$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3139322e302f32322d3232203d3e2030.roa File: 3130332e3231382e3139322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: HHEpbSvpzY3RzYIeQcHFb+GbuiXsrr4+cwRX/yb1i9E= Subject key identifier: A8:59:F4:26:B8:3A:A9:6D:27:4C:12:91:B2:6A:51:98:D0:EC:0F:AA Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 693DE0BDAE5B4B362A2F2D873E6E92A5953B4FF5 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3139322e302f32322d3232203d3e2030.roa Signing time: Wed 15 Apr 2026 09:33:02 +0000 ROA not before: Wed 15 Apr 2026 09:28:02 +0000 ROA not after: Wed 14 Apr 2027 09:33:02 +0000 asID: 0 IP address blocks: 103.218.192.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 06:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:3d:e0:bd:ae:5b:4b:36:2a:2f:2d:87:3e:6e:92:a5:95:3b:4f:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:28:02 2026 GMT Not After : Apr 14 09:33:02 2027 GMT Subject: CN=A859F426B83AA96D274C1291B26A5198D0EC0FAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:5b:29:a0:ea:78:c5:35:e8:3a:2a:64:86:a0: f2:26:25:c8:bb:f4:ba:15:86:40:0f:81:d3:4c:d7: 00:5b:f0:84:5f:f7:ce:eb:03:7d:b5:03:3e:dc:4a: 05:b2:55:fb:88:d7:45:06:6c:c2:87:69:17:e1:aa: 97:2a:a0:f2:8a:34:bf:65:0f:7a:0c:49:f8:5f:69: 3e:37:78:bd:9c:cd:b9:7a:bc:c4:41:9a:a7:11:62: 97:e0:73:a5:9c:f1:26:ae:ce:a4:56:3b:88:ff:59: bb:8e:43:c9:0e:8f:98:99:6b:41:14:22:1a:ec:ab: c5:01:84:02:89:11:42:9f:5f:51:3a:62:b4:25:6c: 12:32:b5:5d:56:60:f2:6e:46:d6:87:d1:a3:73:79: 89:c1:93:46:69:91:6c:a8:17:ba:17:2f:e0:b6:c9: 79:ba:0a:ff:1e:97:4e:91:8a:f8:3e:75:08:2b:4c: aa:76:2b:c2:13:d1:78:0e:8f:fb:db:5b:d7:1c:71: 6f:9c:da:b5:a8:10:d8:12:26:96:8e:d7:a5:3c:72: 3d:79:22:9f:3a:43:70:14:b9:8e:ee:dc:4e:41:0c: 64:db:7a:62:22:22:c7:d4:a7:59:ae:45:e8:fa:ad: 19:8f:b3:70:0c:d2:05:0f:65:48:21:05:39:0f:a3: 71:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:59:F4:26:B8:3A:A9:6D:27:4C:12:91:B2:6A:51:98:D0:EC:0F:AA X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3139322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.218.192.0/22 Signature Algorithm: sha256WithRSAEncryption 19:df:f5:36:3f:d8:af:48:06:44:22:cd:9c:36:20:8b:f2:9a: da:9e:e4:82:8b:ce:cf:de:24:cc:7b:6a:53:71:b2:29:99:9d: 60:da:30:37:d5:c6:5f:3a:b8:5e:1e:6f:b5:49:0e:4a:3c:7a: 7f:8e:75:92:b7:06:02:40:94:db:e8:73:ff:c2:74:5a:b8:08: a7:11:87:33:91:f6:6c:47:a4:b4:7c:5f:27:a9:0b:50:1f:18: 09:30:8a:3f:c6:53:6e:bc:cd:3c:19:e1:01:ef:08:fb:08:92: a1:57:cb:ab:8d:e3:23:23:f7:69:a1:20:b9:fd:38:b2:18:bf: 39:08:4e:d6:80:72:c9:49:24:66:c6:16:f4:f1:e7:c7:a7:99: eb:8d:ec:59:0b:6e:11:b9:24:ff:95:09:5d:33:e6:4a:4f:5e: 4e:3b:cc:4a:cb:66:34:35:03:61:b7:e7:d9:8c:d5:b8:38:c5: 18:b0:23:7c:ff:ef:b6:72:93:e8:cf:1a:27:1f:39:f7:8c:de: cb:0a:26:a2:74:9a:61:c1:5f:43:26:d3:cc:8d:d8:cd:f6:73: a2:96:a6:5e:be:a6:dd:93:1f:72:6d:8a:42:fe:7a:51:1e:ca: ec:f6:73:fd:ff:84:ae:3e:d5:cd:b7:9d:ec:2b:e6:6c:46:21: 6a:20:55:60 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUaT3gva5bSzYqLy2HPm6SpZU7T/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTI4MDJaFw0yNzA0MTQwOTMzMDJaMDMxMTAvBgNV BAMTKEE4NTlGNDI2QjgzQUE5NkQyNzRDMTI5MUIyNkE1MTk4RDBFQzBGQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+Wymg6njFNeg6KmSGoPImJci7 9LoVhkAPgdNM1wBb8IRf987rA321Az7cSgWyVfuI10UGbMKHaRfhqpcqoPKKNL9l D3oMSfhfaT43eL2czbl6vMRBmqcRYpfgc6Wc8SauzqRWO4j/WbuOQ8kOj5iZa0EU Ihrsq8UBhAKJEUKfX1E6YrQlbBIytV1WYPJuRtaH0aNzeYnBk0ZpkWyoF7oXL+C2 yXm6Cv8el06Rivg+dQgrTKp2K8IT0XgOj/vbW9cccW+c2rWoENgSJpaO16U8cj15 Ip86Q3AUuY7u3E5BDGTbemIiIsfUp1muRej6rRmPs3AM0gUPZUghBTkPo3GpAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUqFn0Jrg6qW0nTBKRsmpRmNDsD6owHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzMjMx MzgyZTMxMzkzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z9rAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ3/U2P9ivSAZEIs2cNiCL8pranuSCi87P 3iTMe2pTcbIpmZ1g2jA31cZfOrheHm+1SQ5KPHp/jnWStwYCQJTb6HP/wnRauAin EYczkfZsR6S0fF8nqQtQHxgJMIo/xlNuvM08GeEB7wj7CJKhV8urjeMjI/dpoSC5 /TiyGL85CE7WgHLJSSRmxhb08efHp5nrjexZC24RuST/lQldM+ZKT15OO8xKy2Y0 NQNht+fZjNW4OMUYsCN8/++2cpPozxonHzn3jN7LCiaidJphwV9DJtPMjdjN9nOi lqZevqbdkx9ybYpC/npRHsrs9nP9/4SuPtXNt53sK+ZsRiFqIFVg -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:07 2026 by rpki-client