$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa File: 3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa (raw, json) Hash identifier: 0AJrwoJqWyS7mm02LUhjXruCkjbSDcdGfNe21l9Twws= Subject key identifier: 0A:D3:BB:49:91:14:53:33:34:19:8E:21:59:9F:D3:CE:9E:8B:8D:18 Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Certificate serial: 6BD96F3E67AC4C89C0C5AB78A9FBCB64F5F02A92 Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa Signing time: Thu 16 Apr 2026 06:59:20 +0000 ROA not before: Thu 16 Apr 2026 06:54:20 +0000 ROA not after: Thu 15 Apr 2027 06:59:20 +0000 asID: 23724 IP address blocks: 103.227.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d9:6f:3e:67:ac:4c:89:c0:c5:ab:78:a9:fb:cb:64:f5:f0:2a:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89 Validity Not Before: Apr 16 06:54:20 2026 GMT Not After : Apr 15 06:59:20 2027 GMT Subject: CN=0AD3BB499114533334198E21599FD3CE9E8B8D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9f:99:3d:c9:8d:84:b3:2c:14:f7:28:d6:05: fd:96:ed:3c:c5:a7:51:22:33:bd:bd:be:d8:73:68: f0:30:56:18:02:55:ef:ce:50:c6:90:23:f6:5c:77: b8:ea:f6:94:24:89:17:ee:16:9d:8c:e4:50:9a:af: 90:52:22:f1:fa:37:20:d4:16:9d:aa:21:5e:01:21: e3:b1:2e:4e:0b:a2:4b:b8:68:be:68:67:84:88:7a: 7c:ca:94:b6:f9:78:7c:f7:d2:38:47:7d:b2:88:0e: 24:06:7f:e5:8d:50:8a:f8:ea:a8:e7:c7:08:4a:38: aa:87:de:f6:d2:dd:3f:cc:bc:8b:e0:ac:fb:58:91: df:13:ff:00:ed:92:f3:4e:2b:f8:fd:34:62:a2:d1: 06:a6:6b:d8:32:57:f4:17:c0:0b:6e:8c:63:ee:2c: 94:c1:69:09:96:bc:c6:13:20:15:77:40:76:26:29: 61:1e:b2:66:4a:10:d4:9e:cc:cd:49:05:d6:c8:b6: b3:4c:74:61:fa:9a:4a:69:fd:25:64:a7:ef:de:8b: 9e:67:b5:16:3e:0c:23:91:6c:45:c4:ec:d1:6c:21: b8:dc:47:03:a9:c0:89:79:ba:87:e7:35:85:7f:6b: f1:bd:6f:4f:d7:03:ce:0a:e4:e7:21:91:43:c3:08: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:D3:BB:49:91:14:53:33:34:19:8E:21:59:9F:D3:CE:9E:8B:8D:18 X509v3 Authority Key Identifier: keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/3130332e3232372e3132332e302f32342d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.227.123.0/24 Signature Algorithm: sha256WithRSAEncryption 70:d0:4b:f3:dd:09:fd:a9:63:59:f4:22:4c:52:a7:e5:4d:a6: d6:d5:4e:10:82:d5:95:15:dc:bb:87:4a:d2:01:4f:8b:b0:67: de:2e:89:71:63:e0:2c:65:13:9e:a4:5d:92:c2:b9:08:71:f2: 61:5d:9d:e0:4c:ac:2d:5b:bf:00:ff:84:be:70:69:ec:f3:98: 1b:89:d6:d2:0e:da:4f:d9:67:38:d4:2e:b0:29:e0:64:cd:60: b3:46:16:79:22:76:2a:0b:f7:f9:e4:92:cf:f5:a9:8a:20:5d: b6:68:eb:95:c1:53:e2:85:fb:a6:04:e4:24:c9:cb:48:04:e7: ee:47:69:15:c5:0e:10:54:bc:b8:5f:aa:7e:e4:e1:db:dc:fa: 41:bf:bd:8d:fa:a8:8a:6a:37:74:15:e7:51:09:56:69:64:ed: 5d:46:5b:ef:ed:29:85:cd:00:8a:e3:18:0b:eb:63:0d:de:22: 0d:61:93:3a:1b:e9:cc:bb:71:4d:ea:a9:90:7f:4c:e6:05:54: e7:8b:ad:5c:71:73:13:b4:b6:14:90:e0:35:24:8c:9d:59:2c: 19:a0:84:8a:42:a7:0a:81:3b:f6:61:e5:c4:a4:50:62:7f:c9: d8:46:26:62:d6:de:4c:6d:4f:ac:36:dc:62:03:4d:0e:67:b7: 60:aa:d9:80 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUa9lvPmesTInAxat4qfvLZPXwKpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4 N0FCQ0E4OTAeFw0yNjA0MTYwNjU0MjBaFw0yNzA0MTUwNjU5MjBaMDMxMTAvBgNV BAMTKDBBRDNCQjQ5OTExNDUzMzMzNDE5OEUyMTU5OUZEM0NFOUU4QjhEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyn5k9yY2EsywU9yjWBf2W7TzF p1EiM729vthzaPAwVhgCVe/OUMaQI/Zcd7jq9pQkiRfuFp2M5FCar5BSIvH6NyDU Fp2qIV4BIeOxLk4Loku4aL5oZ4SIenzKlLb5eHz30jhHfbKIDiQGf+WNUIr46qjn xwhKOKqH3vbS3T/MvIvgrPtYkd8T/wDtkvNOK/j9NGKi0Qama9gyV/QXwAtujGPu LJTBaQmWvMYTIBV3QHYmKWEesmZKENSezM1JBdbItrNMdGH6mkpp/SVkp+/ei55n tRY+DCORbEXE7NFsIbjcRwOpwIl5uofnNYV/a/G9b0/XA84K5OchkUPDCKL3AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUCtO7SZEUUzM0GY4hWZ/Tzp6LjRgwHwYDVR0j BBgwFoAUtojoD4nK7GqMhKflGDhCQoeryokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0NzQzMDc0ODE3NjM4Ny8wL0I2ODhFODBGODlDQUVDNkE4Qzg0QTdFNTE4Mzg0 MjQyODdBQkNBODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjY4OEU4MEY4OUNBRUM2QThDODRBN0U1MTgzODQyNDI4N0FCQ0E4OS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTcwNDc0MzA3NDgxNzYzODcvMC8zMTMwMzMyZTMy MzIzNzJlMzEzMjMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfjezANBgkqhkiG9w0BAQsFAAOCAQEAcNBL890J/aljWfQiTFKn 5U2m1tVOEILVlRXcu4dK0gFPi7Bn3i6JcWPgLGUTnqRdksK5CHHyYV2d4EysLVu/ AP+EvnBp7POYG4nW0g7aT9lnONQusCngZM1gs0YWeSJ2Kgv3+eSSz/WpiiBdtmjr lcFT4oX7pgTkJMnLSATn7kdpFcUOEFS8uF+qfuTh29z6Qb+9jfqoimo3dBXnUQlW aWTtXUZb7+0phc0AiuMYC+tjDd4iDWGTOhvpzLtxTeqpkH9M5gVU54utXHFzE7S2 FJDgNSSMnVksGaCEikKnCoE79mHlxKRQYn/J2EYmYtbeTG1PrDbcYgNNDme3YKrZ gA== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:21 2026 by rpki-client