$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32322d3232203d3e2034383437.roa File: 3130332e32392e31362e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: 1/QrCM91cEAp0IFHVbI4BaSZ0Rh95G/CCmE65bEMxnY= Subject key identifier: 58:A7:8B:37:2C:2B:C6:92:3A:2A:DE:70:14:0B:57:B6:65:B8:AF:4E Certificate issuer: /CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163 Certificate serial: 02485FAB8931440208813B5C8CAE20F88B6CAB90 Authority key identifier: 62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32322d3232203d3e2034383437.roa Signing time: Thu 16 Apr 2026 07:44:14 +0000 ROA not before: Thu 16 Apr 2026 07:39:14 +0000 ROA not after: Thu 15 Apr 2027 07:44:14 +0000 asID: 4847 IP address blocks: 103.29.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:48:5f:ab:89:31:44:02:08:81:3b:5c:8c:ae:20:f8:8b:6c:ab:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163 Validity Not Before: Apr 16 07:39:14 2026 GMT Not After : Apr 15 07:44:14 2027 GMT Subject: CN=58A78B372C2BC6923A2ADE70140B57B665B8AF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:ba:d4:2d:d4:ab:03:c6:03:59:8d:c9:04: 2e:0a:96:e2:f9:e6:5e:c8:92:6b:d7:ea:bc:48:be: 97:f0:ab:2c:05:c3:77:86:0f:74:e8:7a:13:46:52: 1b:37:78:47:b6:26:a5:7d:8b:01:57:99:cf:cd:43: fa:69:36:d3:ea:f4:ae:a2:93:43:03:5f:6d:62:c5: 40:ce:1d:4c:84:74:a5:fa:12:f6:50:5f:9a:56:7f: de:66:23:d7:ce:d6:7c:e9:02:ec:85:f8:f9:b3:ef: 67:52:30:d1:76:95:9a:72:e3:72:f2:68:2d:eb:fd: f1:9c:db:61:af:c9:cf:3e:c5:90:fd:63:e6:72:b4: 8a:24:d9:65:bf:36:aa:b0:62:5f:a1:e2:9c:0e:e2: 71:39:41:53:71:53:fa:59:7b:cf:a6:23:e6:66:a2: 22:be:8b:90:9d:22:8e:8e:f7:f2:93:bd:d2:2d:4f: 07:8d:37:49:be:d8:9d:5c:4f:55:ff:55:5c:7c:1f: ba:49:e4:95:75:b9:0f:21:77:f5:3b:c9:12:80:ef: 31:68:16:8e:78:18:86:9b:22:3b:7e:52:34:0c:e3: b0:a3:e8:92:7d:26:9d:7a:ef:a8:ed:70:a5:b4:84: 50:f9:81:e3:fa:ac:fa:98:28:d2:60:d6:b7:f0:c6: 9f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:8B:37:2C:2B:C6:92:3A:2A:DE:70:14:0B:57:B6:65:B8:AF:4E X509v3 Authority Key Identifier: keyid:62:BC:BF:91:85:43:7A:0B:C9:8E:F8:D6:C4:5F:4B:0E:CB:56:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/62BCBF9185437A0BC98EF8D6C45F4B0ECB56C163.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097062473040658435/0/3130332e32392e31362e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.29.16.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:3a:ed:0f:ba:20:d7:86:21:cb:ca:56:bb:71:2a:06:81:d6: 86:7c:ac:58:d7:b5:ad:c2:3a:7c:8d:2c:13:a8:a4:50:af:88: d3:01:0f:61:0b:86:4f:37:85:df:22:24:77:7d:5d:36:a7:06: 4f:ba:63:e1:48:c7:6a:8f:7c:03:cc:6d:3b:a5:8e:ee:28:72: 25:ee:fc:d1:c1:a8:3d:3e:54:37:5b:b9:f7:73:8e:1f:16:90: 38:86:ef:c9:3e:c8:89:8d:bb:b3:dd:0a:02:be:bc:59:f8:98: ff:ef:24:7b:96:8e:47:20:fd:05:4d:18:94:cc:5e:e7:94:c5: 0c:30:1a:0b:63:f6:3e:92:9d:6e:5b:fa:29:2f:b2:1b:05:71: 7a:90:f8:7a:e1:fb:42:d4:d9:08:a0:68:16:51:44:71:11:44: c8:b0:9d:44:c4:06:e5:65:f5:11:30:0f:43:c9:75:e6:d6:54: 98:32:88:43:64:89:02:a1:55:bc:2c:21:15:08:a0:ce:bf:f7: cb:7e:07:29:04:d5:51:0b:3d:5e:fb:8d:8d:b2:ca:d9:c6:4d: 91:27:06:e5:7f:3b:67:3a:e9:a2:0f:f3:08:ba:7c:bc:5a:a5: 93:66:0b:67:f7:76:9f:f7:92:9b:bb:bb:15:48:95:20:84:64: 2d:69:51:03 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUAkhfq4kxRAIIgTtcjK4g+Itsq5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjJCQ0JGOTE4NTQzN0EwQkM5OEVGOEQ2QzQ1RjRCMEVD QjU2QzE2MzAeFw0yNjA0MTYwNzM5MTRaFw0yNzA0MTUwNzQ0MTRaMDMxMTAvBgNV BAMTKDU4QTc4QjM3MkMyQkM2OTIzQTJBREU3MDE0MEI1N0I2NjVCOEFGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWbrULdSrA8YDWY3JBC4KluL5 5l7IkmvX6rxIvpfwqywFw3eGD3ToehNGUhs3eEe2JqV9iwFXmc/NQ/ppNtPq9K6i k0MDX21ixUDOHUyEdKX6EvZQX5pWf95mI9fO1nzpAuyF+Pmz72dSMNF2lZpy43Ly aC3r/fGc22Gvyc8+xZD9Y+ZytIok2WW/NqqwYl+h4pwO4nE5QVNxU/pZe8+mI+Zm oiK+i5CdIo6O9/KTvdItTweNN0m+2J1cT1X/VVx8H7pJ5JV1uQ8hd/U7yRKA7zFo Fo54GIabIjt+UjQM47Cj6JJ9Jp1676jtcKW0hFD5geP6rPqYKNJg1rfwxp+9AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUWKeLNywrxpI6Kt5wFAtXtmW4r04wHwYDVR0j BBgwFoAUYry/kYVDegvJjvjWxF9LDstWwWMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA2MjQ3MzA0MDY1ODQzNS8wLzYyQkNCRjkxODU0MzdBMEJDOThFRjhENkM0NUY0 QjBFQ0I1NkMxNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjJCQ0JGOTE4NTQzN0EwQkM5OEVGOEQ2QzQ1RjRCMEVDQjU2QzE2My5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDYyNDczMDQwNjU4NDM1LzAvMzEzMDMzMmUzMjM5 MmUzMTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnHRAwDQYJKoZIhvcNAQELBQADggEBAG067Q+6INeGIcvKVrtxKgaB1oZ8rFjX ta3COnyNLBOopFCviNMBD2ELhk83hd8iJHd9XTanBk+6Y+FIx2qPfAPMbTulju4o ciXu/NHBqD0+VDdbufdzjh8WkDiG78k+yImNu7PdCgK+vFn4mP/vJHuWjkcg/QVN GJTMXueUxQwwGgtj9j6SnW5b+ikvshsFcXqQ+Hrh+0LU2QigaBZRRHERRMiwnUTE BuVl9REwD0PJdebWVJgyiENkiQKhVbwsIRUIoM6/98t+BykE1VELPV77jY2yytnG TZEnBuV/O2c66aIP8wi6fLxapZNmC2f3dp/3kpu7uxVIlSCEZC1pUQM= -----END CERTIFICATE-----Generated at Fri Apr 17 22:56:24 2026 by rpki-client