$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa File: 3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa (raw, json) Hash identifier: 2wZEG3CS93oCxpOvvSD/xvBdYQ4/YZbs+htsSujp09o= Subject key identifier: 4E:BF:70:8A:24:BB:33:CB:F3:1A:BE:2F:89:58:3C:F7:EE:27:AF:69 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 7070736D0F7CD9E61D3752761339D011F2513031 Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa Signing time: Thu 16 Apr 2026 07:20:29 +0000 ROA not before: Thu 16 Apr 2026 07:15:29 +0000 ROA not after: Thu 15 Apr 2027 07:20:29 +0000 asID: 4837 IP address blocks: 103.220.240.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:06:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:70:73:6d:0f:7c:d9:e6:1d:37:52:76:13:39:d0:11:f2:51:30:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Apr 16 07:15:29 2026 GMT Not After : Apr 15 07:20:29 2027 GMT Subject: CN=4EBF708A24BB33CBF31ABE2F89583CF7EE27AF69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:69:32:a8:b3:66:5f:5e:de:b5:6f:15:cd:34: f5:69:f2:3a:ac:2f:00:dc:08:09:ae:2e:a4:92:b2: b1:d5:13:15:6b:a8:09:a4:68:25:36:b2:fe:4b:8e: 31:30:09:06:2d:51:e1:53:67:1d:41:e2:27:92:29: b3:01:c1:7a:5a:b4:84:27:55:34:eb:37:bf:a0:2f: 8e:17:c8:4a:0b:ec:23:23:40:d9:75:15:4c:ba:17: ce:41:25:d8:68:f5:d1:1b:60:00:36:32:0f:f5:cb: 3c:36:f3:d8:f6:69:2e:9a:ce:32:38:60:7c:e2:8f: 42:1d:b0:03:a2:33:48:d6:84:35:13:89:de:89:48: 2f:cf:93:25:11:45:a4:63:33:73:08:90:c7:1a:67: 3c:20:11:45:33:34:98:ad:83:40:0b:49:ef:46:eb: 09:5a:10:97:a3:77:77:87:82:04:0d:c2:0b:cf:94: 66:5b:55:ee:04:6e:d5:b9:1d:49:61:7f:a5:ea:8b: 9f:ef:06:fd:51:bf:91:f0:dc:68:43:6d:18:d5:50: 10:dd:ae:fc:47:c1:06:a0:ad:a8:6d:22:0c:16:51: e0:30:86:63:f1:a7:53:00:0d:9e:96:84:75:50:28: 85:5a:eb:ef:71:1c:24:b3:39:ec:2e:17:6d:d2:f5: 72:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BF:70:8A:24:BB:33:CB:F3:1A:BE:2F:89:58:3C:F7:EE:27:AF:69 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/3130332e3232302e3234302e302f32332d3233203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.220.240.0/23 Signature Algorithm: sha256WithRSAEncryption 9a:b0:75:6b:df:7d:07:f0:32:73:25:3e:56:bd:40:1a:d6:08: a8:11:89:c0:d9:1c:18:1f:de:4e:6d:b7:bd:3b:d9:64:fb:5d: 67:6f:42:75:76:87:2e:41:94:24:ee:5f:35:aa:f7:a7:77:8a: 39:61:b2:37:37:b4:e6:a1:5b:4b:1e:f4:0b:bb:39:7a:28:92: 1a:aa:d3:32:dd:9c:a1:8b:72:fa:70:a0:5c:ff:0d:46:9b:fb: 50:10:d8:81:bd:2e:88:95:4b:ea:58:66:e0:8d:01:d8:86:ed: 98:b8:dd:0c:7f:41:4d:89:32:4f:4d:6f:d5:94:20:b7:0e:b8: a5:67:fa:dd:a3:06:de:ca:eb:09:4d:83:10:d4:64:82:2f:34: 18:cd:e1:78:a7:d7:8f:ff:4a:91:b7:be:08:a1:0a:af:94:7e: c0:87:19:36:49:13:ee:b3:4d:3a:38:ae:0c:7f:d9:75:69:99: ad:32:67:e7:31:11:32:01:8a:51:81:fe:24:93:0b:0f:8e:a6: 2a:1c:db:94:f0:0b:d0:87:1d:e5:33:31:fd:57:4f:75:59:8e: 5e:d4:07:a9:85:4c:b9:40:51:f3:c6:4d:44:af:e1:62:fc:42: a8:f9:5a:f7:e2:24:c7:57:03:83:ae:3c:ca:66:6b:15:66:aa: a6:2d:d5:7d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUcHBzbQ982eYdN1J2EznQEfJRMDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA0MTYwNzE1MjlaFw0yNzA0MTUwNzIwMjlaMDMxMTAvBgNV BAMTKDRFQkY3MDhBMjRCQjMzQ0JGMzFBQkUyRjg5NTgzQ0Y3RUUyN0FGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaTKos2ZfXt61bxXNNPVp8jqs LwDcCAmuLqSSsrHVExVrqAmkaCU2sv5LjjEwCQYtUeFTZx1B4ieSKbMBwXpatIQn VTTrN7+gL44XyEoL7CMjQNl1FUy6F85BJdho9dEbYAA2Mg/1yzw289j2aS6azjI4 YHzij0IdsAOiM0jWhDUTid6JSC/PkyURRaRjM3MIkMcaZzwgEUUzNJitg0ALSe9G 6wlaEJejd3eHggQNwgvPlGZbVe4EbtW5HUlhf6Xqi5/vBv1Rv5Hw3GhDbRjVUBDd rvxHwQagrahtIgwWUeAwhmPxp1MADZ6WhHVQKIVa6+9xHCSzOewuF23S9XKNAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUTr9wiiS7M8vzGr4viVg89+4nr2kwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5Njk2MjQwNDg5NTQyNDUxNS8wLzMxMzAzMzJlMzIz MjMwMmUzMjM0MzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWfc8DANBgkqhkiG9w0BAQsFAAOCAQEAmrB1a999B/AycyU+Vr1AGtYI qBGJwNkcGB/eTm23vTvZZPtdZ29CdXaHLkGUJO5fNar3p3eKOWGyNze05qFbSx70 C7s5eiiSGqrTMt2coYty+nCgXP8NRpv7UBDYgb0uiJVL6lhm4I0B2IbtmLjdDH9B TYkyT01v1ZQgtw64pWf63aMG3srrCU2DENRkgi80GM3heKfXj/9Kkbe+CKEKr5R+ wIcZNkkT7rNNOjiuDH/ZdWmZrTJn5zERMgGKUYH+JJMLD46mKhzblPAL0Icd5TMx /VdPdVmOXtQHqYVMuUBR88ZNRK/hYvxCqPla9+Ikx1cDg648ymZrFWaqpi3VfQ== -----END CERTIFICATE-----Generated at Fri Apr 17 17:52:10 2026 by rpki-client