$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231342e3234342e302f32322d3232203d3e2030.roa File: 3130332e3231342e3234342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: PJBB4zs8CwqiiqCiPjX66sgE0byGUXRZcWfW9/FqmHo= Subject key identifier: B8:85:25:47:E5:C3:CB:6A:22:6F:35:DD:83:2B:4D:55:A3:84:79:C5 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 21CFAEEA2BD35D47D9F501D2C3381051F3DE3685 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231342e3234342e302f32322d3232203d3e2030.roa Signing time: Wed 15 Apr 2026 09:33:02 +0000 ROA not before: Wed 15 Apr 2026 09:28:02 +0000 ROA not after: Wed 14 Apr 2027 09:33:02 +0000 asID: 0 IP address blocks: 103.214.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 06:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:cf:ae:ea:2b:d3:5d:47:d9:f5:01:d2:c3:38:10:51:f3:de:36:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:28:02 2026 GMT Not After : Apr 14 09:33:02 2027 GMT Subject: CN=B8852547E5C3CB6A226F35DD832B4D55A38479C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:66:b6:61:a4:ea:47:17:96:72:6b:9d:71:06: c8:d6:1a:96:1d:33:ae:4b:76:39:f2:b8:46:62:ed: 47:00:ab:13:9a:48:09:e7:33:1b:2d:17:ec:2d:79: 50:86:c1:a7:ec:70:53:2e:f6:06:62:c6:f8:0d:ee: c9:f9:ef:c9:a6:37:b8:c8:6b:35:04:0a:cb:ea:68: 1c:29:ba:c3:b3:c4:f5:ef:6b:7f:eb:0e:38:09:cd: fc:5b:7a:0f:37:bc:95:8a:66:7e:8b:9b:6e:b8:89: d5:21:c0:08:f2:1e:59:82:49:4e:4f:0a:9d:b3:9d: e0:d6:4e:8c:2c:31:f8:5a:1d:21:53:7f:5f:e1:85: e5:75:78:15:0a:9b:4b:8c:bd:68:2f:0d:ae:54:31: 2e:b2:6d:3c:24:8a:f8:0b:04:58:bb:96:bd:64:40: 24:bb:00:06:22:c1:d2:57:76:75:68:a1:23:d6:6c: 5a:96:7d:56:4b:c6:35:39:4f:c7:6a:4a:e3:9a:4f: d7:d2:fd:45:34:25:80:48:27:d2:e7:5b:30:7c:a2: 5b:2d:43:e7:45:32:60:db:91:2c:69:00:cb:51:25: 71:fb:c9:36:a0:50:65:44:f0:ac:5e:10:b0:fa:0d: 86:ec:6d:a3:d2:70:08:32:e8:42:00:02:30:1b:34: 31:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:85:25:47:E5:C3:CB:6A:22:6F:35:DD:83:2B:4D:55:A3:84:79:C5 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231342e3234342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.214.244.0/22 Signature Algorithm: sha256WithRSAEncryption 92:bd:6d:d7:39:4e:a4:32:44:7b:f6:56:27:d0:7c:a4:f4:a6: 98:36:4e:cc:ae:49:1e:b4:2b:7e:2d:f5:3a:9f:d2:23:d7:48: 51:b5:8d:d0:91:7a:4a:73:36:5c:c6:85:88:a3:86:83:0a:01: ba:b1:04:f9:d1:e1:6e:8f:ae:48:c6:b5:66:d0:27:29:bf:35: 64:78:a0:27:5d:e1:42:88:0e:27:ca:01:63:6c:a1:96:e1:22: 79:47:af:1a:dc:35:c9:b5:e2:d3:a4:ee:ae:fc:3e:b4:ec:e7: 0b:09:3a:fd:58:a5:3c:47:cf:0b:49:22:38:e9:ff:29:6c:93: 0d:a0:51:8b:4b:09:d6:2d:81:49:82:aa:06:1f:65:0c:72:55: ca:77:ca:a3:31:15:a3:3a:6b:ec:13:6d:eb:e2:5a:d0:2a:7b: 75:75:28:51:1b:37:ce:61:c4:ba:f9:b6:bf:ce:05:50:e2:06: 11:d3:50:d5:86:64:e6:44:97:f5:b8:d0:e9:05:14:5f:f5:75: 9f:de:30:87:1b:21:c9:45:bb:26:5b:65:71:a7:41:2e:e7:76: d6:22:5a:21:51:f6:29:6c:d9:95:ea:bc:8c:43:b9:dc:ee:da: 14:93:ed:c7:3b:0c:58:da:97:49:24:c2:33:0b:32:60:ce:5b: 5d:14:bd:50 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUIc+u6ivTXUfZ9QHSwzgQUfPeNoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTI4MDJaFw0yNzA0MTQwOTMzMDJaMDMxMTAvBgNV BAMTKEI4ODUyNTQ3RTVDM0NCNkEyMjZGMzVERDgzMkI0RDU1QTM4NDc5QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1ZrZhpOpHF5Zya51xBsjWGpYd M65LdjnyuEZi7UcAqxOaSAnnMxstF+wteVCGwafscFMu9gZixvgN7sn578mmN7jI azUECsvqaBwpusOzxPXva3/rDjgJzfxbeg83vJWKZn6Lm264idUhwAjyHlmCSU5P Cp2zneDWTowsMfhaHSFTf1/hheV1eBUKm0uMvWgvDa5UMS6ybTwkivgLBFi7lr1k QCS7AAYiwdJXdnVooSPWbFqWfVZLxjU5T8dqSuOaT9fS/UU0JYBIJ9LnWzB8olst Q+dFMmDbkSxpAMtRJXH7yTagUGVE8KxeELD6DYbsbaPScAgy6EIAAjAbNDFHAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUuIUlR+XDy2oibzXdgytNVaOEecUwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzMjMx MzQyZTMyMzQzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z9b0MA0GCSqGSIb3DQEBCwUAA4IBAQCSvW3XOU6kMkR79lYn0Hyk9KaYNk7Mrkke tCt+LfU6n9Ij10hRtY3QkXpKczZcxoWIo4aDCgG6sQT50eFuj65IxrVm0CcpvzVk eKAnXeFCiA4nygFjbKGW4SJ5R68a3DXJteLTpO6u/D607OcLCTr9WKU8R88LSSI4 6f8pbJMNoFGLSwnWLYFJgqoGH2UMclXKd8qjMRWjOmvsE23r4lrQKnt1dShRGzfO YcS6+ba/zgVQ4gYR01DVhmTmRJf1uNDpBRRf9XWf3jCHGyHJRbsmW2Vxp0Eu53bW IlohUfYpbNmV6ryMQ7nc7toUk+3HOwxY2pdJJMIzCzJgzltdFL1Q -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:42 2026 by rpki-client