$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e33312e35362e302f32322d3232203d3e2030.roa File: 3130332e33312e35362e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: yVhawEDh6Hq7lQKrwI7WYELIn19jfvDLOsvUyMEgPP0= Subject key identifier: 0F:6A:F0:C1:26:BB:F6:ED:8A:87:D2:8A:DA:F3:B4:AF:32:F2:C3:2B Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 654AAA9220517E5882BA04459FF88C581F3702F6 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e33312e35362e302f32322d3232203d3e2030.roa Signing time: Wed 15 Apr 2026 09:33:02 +0000 ROA not before: Wed 15 Apr 2026 09:28:02 +0000 ROA not after: Wed 14 Apr 2027 09:33:02 +0000 asID: 0 IP address blocks: 103.31.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 06:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:4a:aa:92:20:51:7e:58:82:ba:04:45:9f:f8:8c:58:1f:37:02:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:28:02 2026 GMT Not After : Apr 14 09:33:02 2027 GMT Subject: CN=0F6AF0C126BBF6ED8A87D28ADAF3B4AF32F2C32B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:15:f8:53:ff:82:67:21:7e:d2:c7:b0:db:c6: 4e:30:4b:73:0b:6b:a8:70:e4:80:9a:fd:7a:bd:f6: f7:2d:e3:8c:dc:d8:f1:8a:e8:ee:41:75:4f:34:24: 18:32:4b:1f:9d:66:a6:6e:f6:71:2b:fb:d7:2d:b1: b2:d0:a4:ea:e1:65:d7:60:42:cb:42:09:fa:42:cb: 67:38:7e:59:fe:b5:6c:18:2f:9d:fd:8a:ff:9d:ad: ad:e4:8b:be:93:58:8a:5b:19:d9:7e:b2:cd:7a:8a: b6:75:2f:6b:a6:c6:65:0b:7b:69:5c:d1:c9:63:89: 34:b5:55:fd:d9:f7:ef:8e:cf:89:f3:13:b7:d7:ca: 44:cc:10:c5:4b:ac:0c:e9:23:fe:5e:1d:0a:71:e9: a1:92:f0:29:82:94:29:10:79:49:2f:79:63:8f:32: e0:11:6b:7f:8f:dd:e3:c7:44:ae:69:15:04:12:c5: fb:75:d6:01:14:03:42:a6:f4:b4:c1:fa:44:2f:f2: ae:52:27:c8:92:d7:18:e5:3b:88:5d:60:cc:08:02: 80:00:4e:a6:a7:2f:e2:c8:f4:96:3f:ce:ed:2d:63: 1e:c8:34:16:c9:19:5f:65:60:8b:28:7a:9f:c7:c9: 62:5b:06:39:b2:1d:3f:09:df:d6:46:3d:0e:05:88: 28:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:6A:F0:C1:26:BB:F6:ED:8A:87:D2:8A:DA:F3:B4:AF:32:F2:C3:2B X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e33312e35362e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.31.56.0/22 Signature Algorithm: sha256WithRSAEncryption ce:08:24:89:59:56:01:0d:3f:14:11:a7:29:3e:4b:1b:b4:89: d4:56:c7:13:b2:ef:26:5d:75:22:4c:7a:c4:86:2f:74:21:61: 79:e0:68:d4:8f:99:d9:25:d7:ea:cd:46:db:a5:57:16:8f:67: 1a:5d:ee:2e:4f:ff:76:46:d1:89:84:b1:15:14:20:c7:aa:4d: 7b:36:75:bc:83:ce:db:a8:14:50:52:06:ca:7d:25:5a:87:a0: e2:60:bd:ba:a4:01:48:2b:4e:83:b3:00:82:3c:7e:ec:ce:75: fe:2d:f1:12:7d:b4:e8:78:8a:58:42:20:8f:92:ae:5e:db:94: b7:9b:3d:a1:56:96:14:39:3f:6e:95:1f:4c:d3:ae:11:3c:5d: e1:d4:c4:ed:25:af:b9:34:e1:5e:41:78:aa:78:f6:d8:87:ac: 2b:84:02:49:dd:dd:22:b9:19:2b:bf:80:5e:32:84:45:72:77: 3a:6e:46:24:c2:9b:c5:85:a4:b8:67:af:16:38:46:94:f0:6b: 30:94:9b:9d:58:2b:c8:4e:9d:0a:c5:5b:b4:eb:2e:39:e0:1f: 3d:75:c4:f4:99:da:cc:85:0d:41:df:d6:e5:a3:24:1c:89:bc: 6b:6c:09:bb:f9:5f:8a:78:1d:78:c8:88:90:51:c7:c6:9f:46: dc:dd:00:83 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUZUqqkiBRfliCugRFn/iMWB83AvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTI4MDJaFw0yNzA0MTQwOTMzMDJaMDMxMTAvBgNV BAMTKDBGNkFGMEMxMjZCQkY2RUQ4QTg3RDI4QURBRjNCNEFGMzJGMkMzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkFfhT/4JnIX7Sx7Dbxk4wS3ML a6hw5ICa/Xq99vct44zc2PGK6O5BdU80JBgySx+dZqZu9nEr+9ctsbLQpOrhZddg QstCCfpCy2c4fln+tWwYL539iv+dra3ki76TWIpbGdl+ss16irZ1L2umxmULe2lc 0cljiTS1Vf3Z9++Oz4nzE7fXykTMEMVLrAzpI/5eHQpx6aGS8CmClCkQeUkveWOP MuARa3+P3ePHRK5pFQQSxft11gEUA0Km9LTB+kQv8q5SJ8iS1xjlO4hdYMwIAoAA TqanL+LI9JY/zu0tYx7INBbJGV9lYIsoep/HyWJbBjmyHT8J39ZGPQ4FiCjDAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUD2rwwSa79u2Kh9KK2vO0rzLywyswHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzMzMx MmUzNTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnHzgw DQYJKoZIhvcNAQELBQADggEBAM4IJIlZVgENPxQRpyk+Sxu0idRWxxOy7yZddSJM esSGL3QhYXngaNSPmdkl1+rNRtulVxaPZxpd7i5P/3ZG0YmEsRUUIMeqTXs2dbyD ztuoFFBSBsp9JVqHoOJgvbqkAUgrToOzAII8fuzOdf4t8RJ9tOh4ilhCII+Srl7b lLebPaFWlhQ5P26VH0zTrhE8XeHUxO0lr7k04V5BeKp49tiHrCuEAknd3SK5GSu/ gF4yhEVydzpuRiTCm8WFpLhnrxY4RpTwazCUm51YK8hOnQrFW7TrLjngHz11xPSZ 2syFDUHf1uWjJByJvGtsCbv5X4p4HXjIiJBRx8afRtzdAIM= -----END CERTIFICATE-----Generated at Thu Apr 16 22:35:35 2026 by rpki-client