26CA1415F178BE0EB5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8c:ab:d4:84:63:c6:31:66:30:52:c1:1e:31: cc:86:d7:64:37:24:79:87:f5:49:aa:f2:16:2f:81: 44:c2:05:69:98:1b:6e:81:15:42:12:2f:23:c5:85: 63:e6:d7:74:4e:b0:7a:c8:5b:b8:60:8b:4f:0a:cc: a9:09:05:84:c6:08:2b:dd:e0:94:18:8f:4f:8a:0c: dd:5d:b8:c8:0f:26:87:52:fa:f4:e5:bb:10:5e:c3: 67:dd:f5:8a:b9:99:e1:41:8d:17:b9:c5:d1:b5:3c: 49:de:dc:88:77:8f:21:28:02:9f:e4:1b:32:0e:a4: e0:fc:d4:4d:28:41:94:93:60:db:69:73:d1:6c:b0: 41:6d:08:70:bf:8b:1c:b6:cd:8c:55:2b:db:47:08: 9f:d6:f8:fd:49:a1:cd:f2:50:8f:db:e1:8a:c1:6a: 71:77:b4:42:70:57:23:6b:85:45:c8:50:ab:b7:c7: ba:5c:15:c4:98:fe:3c:b2:f6:07:3b:47:78:b5:ca: 7d:47:e9:05:96:9c:dc:fc:f1:60:55:df:0a:52:c4: b0:01:a1:96:aa:dd:e4:0c:d9:14:07:02:79:75:35: 7b:fe:96:55:c3:f0:b2:42:ad:d4:4b:45:05:e4:72: bd:f0:8c:b0:d3:9c:86:bc:3e:5f:d1:b7:42:63:40: 32:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BF:2C:EA:FA:70:9D:68:F4:8F:26:CA:14:15:F1:78:BE:0E:B5:B7 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.4.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:f6:ff:b0:92:3f:e2:70:3b:10:b5:7d:3e:d5:fd:40:71:e4: e0:40:ec:32:b8:b7:0e:ee:0d:51:86:31:2a:d4:f2:6d:77:3b: 13:b7:98:1c:20:34:15:c2:15:16:33:7d:1f:f4:80:8e:85:75: ea:c2:e4:75:50:8e:5a:83:f4:4a:df:b0:15:a9:bc:5e:cd:c2: 05:3d:50:3c:3c:4e:4a:c9:22:ba:de:c7:3f:36:16:23:b4:9b: 2e:91:05:87:31:28:4f:c9:b8:6b:40:fe:fc:c0:6b:cd:ac:5e: c5:c1:91:e2:e2:62:19:ab:d3:4a:1e:d9:6e:a2:9f:68:94:52: 43:47:42:32:46:7d:41:5f:07:69:74:cb:14:9b:72:07:06:69: 17:eb:2d:a4:7f:6e:64:90:3f:5c:8f:26:be:c5:c8:4e:6f:ba: 37:76:8a:ee:65:51:68:06:e8:24:94:dc:6a:d9:44:92:e8:5b: bb:ef:8c:2c:36:ab:fc:e9:69:64:ff:48:65:81:56:92:df:6c: 95:b5:38:be:bf:15:13:f5:0e:69:31:2c:ca:2c:95:2c:82:09: 37:ab:5e:2c:e7:4a:f2:01:f8:0c:c5:65:86:ef:38:73:5b:70: 63:2c:c3:ff:48:4a:c8:5d:93:b6:2b:e4:42:9f:ec:07:2a:ab: 04:27:1e:31 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUeAuwBg8lwNAK4WLMlahKfDSBupIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTUwNzUxMThaFw0yNzA0MTQwNzU2MThaMDMxMTAvBgNV BAMTKDA3QkYyQ0VBRkE3MDlENjhGNDhGMjZDQTE0MTVGMTc4QkUwRUI1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jKvUhGPGMWYwUsEeMcyG12Q3 JHmH9Umq8hYvgUTCBWmYG26BFUISLyPFhWPm13ROsHrIW7hgi08KzKkJBYTGCCvd 4JQYj0+KDN1duMgPJodS+vTluxBew2fd9Yq5meFBjRe5xdG1PEne3Ih3jyEoAp/k GzIOpOD81E0oQZSTYNtpc9FssEFtCHC/ixy2zYxVK9tHCJ/W+P1Joc3yUI/b4YrB anF3tEJwVyNrhUXIUKu3x7pcFcSY/jyy9gc7R3i1yn1H6QWWnNz88WBV3wpSxLAB oZaq3eQM2RQHAnl1NXv+llXD8LJCrdRLRQXkcr3wjLDTnIa8Pl/Rt0JjQDJxAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUB78s6vpwnWj0jybKFBXxeL4OtbcwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTg0Mjk0NzY3MDk5OTA1LzAvMzEzMDMzMmUzMjMz MzgyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfuBDANBgkqhkiG9w0BAQsFAAOCAQEATvb/sJI/4nA7ELV9PtX9QHHk4EDs Mri3Du4NUYYxKtTybXc7E7eYHCA0FcIVFjN9H/SAjoV16sLkdVCOWoP0St+wFam8 Xs3CBT1QPDxOSskiut7HPzYWI7SbLpEFhzEoT8m4a0D+/MBrzaxexcGR4uJiGavT Sh7ZbqKfaJRSQ0dCMkZ9QV8HaXTLFJtyBwZpF+stpH9uZJA/XI8mvsXITm+6N3aK 7mVRaAboJJTcatlEkuhbu++MLDar/OlpZP9IZYFWkt9slbU4vr8VE/UOaTEsyiyV LIIJN6teLOdK8gH4DMVlhu84c1twYyzD/0hKyF2TtivkQp/sByqrBCceMQ== -----END CERTIFICATE-----Generated at Fri Apr 17 22:26:19 2026 by rpki-client