$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3132382e302f32342d3234203d3e20313335333931.roa File: 3130332e3235312e3132382e302f32342d3234203d3e20313335333931.roa (raw, json) Hash identifier: kbrBkkIPu+ayERlbNKhyKg60XTNAXhBpi0+WVeAHByY= Subject key identifier: B8:79:09:A7:7D:23:62:24:4E:B2:C5:E0:FB:AC:1D:A0:38:41:1B:C3 Certificate issuer: /CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Certificate serial: 24C4AE4B8A52DF212EE53F25F805F4872E7E93AB Authority key identifier: E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3132382e302f32342d3234203d3e20313335333931.roa Signing time: Fri 17 Apr 2026 09:05:29 +0000 ROA not before: Fri 17 Apr 2026 09:00:29 +0000 ROA not after: Fri 16 Apr 2027 09:05:29 +0000 asID: 135391 IP address blocks: 103.251.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:c4:ae:4b:8a:52:df:21:2e:e5:3f:25:f8:05:f4:87:2e:7e:93:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E3E0C774E3B2BC58790E7499837A4155C1A869E6 Validity Not Before: Apr 17 09:00:29 2026 GMT Not After : Apr 16 09:05:29 2027 GMT Subject: CN=B87909A77D2362244EB2C5E0FBAC1DA038411BC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:99:7c:1f:d4:5a:6f:25:91:d4:56:6e:1b:e3: 19:c3:5a:dc:22:15:e3:a4:a7:35:97:95:17:a6:ec: c2:ed:dd:a1:db:02:34:84:ae:1a:c7:e1:d1:87:d3: bc:3e:da:60:ad:da:8d:e1:fc:c2:fa:f9:3e:c1:6a: 47:9d:52:d9:fe:45:ff:57:b0:c0:5c:26:c8:d4:b2: d9:44:4a:ce:91:aa:98:f5:3d:07:46:17:ea:bf:3e: 01:bc:7e:ba:fc:30:d1:5b:b3:cd:65:ea:4d:46:25: 17:63:20:9e:78:32:a8:10:24:24:99:11:39:ed:b9: ae:54:7f:e7:39:0b:9a:84:02:be:6a:63:d1:ca:5b: c8:64:69:67:48:8b:a5:bb:5d:3e:72:e4:10:a3:f8: 5a:46:b0:3e:bf:a8:a9:f9:cd:57:f7:5e:76:aa:db: 06:2c:cf:9d:f0:67:b8:f5:76:8b:cd:a4:85:7f:9a: a8:c8:25:a1:ff:c7:09:51:ef:cc:88:bf:bb:b2:92: cd:b8:1d:fb:80:f9:3b:fb:a2:34:38:7c:e4:86:53: d3:09:3c:d7:be:7e:c4:ee:f0:f8:ce:e2:8e:a0:b2: 50:da:6d:03:4d:8e:1d:6c:05:1b:25:06:79:c5:42: 3f:be:55:11:82:e7:85:17:bb:1a:00:a5:da:67:c9: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:79:09:A7:7D:23:62:24:4E:B2:C5:E0:FB:AC:1D:A0:38:41:1B:C3 X509v3 Authority Key Identifier: keyid:E3:E0:C7:74:E3:B2:BC:58:79:0E:74:99:83:7A:41:55:C1:A8:69:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/E3E0C774E3B2BC58790E7499837A4155C1A869E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E3E0C774E3B2BC58790E7499837A4155C1A869E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096275330777350146/0/3130332e3235312e3132382e302f32342d3234203d3e20313335333931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.251.128.0/24 Signature Algorithm: sha256WithRSAEncryption 1e:74:da:85:95:62:6f:c6:1e:dc:67:eb:82:6c:e0:c9:f4:5c: 17:45:cd:8b:84:1d:da:61:eb:85:c3:a1:2b:5b:3d:b5:c2:ea: 40:78:5d:40:c9:56:08:72:e3:ae:d5:97:bb:4f:a1:b4:45:ec: 94:b4:0a:f3:d9:ab:7d:73:65:16:e3:37:02:f3:fd:c1:a8:eb: 48:41:4e:81:bf:2f:2e:cd:80:fb:90:b6:c1:b2:33:99:20:d7: 83:32:b5:74:bc:43:64:28:4d:3f:7a:02:37:95:3e:54:1d:89: 42:49:80:9b:50:4e:98:96:13:62:18:66:72:c6:4d:f3:04:96: c3:5a:78:15:9a:ef:87:6f:ef:60:4e:4b:9d:d9:81:0b:21:f2: 8c:02:a3:79:39:c2:af:20:4c:7d:c4:de:8a:49:6c:66:f5:08: f8:2f:25:d5:6f:c7:73:34:13:90:81:0b:48:e9:4b:60:1f:de: af:b8:58:ac:da:1a:fe:2b:b7:7f:03:55:b7:02:00:92:c9:e2: c2:14:42:31:dd:36:13:b5:cb:6c:56:92:cd:e3:bb:2f:47:bf: 8c:b1:da:e1:0d:43:5b:74:8f:14:75:0d:b3:53:ac:79:27:7d: 19:5d:58:23:19:e6:8f:d8:23:6f:9a:5e:e1:44:94:f8:f8:45: 27:e8:88:f5 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUJMSuS4pS3yEu5T8l+AX0hy5+k6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVD MUE4NjlFNjAeFw0yNjA0MTcwOTAwMjlaFw0yNzA0MTYwOTA1MjlaMDMxMTAvBgNV BAMTKEI4NzkwOUE3N0QyMzYyMjQ0RUIyQzVFMEZCQUMxREEwMzg0MTFCQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYmXwf1FpvJZHUVm4b4xnDWtwi FeOkpzWXlRem7MLt3aHbAjSErhrH4dGH07w+2mCt2o3h/ML6+T7BakedUtn+Rf9X sMBcJsjUstlESs6Rqpj1PQdGF+q/PgG8frr8MNFbs81l6k1GJRdjIJ54MqgQJCSZ ETntua5Uf+c5C5qEAr5qY9HKW8hkaWdIi6W7XT5y5BCj+FpGsD6/qKn5zVf3Xnaq 2wYsz53wZ7j1dovNpIV/mqjIJaH/xwlR78yIv7uyks24HfuA+Tv7ojQ4fOSGU9MJ PNe+fsTu8PjO4o6gslDabQNNjh1sBRslBnnFQj++VRGC54UXuxoApdpnyaLbAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUuHkJp30jYiROssXg+6wdoDhBG8MwHwYDVR0j BBgwFoAU4+DHdOOyvFh5DnSZg3pBVcGoaeYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI3NTMzMDc3NzM1MDE0Ni8wL0UzRTBDNzc0RTNCMkJDNTg3OTBFNzQ5OTgzN0E0 MTU1QzFBODY5RTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTNFMEM3NzRFM0IyQkM1ODc5MEU3NDk5ODM3QTQxNTVDMUE4NjlFNi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk2Mjc1MzMwNzc3MzUwMTQ2LzAvMzEzMDMzMmUz MjM1MzEyZTMxMzIzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMzMzkz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGf7gDANBgkqhkiG9w0BAQsFAAOCAQEAHnTahZVib8Ye3Gfr gmzgyfRcF0XNi4Qd2mHrhcOhK1s9tcLqQHhdQMlWCHLjrtWXu0+htEXslLQK89mr fXNlFuM3AvP9wajrSEFOgb8vLs2A+5C2wbIzmSDXgzK1dLxDZChNP3oCN5U+VB2J QkmAm1BOmJYTYhhmcsZN8wSWw1p4FZrvh2/vYE5LndmBCyHyjAKjeTnCryBMfcTe iklsZvUI+C8l1W/HczQTkIELSOlLYB/er7hYrNoa/iu3fwNVtwIAksniwhRCMd02 E7XLbFaSzeO7L0e/jLHa4Q1DW3SPFHUNs1OseSd9GV1YIxnmj9gjb5pe4USU+PhF J+iI9Q== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:20 2026 by rpki-client