$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203536303431.roa File: 3130332e3231392e32382e302f32322d3332203d3e203536303431.roa (raw, json) Hash identifier: gQpM2GIv2RqhUOBQIUUVpwQ0JBNdKs+u03+D9iHE/zQ= Subject key identifier: C9:DF:FC:2A:C8:90:DD:7A:5F:34:27:E8:76:49:3B:90:B8:98:37:24 Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF Certificate serial: 146B14EADFD6322BC2D2C8DD75E42C3C1E8FAB8D Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203536303431.roa Signing time: Wed 15 Apr 2026 07:40:57 +0000 ROA not before: Wed 15 Apr 2026 07:35:57 +0000 ROA not after: Wed 14 Apr 2027 07:40:57 +0000 asID: 56041 IP address blocks: 103.219.28.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:6b:14:ea:df:d6:32:2b:c2:d2:c8:dd:75:e4:2c:3c:1e:8f:ab:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF Validity Not Before: Apr 15 07:35:57 2026 GMT Not After : Apr 14 07:40:57 2027 GMT Subject: CN=C9DFFC2AC890DD7A5F3427E876493B90B8983724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b1:47:52:96:79:d7:ee:69:b2:e4:1b:ac:a7: 38:17:ac:70:27:42:b6:33:35:94:78:5c:27:27:5a: e8:b5:6b:28:86:8c:c5:ba:01:4c:ff:5b:cb:0e:3b: a7:7c:51:b1:6b:a9:0e:79:de:ab:05:9d:6a:db:be: d0:1a:31:a2:5a:a1:18:db:3e:0e:a3:2c:4b:fe:c3: 85:86:e1:e2:c3:36:5b:2f:d8:18:a3:6b:96:cb:37: eb:ec:cf:eb:05:30:c7:44:0d:2b:93:b8:ab:92:b5: 57:9a:5b:58:9b:87:61:8d:5b:e6:c5:1b:2b:cb:3d: 87:ee:09:64:f5:a4:af:9d:a4:e9:ed:28:0c:45:76: fb:cf:27:1e:2e:03:5e:85:77:9f:47:8b:8f:ec:67: 1b:6f:a8:be:a6:b7:28:ac:aa:bf:26:e2:d7:bd:63: e2:62:54:2b:29:8c:d8:34:77:92:48:c7:b6:37:49: 0c:d7:fd:af:00:18:e6:92:27:e6:74:7d:e3:b7:92: e2:9f:d9:e3:18:49:a7:c7:c5:b0:73:34:87:5e:2d: 3b:b4:ca:fa:85:fe:51:8f:30:c7:5b:28:94:89:23: e5:c4:17:f5:e5:59:63:3f:08:63:6b:bd:a6:b1:4f: bd:e5:29:bd:53:c4:97:ef:c9:f5:68:a1:4c:8e:0e: 91:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:DF:FC:2A:C8:90:DD:7A:5F:34:27:E8:76:49:3B:90:B8:98:37:24 X509v3 Authority Key Identifier: keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/3130332e3231392e32382e302f32322d3332203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.28.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:06:b4:7d:82:32:ee:2f:fc:bb:ad:a6:aa:33:d5:ea:93:b0: 06:70:35:af:df:66:5a:b4:cc:65:bc:0e:ba:d4:e4:66:d1:74: f9:c6:5b:85:cf:a1:ed:05:1f:5a:d2:6d:55:22:76:a0:1f:3e: c9:58:57:a0:31:68:0f:ee:b5:4b:78:ec:cf:0e:f7:14:d6:c9: b0:d1:7a:50:3c:5b:23:93:5a:c9:c2:90:4c:6f:c3:79:7a:f3: f0:d2:8e:da:80:04:6b:cd:73:71:e9:79:4b:bc:d7:41:7f:bb: 56:05:cc:59:a5:b1:c3:83:51:88:3f:3a:86:10:b4:3f:bf:2e: a8:3b:d4:f8:4e:09:4f:e9:51:92:98:b6:01:e0:e6:a9:80:1b: 01:3a:c7:f1:fb:86:9e:f3:a7:e6:c0:49:dc:ad:52:de:bb:25: c8:6c:29:14:4a:16:1b:18:3b:e6:a1:e2:ee:98:5e:24:19:86: 01:c8:42:6e:1b:95:0d:f0:83:b5:b7:45:14:1d:71:77:c7:47: 44:4d:25:e0:55:49:79:5d:51:32:19:e1:fa:b8:f4:ab:c6:8d: ce:63:00:17:ce:a1:f9:b6:2f:4b:de:fd:8c:08:95:18:b0:59: 92:7a:97:d7:02:b2:d6:2a:7d:56:85:71:3d:fd:05:7f:d8:1d: 94:c3:b0:f8 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFGsU6t/WMivC0sjddeQsPB6Pq40wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThG QkRCMTlERjAeFw0yNjA0MTUwNzM1NTdaFw0yNzA0MTQwNzQwNTdaMDMxMTAvBgNV BAMTKEM5REZGQzJBQzg5MEREN0E1RjM0MjdFODc2NDkzQjkwQjg5ODM3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmsUdSlnnX7mmy5BuspzgXrHAn QrYzNZR4XCcnWui1ayiGjMW6AUz/W8sOO6d8UbFrqQ553qsFnWrbvtAaMaJaoRjb Pg6jLEv+w4WG4eLDNlsv2Bija5bLN+vsz+sFMMdEDSuTuKuStVeaW1ibh2GNW+bF GyvLPYfuCWT1pK+dpOntKAxFdvvPJx4uA16Fd59Hi4/sZxtvqL6mtyisqr8m4te9 Y+JiVCspjNg0d5JIx7Y3SQzX/a8AGOaSJ+Z0feO3kuKf2eMYSafHxbBzNIdeLTu0 yvqF/lGPMMdbKJSJI+XEF/XlWWM/CGNrvaaxT73lKb1TxJfvyfVooUyODpEVAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUyd/8KsiQ3XpfNCfodkk7kLiYNyQwHwYDVR0j BBgwFoAUlKBAB8GJNO79d5RFulNJqPvbGd8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwMDQwMDIwNTAzNzU3MC8wLzk0QTA0MDA3QzE4OTM0RUVGRDc3OTQ0NUJBNTM0 OUE4RkJEQjE5REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThGQkRCMTlERi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjcwMDQwMDIwNTAzNzU3MC8wLzMxMzAzMzJlMzIz MTM5MmUzMjM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzNjMwMzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmfbHDANBgkqhkiG9w0BAQsFAAOCAQEATga0fYIy7i/8u62mqjPV6pOw BnA1r99mWrTMZbwOutTkZtF0+cZbhc+h7QUfWtJtVSJ2oB8+yVhXoDFoD+61S3js zw73FNbJsNF6UDxbI5NaycKQTG/DeXrz8NKO2oAEa81zcel5S7zXQX+7VgXMWaWx w4NRiD86hhC0P78uqDvU+E4JT+lRkpi2AeDmqYAbATrH8fuGnvOn5sBJ3K1S3rsl yGwpFEoWGxg75qHi7pheJBmGAchCbhuVDfCDtbdFFB1xd8dHRE0l4FVJeV1RMhnh +rj0q8aNzmMAF86h+bYvS979jAiVGLBZknqX1wKy1ip9VoVxPf0Ff9gdlMOw+A== -----END CERTIFICATE-----Generated at Fri Apr 17 21:21:44 2026 by rpki-client