$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e382e302f32322d3232203d3e2034383337.roa File: 3130332e3234362e382e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: 378gDWpe2Upn/8JChX6sgkJeHsAHSbEmRu0FvijF8Ak= Subject key identifier: 05:EC:59:43:FF:EA:5F:F0:2B:35:A0:9F:86:15:3C:2B:4B:4C:C9:CF Certificate issuer: /CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Certificate serial: 08F59F66EBA5537240F94C27A98F16A212DAB914 Authority key identifier: A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e382e302f32322d3232203d3e2034383337.roa Signing time: Thu 16 Apr 2026 07:12:59 +0000 ROA not before: Thu 16 Apr 2026 07:07:59 +0000 ROA not after: Thu 15 Apr 2027 07:12:59 +0000 asID: 4837 IP address blocks: 103.246.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 05:23:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f5:9f:66:eb:a5:53:72:40:f9:4c:27:a9:8f:16:a2:12:da:b9:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A885AC793FB5E02C3AF1358C8DD23412EA28CC0B Validity Not Before: Apr 16 07:07:59 2026 GMT Not After : Apr 15 07:12:59 2027 GMT Subject: CN=05EC5943FFEA5FF02B35A09F86153C2B4B4CC9CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:10:1a:39:ad:ac:a7:3d:0f:8e:18:2e:db:29: 01:53:a7:2e:0d:be:a4:bf:9e:a5:8e:aa:0f:f5:d9: 68:70:bc:e8:8b:61:3e:89:d8:b3:49:04:a4:f0:a0: 0f:e9:4c:08:5c:f4:73:00:33:f4:b8:d6:07:04:b3: 5d:85:cb:eb:f1:c1:e4:b3:95:a3:29:07:e7:0e:ef: 0a:4e:e6:ba:5f:c7:2f:87:8b:5f:b6:60:bb:a4:64: 32:b8:c8:33:f6:43:cf:f7:df:35:d5:ed:c7:fc:08: b2:d3:66:ad:e5:4f:06:af:6f:46:5e:d9:74:78:9e: 4c:71:ac:e8:f1:fe:b2:40:0c:99:25:4c:84:7f:7b: 63:eb:00:bc:3c:13:cf:c1:80:4b:79:71:3e:d0:5d: d1:ba:20:83:fc:a9:25:a1:c2:de:6e:e0:3d:d7:36: a8:51:68:66:e5:c1:7a:a9:c4:67:57:82:9a:5d:39: 0a:17:ac:a3:6c:1b:11:01:56:8f:8d:23:5e:8e:2a: e9:a5:11:b0:da:94:d2:f2:9a:fd:d1:9c:d9:eb:4c: 68:a4:09:a4:24:f1:b0:7c:75:81:38:15:af:a7:4d: ba:95:4c:cc:0d:86:bd:d1:d3:45:e1:8a:e0:b5:6a: c3:85:7e:8e:db:3c:79:b2:d3:1d:fd:f7:b0:7f:d7: fa:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:EC:59:43:FF:EA:5F:F0:2B:35:A0:9F:86:15:3C:2B:4B:4C:C9:CF X509v3 Authority Key Identifier: keyid:A8:85:AC:79:3F:B5:E0:2C:3A:F1:35:8C:8D:D2:34:12:EA:28:CC:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A885AC793FB5E02C3AF1358C8DD23412EA28CC0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096638331497742338/0/3130332e3234362e382e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.246.8.0/22 Signature Algorithm: sha256WithRSAEncryption dd:ef:e9:ad:f4:00:a1:ad:53:ca:0a:00:fa:74:67:50:2b:bb: f0:9f:21:9d:e8:d9:5d:b0:ac:9b:1b:1d:21:d7:dc:f4:60:83: 6a:a5:0b:6d:cb:0f:fe:51:88:8a:ff:ad:29:9c:35:15:25:08: ff:08:e8:98:30:94:cd:92:24:a4:68:90:e8:4a:8c:a3:c9:d1: 99:13:33:9c:46:fa:a7:0d:92:2b:ca:26:66:61:73:8d:44:5f: 2d:bb:53:8c:2c:e1:6a:59:37:e6:44:4f:bd:90:56:63:ed:97: e1:2c:d6:29:65:f0:0e:ea:a7:d9:de:bc:a6:00:52:3a:61:31: 34:53:ac:31:7b:b1:85:99:58:ef:e7:14:a9:31:2f:7e:55:b6: a7:f8:38:0a:4e:59:e6:90:0d:d2:de:7b:d3:4c:dc:ec:93:99: cd:67:b1:3f:5d:d6:65:0b:58:66:8a:8f:c4:a8:5b:eb:bc:b5: 1d:56:85:45:a8:2c:1e:31:b5:6f:c7:bf:0f:00:f2:20:20:f9: a1:ec:4f:99:84:b6:62:b3:2c:66:21:8f:e4:6f:57:1d:3b:29: 00:67:82:e1:7c:ba:04:ac:c1:f1:2a:6e:90:95:1a:c2:be:77: 88:ad:45:f4:15:25:e8:4a:3c:60:33:6b:61:28:0f:57:00:85: f7:d8:20:3f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUCPWfZuulU3JA+UwnqY8WohLauRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJF QTI4Q0MwQjAeFw0yNjA0MTYwNzA3NTlaFw0yNzA0MTUwNzEyNTlaMDMxMTAvBgNV BAMTKDA1RUM1OTQzRkZFQTVGRjAyQjM1QTA5Rjg2MTUzQzJCNEI0Q0M5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEBo5raynPQ+OGC7bKQFTpy4N vqS/nqWOqg/12WhwvOiLYT6J2LNJBKTwoA/pTAhc9HMAM/S41gcEs12Fy+vxweSz laMpB+cO7wpO5rpfxy+Hi1+2YLukZDK4yDP2Q8/33zXV7cf8CLLTZq3lTwavb0Ze 2XR4nkxxrOjx/rJADJklTIR/e2PrALw8E8/BgEt5cT7QXdG6IIP8qSWhwt5u4D3X NqhRaGblwXqpxGdXgppdOQoXrKNsGxEBVo+NI16OKumlEbDalNLymv3RnNnrTGik CaQk8bB8dYE4Fa+nTbqVTMwNhr3R00XhiuC1asOFfo7bPHmy0x3997B/1/r5AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUBexZQ//qX/ArNaCfhhU8K0tMyc8wHwYDVR0j BBgwFoAUqIWseT+14Cw68TWMjdI0EuoozAswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjYzODMzMTQ5Nzc0MjMzOC8wL0E4ODVBQzc5M0ZCNUUwMkMzQUYxMzU4QzhERDIz NDEyRUEyOENDMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTg4NUFDNzkzRkI1RTAyQzNBRjEzNThDOEREMjM0MTJFQTI4Q0MwQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NjM4MzMxNDk3NzQyMzM4LzAvMzEzMDMzMmUzMjM0 MzYyZTM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJn9ggwDQYJKoZIhvcNAQELBQADggEBAN3v6a30AKGtU8oKAPp0Z1Aru/CfIZ3o 2V2wrJsbHSHX3PRgg2qlC23LD/5RiIr/rSmcNRUlCP8I6JgwlM2SJKRokOhKjKPJ 0ZkTM5xG+qcNkivKJmZhc41EXy27U4ws4WpZN+ZET72QVmPtl+Es1ill8A7qp9ne vKYAUjphMTRTrDF7sYWZWO/nFKkxL35Vtqf4OApOWeaQDdLee9NM3OyTmc1nsT9d 1mULWGaKj8SoW+u8tR1WhUWoLB4xtW/Hvw8A8iAg+aHsT5mEtmKzLGYhj+RvVx07 KQBnguF8ugSswfEqbpCVGsK+d4itRfQVJehKPGAza2EoD1cAhffYID8= -----END CERTIFICATE-----Generated at Fri Apr 17 17:20:38 2026 by rpki-client