$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32322d3232203d3e203234313339.roa File: 3130332e34342e38302e302f32322d3232203d3e203234313339.roa (raw, json) Hash identifier: 7FCfbevqfdQiHPXQdnUkh8Kh5nGTYZ6c1m5RdAjfgxw= Subject key identifier: 39:F7:2A:D5:EC:5A:07:EC:7D:C7:ED:EC:B3:C1:D2:48:05:03:93:00 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 2F34025CE9ED9A98E0AD1B3E7428A43B872A1F7C Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32322d3232203d3e203234313339.roa Signing time: Wed 15 Apr 2026 09:33:01 +0000 ROA not before: Wed 15 Apr 2026 09:28:01 +0000 ROA not after: Wed 14 Apr 2027 09:33:01 +0000 asID: 24139 IP address blocks: 103.44.80.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:34:02:5c:e9:ed:9a:98:e0:ad:1b:3e:74:28:a4:3b:87:2a:1f:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:28:01 2026 GMT Not After : Apr 14 09:33:01 2027 GMT Subject: CN=39F72AD5EC5A07EC7DC7EDECB3C1D24805039300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f5:5d:22:24:8d:6e:d2:35:c2:c8:45:e6:97: f2:66:1c:dc:67:4b:a5:6d:9b:f0:c9:a8:e9:e1:93: e1:a5:c7:e7:ea:43:78:79:c8:df:1e:3f:ab:58:62: 7f:ba:dd:09:52:10:b5:6d:d8:60:3c:ea:e2:85:95: 8b:4e:37:da:9b:0d:9e:fe:ca:2e:5a:2f:d3:3c:dc: 60:14:b3:d8:af:5d:74:14:bf:af:a9:52:4f:48:f9: 8c:64:2f:df:3e:72:d7:2b:9c:24:75:d0:26:ad:96: 2e:0f:51:ef:59:b6:a8:02:b7:02:96:9d:a7:3b:41: d7:7e:66:66:9a:d3:bd:7f:18:8a:0d:29:b0:0e:10: 4e:a7:21:ee:3d:f3:e7:96:0e:df:0d:c8:12:da:e4: 91:a0:a1:ce:8e:fb:97:59:06:21:cd:6c:0c:ab:81: 46:6d:ba:64:80:30:3c:77:1e:c3:e3:6a:6a:4a:60: 33:2b:0f:d1:11:66:62:1a:41:27:b7:2b:a4:05:d4: a1:fd:44:90:d0:04:e2:e6:eb:d9:e7:b3:79:4c:69: 6a:c5:c0:f7:d6:df:40:c7:53:14:70:e8:57:33:73: c8:fa:2c:e6:cc:c0:c0:ae:79:4e:72:61:7e:d6:8c: c5:23:fe:9b:6a:f9:94:ce:2e:2a:63:35:ee:d4:1e: 67:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F7:2A:D5:EC:5A:07:EC:7D:C7:ED:EC:B3:C1:D2:48:05:03:93:00 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/3130332e34342e38302e302f32322d3232203d3e203234313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.44.80.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:13:91:5e:90:a7:f1:16:d7:04:24:ba:9d:93:5b:0d:38:f9: 32:c8:e3:ae:35:d8:5c:72:1b:9c:d6:4c:d0:bd:cf:96:2f:e5: dd:a1:05:2e:3c:ad:b5:56:d8:33:3c:23:b9:fa:17:71:05:1e: 76:b5:a8:5b:50:94:4d:1e:64:d0:b3:7b:6d:34:3c:e4:df:ba: d9:91:43:b1:61:bd:d0:43:f8:4c:b2:72:bd:0e:0f:94:f0:04: 6e:b6:ff:c9:1e:b3:de:27:f4:4b:6a:7b:b6:91:a0:e7:12:02: e6:41:d3:40:77:58:ea:34:c8:1f:20:ae:6a:ca:69:ee:bf:2e: 72:4a:4f:0c:05:d7:22:1f:ed:0f:72:d6:62:0a:28:25:e3:d9: ec:4a:87:07:6a:a3:f0:de:25:c2:e6:ec:cb:fd:10:0a:d3:27: 23:82:9e:69:a4:de:1f:6c:23:dc:54:52:cf:5d:ca:42:91:c8: 4c:b2:ae:60:5d:ba:d2:ca:34:41:8c:7f:23:7f:53:ac:a2:71: 16:cf:ea:b3:43:0d:88:e9:8a:be:5c:03:db:f8:3a:53:54:93: 8f:01:e7:62:62:bb:a0:1e:86:87:e9:a7:98:ea:46:65:b5:9c: a7:1a:82:4e:e3:07:61:4b:83:19:e3:01:71:1e:d8:83:40:ea: 30:53:e5:7c -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULzQCXOntmpjgrRs+dCikO4cqH3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTI4MDFaFw0yNzA0MTQwOTMzMDFaMDMxMTAvBgNV BAMTKDM5RjcyQUQ1RUM1QTA3RUM3REM3RURFQ0IzQzFEMjQ4MDUwMzkzMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH9V0iJI1u0jXCyEXml/JmHNxn S6Vtm/DJqOnhk+Glx+fqQ3h5yN8eP6tYYn+63QlSELVt2GA86uKFlYtON9qbDZ7+ yi5aL9M83GAUs9ivXXQUv6+pUk9I+YxkL98+ctcrnCR10Catli4PUe9ZtqgCtwKW nac7Qdd+Zmaa071/GIoNKbAOEE6nIe498+eWDt8NyBLa5JGgoc6O+5dZBiHNbAyr gUZtumSAMDx3HsPjampKYDMrD9ERZmIaQSe3K6QF1KH9RJDQBOLm69nns3lMaWrF wPfW30DHUxRw6Fczc8j6LObMwMCueU5yYX7WjMUj/ptq+ZTOLipjNe7UHmfVAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUOfcq1exaB+x9x+3ss8HSSAUDkwAwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzEzMDMzMmUzNDM0 MmUzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDMxMzMzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcsUDANBgkqhkiG9w0BAQsFAAOCAQEASxORXpCn8RbXBCS6nZNbDTj5Msjj rjXYXHIbnNZM0L3Pli/l3aEFLjyttVbYMzwjufoXcQUedrWoW1CUTR5k0LN7bTQ8 5N+62ZFDsWG90EP4TLJyvQ4PlPAEbrb/yR6z3if0S2p7tpGg5xIC5kHTQHdY6jTI HyCuaspp7r8uckpPDAXXIh/tD3LWYgooJePZ7EqHB2qj8N4lwubsy/0QCtMnI4Ke aaTeH2wj3FRSz13KQpHITLKuYF260so0QYx/I39TrKJxFs/qs0MNiOmKvlwD2/g6 U1STjwHnYmK7oB6Gh+mnmOpGZbWcpxqCTuMHYUuDGeMBcR7Yg0DqMFPlfA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:24:24 2026 by rpki-client