$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3230382e302f32322d3232203d3e2030.roa File: 3130332e3231382e3230382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: uaIuzMUDe90HJbK7TQv1VasEvQF0voqMqY8aOcAC10U= Subject key identifier: A2:3F:17:92:60:FB:10:BC:66:BB:D8:F5:F4:0E:26:42:A0:58:22:47 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 4E5BDEE984FE074404E6154B203BCB4744582345 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3230382e302f32322d3232203d3e2030.roa Signing time: Wed 15 Apr 2026 09:33:02 +0000 ROA not before: Wed 15 Apr 2026 09:28:02 +0000 ROA not after: Wed 14 Apr 2027 09:33:02 +0000 asID: 0 IP address blocks: 103.218.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 06:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:5b:de:e9:84:fe:07:44:04:e6:15:4b:20:3b:cb:47:44:58:23:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:28:02 2026 GMT Not After : Apr 14 09:33:02 2027 GMT Subject: CN=A23F179260FB10BC66BBD8F5F40E2642A0582247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b6:5b:1f:f0:a8:7c:20:34:ed:f8:b0:81:4d: a1:11:73:2b:cd:9f:06:3b:e7:76:30:7b:22:ed:0a: ac:56:77:01:a0:29:01:f6:45:ad:b4:fd:6a:31:78: fd:28:72:b6:64:ad:b4:24:53:0f:40:45:f1:63:40: 5f:57:a9:87:34:6a:a3:15:94:96:1c:dc:53:9f:11: 41:16:21:8b:33:60:32:e7:77:39:d9:a6:f5:fb:ad: 5d:2f:20:4a:3c:2d:97:ce:69:b1:c1:a4:85:99:88: f5:b9:30:76:d1:43:ba:d9:b6:86:ff:8a:16:10:57: 71:c8:a3:87:23:d8:d0:69:26:ff:da:4e:ed:bb:d4: 3d:b1:54:f9:d3:af:ca:4a:a0:da:ab:ee:95:4f:3d: 10:75:e1:f7:35:02:ed:df:09:c9:9d:d0:b1:52:13: f3:2a:8b:90:f6:fe:64:4a:be:86:56:c5:ff:f2:9f: ab:44:a1:69:02:01:95:ba:79:12:bb:5c:eb:18:2a: db:19:23:8b:fc:e0:27:3b:d1:90:e2:f3:5a:3e:d0: 4c:d5:9f:02:3a:e1:8c:a6:9d:e9:35:db:3e:61:d2: 71:76:25:73:a0:e0:7c:b2:5c:7f:d7:d9:91:27:39: 3b:a3:19:b1:83:a7:32:50:7b:a5:f3:33:7d:87:2b: 75:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:3F:17:92:60:FB:10:BC:66:BB:D8:F5:F4:0E:26:42:A0:58:22:47 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3230382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.218.208.0/22 Signature Algorithm: sha256WithRSAEncryption 05:db:b9:5e:c4:03:69:f6:f8:47:ce:12:44:0d:06:fc:a1:b1: 4d:98:21:00:ea:1a:3c:f5:f7:17:b5:75:de:28:d3:95:4e:23: 19:f4:52:a1:50:d5:52:e6:f2:d2:34:c6:6e:01:11:36:a9:94: 68:29:51:44:41:97:c4:3a:eb:09:5b:18:4e:c3:2d:b4:fb:39: 86:7f:46:29:31:63:17:5a:1d:aa:9d:8e:e4:6b:64:87:f6:10: b8:88:b1:01:47:c6:47:84:a0:6b:15:42:ae:b5:ac:75:6d:f0: df:66:8a:b3:8e:a1:da:a3:16:5d:39:8e:36:d9:91:22:94:bf: 25:20:37:da:8e:4d:55:b5:1e:53:83:b1:be:38:54:71:6b:8f: 11:d5:70:42:c9:e0:aa:28:72:57:88:90:d4:e5:a5:1f:c8:7f: 39:52:91:a9:65:b8:13:40:84:3d:9c:ff:8c:be:df:ec:fc:bd: eb:9f:ec:d5:41:25:4d:7c:7d:58:d4:19:b7:94:1a:64:7c:3d: 5c:58:fd:f5:83:14:5b:7e:c9:56:be:1d:29:28:d5:1b:82:7f: 05:e0:28:48:98:d3:3b:f6:a2:e2:bd:c2:d0:c6:23:4a:fc:9f: 26:28:27:e5:99:66:97:d6:18:04:0c:aa:b0:29:d4:e6:58:70: 63:51:b6:c1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUTlve6YT+B0QE5hVLIDvLR0RYI0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTI4MDJaFw0yNzA0MTQwOTMzMDJaMDMxMTAvBgNV BAMTKEEyM0YxNzkyNjBGQjEwQkM2NkJCRDhGNUY0MEUyNjQyQTA1ODIyNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtlsf8Kh8IDTt+LCBTaERcyvN nwY753YweyLtCqxWdwGgKQH2Ra20/WoxeP0ocrZkrbQkUw9ARfFjQF9XqYc0aqMV lJYc3FOfEUEWIYszYDLndznZpvX7rV0vIEo8LZfOabHBpIWZiPW5MHbRQ7rZtob/ ihYQV3HIo4cj2NBpJv/aTu271D2xVPnTr8pKoNqr7pVPPRB14fc1Au3fCcmd0LFS E/Mqi5D2/mRKvoZWxf/yn6tEoWkCAZW6eRK7XOsYKtsZI4v84Cc70ZDi81o+0EzV nwI64Yymnek12z5h0nF2JXOg4HyyXH/X2ZEnOTujGbGDpzJQe6XzM32HK3X7AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUoj8XkmD7ELxmu9j19A4mQqBYIkcwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzMjMx MzgyZTMyMzAzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z9rQMA0GCSqGSIb3DQEBCwUAA4IBAQAF27lexANp9vhHzhJEDQb8obFNmCEA6ho8 9fcXtXXeKNOVTiMZ9FKhUNVS5vLSNMZuARE2qZRoKVFEQZfEOusJWxhOwy20+zmG f0YpMWMXWh2qnY7ka2SH9hC4iLEBR8ZHhKBrFUKutax1bfDfZoqzjqHaoxZdOY42 2ZEilL8lIDfajk1VtR5Tg7G+OFRxa48R1XBCyeCqKHJXiJDU5aUfyH85UpGpZbgT QIQ9nP+Mvt/s/L3rn+zVQSVNfH1Y1Bm3lBpkfD1cWP31gxRbfslWvh0pKNUbgn8F 4ChImNM79qLivcLQxiNK/J8mKCflmWaX1hgEDKqwKdTmWHBjUbbB -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:09 2026 by rpki-client