$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138362e302f32332d3233203d3e2034383131.roa File: 3130332e3233382e3138362e302f32332d3233203d3e2034383131.roa (raw, json) Hash identifier: MwbgTBJocCThx9aDOgskTkbZEmN3jkKvQwOUpkuLOMQ= Subject key identifier: 2F:A1:FC:0E:F5:D4:4E:F8:E5:CD:7D:E9:CF:51:88:32:FC:A5:6C:F5 Certificate issuer: /CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Certificate serial: E3ABAE4042DB8E10A91915A78E06F9FF5A9491 Authority key identifier: C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138362e302f32332d3233203d3e2034383131.roa Signing time: Fri 17 Apr 2026 10:04:03 +0000 ROA not before: Fri 17 Apr 2026 09:59:03 +0000 ROA not after: Fri 16 Apr 2027 10:04:03 +0000 asID: 4811 IP address blocks: 103.238.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e3:ab:ae:40:42:db:8e:10:a9:19:15:a7:8e:06:f9:ff:5a:94:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C89881B315F7E21BA948CF9CB11D1AC422106426 Validity Not Before: Apr 17 09:59:03 2026 GMT Not After : Apr 16 10:04:03 2027 GMT Subject: CN=2FA1FC0EF5D44EF8E5CD7DE9CF518832FCA56CF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3a:d1:51:6a:06:2a:44:1d:85:35:6c:b2:d2: 97:5a:72:f7:d2:a9:9e:9b:e6:3d:f5:0b:06:17:d0: 74:ac:f5:4e:70:d3:a6:ad:4f:95:7e:4a:b5:71:7a: eb:ed:49:5f:37:72:40:40:d8:0b:99:0f:8f:65:6e: be:47:dd:15:d5:3d:6d:4b:95:5f:05:36:82:16:3d: e4:bc:7f:cf:52:c4:1c:dd:83:2c:5b:c8:a4:bb:91: 4d:f9:ec:e2:ad:37:63:3c:b2:3b:f7:79:50:f9:b9: 1c:17:5c:20:97:1c:03:4a:f5:a0:61:43:5b:96:e7: 90:ff:33:30:d2:9a:a7:05:f7:15:e3:de:7a:8b:1b: cb:be:f6:9e:3e:3a:c4:94:ce:b0:b1:1b:77:ba:42: 43:78:f7:cb:24:44:87:fb:ec:3d:61:d5:8a:7b:e0: 1e:22:93:64:7d:2d:f9:79:d5:6d:6d:91:3c:f9:7f: 7a:91:a7:51:16:97:c9:27:ac:d6:95:f3:81:17:b2: 46:f1:a8:3c:0f:83:0e:e2:dc:cc:44:78:1d:20:91: f4:69:c2:97:19:1f:66:ed:e2:9a:d5:36:60:e4:f2: c4:ba:53:f3:4b:03:1a:48:88:80:51:6b:76:7f:23: 0a:7b:0a:69:98:2a:9d:0b:00:56:d5:1e:c3:83:12: a9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:A1:FC:0E:F5:D4:4E:F8:E5:CD:7D:E9:CF:51:88:32:FC:A5:6C:F5 X509v3 Authority Key Identifier: keyid:C8:98:81:B3:15:F7:E2:1B:A9:48:CF:9C:B1:1D:1A:C4:22:10:64:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/C89881B315F7E21BA948CF9CB11D1AC422106426.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C89881B315F7E21BA948CF9CB11D1AC422106426.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096632062997168131/0/3130332e3233382e3138362e302f32332d3233203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.186.0/23 Signature Algorithm: sha256WithRSAEncryption 30:77:ce:a7:9c:2b:0d:5a:01:03:68:d4:78:ec:85:c2:d5:9a: 48:04:9c:42:16:f9:71:b8:be:02:57:76:85:c1:72:88:11:d3: 9b:6c:55:fa:6b:89:dd:69:ab:ec:46:e0:ef:61:20:ae:bb:fe: 1b:b5:7a:5b:06:3b:40:2d:f7:2a:3b:f7:04:82:8d:49:b8:80: fc:df:d9:90:5f:33:28:aa:dd:93:19:43:b3:ad:1d:da:87:6e: 0d:56:df:02:0a:81:99:db:d4:0a:ef:8b:75:7c:52:46:28:7f: de:6b:01:b8:eb:53:6e:87:ca:41:40:f9:5b:38:e2:bf:71:fd: 62:78:af:f7:99:4a:1d:f1:2c:b3:ba:96:ba:ae:f3:2e:70:93: f4:bf:b8:0e:c9:34:62:58:8b:c7:d8:8d:23:57:e0:ba:c9:44: 8e:24:57:5b:36:4b:22:71:57:17:ea:3b:68:8f:c4:f9:13:78: 0f:d5:d7:ba:1e:02:7f:5d:7b:f3:2e:a9:60:17:17:18:4b:9c: 51:df:d5:1d:ea:e7:30:03:f5:d7:b8:2b:bb:91:47:36:9b:9a: c2:80:eb:87:83:34:69:2e:9a:6b:e4:8b:a1:bb:eb:0e:f7:59: c4:d3:20:d2:47:e6:b2:97:08:76:1d:ac:4d:7d:21:ac:47:8e: 7d:07:21:07 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAOOrrkBC244QqRkVp44G+f9alJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQy MjEwNjQyNjAeFw0yNjA0MTcwOTU5MDNaFw0yNzA0MTYxMDA0MDNaMDMxMTAvBgNV BAMTKDJGQTFGQzBFRjVENDRFRjhFNUNEN0RFOUNGNTE4ODMyRkNBNTZDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChOtFRagYqRB2FNWyy0pdacvfS qZ6b5j31CwYX0HSs9U5w06atT5V+SrVxeuvtSV83ckBA2AuZD49lbr5H3RXVPW1L lV8FNoIWPeS8f89SxBzdgyxbyKS7kU357OKtN2M8sjv3eVD5uRwXXCCXHANK9aBh Q1uW55D/MzDSmqcF9xXj3nqLG8u+9p4+OsSUzrCxG3e6QkN498skRIf77D1h1Yp7 4B4ik2R9Lfl51W1tkTz5f3qRp1EWl8knrNaV84EXskbxqDwPgw7i3MxEeB0gkfRp wpcZH2bt4prVNmDk8sS6U/NLAxpIiIBRa3Z/Iwp7CmmYKp0LAFbVHsODEqmNAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUL6H8DvXUTvjlzX3pz1GIMvylbPUwHwYDVR0j BBgwFoAUyJiBsxX34hupSM+csR0axCIQZCYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzMjA2Mjk5NzE2ODEzMS8wL0M4OTg4MUIzMTVGN0UyMUJBOTQ4Q0Y5Q0IxMUQx QUM0MjIxMDY0MjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzg5ODgxQjMxNUY3RTIxQkE5NDhDRjlDQjExRDFBQzQyMjEwNjQyNi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjYzMjA2Mjk5NzE2ODEzMS8wLzMxMzAzMzJlMzIz MzM4MmUzMTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWfuujANBgkqhkiG9w0BAQsFAAOCAQEAMHfOp5wrDVoBA2jUeOyFwtWa SAScQhb5cbi+Ald2hcFyiBHTm2xV+muJ3Wmr7Ebg72Egrrv+G7V6WwY7QC33Kjv3 BIKNSbiA/N/ZkF8zKKrdkxlDs60d2oduDVbfAgqBmdvUCu+LdXxSRih/3msBuOtT bofKQUD5Wzjiv3H9Yniv95lKHfEss7qWuq7zLnCT9L+4Dsk0YliLx9iNI1fguslE jiRXWzZLInFXF+o7aI/E+RN4D9XXuh4Cf1178y6pYBcXGEucUd/VHernMAP117gr u5FHNpuawoDrh4M0aS6aa+SLobvrDvdZxNMg0kfmspcIdh2sTX0hrEeOfQchBw== -----END CERTIFICATE-----Generated at Sat Apr 18 03:53:15 2026 by rpki-client