$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37342e302f32342d3234203d3e203538343631.roa File: 3130332e3132302e37342e302f32342d3234203d3e203538343631.roa (raw, json) Hash identifier: Pr5NBsNQ4w+2UPeMbxevcNKzNN5WoXYQCMaS/P/zOtg= Subject key identifier: BF:BE:D7:3D:83:64:2A:83:31:9C:92:09:B5:F8:59:15:43:78:3A:0A Certificate issuer: /CN=709E5125176627846677AF908E76CAE21FB95460 Certificate serial: 67EA3949BC249BD0BA6E5D847F404A9091D6E31E Authority key identifier: 70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37342e302f32342d3234203d3e203538343631.roa Signing time: Tue 14 Apr 2026 07:29:25 +0000 ROA not before: Tue 14 Apr 2026 07:24:25 +0000 ROA not after: Tue 13 Apr 2027 07:29:25 +0000 asID: 58461 IP address blocks: 103.120.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ea:39:49:bc:24:9b:d0:ba:6e:5d:84:7f:40:4a:90:91:d6:e3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=709E5125176627846677AF908E76CAE21FB95460 Validity Not Before: Apr 14 07:24:25 2026 GMT Not After : Apr 13 07:29:25 2027 GMT Subject: CN=BFBED73D83642A83319C9209B5F8591543783A0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2b:e7:e5:68:87:6d:a1:ff:5c:54:b5:d0:98: 38:61:51:d9:fb:15:95:08:a2:4c:dc:c6:20:22:14: 76:9d:06:b3:3c:71:56:72:a5:d5:7d:1e:c7:91:5f: f7:6a:fe:0e:85:a7:79:78:ca:d9:2a:71:ec:23:86: 5b:16:24:96:ba:16:be:f2:7b:db:4f:22:59:ca:8d: 08:35:15:76:30:86:6e:92:0f:6d:8e:c1:44:70:7c: 3a:7d:ea:01:25:0d:50:cf:87:9a:64:22:d7:52:64: 8b:83:58:7d:c5:11:3b:55:ec:fe:48:90:7d:e5:92: 07:1e:8b:2c:6a:2e:2b:14:83:5c:52:01:0d:fa:f4: 3b:9b:bc:1d:b6:ee:0d:54:2f:f9:44:fd:51:5b:ca: 65:78:4b:35:74:5f:d8:68:3b:f5:43:4d:a2:76:b0: 19:b9:d1:66:3d:82:7d:9b:72:f8:48:48:36:7b:3f: 3a:f6:ec:28:82:66:a9:fa:29:0b:46:20:fb:6a:9f: 5b:e2:a2:55:34:eb:6a:ae:29:4d:da:d0:78:ad:85: 6c:68:b7:29:86:9e:22:a0:2f:50:bc:32:49:98:95: db:20:17:1c:a9:ce:e2:92:7c:67:a0:4c:9c:61:0b: 12:31:8e:56:06:54:1f:be:97:03:9a:93:6a:27:87: a8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BE:D7:3D:83:64:2A:83:31:9C:92:09:B5:F8:59:15:43:78:3A:0A X509v3 Authority Key Identifier: keyid:70:9E:51:25:17:66:27:84:66:77:AF:90:8E:76:CA:E2:1F:B9:54:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/709E5125176627846677AF908E76CAE21FB95460.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/709E5125176627846677AF908E76CAE21FB95460.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092377601/0/3130332e3132302e37342e302f32342d3234203d3e203538343631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.120.74.0/24 Signature Algorithm: sha256WithRSAEncryption b5:24:8d:86:1d:8c:9c:d9:38:dd:fa:2c:39:65:bf:e7:3a:13: f5:0e:dc:4e:ec:fd:58:b9:3f:d6:71:ff:44:e5:c1:01:27:e0: b2:0f:1a:ed:c5:51:7f:8a:5e:25:2a:81:a1:11:55:90:b6:ce: 10:41:d6:07:41:68:ae:48:f4:9d:27:2c:8e:c9:8f:1b:3f:f8: d3:15:26:9a:4b:0f:db:69:ca:6b:25:b6:bf:7a:a6:ae:0b:e4: 66:2b:19:49:3b:16:c0:54:87:e7:e1:70:d8:99:01:c6:9a:62: 29:6e:71:14:ac:e3:ff:9e:90:2f:99:5f:ac:3d:3f:bb:58:18: ee:c1:f2:d6:b3:0c:9c:30:ed:4b:b3:bb:69:9a:ce:f0:7e:ba: 26:b2:71:e5:e1:f4:29:f0:a9:25:de:86:b6:b1:9c:8a:78:b6: ee:ff:6e:a1:4a:7e:65:d4:0f:66:9c:06:5f:bc:ee:72:78:97: 2e:54:cd:0f:2f:3f:ec:4a:b3:a3:99:bf:8e:61:3b:2b:d5:d0: ae:95:ec:15:0f:f9:b0:1f:d1:05:40:3f:f1:06:1b:e6:21:c9: 40:f2:6a:3b:49:f2:f9:97:67:eb:22:77:09:5d:3e:22:95:16: c4:48:cd:98:fd:78:17:75:e5:c9:a6:fb:06:89:d6:79:e5:e1: d6:29:fd:14 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZ+o5Sbwkm9C6bl2Ef0BKkJHW4x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIx RkI5NTQ2MDAeFw0yNjA0MTQwNzI0MjVaFw0yNzA0MTMwNzI5MjVaMDMxMTAvBgNV BAMTKEJGQkVENzNEODM2NDJBODMzMTlDOTIwOUI1Rjg1OTE1NDM3ODNBMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCK+flaIdtof9cVLXQmDhhUdn7 FZUIokzcxiAiFHadBrM8cVZypdV9HseRX/dq/g6Fp3l4ytkqcewjhlsWJJa6Fr7y e9tPIlnKjQg1FXYwhm6SD22OwURwfDp96gElDVDPh5pkItdSZIuDWH3FETtV7P5I kH3lkgceiyxqLisUg1xSAQ369DubvB227g1UL/lE/VFbymV4SzV0X9hoO/VDTaJ2 sBm50WY9gn2bcvhISDZ7Pzr27CiCZqn6KQtGIPtqn1violU062quKU3a0HithWxo tymGniKgL1C8MkmYldsgFxypzuKSfGegTJxhCxIxjlYGVB++lwOak2onh6hNAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUv77XPYNkKoMxnJIJtfhZFUN4OgowHwYDVR0j BBgwFoAUcJ5RJRdmJ4Rmd6+QjnbK4h+5VGAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzMDg1OTA5MjM3NzYwMS8wLzcwOUU1MTI1MTc2NjI3ODQ2Njc3QUY5MDhFNzZD QUUyMUZCOTU0NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzA5RTUxMjUxNzY2Mjc4NDY2NzdBRjkwOEU3NkNBRTIxRkI5NTQ2MC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzMDg1OTA5MjM3NzYwMS8wLzMxMzAzMzJlMzEz MjMwMmUzNzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGd4SjANBgkqhkiG9w0BAQsFAAOCAQEAtSSNhh2MnNk43fosOWW/5zoT 9Q7cTuz9WLk/1nH/ROXBASfgsg8a7cVRf4peJSqBoRFVkLbOEEHWB0Forkj0nScs jsmPGz/40xUmmksP22nKayW2v3qmrgvkZisZSTsWwFSH5+Fw2JkBxppiKW5xFKzj /56QL5lfrD0/u1gY7sHy1rMMnDDtS7O7aZrO8H66JrJx5eH0KfCpJd6GtrGcini2 7v9uoUp+ZdQPZpwGX7zucniXLlTNDy8/7Eqzo5m/jmE7K9XQrpXsFQ/5sB/RBUA/ 8QYb5iHJQPJqO0ny+Zdn6yJ3CV0+IpUWxEjNmP14F3Xlyab7BonWeeXh1in9FA== -----END CERTIFICATE-----Generated at Fri Apr 17 18:50:42 2026 by rpki-client