$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa File: 3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa (raw, json) Hash identifier: gbVCFJ5R1GJxVqj6VUJKkq23UMSaPAub7AW4a1P+kwc= Subject key identifier: 2F:B1:35:1C:DC:F1:98:BB:A4:55:7A:09:28:36:60:22:26:FA:68:46 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 3598D814DFE7209F335E7F6C32FD8AC828DC333E Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa Signing time: Thu 16 Apr 2026 08:15:23 +0000 ROA not before: Thu 16 Apr 2026 08:10:23 +0000 ROA not after: Thu 15 Apr 2027 08:15:23 +0000 asID: 24139 IP address blocks: 103.220.240.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:98:d8:14:df:e7:20:9f:33:5e:7f:6c:32:fd:8a:c8:28:dc:33:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Apr 16 08:10:23 2026 GMT Not After : Apr 15 08:15:23 2027 GMT Subject: CN=2FB1351CDCF198BBA4557A092836602226FA6846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:9c:57:43:65:ec:37:d8:42:65:63:b8:44: 90:3a:48:a4:83:48:18:22:8d:3a:c7:be:3c:dc:26: 09:93:4e:9d:a3:f7:fc:5f:cd:1a:8e:bd:7d:a9:af: e6:49:00:c2:45:11:f6:91:16:e9:18:8f:ff:98:b2: fd:96:16:5e:cb:d7:9d:30:f8:2c:5e:6f:ad:80:ff: 52:9d:ee:ad:05:bf:70:7b:b3:e3:0e:03:65:95:60: e8:bc:7d:01:1c:5d:c1:1d:c9:bc:ba:10:52:ee:b5: d3:34:cf:1b:70:30:ac:07:6c:29:13:98:65:54:0f: ae:03:e1:f7:65:3d:bf:46:c3:47:dc:c4:f3:dd:10: 7d:fa:a6:0e:ab:3c:da:9f:29:17:e1:38:3f:fc:13: b2:50:14:87:a5:36:ec:47:bc:fc:bb:97:84:74:80: 0e:f0:14:77:ab:b6:73:a8:21:36:02:eb:d1:e0:51: df:00:7b:7e:62:47:9a:eb:4b:3d:89:85:f2:3a:78: 19:69:30:2e:58:32:27:3b:25:d4:93:90:2d:6f:f1: c5:25:5c:dd:f0:42:96:bb:04:b7:3c:f0:5c:92:4d: 90:da:1e:47:6b:90:9d:43:92:f6:20:42:76:cb:96: f8:74:84:44:6c:52:ab:ca:09:31:72:3a:7a:12:7b: 91:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B1:35:1C:DC:F1:98:BB:A4:55:7A:09:28:36:60:22:26:FA:68:46 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/3130332e3232302e3234302e302f32322d3232203d3e203234313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.240.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:52:4d:66:72:18:1b:0f:17:ee:1b:1d:61:1a:ef:ac:c8:da: 33:3f:8a:aa:43:f9:41:79:4f:a4:57:b9:7b:a4:4a:61:01:85: b2:b7:c2:20:ab:9e:1b:7e:59:35:d0:8a:b3:b4:a6:c8:ea:d2: a5:63:bc:e9:b1:4d:6a:96:9c:dc:d4:57:04:de:87:55:8f:fd: 9e:79:8d:39:5c:53:44:93:7e:e5:27:5e:32:fc:1b:3e:7a:b5: 2c:aa:41:c3:72:ec:7d:82:56:76:69:00:86:c4:dc:6e:77:da: d0:2d:32:b7:08:fc:ea:ec:88:e3:5d:c5:99:a6:9d:cb:38:1e: 17:9f:c2:c7:70:34:2b:00:6e:85:68:ce:81:7b:af:02:6c:c9: c8:39:ff:f0:4a:4d:f4:04:ab:5e:93:ca:f8:dd:dc:8e:50:d0: 20:e6:1c:9d:0f:97:cc:a9:6b:aa:1f:8b:85:98:47:04:3f:0c: 4e:42:7b:7a:53:45:1d:37:ba:a4:cd:ae:5d:34:4c:43:a3:9a: 9c:99:14:8d:2d:be:77:d4:f7:51:a9:e7:5e:ce:45:67:d9:82: 9a:6a:9f:ef:60:58:c6:54:98:f1:47:8e:67:c6:fe:b4:15:fc: 1e:1c:ec:df:86:20:30:00:24:79:48:ad:8e:71:6d:81:6b:f3: ae:6b:33:b9 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNZjYFN/nIJ8zXn9sMv2KyCjcMz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA0MTYwODEwMjNaFw0yNzA0MTUwODE1MjNaMDMxMTAvBgNV BAMTKDJGQjEzNTFDRENGMTk4QkJBNDU1N0EwOTI4MzY2MDIyMjZGQTY4NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQpxXQ2XsN9hCZWO4RJA6SKSD SBgijTrHvjzcJgmTTp2j9/xfzRqOvX2pr+ZJAMJFEfaRFukYj/+Ysv2WFl7L150w +Cxeb62A/1Kd7q0Fv3B7s+MOA2WVYOi8fQEcXcEdyby6EFLutdM0zxtwMKwHbCkT mGVUD64D4fdlPb9Gw0fcxPPdEH36pg6rPNqfKRfhOD/8E7JQFIelNuxHvPy7l4R0 gA7wFHertnOoITYC69HgUd8Ae35iR5rrSz2JhfI6eBlpMC5YMic7JdSTkC1v8cUl XN3wQpa7BLc88FySTZDaHkdrkJ1DkvYgQnbLlvh0hERsUqvKCTFyOnoSe5HVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUL7E1HNzxmLukVXoJKDZgIib6aEYwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY5NjI0MDQ4OTU0MjQ1MTUvMC8zMTMwMzMyZTMy MzIzMDJlMzIzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDMxMzMzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfc8DANBgkqhkiG9w0BAQsFAAOCAQEAHlJNZnIYGw8X7hsdYRrv rMjaMz+KqkP5QXlPpFe5e6RKYQGFsrfCIKueG35ZNdCKs7SmyOrSpWO86bFNapac 3NRXBN6HVY/9nnmNOVxTRJN+5SdeMvwbPnq1LKpBw3LsfYJWdmkAhsTcbnfa0C0y twj86uyI413FmaadyzgeF5/Cx3A0KwBuhWjOgXuvAmzJyDn/8EpN9ASrXpPK+N3c jlDQIOYcnQ+XzKlrqh+LhZhHBD8MTkJ7elNFHTe6pM2uXTRMQ6OanJkUjS2+d9T3 UannXs5FZ9mCmmqf72BYxlSY8UeOZ8b+tBX8Hhzs34YgMAAkeUitjnFtgWvzrmsz uQ== -----END CERTIFICATE-----Generated at Sat Apr 18 02:27:00 2026 by rpki-client