$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3231322e302f32322d3232203d3e2030.roa File: 3130332e3231382e3231322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: YZmSf8vOaCiCzQbqBtYJe6iMkoOXjjGWA1NTL0Y7NUE= Subject key identifier: 57:3B:4D:7F:FE:E4:AE:66:8F:1D:33:A1:C0:A2:78:79:6F:2E:3B:AC Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 57EB20579E732D889CA75FF2C543069B956AD79E Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3231322e302f32322d3232203d3e2030.roa Signing time: Wed 15 Apr 2026 09:33:03 +0000 ROA not before: Wed 15 Apr 2026 09:28:03 +0000 ROA not after: Wed 14 Apr 2027 09:33:03 +0000 asID: 0 IP address blocks: 103.218.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 06:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:eb:20:57:9e:73:2d:88:9c:a7:5f:f2:c5:43:06:9b:95:6a:d7:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:28:03 2026 GMT Not After : Apr 14 09:33:03 2027 GMT Subject: CN=573B4D7FFEE4AE668F1D33A1C0A278796F2E3BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f0:dc:ab:2f:90:62:59:ab:41:34:0e:a0:b2: 0f:cc:70:fe:8b:f4:5a:23:28:b1:13:05:28:95:86: b5:82:e1:6a:b9:d9:66:2e:e6:fd:ab:bc:41:c9:0e: d9:d9:6a:fc:7d:3f:f7:8a:a3:a3:b3:6a:8b:7b:54: a2:44:fe:39:ca:48:ba:00:3f:28:93:0e:c3:1a:d9: 33:89:9d:6c:32:ad:f8:b8:90:24:cf:8c:98:fd:ae: aa:95:54:88:cb:29:c9:3b:de:36:5f:ba:9f:29:ba: d8:02:03:48:f4:18:48:8d:c7:e5:3e:e0:50:c3:48: de:db:93:c6:20:48:5b:e2:3d:05:33:7e:81:b4:0f: ed:31:36:c3:75:2d:35:f1:02:4c:08:3b:a0:30:c0: c1:9e:c4:2a:6a:91:e3:2b:3f:56:48:ef:62:29:8c: 34:ee:1c:26:c5:dd:e2:7c:28:92:a7:56:64:25:bf: e1:e5:46:e2:30:89:b9:00:d8:9e:09:b4:a3:05:e1: 29:48:f5:ed:d3:24:03:21:86:28:9b:c3:89:ae:14: a9:aa:90:3d:dc:86:a4:da:a0:ef:57:04:92:28:1b: 36:fd:89:1d:2c:b1:c8:28:97:5a:ba:60:9c:6c:94: 4b:63:7c:ae:cc:21:8e:76:70:0d:44:7f:a6:5e:d1: 05:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:3B:4D:7F:FE:E4:AE:66:8F:1D:33:A1:C0:A2:78:79:6F:2E:3B:AC X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e3231382e3231322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.218.212.0/22 Signature Algorithm: sha256WithRSAEncryption c6:ad:e6:bf:59:73:fb:93:6c:19:21:d7:6c:b6:67:f8:59:4b: f4:ca:55:7e:07:08:1f:bd:9a:f3:21:13:c1:90:37:2d:f5:3c: c9:10:04:f3:1d:29:40:85:91:de:43:12:21:cf:92:0b:33:07: a6:c1:9c:a7:55:2c:14:b3:73:9c:b6:01:fc:ef:86:39:70:93: 16:91:a5:86:78:17:29:80:09:92:ca:69:b2:df:3e:a3:6b:3b: 4f:ea:50:64:1c:a0:ce:51:ca:09:ec:3b:e1:08:3e:51:cf:15: b1:94:3c:60:90:cf:0c:cc:3f:3c:73:73:36:f0:6c:f9:06:2b: 97:7f:00:46:1b:2f:55:3b:7d:c4:fd:52:95:20:8f:6f:ee:0e: 42:59:58:84:7b:df:14:c4:b7:87:d1:3e:4e:2e:f7:00:ff:dc: bc:44:03:7c:f9:ea:6d:e5:a3:23:e6:3c:90:87:a5:0d:41:2b: 22:c8:03:aa:67:d1:f9:53:51:d5:02:01:25:39:1d:e5:8f:ba: bd:2e:f4:af:92:4f:20:08:93:1c:65:e3:56:9c:4f:34:e5:0b: c9:27:9e:54:99:7e:f8:67:79:39:06:ad:b6:fa:73:af:e8:4e: e2:5c:85:e1:2c:7c:6d:1e:28:38:8a:09:85:2c:c8:64:87:96: 78:23:a8:d2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUV+sgV55zLYicp1/yxUMGm5Vq154wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTI4MDNaFw0yNzA0MTQwOTMzMDNaMDMxMTAvBgNV BAMTKDU3M0I0RDdGRkVFNEFFNjY4RjFEMzNBMUMwQTI3ODc5NkYyRTNCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8NyrL5BiWatBNA6gsg/McP6L 9FojKLETBSiVhrWC4Wq52WYu5v2rvEHJDtnZavx9P/eKo6Ozaot7VKJE/jnKSLoA PyiTDsMa2TOJnWwyrfi4kCTPjJj9rqqVVIjLKck73jZfup8putgCA0j0GEiNx+U+ 4FDDSN7bk8YgSFviPQUzfoG0D+0xNsN1LTXxAkwIO6AwwMGexCpqkeMrP1ZI72Ip jDTuHCbF3eJ8KJKnVmQlv+HlRuIwibkA2J4JtKMF4SlI9e3TJAMhhiibw4muFKmq kD3chqTaoO9XBJIoGzb9iR0sscgol1q6YJxslEtjfK7MIY52cA1Ef6Ze0QU3AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUVztNf/7krmaPHTOhwKJ4eW8uO6wwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzMjMx MzgyZTMyMzEzMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z9rUMA0GCSqGSIb3DQEBCwUAA4IBAQDGrea/WXP7k2wZIddstmf4WUv0ylV+Bwgf vZrzIRPBkDct9TzJEATzHSlAhZHeQxIhz5ILMwemwZynVSwUs3OctgH874Y5cJMW kaWGeBcpgAmSymmy3z6jaztP6lBkHKDOUcoJ7DvhCD5RzxWxlDxgkM8MzD88c3M2 8Gz5BiuXfwBGGy9VO33E/VKVII9v7g5CWViEe98UxLeH0T5OLvcA/9y8RAN8+ept 5aMj5jyQh6UNQSsiyAOqZ9H5U1HVAgElOR3lj7q9LvSvkk8gCJMcZeNWnE805QvJ J55UmX74Z3k5Bq22+nOv6E7iXIXhLHxtHig4igmFLMhkh5Z4I6jS -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:07 2026 by rpki-client