$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa File: 3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: mfAlEKa+sf3Q0PtsXP0RkfswdV/HI/qvIahppWTM9gQ= Subject key identifier: 90:6E:6A:20:C5:67:59:AC:D0:19:07:E5:19:C0:98:EB:AC:B6:7F:30 Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Certificate serial: 463B9A3D651D7621F6DB7E366C0D579C1B5C57F3 Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa Signing time: Wed 15 Apr 2026 07:02:19 +0000 ROA not before: Wed 15 Apr 2026 06:57:19 +0000 ROA not after: Wed 14 Apr 2027 07:02:19 +0000 asID: 4837 IP address blocks: 103.236.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 19:37:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:3b:9a:3d:65:1d:76:21:f6:db:7e:36:6c:0d:57:9c:1b:5c:57:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F Validity Not Before: Apr 15 06:57:19 2026 GMT Not After : Apr 14 07:02:19 2027 GMT Subject: CN=906E6A20C56759ACD01907E519C098EBACB67F30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a7:3d:e8:ad:99:2c:b9:ab:cd:da:de:67:04: 7e:08:23:93:b6:b0:6f:6b:39:e9:9e:93:f2:f3:07: a6:ad:a7:d5:99:d7:76:70:63:d0:98:41:d1:23:93: e7:ef:27:19:c3:6e:f3:43:4b:77:e1:5f:91:47:cd: 9f:30:ff:3b:23:46:7e:64:30:95:c2:9b:2c:7a:e7: 02:39:33:fe:06:1e:cd:d8:c4:29:d6:e3:35:e2:13: 8d:7f:ad:dc:a2:f0:14:81:f2:cc:16:3b:1a:91:a2: fb:e5:3d:e1:a5:c5:6b:25:bf:77:fe:da:cd:cb:38: 62:56:8e:31:15:76:c1:c9:ee:2b:da:0d:5e:10:ae: ad:85:31:e0:7d:c5:54:18:d6:11:5a:49:52:42:e1: 95:fc:5e:85:60:b2:63:34:74:ab:94:ff:9c:fc:00: 54:ec:93:81:68:85:e7:94:36:59:ed:22:c8:4b:ed: f7:c4:14:77:c3:27:bc:1a:70:2e:05:ca:6e:e1:42: 06:1a:72:c5:04:c5:a6:06:1a:6b:17:68:b4:a9:64: d9:4b:32:d0:b6:0b:fd:2f:0f:e1:b4:c5:3a:5b:96: 32:8d:fb:0a:d7:48:a5:68:df:44:2d:6c:5c:ce:40: ce:9c:9c:d7:28:09:41:3e:da:00:e9:d2:16:e4:0c: 4b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6E:6A:20:C5:67:59:AC:D0:19:07:E5:19:C0:98:EB:AC:B6:7F:30 X509v3 Authority Key Identifier: keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/3130332e3233362e3132312e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.121.0/24 Signature Algorithm: sha256WithRSAEncryption c3:22:7c:95:23:d0:4f:43:3c:10:1a:36:30:8c:40:02:02:95: 5c:b3:31:2e:72:9b:f0:f8:0d:4e:66:2c:cd:5f:11:5f:a8:a5: 9b:ec:e5:da:df:b3:b9:35:f9:94:8c:72:f7:76:0f:d8:f8:6d: 7e:e8:ec:73:8d:9c:b8:d6:47:60:4b:8f:a0:d8:20:ac:cc:98: 2c:6a:e2:bb:1a:64:d4:43:f5:8c:7e:9e:0c:af:21:b4:6d:62: 1e:8e:f7:9e:28:29:64:b2:55:49:a5:69:a9:72:88:dc:9b:ed: 44:96:a7:bc:cc:b5:19:66:71:c2:8f:3f:f3:43:e9:8c:04:43: b9:2f:29:49:52:3b:ff:79:35:d6:27:75:b7:0e:e9:08:30:b2: 2b:69:07:b0:40:61:9b:ec:62:81:e8:21:56:ff:08:b3:05:6e: 69:58:62:70:97:82:39:21:10:a6:8c:1e:f8:a5:b3:56:1e:03: a2:85:4b:ef:7f:0d:54:84:de:86:5b:07:d1:c0:09:11:a7:ef: aa:1b:f9:4e:9c:1c:d4:1b:03:7b:40:d0:9f:44:6c:74:f0:d6: fb:48:39:2c:97:cf:af:d7:d8:a7:a4:03:a4:03:4c:3d:98:2c: a7:89:49:4d:8b:54:93:7f:3b:ef:82:46:8d:c9:ee:de:2b:3a: cd:98:e2:01 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIURjuaPWUddiH22342bA1XnBtcV/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2 NTM3MTk4RjAeFw0yNjA0MTUwNjU3MTlaFw0yNzA0MTQwNzAyMTlaMDMxMTAvBgNV BAMTKDkwNkU2QTIwQzU2NzU5QUNEMDE5MDdFNTE5QzA5OEVCQUNCNjdGMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUpz3orZksuavN2t5nBH4II5O2 sG9rOemek/LzB6atp9WZ13ZwY9CYQdEjk+fvJxnDbvNDS3fhX5FHzZ8w/zsjRn5k MJXCmyx65wI5M/4GHs3YxCnW4zXiE41/rdyi8BSB8swWOxqRovvlPeGlxWslv3f+ 2s3LOGJWjjEVdsHJ7ivaDV4Qrq2FMeB9xVQY1hFaSVJC4ZX8XoVgsmM0dKuU/5z8 AFTsk4FoheeUNlntIshL7ffEFHfDJ7wacC4Fym7hQgYacsUExaYGGmsXaLSpZNlL MtC2C/0vD+G0xTpbljKN+wrXSKVo30QtbFzOQM6cnNcoCUE+2gDp0hbkDEtfAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUkG5qIMVnWazQGQflGcCY66y2fzAwHwYDVR0j BBgwFoAUUmGYxv7Ecp4qCCCc2wfnvWU3GY8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4OTMyMDY4MjU4NjExNC8wLzUyNjE5OEM2RkVDNDcyOUUyQTA4MjA5Q0RCMDdF N0JENjUzNzE5OEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI2MTk4QzZGRUM0NzI5RTJBMDgyMDlDREIwN0U3QkQ2NTM3MTk4Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjY4OTMyMDY4MjU4NjExNC8wLzMxMzAzMzJlMzIz MzM2MmUzMTMyMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGfseTANBgkqhkiG9w0BAQsFAAOCAQEAwyJ8lSPQT0M8EBo2MIxAAgKV XLMxLnKb8PgNTmYszV8RX6ilm+zl2t+zuTX5lIxy93YP2Phtfujsc42cuNZHYEuP oNggrMyYLGriuxpk1EP1jH6eDK8htG1iHo73nigpZLJVSaVpqXKI3JvtRJanvMy1 GWZxwo8/80PpjARDuS8pSVI7/3k11id1tw7pCDCyK2kHsEBhm+xigeghVv8IswVu aVhicJeCOSEQpowe+KWzVh4DooVL738NVITehlsH0cAJEafvqhv5Tpwc1BsDe0DQ n0RsdPDW+0g5LJfPr9fYp6QDpANMPZgsp4lJTYtUk38774JGjcnu3is6zZjiAQ== -----END CERTIFICATE-----Generated at Fri Apr 17 01:49:18 2026 by rpki-client