$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32342d3234203d3e2034383131.roa File: 3130332e3233382e3138342e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: K0DdhK8OiSKnr9oFm4hTwqblY6AMySSEU39aJ5RQB04= Subject key identifier: 34:8D:C9:3F:C5:63:0A:B9:BE:43:0B:8E:63:41:4B:58:AE:45:77:83 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: 0B182DF3F51481C53FFF2D5879C4E7228D4FB058 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32342d3234203d3e2034383131.roa Signing time: Fri 17 Apr 2026 10:04:03 +0000 ROA not before: Fri 17 Apr 2026 09:59:03 +0000 ROA not after: Fri 16 Apr 2027 10:04:03 +0000 asID: 4811 IP address blocks: 103.238.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:18:2d:f3:f5:14:81:c5:3f:ff:2d:58:79:c4:e7:22:8d:4f:b0:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 17 09:59:03 2026 GMT Not After : Apr 16 10:04:03 2027 GMT Subject: CN=348DC93FC5630AB9BE430B8E63414B58AE457783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:25:e9:6e:0e:4e:57:a9:25:f8:d6:fa:3e:bb: 73:e4:49:22:a2:63:bc:60:7b:74:46:ce:fa:1c:20: ce:70:c4:d6:e7:16:4c:17:e4:e7:a6:d6:7a:5e:94: 93:cf:43:cb:1c:ca:ac:98:73:83:12:cd:3d:8d:a0: f4:47:5c:6f:7c:fe:fb:34:86:34:fc:87:fe:e4:dc: 7a:d6:88:e2:e7:cf:1c:30:3f:50:e5:26:ff:9e:80: 33:94:ed:6d:fb:cd:bd:cb:80:dc:5e:88:35:fc:ac: 01:61:d9:39:b3:cd:6f:ea:1d:8a:83:9a:bc:57:f3: 9f:c7:9f:d2:b2:67:e6:ef:60:21:28:c5:b9:93:20: 5f:bc:a4:e4:e6:ad:17:20:00:09:d2:9a:17:75:19: 45:f5:28:6c:b9:26:c9:3f:44:e7:c5:42:89:fc:a3: 07:d9:50:b8:cc:d7:37:a8:89:ec:dc:f9:50:ec:89: ec:cc:e9:23:28:2a:5d:03:14:54:31:3d:58:0a:7c: 7d:58:79:13:cc:29:df:5c:a5:cd:f9:0e:cd:d2:39: 0a:cc:d0:f7:01:06:ee:67:42:85:5b:4a:ac:ca:2d: 95:d3:79:e0:31:0e:8f:7c:c7:c8:39:bd:73:b9:f9: ee:f8:7b:a3:cf:40:b3:7e:c3:c9:fe:75:f6:ee:2a: 4e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:8D:C9:3F:C5:63:0A:B9:BE:43:0B:8E:63:41:4B:58:AE:45:77:83 X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138342e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.184.0/24 Signature Algorithm: sha256WithRSAEncryption a3:82:83:86:af:ec:05:40:00:37:0d:45:0b:8f:26:f0:ce:94: 3b:d8:5e:24:6a:dd:c7:02:c3:f0:f3:9f:7a:16:b1:77:86:9c: 97:83:ca:3b:90:2c:2a:07:1b:86:9b:1f:b4:b3:78:b0:18:13: 1a:93:0b:ba:2f:c9:49:15:e2:19:13:59:69:39:a4:c3:27:a1: 50:c3:c2:0d:db:3f:9c:20:43:7a:0c:9f:3d:a5:ad:25:83:62: c1:21:c2:b5:1b:39:52:50:e4:75:0b:58:4d:45:db:19:bb:cc: ba:ff:94:32:2c:d4:42:84:89:ca:fe:d1:67:93:50:0d:e1:44: 20:69:67:14:f7:18:9e:bb:36:ed:5f:bc:51:ae:d7:e7:c0:a6: 17:ee:4f:f0:8e:19:e9:0c:f8:9f:1c:aa:f1:d3:fa:da:ca:cf: e2:9d:bd:2b:07:25:83:4d:bb:0a:24:6a:7e:ca:56:c7:ea:02: 8a:f5:2a:84:c1:aa:15:9d:a0:ae:6b:ba:41:49:b5:b7:93:08: 75:4e:7b:71:e6:b3:fe:53:81:9e:7c:f7:bf:77:5f:6d:2f:56: 96:d9:95:6e:d4:14:b8:e7:31:20:aa:a4:3a:93:79:75:1f:7d: 63:68:cf:20:57:a5:a6:da:6d:11:51:09:78:18:73:b7:33:cc: ee:c2:88:b3 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCxgt8/UUgcU//y1YecTnIo1PsFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MTcwOTU5MDNaFw0yNzA0MTYxMDA0MDNaMDMxMTAvBgNV BAMTKDM0OERDOTNGQzU2MzBBQjlCRTQzMEI4RTYzNDE0QjU4QUU0NTc3ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkJeluDk5XqSX41vo+u3PkSSKi Y7xge3RGzvocIM5wxNbnFkwX5Oem1npelJPPQ8scyqyYc4MSzT2NoPRHXG98/vs0 hjT8h/7k3HrWiOLnzxwwP1DlJv+egDOU7W37zb3LgNxeiDX8rAFh2TmzzW/qHYqD mrxX85/Hn9KyZ+bvYCEoxbmTIF+8pOTmrRcgAAnSmhd1GUX1KGy5Jsk/ROfFQon8 owfZULjM1zeoiezc+VDsiezM6SMoKl0DFFQxPVgKfH1YeRPMKd9cpc35Ds3SOQrM 0PcBBu5nQoVbSqzKLZXTeeAxDo98x8g5vXO5+e74e6PPQLN+w8n+dfbuKk5xAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUNI3JP8VjCrm+QwuOY0FLWK5Fd4MwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjYzMjA2Mjk5NzE2ODEzMS8wLzMxMzAzMzJlMzIz MzM4MmUzMTM4MzQyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfuuDANBgkqhkiG9w0BAQsFAAOCAQEAo4KDhq/sBUAANw1FC48m8M6U O9heJGrdxwLD8POfehaxd4acl4PKO5AsKgcbhpsftLN4sBgTGpMLui/JSRXiGRNZ aTmkwyehUMPCDds/nCBDegyfPaWtJYNiwSHCtRs5UlDkdQtYTUXbGbvMuv+UMizU QoSJyv7RZ5NQDeFEIGlnFPcYnrs27V+8Ua7X58CmF+5P8I4Z6Qz4nxyq8dP62srP 4p29Kwclg027CiRqfspWx+oCivUqhMGqFZ2grmu6QUm1t5MIdU57ceaz/lOBnnz3 v3dfbS9WltmVbtQUuOcxIKqkOpN5dR99Y2jPIFelptptEVEJeBhztzPM7sKIsw== -----END CERTIFICATE-----Generated at Sat Apr 18 03:52:59 2026 by rpki-client