$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e3233342e32302e302f32322d3232203d3e2034383437.roa File: 3130332e3233342e32302e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: 3Sf2cK0UGbpMwWCXP6aHaTDCxwRWV5EvpU9FnPvvEVw= Subject key identifier: AA:68:16:46:B0:F5:DF:5F:E5:D3:1A:B9:68:D0:BF:FB:FD:EE:06:E9 Certificate issuer: /CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163 Certificate serial: 12D5021D4F64CEDE4D74B32453AAB698D5FC133D Authority key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e3233342e32302e302f32322d3232203d3e2034383437.roa Signing time: Thu 16 Apr 2026 07:46:08 +0000 ROA not before: Thu 16 Apr 2026 07:41:08 +0000 ROA not after: Thu 15 Apr 2027 07:46:08 +0000 asID: 4847 IP address blocks: 103.234.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 04:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:d5:02:1d:4f:64:ce:de:4d:74:b3:24:53:aa:b6:98:d5:fc:13:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163 Validity Not Before: Apr 16 07:41:08 2026 GMT Not After : Apr 15 07:46:08 2027 GMT Subject: CN=AA681646B0F5DF5FE5D31AB968D0BFFBFDEE06E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f6:5c:45:10:02:8a:89:73:dc:87:da:20:dc: 9c:64:c5:1e:c2:32:b1:d9:a9:4e:0f:15:dd:ae:5f: 34:1f:ef:b7:21:26:a7:44:0a:8c:49:9d:30:50:75: 1c:e8:4b:53:f2:09:8b:8a:e6:ee:3c:a9:12:1d:27: 81:01:4f:b0:3c:59:d6:d4:3b:b4:6f:65:77:0d:c3: f5:41:88:dd:d8:05:ad:03:3f:d2:fc:c3:0c:43:f4: 04:fd:16:c8:a8:59:22:31:e9:0b:10:1f:fd:5c:29: c6:90:4e:f4:16:06:ae:68:43:4f:6e:b9:d4:a9:e1: cc:5c:42:bd:c5:19:69:0f:fc:f1:3b:9b:06:52:9f: ea:f3:5b:69:08:b5:41:8c:e5:ad:70:2b:c0:5a:30: 00:49:c3:ef:53:2e:89:b1:6a:42:09:99:95:81:1b: d8:d4:d6:ae:48:40:8c:9f:0b:34:51:cf:d6:25:bd: 09:5f:7d:9b:e6:ff:bc:48:dc:7c:cb:fb:e0:67:aa: fa:f4:88:0e:95:95:1c:8d:8f:ec:a3:a3:fb:c0:67: e6:80:79:7b:0e:0e:5d:c8:3f:c5:54:39:2a:f0:3b: 9d:4c:ed:6a:e7:b0:13:2a:e9:57:f1:70:61:4c:cf: 09:cd:95:a7:12:52:34:81:a6:17:57:c4:20:46:15: 55:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:68:16:46:B0:F5:DF:5F:E5:D3:1A:B9:68:D0:BF:FB:FD:EE:06:E9 X509v3 Authority Key Identifier: keyid:62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e3233342e32302e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.234.20.0/22 Signature Algorithm: sha256WithRSAEncryption 77:d4:d6:bf:ee:a2:40:53:3a:88:d8:6b:7d:74:03:de:80:fd: 0c:bd:b6:6b:7b:3f:f5:15:5a:b2:57:64:ae:bd:56:94:ad:0f: fd:9f:05:f1:9a:a6:b6:50:0d:97:a4:5f:e3:68:02:42:15:b8: 24:b1:c9:1a:e7:f4:13:0d:0b:77:55:a5:93:b4:4b:68:b2:c4: 86:02:89:4f:40:10:97:40:b4:2c:f4:60:d5:c7:4f:b5:85:a4: ae:7d:89:f2:96:8c:de:11:8c:93:df:04:40:dd:7e:2a:37:9b: 18:35:91:80:8e:b8:06:f0:38:2d:bf:b1:d2:40:14:13:f3:39: 11:6d:35:c1:06:77:1d:98:2f:9a:bd:60:a3:b6:ac:a0:54:66: c5:e5:c2:cd:84:68:12:80:c0:e5:01:b5:3a:88:15:3f:45:eb: a9:1e:3e:3d:9d:58:7b:7d:c1:d5:3d:dd:13:47:9f:6f:c4:18: 4e:84:ce:0c:4c:2a:ee:30:87:5a:8a:c0:d3:0d:e9:d9:da:f4: d6:28:2e:7e:74:19:bc:73:04:b4:72:d9:89:b8:96:a4:7a:c9: cd:80:85:d6:f1:14:aa:af:2c:6a:3d:3e:85:80:d5:fa:ec:ae: f6:42:fa:0c:51:ad:d8:1b:0b:2f:d2:45:24:a0:fc:ee:cc:4a: e7:18:da:48 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUEtUCHU9kzt5NdLMkU6q2mNX8Ez0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJCQ0JGOTE4NTQzN0EwQkM5OEVGOEQ2QzQ1RjRCMEVD QjU2QzE2MzAeFw0yNjA0MTYwNzQxMDhaFw0yNzA0MTUwNzQ2MDhaMDMxMTAvBgNV BAMTKEFBNjgxNjQ2QjBGNURGNUZFNUQzMUFCOTY4RDBCRkZCRkRFRTA2RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh9lxFEAKKiXPch9og3JxkxR7C MrHZqU4PFd2uXzQf77chJqdECoxJnTBQdRzoS1PyCYuK5u48qRIdJ4EBT7A8WdbU O7RvZXcNw/VBiN3YBa0DP9L8wwxD9AT9FsioWSIx6QsQH/1cKcaQTvQWBq5oQ09u udSp4cxcQr3FGWkP/PE7mwZSn+rzW2kItUGM5a1wK8BaMABJw+9TLomxakIJmZWB G9jU1q5IQIyfCzRRz9YlvQlffZvm/7xI3HzL++Bnqvr0iA6VlRyNj+yjo/vAZ+aA eXsODl3IP8VUOSrwO51M7WrnsBMq6VfxcGFMzwnNlacSUjSBphdXxCBGFVVtAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUqmgWRrD131/l0xq5aNC/+/3uBukwHwYDVR0j BBgwFoAUYry/kYVDegvJjvjWxF9LDstWwWMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDY1ODQzNS8wLzYyQkNCRjkxODU0MzdBMEJDOThFRjhENkM0NUY0 QjBFQ0I1NkMxNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjJCQ0JGOTE4NTQzN0EwQkM5OEVGOEQ2QzQ1RjRCMEVDQjU2QzE2My5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDYyNDczMDQwNjU4NDM1LzAvMzEzMDMzMmUzMjMz MzQyZTMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfqFDANBgkqhkiG9w0BAQsFAAOCAQEAd9TWv+6iQFM6iNhrfXQD3oD9DL22 a3s/9RVasldkrr1WlK0P/Z8F8ZqmtlANl6Rf42gCQhW4JLHJGuf0Ew0Ld1Wlk7RL aLLEhgKJT0AQl0C0LPRg1cdPtYWkrn2J8paM3hGMk98EQN1+KjebGDWRgI64BvA4 Lb+x0kAUE/M5EW01wQZ3HZgvmr1go7asoFRmxeXCzYRoEoDA5QG1OogVP0XrqR4+ PZ1Ye33B1T3dE0efb8QYToTODEwq7jCHWorA0w3p2dr01igufnQZvHMEtHLZibiW pHrJzYCF1vEUqq8saj0+hYDV+uyu9kL6DFGt2BsLL9JFJKD87sxK5xjaSA== -----END CERTIFICATE-----Generated at Sun Apr 19 12:45:24 2026 by rpki-client