$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3232302e3136342e302f32322d3232203d3e20313338343231.roa File: 3130332e3232302e3136342e302f32322d3232203d3e20313338343231.roa (raw, json) Hash identifier: pOIulyarz2BWhvJ6FNSjRxqM3zh5qggb0XihinHPxh8= Subject key identifier: 1A:FC:2C:5A:06:8B:C2:21:C9:87:0B:DE:67:C7:7C:33:90:69:47:51 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 7337FB96197C5B10BD1284ADB2DE97B02A219A6B Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3232302e3136342e302f32322d3232203d3e20313338343231.roa Signing time: Fri 17 Apr 2026 08:40:10 +0000 ROA not before: Fri 17 Apr 2026 08:35:10 +0000 ROA not after: Fri 16 Apr 2027 08:40:10 +0000 asID: 138421 IP address blocks: 103.220.164.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:37:fb:96:19:7c:5b:10:bd:12:84:ad:b2:de:97:b0:2a:21:9a:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 17 08:35:10 2026 GMT Not After : Apr 16 08:40:10 2027 GMT Subject: CN=1AFC2C5A068BC221C9870BDE67C77C3390694751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e0:8a:9f:7f:90:e0:e1:e3:97:0a:71:4c:14: ad:9d:89:f6:e0:07:41:dc:2a:b2:2a:e5:fd:60:b3: 26:e9:4b:02:4c:16:a1:68:57:0a:3c:ce:0b:9f:f7: da:c1:d4:52:de:6f:8f:29:31:8f:dd:0b:02:84:74: 7a:61:1f:42:2c:cd:b5:04:93:a7:26:4f:60:a1:54: 54:eb:6d:14:96:18:e1:86:87:b7:50:66:05:48:9c: 19:54:ea:59:31:e2:08:46:c2:b5:d8:4d:d6:e2:13: 77:db:f8:3e:48:aa:d6:2b:5f:c8:0f:dc:ea:3f:d5: 57:5e:f6:19:47:b2:d3:25:1b:d7:a8:32:d0:06:c5: dd:9a:6b:b7:bb:f6:0d:aa:57:55:69:89:22:65:aa: 54:aa:28:f4:98:32:a9:04:83:9e:0c:ac:07:a9:cb: f2:5e:1c:0d:2c:ec:28:77:58:fe:b5:73:bb:19:ee: 83:e2:93:19:40:e2:ed:9c:6c:50:f0:93:d6:94:70: 01:71:d6:fd:1b:f8:05:98:da:e7:60:c0:d1:4d:17: 00:d2:f8:1c:7c:ad:0e:2c:a5:45:73:f1:47:85:a5: a2:c1:4b:5b:c9:24:a9:ff:e9:f0:5c:87:18:33:e4: 62:bf:d2:3f:8e:42:7d:bf:bc:9d:32:61:28:c6:2e: 64:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FC:2C:5A:06:8B:C2:21:C9:87:0B:DE:67:C7:7C:33:90:69:47:51 X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3232302e3136342e302f32322d3232203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.164.0/22 Signature Algorithm: sha256WithRSAEncryption 00:af:b0:55:0c:e9:0a:9b:ad:9a:14:1f:90:80:12:35:c6:33: 84:bc:a2:f9:aa:83:4a:e4:01:d1:bb:f8:2e:7a:4a:d0:f7:71: 15:aa:32:64:02:cb:b4:7b:d3:7d:61:4e:57:9e:ac:8e:6c:1c: 77:ae:56:53:c6:6c:df:cf:b0:d9:dd:b7:67:08:d6:65:9b:5e: 8b:00:bf:20:df:06:a7:29:90:7e:c8:e7:11:84:4c:2b:f7:d6: 95:4f:35:10:81:48:ee:b9:f4:11:fa:7a:80:8b:22:0c:79:8f: f4:31:00:ec:f8:10:c9:bc:aa:c6:53:a0:89:74:9f:ba:c9:91: 71:c2:41:3e:e0:13:53:0c:b0:88:7f:6a:94:d9:27:09:2c:c7: 14:27:82:d4:5a:ed:b0:e5:d3:7c:15:95:d0:5a:06:1f:2a:ea: 09:0f:de:4b:47:ad:c6:d5:9b:2a:c4:d1:01:57:b0:3d:47:41: f2:da:ae:2b:15:0b:fc:2f:7d:f3:b6:fb:03:76:41:39:11:33: 77:df:71:99:aa:21:e8:ff:06:ad:a2:12:61:5e:8f:2c:24:4c: ce:2a:83:ce:ae:af:90:8e:d5:d9:db:3c:75:73:87:39:15:ff: 61:16:ea:81:be:a4:08:68:41:9f:fd:ff:6d:d7:0f:3b:77:c4: 5b:62:8d:b9 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUczf7lhl8WxC9EoStst6XsCohmmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MTcwODM1MTBaFw0yNzA0MTYwODQwMTBaMDMxMTAvBgNV BAMTKDFBRkMyQzVBMDY4QkMyMjFDOTg3MEJERTY3Qzc3QzMzOTA2OTQ3NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC34Iqff5Dg4eOXCnFMFK2difbg B0HcKrIq5f1gsybpSwJMFqFoVwo8zguf99rB1FLeb48pMY/dCwKEdHphH0IszbUE k6cmT2ChVFTrbRSWGOGGh7dQZgVInBlU6lkx4ghGwrXYTdbiE3fb+D5IqtYrX8gP 3Oo/1Vde9hlHstMlG9eoMtAGxd2aa7e79g2qV1VpiSJlqlSqKPSYMqkEg54MrAep y/JeHA0s7Ch3WP61c7sZ7oPikxlA4u2cbFDwk9aUcAFx1v0b+AWY2udgwNFNFwDS +Bx8rQ4spUVz8UeFpaLBS1vJJKn/6fBchxgz5GK/0j+OQn2/vJ0yYSjGLmQFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUGvwsWgaLwiHJhwveZ8d8M5BpR1EwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk2NjMyMDYyOTk3MTY4MTMxLzAvMzEzMDMzMmUz MjMyMzAyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfcpDANBgkqhkiG9w0BAQsFAAOCAQEAAK+wVQzpCputmhQf kIASNcYzhLyi+aqDSuQB0bv4LnpK0PdxFaoyZALLtHvTfWFOV56sjmwcd65WU8Zs 38+w2d23ZwjWZZteiwC/IN8GpymQfsjnEYRMK/fWlU81EIFI7rn0Efp6gIsiDHmP 9DEA7PgQybyqxlOgiXSfusmRccJBPuATUwywiH9qlNknCSzHFCeC1FrtsOXTfBWV 0FoGHyrqCQ/eS0etxtWbKsTRAVewPUdB8tquKxUL/C9987b7A3ZBOREzd99xmaoh 6P8GraISYV6PLCRMziqDzq6vkI7V2ds8dXOHORX/YRbqgb6kCGhBn/3/bdcPO3fE W2KNuQ== -----END CERTIFICATE-----Generated at Fri Apr 17 20:17:02 2026 by rpki-client