$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132302e302f32342d3234203d3e2030.roa File: 3130332e3233362e3132302e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: Km8S2TJ8iKWZOeT+afBnXUsAtpaviIGuscofdyWIck4= Subject key identifier: ED:1F:29:18:C9:0B:33:66:D9:4A:D3:18:9A:A2:78:89:50:D7:01:34 Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Certificate serial: 3566AF5342606F4C876F5E6B0CA78DD16F37748B Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132302e302f32342d3234203d3e2030.roa Signing time: Wed 15 Apr 2026 06:59:04 +0000 ROA not before: Wed 15 Apr 2026 06:54:04 +0000 ROA not after: Wed 14 Apr 2027 06:59:04 +0000 asID: 0 IP address blocks: 103.236.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 17:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:66:af:53:42:60:6f:4c:87:6f:5e:6b:0c:a7:8d:d1:6f:37:74:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Validity Not Before: Apr 15 06:54:04 2026 GMT Not After : Apr 14 06:59:04 2027 GMT Subject: CN=ED1F2918C90B3366D94AD3189AA2788950D70134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ab:10:99:3d:97:56:f8:c1:ef:5f:f7:29:06: e2:b7:74:10:1d:16:e8:94:c3:77:09:a7:f6:20:b8: 3c:98:5a:be:72:df:72:53:88:06:1a:d9:82:96:02: 4c:26:7c:bb:83:ff:75:51:f3:6b:08:f1:bd:68:8c: ac:28:31:00:01:24:1b:6a:6d:b0:28:6c:be:8b:a2: 4f:7e:33:01:57:af:fc:a3:ce:42:b8:ca:2c:8b:aa: 17:0b:78:ab:97:88:c8:3a:e5:4e:65:52:ed:74:70: 02:f8:95:c0:44:b8:a5:fc:ba:1c:e6:e6:77:ac:08: 5b:85:3f:4d:f2:e5:1b:af:37:ce:1d:be:c8:03:c7: 87:ee:13:87:e6:ad:db:09:93:ed:4d:1e:cb:88:3c: d6:96:eb:3f:16:af:75:8d:ca:99:16:fa:c5:94:56: 21:d5:86:d6:2e:09:77:34:c0:83:70:05:fc:0a:47: 04:fa:d6:d6:15:d1:c4:e7:3d:be:be:b4:61:fe:e8: 30:30:17:a5:3c:de:50:bc:d5:7f:32:e3:37:80:4b: b7:9c:8d:78:49:73:75:76:ec:1b:64:5f:89:b2:d6: ce:88:2c:0e:47:61:74:1c:c1:cf:19:6b:b1:ca:51: 4f:1d:06:b1:83:23:ce:91:fe:04:c2:d4:65:b0:5b: 39:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1F:29:18:C9:0B:33:66:D9:4A:D3:18:9A:A2:78:89:50:D7:01:34 X509v3 Authority Key Identifier: keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132302e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.120.0/24 Signature Algorithm: sha256WithRSAEncryption 87:c5:ba:5e:e6:00:f1:f2:22:0b:2d:80:79:51:81:04:e7:15: ff:df:ec:19:8a:46:21:04:e4:a1:5e:98:cf:6d:94:23:f3:a8: 4e:eb:7c:22:48:e3:4e:b6:f1:19:80:03:ea:2d:a5:d1:4c:24: 9c:b6:be:b2:d4:9b:06:bb:5a:b0:a8:fa:3b:4f:97:ae:3e:60: 3c:ef:89:9b:88:b0:46:d8:b7:e2:97:e7:6e:95:a7:dc:1a:ee: 07:66:d7:b2:81:d1:8b:a3:bb:27:c4:2b:ab:6c:44:60:97:4f: 0b:97:cc:a4:47:7c:cc:04:78:d4:38:2a:46:72:e5:d1:a9:79: 41:84:1c:4c:2b:ae:1b:72:25:58:1c:6d:72:c7:1c:6b:ec:c3: 32:9a:27:b4:64:ea:9d:c1:9f:9d:34:36:2f:01:e5:c7:53:1d: 06:ae:ba:21:6c:84:58:11:8e:51:19:a7:a2:b4:f9:da:d4:b4: 9b:59:30:3a:fb:bf:b1:f0:d8:b3:6e:b1:bf:92:49:68:21:b4: 49:41:d4:be:ec:4e:9f:75:08:c4:73:d8:c1:1f:7c:90:f8:97: 0d:8a:03:79:e3:70:b7:ce:1c:3f:fc:68:dc:5f:80:bd:8f:a6: b6:b7:f9:47:04:07:52:1b:e0:f6:b3:6a:48:fb:ed:4d:b2:4d: 6f:93:4d:ed -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUNWavU0Jgb0yHb15rDKeN0W83dIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2 NTM3MTk4RjAeFw0yNjA0MTUwNjU0MDRaFw0yNzA0MTQwNjU5MDRaMDMxMTAvBgNV BAMTKEVEMUYyOTE4QzkwQjMzNjZEOTRBRDMxODlBQTI3ODg5NTBENzAxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYqxCZPZdW+MHvX/cpBuK3dBAd FuiUw3cJp/YguDyYWr5y33JTiAYa2YKWAkwmfLuD/3VR82sI8b1ojKwoMQABJBtq bbAobL6Lok9+MwFXr/yjzkK4yiyLqhcLeKuXiMg65U5lUu10cAL4lcBEuKX8uhzm 5nesCFuFP03y5RuvN84dvsgDx4fuE4fmrdsJk+1NHsuIPNaW6z8Wr3WNypkW+sWU ViHVhtYuCXc0wINwBfwKRwT61tYV0cTnPb6+tGH+6DAwF6U83lC81X8y4zeAS7ec jXhJc3V27BtkX4my1s6ILA5HYXQcwc8Za7HKUU8dBrGDI86R/gTC1GWwWzlbAgMB AAGjggINMIICCTAdBgNVHQ4EFgQU7R8pGMkLM2bZStMYmqJ4iVDXATQwHwYDVR0j BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Njg5MzIwNjgyNTg2MTE0LzAvMzEzMDMzMmUzMjMz MzYyZTMxMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA Z+x4MA0GCSqGSIb3DQEBCwUAA4IBAQCHxbpe5gDx8iILLYB5UYEE5xX/3+wZikYh BOShXpjPbZQj86hO63wiSONOtvEZgAPqLaXRTCSctr6y1JsGu1qwqPo7T5euPmA8 74mbiLBG2Lfil+dulafcGu4HZteygdGLo7snxCurbERgl08Ll8ykR3zMBHjUOCpG cuXRqXlBhBxMK64bciVYHG1yxxxr7MMymie0ZOqdwZ+dNDYvAeXHUx0GrrohbIRY EY5RGaeitPna1LSbWTA6+7+x8NizbrG/kkloIbRJQdS+7E6fdQjEc9jBH3yQ+JcN igN543C3zhw//GjcX4C9j6a2t/lHBAdSG+D2s2pI++1Nsk1vk03t -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:34 2026 by rpki-client