$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3230342e302f32322d3232203d3e2030.roa File: 3130332e3231382e3230342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: NVsFiUPCLovmaVdvjNOfbxbi2SKj10WWPHF1QJ2QWpI= Subject key identifier: B2:15:C8:22:11:93:E0:74:11:B2:8A:84:BD:BA:7E:D8:63:4F:AC:A6 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 66E8B58A175A472D82F45789F94268BB69FA142D Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3230342e302f32322d3232203d3e2030.roa Signing time: Wed 15 Apr 2026 09:33:02 +0000 ROA not before: Wed 15 Apr 2026 09:28:02 +0000 ROA not after: Wed 14 Apr 2027 09:33:02 +0000 asID: 0 IP address blocks: 103.218.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 06:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:e8:b5:8a:17:5a:47:2d:82:f4:57:89:f9:42:68:bb:69:fa:14:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:28:02 2026 GMT Not After : Apr 14 09:33:02 2027 GMT Subject: CN=B215C8221193E07411B28A84BDBA7ED8634FACA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:98:b6:b6:77:86:3c:a5:b5:10:92:91:1e:2a: ba:24:2f:0e:08:cf:5d:af:2a:41:6f:f2:22:75:59: 35:be:21:96:70:e7:dc:39:0f:b1:45:42:6f:d4:88: d0:52:e3:41:b6:5d:f5:a5:2d:4a:c3:40:93:54:f9: 88:49:07:48:b4:55:eb:16:c3:18:f6:22:a3:f4:99: c4:ea:17:69:f7:01:03:a1:04:93:25:e6:f7:b4:36: 52:0d:cc:de:54:bf:f4:1a:84:56:c3:1d:f5:b9:8b: a0:b1:1f:d3:33:3f:1f:e3:16:e9:f7:f3:6e:42:66: 7a:c9:aa:17:25:8d:38:eb:a9:bf:9b:e5:be:1e:6b: f3:90:a0:6b:c3:33:2f:cb:30:8e:fd:c3:70:ef:80: 5c:78:f2:05:23:c3:1e:33:ec:12:8d:9d:f8:a6:9b: f1:ad:a0:96:33:4a:b0:92:5c:0d:e9:48:8c:c5:67: d9:2d:ba:41:ad:75:16:1a:37:36:f2:e0:fd:29:89: c5:74:5f:98:b8:e8:c6:c9:3b:ab:6c:04:e9:46:af: 28:f5:79:0d:bc:4d:0f:85:0b:13:df:7e:a4:f4:e2: 5c:18:5e:3b:1f:40:dd:4c:f3:07:a5:1d:aa:07:89: 82:4f:6e:97:26:13:d7:2c:f4:de:bb:74:13:3c:26: 2f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:15:C8:22:11:93:E0:74:11:B2:8A:84:BD:BA:7E:D8:63:4F:AC:A6 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3230342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.218.204.0/22 Signature Algorithm: sha256WithRSAEncryption cd:cb:66:e6:ff:14:03:84:52:37:19:ad:0c:d3:f9:43:3b:9c: e9:0f:c8:0c:4d:6d:d6:6d:e2:7e:19:34:1b:17:61:21:d5:01: 9b:61:69:4e:3e:d0:48:54:75:1b:72:64:47:6c:56:65:cb:79: 95:79:78:8e:78:87:c4:16:85:3d:27:52:85:58:29:9a:a5:f0: 15:b8:ff:62:73:20:69:21:0d:f3:3b:7a:4a:fa:8f:9d:29:2b: 63:f7:1f:31:5d:03:fb:9e:c6:3a:1d:d9:a7:dc:e7:9b:c5:ec: 3a:bd:3d:62:b8:18:5b:c2:41:c6:01:4b:37:84:df:75:59:61: 40:ec:e7:a9:ff:0c:23:97:1c:bc:81:b1:9c:8d:75:ce:4a:47: 12:50:6e:60:6d:62:ab:92:ab:dd:ee:58:c6:b7:93:b5:80:8a: a6:19:12:12:d8:c5:1a:2e:9b:15:5c:7b:db:2f:a6:18:d4:e1: ea:4b:ca:96:ca:55:6d:db:b6:f4:3a:02:ae:63:5c:15:c2:35: 6c:5c:3c:d5:b1:87:2c:ca:cf:ca:b3:47:55:eb:47:3d:4e:ff: 09:b9:c3:2d:a1:39:04:03:ef:3f:15:b4:5b:02:93:e9:47:10: 23:f0:7a:99:8c:c6:43:83:59:dd:4c:2f:c1:1d:16:b6:b1:80: d4:33:1a:dc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUZui1ihdaRy2C9FeJ+UJou2n6FC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTI4MDJaFw0yNzA0MTQwOTMzMDJaMDMxMTAvBgNV BAMTKEIyMTVDODIyMTE5M0UwNzQxMUIyOEE4NEJEQkE3RUQ4NjM0RkFDQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwmLa2d4Y8pbUQkpEeKrokLw4I z12vKkFv8iJ1WTW+IZZw59w5D7FFQm/UiNBS40G2XfWlLUrDQJNU+YhJB0i0VesW wxj2IqP0mcTqF2n3AQOhBJMl5ve0NlINzN5Uv/QahFbDHfW5i6CxH9MzPx/jFun3 825CZnrJqhcljTjrqb+b5b4ea/OQoGvDMy/LMI79w3DvgFx48gUjwx4z7BKNnfim m/GtoJYzSrCSXA3pSIzFZ9ktukGtdRYaNzby4P0picV0X5i46MbJO6tsBOlGryj1 eQ28TQ+FCxPffqT04lwYXjsfQN1M8welHaoHiYJPbpcmE9cs9N67dBM8Ji9pAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUshXIIhGT4HQRsoqEvbp+2GNPrKYwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzMjMx MzgyZTMyMzAzNDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z9rMMA0GCSqGSIb3DQEBCwUAA4IBAQDNy2bm/xQDhFI3Ga0M0/lDO5zpD8gMTW3W beJ+GTQbF2Eh1QGbYWlOPtBIVHUbcmRHbFZly3mVeXiOeIfEFoU9J1KFWCmapfAV uP9icyBpIQ3zO3pK+o+dKStj9x8xXQP7nsY6Hdmn3Oebxew6vT1iuBhbwkHGAUs3 hN91WWFA7Oep/wwjlxy8gbGcjXXOSkcSUG5gbWKrkqvd7ljGt5O1gIqmGRIS2MUa LpsVXHvbL6YY1OHqS8qWylVt27b0OgKuY1wVwjVsXDzVsYcsys/Ks0dV60c9Tv8J ucMtoTkEA+8/FbRbApPpRxAj8HqZjMZDg1ndTC/BHRa2sYDUMxrc -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:32 2026 by rpki-client