$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e2034383038.roa File: 3130332e3233382e342e302f32322d3332203d3e2034383038.roa (raw, json) Hash identifier: 2z4j2PH4KdKshy4sIbA6C+xgeit0E4tsMQy2ltgdAqQ= Subject key identifier: 90:44:C4:11:B2:93:95:51:2C:D7:75:A6:C8:AD:B0:BF:19:97:9C:3D Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 26049966217B751D8CC827896A30207C24440BE6 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e2034383038.roa Signing time: Wed 15 Apr 2026 08:01:06 +0000 ROA not before: Wed 15 Apr 2026 07:56:06 +0000 ROA not after: Wed 14 Apr 2027 08:01:06 +0000 asID: 4808 IP address blocks: 103.238.4.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:04:99:66:21:7b:75:1d:8c:c8:27:89:6a:30:20:7c:24:44:0b:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: Apr 15 07:56:06 2026 GMT Not After : Apr 14 08:01:06 2027 GMT Subject: CN=9044C411B29395512CD775A6C8ADB0BF19979C3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:52:55:d8:21:2a:41:87:96:b7:77:e2:74:3f: 5a:24:62:fb:84:2b:c4:ad:19:af:71:73:c4:d8:50: d9:2f:a3:d5:78:2c:8c:1b:7b:ef:ee:0e:a1:48:6c: a0:67:0a:50:42:a0:78:fd:a8:2f:89:e7:05:2a:6d: 5c:71:7e:ec:bf:fc:e5:d4:79:76:0f:13:46:9b:53: c2:de:9f:9b:8e:49:6f:37:cf:56:16:28:b8:b0:7e: 97:19:19:ef:7b:e5:2f:2a:4f:78:dc:97:6d:c4:88: 58:29:e5:7a:d5:08:a7:49:ee:04:15:2e:48:aa:7f: 2b:3b:0e:ee:f6:97:b7:88:fc:47:a1:a2:ae:34:0d: b6:da:7c:74:d6:17:f3:dc:98:bd:04:4d:3d:f9:86: 52:ad:86:ee:92:21:b3:7b:72:d6:19:a2:05:85:a7: e1:b1:15:ac:fc:72:d5:f9:28:46:98:ea:b8:9e:77: 93:ca:9f:ad:6a:05:f7:00:6f:fa:9d:2b:ae:09:19: 40:8f:60:25:da:8a:ec:8e:c3:cc:a4:2d:32:b4:c3: 16:01:a8:eb:f7:74:52:17:f0:6b:13:dc:26:44:cb: 86:d4:aa:03:37:a4:ec:11:a2:91:93:c0:bf:2c:d3: 8a:e9:44:eb:b3:2f:7a:34:ad:21:1f:0e:19:88:27: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:44:C4:11:B2:93:95:51:2C:D7:75:A6:C8:AD:B0:BF:19:97:9C:3D X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/3130332e3233382e342e302f32322d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.4.0/22 Signature Algorithm: sha256WithRSAEncryption 43:01:01:e0:86:b6:69:7a:59:11:45:9f:f3:0c:81:6a:25:0f: 4b:f3:78:59:a4:64:85:7c:78:66:eb:4d:4e:3b:d7:fe:fe:34: f0:75:63:50:4c:55:d4:c9:9f:f0:c9:c1:c6:30:30:c7:e8:1a: 61:dd:ec:a8:18:43:b5:cb:23:72:01:49:a7:d4:db:ec:78:d8: 46:15:55:bd:87:ae:0c:6e:f2:4b:d8:89:d0:b3:0d:b5:59:f3: e9:7e:7a:e6:2a:c6:f4:64:41:f5:89:5b:54:27:c9:98:2a:1e: cb:aa:65:17:da:f8:ae:81:f8:5b:e2:c6:f2:a1:55:d0:af:2d: f7:b4:eb:21:dc:21:28:11:20:ef:10:54:39:65:7e:75:5f:2c: cf:6a:ca:36:1e:43:80:e0:e9:e7:8f:d7:1d:a9:7d:30:e4:f0: 0a:24:77:27:3d:cc:3c:f5:40:27:0f:63:7c:07:3d:1a:2b:ca: 77:8f:6a:91:b3:69:a6:af:7c:f2:e5:2f:8a:e1:18:d0:ee:c6: a3:69:60:f2:0c:ef:0a:6f:14:ab:79:85:48:b2:43:b2:fa:8c: 01:72:b8:f3:04:ec:20:2b:75:bd:73:36:f7:a9:17:53:e1:84: e7:91:f0:ae:ec:fb:95:f0:6b:b6:07:76:d9:8f:2a:c5:03:06: 32:87:38:b5 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUJgSZZiF7dR2MyCeJajAgfCREC+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA0MTUwNzU2MDZaFw0yNzA0MTQwODAxMDZaMDMxMTAvBgNV BAMTKDkwNDRDNDExQjI5Mzk1NTEyQ0Q3NzVBNkM4QURCMEJGMTk5NzlDM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYUlXYISpBh5a3d+J0P1okYvuE K8StGa9xc8TYUNkvo9V4LIwbe+/uDqFIbKBnClBCoHj9qC+J5wUqbVxxfuy//OXU eXYPE0abU8Len5uOSW83z1YWKLiwfpcZGe975S8qT3jcl23EiFgp5XrVCKdJ7gQV Lkiqfys7Du72l7eI/Eehoq40DbbafHTWF/PcmL0ETT35hlKthu6SIbN7ctYZogWF p+GxFaz8ctX5KEaY6ried5PKn61qBfcAb/qdK64JGUCPYCXaiuyOw8ykLTK0wxYB qOv3dFIX8GsT3CZEy4bUqgM3pOwRopGTwL8s04rpROuzL3o0rSEfDhmIJ9MvAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUkETEEbKTlVEs13WmyK2wvxmXnD0wHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTg0Mjk0NzY3MDk5OTA1LzAvMzEzMDMzMmUzMjMz MzgyZTM0MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn7gQwDQYJKoZIhvcNAQELBQADggEBAEMBAeCGtml6WRFFn/MMgWolD0vzeFmk ZIV8eGbrTU471/7+NPB1Y1BMVdTJn/DJwcYwMMfoGmHd7KgYQ7XLI3IBSafU2+x4 2EYVVb2Hrgxu8kvYidCzDbVZ8+l+euYqxvRkQfWJW1QnyZgqHsuqZRfa+K6B+Fvi xvKhVdCvLfe06yHcISgRIO8QVDllfnVfLM9qyjYeQ4Dg6eeP1x2pfTDk8Aokdyc9 zDz1QCcPY3wHPRorynePapGzaaavfPLlL4rhGNDuxqNpYPIM7wpvFKt5hUiyQ7L6 jAFyuPME7CArdb1zNvepF1PhhOeR8K7s+5Xwa7YHdtmPKsUDBjKHOLU= -----END CERTIFICATE-----Generated at Fri Apr 17 19:43:03 2026 by rpki-client