$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa File: 3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa (raw, json) Hash identifier: Sx+7NoTmtU5tLHhBcnSWpMNO747BDHdsVxguRe0fQqw= Subject key identifier: EB:9B:E1:6E:0C:F4:82:47:36:AA:04:0A:A5:65:3A:16:FC:43:5A:41 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 58980812089F4D266F989C32C150A83F2BE5272E Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa Signing time: Thu 16 Apr 2026 06:58:14 +0000 ROA not before: Thu 16 Apr 2026 06:53:14 +0000 ROA not after: Thu 15 Apr 2027 06:58:14 +0000 asID: 4837 IP address blocks: 103.227.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 03:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:98:08:12:08:9f:4d:26:6f:98:9c:32:c1:50:a8:3f:2b:e5:27:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Apr 16 06:53:14 2026 GMT Not After : Apr 15 06:58:14 2027 GMT Subject: CN=EB9BE16E0CF4824736AA040AA5653A16FC435A41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:41:6f:81:ec:12:6e:a1:db:b7:07:ea:53:21: 1e:e2:87:ea:68:ac:47:89:9a:27:a1:67:83:67:c7: 33:ea:40:2c:99:f4:3f:4c:a0:9b:7a:7b:d0:dd:0b: 9b:0a:06:5c:62:a6:7c:2a:a0:f4:f0:c7:16:9c:67: 26:7d:08:cc:4b:2d:9a:a9:a3:ad:bb:d6:8e:d2:f2: 21:55:5e:fd:b7:b0:f4:77:07:e9:54:0f:70:66:e5: cb:16:0c:a3:e9:62:8b:4d:d5:ed:54:b3:cc:21:06: a7:1d:4e:91:33:45:b7:66:37:b4:3c:2b:6c:42:d7: 2a:a7:86:da:a4:63:05:f2:ae:65:d0:7e:3f:43:c4: 35:5e:a5:7f:eb:40:30:47:a0:41:86:d5:fe:5b:dc: ed:bf:2a:da:43:94:51:f4:35:fc:70:88:94:f2:29: b5:ad:5f:4a:78:a3:94:32:53:e1:93:9d:81:88:94: ce:56:07:72:1b:d3:bb:b1:d7:74:48:68:c8:f8:ce: 00:f8:12:31:1e:47:ff:b4:ab:c8:9b:64:ea:45:9f: f2:48:b4:a6:5f:cf:1a:4d:1b:99:6f:f4:03:79:d6: ca:7a:fe:6a:ac:f9:06:4a:96:f9:fe:b5:0a:50:23: 93:51:17:d9:5d:ca:48:88:e4:b7:65:5f:e3:bd:6e: b5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:9B:E1:6E:0C:F4:82:47:36:AA:04:0A:A5:65:3A:16:FC:43:5A:41 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132302e302f32332d3233203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.120.0/23 Signature Algorithm: sha256WithRSAEncryption 2e:2d:9f:51:72:c5:ec:5d:18:6e:35:29:61:c7:12:ab:ef:7d: 08:cf:64:ea:1f:a2:5d:64:91:6d:ff:e8:15:31:0e:64:d0:94: f9:e8:1a:04:dc:3b:62:4d:0c:67:82:71:2d:bc:8e:67:61:f8: 01:b5:af:73:f7:93:1d:38:60:ed:27:0d:17:68:fd:b5:99:fb: 70:e8:1a:78:24:8b:f3:a4:ba:8d:f4:fe:63:53:9c:f2:a2:14: e9:1a:ed:48:d0:bd:e3:7c:93:37:03:1b:28:be:e7:28:54:c3: 39:f6:d3:1e:ae:93:60:c9:6a:f6:cf:a7:11:8b:58:ad:b5:d6: a3:d7:21:ae:84:42:1d:b4:9e:b0:64:c8:e7:d9:ef:62:1e:f2: d3:35:d8:4c:35:17:7b:04:70:60:cb:e0:e7:5d:f3:e4:81:c8: 4c:d7:d1:27:3d:0e:94:43:43:4e:fd:ff:94:8b:84:9d:44:be: 91:25:09:74:e3:91:83:dc:2f:6c:ae:39:18:65:7d:a4:b2:f2: 03:bb:bf:77:eb:a7:d5:67:23:ca:c4:4f:68:b1:f4:74:c5:a1: b5:bf:76:6d:15:e1:32:a0:88:f0:c4:96:d8:28:a0:e3:b7:06: 89:9a:3d:ec:78:2f:e4:0e:54:fe:7f:3e:4c:93:4f:53:9e:2e: f8:69:b9:90 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWJgIEgifTSZvmJwywVCoPyvlJy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA0MTYwNjUzMTRaFw0yNzA0MTUwNjU4MTRaMDMxMTAvBgNV BAMTKEVCOUJFMTZFMENGNDgyNDczNkFBMDQwQUE1NjUzQTE2RkM0MzVBNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxQW+B7BJuodu3B+pTIR7ih+po rEeJmiehZ4NnxzPqQCyZ9D9MoJt6e9DdC5sKBlxipnwqoPTwxxacZyZ9CMxLLZqp o6271o7S8iFVXv23sPR3B+lUD3Bm5csWDKPpYotN1e1Us8whBqcdTpEzRbdmN7Q8 K2xC1yqnhtqkYwXyrmXQfj9DxDVepX/rQDBHoEGG1f5b3O2/KtpDlFH0NfxwiJTy KbWtX0p4o5QyU+GTnYGIlM5WB3Ib07ux13RIaMj4zgD4EjEeR/+0q8ibZOpFn/JI tKZfzxpNG5lv9AN51sp6/mqs+QZKlvn+tQpQI5NRF9ldykiI5LdlX+O9brV7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU65vhbgz0gkc2qgQKpWU6FvxDWkEwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0NzQzMDc0ODE3NjM4Ny8wLzMxMzAzMzJlMzIz MjM3MmUzMTMyMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWfjeDANBgkqhkiG9w0BAQsFAAOCAQEALi2fUXLF7F0YbjUpYccSq+99 CM9k6h+iXWSRbf/oFTEOZNCU+egaBNw7Yk0MZ4JxLbyOZ2H4AbWvc/eTHThg7ScN F2j9tZn7cOgaeCSL86S6jfT+Y1Oc8qIU6RrtSNC943yTNwMbKL7nKFTDOfbTHq6T YMlq9s+nEYtYrbXWo9chroRCHbSesGTI59nvYh7y0zXYTDUXewRwYMvg513z5IHI TNfRJz0OlENDTv3/lIuEnUS+kSUJdOORg9wvbK45GGV9pLLyA7u/d+un1WcjysRP aLH0dMWhtb92bRXhMqCI8MSW2Cig47cGiZo97Hgv5A5U/n8+TJNPU54u+Gm5kA== -----END CERTIFICATE-----Generated at Fri Apr 17 17:51:33 2026 by rpki-client