$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37332e302f32342d3234203d3e203538343631.roa File: 3130332e3132302e37332e302f32342d3234203d3e203538343631.roa (raw, json) Hash identifier: 0VGwIZybtL6yUvgEvn9GF6XQoKjhTE1ct0cJpkcJzuo= Subject key identifier: 8E:A0:B5:01:0C:A1:5D:2A:D9:80:3C:5E:75:AA:3F:70:5E:8C:C9:D5 Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 7D722B01BD9C177F327D18383C86229126B4EFA7 Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37332e302f32342d3234203d3e203538343631.roa Signing time: Tue 14 Apr 2026 07:29:24 +0000 ROA not before: Tue 14 Apr 2026 07:24:24 +0000 ROA not after: Tue 13 Apr 2027 07:29:24 +0000 asID: 58461 IP address blocks: 103.120.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:72:2b:01:bd:9c:17:7f:32:7d:18:38:3c:86:22:91:26:b4:ef:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:24:24 2026 GMT Not After : Apr 13 07:29:24 2027 GMT Subject: CN=8EA0B5010CA15D2AD9803C5E75AA3F705E8CC9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:a7:a0:1a:52:f5:20:0e:4a:9d:df:f2:fb: 03:7b:16:6c:e1:73:4d:72:05:f7:98:4c:dc:2f:56: df:f9:2a:6e:68:84:a1:0e:dc:46:c8:5e:3e:60:66: 56:06:94:4f:67:62:b7:69:d3:98:77:09:14:03:b3: ff:68:7a:c1:45:cc:93:e9:17:31:4c:1d:dd:57:db: bc:b8:8a:85:16:75:61:78:1f:bf:68:4f:44:09:1a: 8f:2c:83:52:7d:6d:4a:e8:0a:a0:b3:37:2f:b9:1c: 3a:c1:8e:58:70:35:06:d3:ef:4d:38:a2:39:28:d9: f6:c3:ba:51:62:d5:e0:ec:f6:b0:72:45:15:43:4c: 22:60:f1:e8:a0:dc:f5:e1:c5:7d:1d:e1:74:0a:17: 96:a6:41:81:30:1c:cf:b2:c0:13:2b:0c:5c:3d:42: 78:fc:74:33:b1:93:f0:16:d2:22:65:3c:7d:52:8a: e4:2a:2f:af:aa:6e:32:31:c1:9a:69:49:33:e5:2d: 53:06:47:40:da:46:81:53:a6:e2:b5:29:ad:e6:a3: d4:b4:fd:1b:d6:9f:72:a8:76:29:c4:03:d5:fb:2a: 87:4c:b3:78:44:5a:ef:fc:f6:18:10:ff:6f:e8:f6: 83:f5:89:9c:65:43:c0:cd:cf:d1:0e:1c:45:34:3e: e4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A0:B5:01:0C:A1:5D:2A:D9:80:3C:5E:75:AA:3F:70:5E:8C:C9:D5 X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37332e302f32342d3234203d3e203538343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.73.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:ae:ba:f6:0d:8f:fc:c9:93:5b:16:58:91:9e:75:39:e4:2d: 89:ac:a3:ee:91:5b:1e:c9:32:5f:9d:9f:c3:26:2b:8c:7c:2d: d8:39:49:2d:94:87:6e:2f:d9:b7:46:84:21:f9:ea:f9:0d:60: eb:37:c5:d8:49:9a:ab:21:64:c1:cd:38:e3:de:1b:49:a2:b4: e9:2f:27:a6:d1:8e:94:c4:f8:42:e1:9e:44:b6:4a:3c:90:2f: 55:31:80:12:c6:9f:41:ac:0b:b4:82:a7:52:0e:26:dd:0f:73: db:84:f1:0b:17:a9:a1:cb:96:b8:c9:bd:e8:c7:8a:39:5e:2d: 3b:7c:76:69:ba:79:56:ce:e0:8c:6c:0d:b8:ba:52:30:47:d7: 76:24:ba:31:f1:52:f5:43:21:17:ba:4a:b6:b2:f2:c1:a4:6f: e3:04:b0:94:b4:07:55:55:a8:fe:d2:d9:c4:b1:30:78:dc:5a: f6:89:d8:ca:a9:eb:a4:97:63:56:08:de:7e:95:95:19:19:a2: f3:74:fd:90:06:04:80:a9:de:bb:9a:a2:23:a8:90:62:df:76: 86:c7:c1:5c:2a:53:a0:fb:0f:97:fd:3f:5f:d5:4f:f0:da:97: fd:11:73:f0:42:14:55:f7:49:99:1b:18:a3:68:70:8d:2c:00: 4a:31:e5:b0 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUfXIrAb2cF38yfRg4PIYikSa076cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjRaFw0yNzA0MTMwNzI5MjRaMDMxMTAvBgNV BAMTKDhFQTBCNTAxMENBMTVEMkFEOTgwM0M1RTc1QUEzRjcwNUU4Q0M5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtk6egGlL1IA5Knd/y+wN7Fmzh c01yBfeYTNwvVt/5Km5ohKEO3EbIXj5gZlYGlE9nYrdp05h3CRQDs/9oesFFzJPp FzFMHd1X27y4ioUWdWF4H79oT0QJGo8sg1J9bUroCqCzNy+5HDrBjlhwNQbT7004 ojko2fbDulFi1eDs9rByRRVDTCJg8eig3PXhxX0d4XQKF5amQYEwHM+ywBMrDFw9 Qnj8dDOxk/AW0iJlPH1SiuQqL6+qbjIxwZppSTPlLVMGR0DaRoFTpuK1Ka3mo9S0 /RvWn3KodinEA9X7KodMs3hEWu/89hgQ/2/o9oP1iZxlQ8DNz9EOHEU0PuT/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUjqC1AQyhXSrZgDxedao/cF6MydUwHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzAzMzJlMzEz MjMwMmUzNzMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGd4STANBgkqhkiG9w0BAQsFAAOCAQEAbK669g2P/MmTWxZYkZ51OeQt iayj7pFbHskyX52fwyYrjHwt2DlJLZSHbi/Zt0aEIfnq+Q1g6zfF2EmaqyFkwc04 494bSaK06S8nptGOlMT4QuGeRLZKPJAvVTGAEsafQawLtIKnUg4m3Q9z24TxCxep ocuWuMm96MeKOV4tO3x2abp5Vs7gjGwNuLpSMEfXdiS6MfFS9UMhF7pKtrLywaRv 4wSwlLQHVVWo/tLZxLEweNxa9onYyqnrpJdjVgjefpWVGRmi83T9kAYEgKneu5qi I6iQYt92hsfBXCpToPsPl/0/X9VP8NqX/RFz8EIUVfdJmRsYo2hwjSwASjHlsA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:50:42 2026 by rpki-client