$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097072106652303362/0/3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa File: 3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa (raw, json) Hash identifier: rxlfotPYclusuNHWGDhdy78Jx7VJ8aQNKRsyn8w1wxE= Subject key identifier: A4:95:05:FA:FE:72:8C:D1:23:15:D3:0C:C1:1F:71:2F:C5:E6:CB:1C Certificate issuer: /CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Certificate serial: 24CC82532293EA98A870F371B186B7C294E51895 Authority key identifier: 36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa Signing time: Thu 16 Apr 2026 08:35:17 +0000 ROA not before: Thu 16 Apr 2026 08:30:17 +0000 ROA not after: Thu 15 Apr 2027 08:35:17 +0000 asID: 58519 IP address blocks: 103.215.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:cc:82:53:22:93:ea:98:a8:70:f3:71:b1:86:b7:c2:94:e5:18:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36A0D10DA513DC7AC8B68A8B94936C33D0F1331D Validity Not Before: Apr 16 08:30:17 2026 GMT Not After : Apr 15 08:35:17 2027 GMT Subject: CN=A49505FAFE728CD12315D30CC11F712FC5E6CB1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a4:d2:d6:99:8a:66:fb:2d:40:f3:f0:cb:49: f4:5a:29:e3:cf:44:df:38:e5:c5:0b:05:c5:a8:db: 49:a0:66:71:e9:b6:ea:a0:53:5d:cd:f1:45:80:06: 57:d0:04:31:79:9b:35:d5:26:f6:05:36:30:09:ec: 0e:60:a1:a5:ff:3e:33:13:f0:ee:09:1f:c6:30:ef: e0:c1:46:55:63:67:74:66:7f:83:6c:ab:b2:f6:02: 85:79:9b:93:0b:b3:91:68:83:11:60:cc:a2:80:f0: 56:54:60:5c:f0:7e:c7:72:cb:90:28:7f:46:3a:79: 5f:e4:a6:38:9c:c4:af:63:34:95:3d:1c:2c:86:30: 5f:be:6a:8c:b9:41:20:ed:2c:6d:6a:bd:75:36:59: d7:c0:09:09:1a:ae:09:e4:38:52:0b:63:f9:a4:ba: fa:3b:30:47:89:b4:cc:8a:45:5b:84:e4:4c:43:4b: ec:1f:e6:2f:d6:41:6f:cd:c0:43:f5:68:f3:02:e1: a5:01:ad:4a:74:f4:f6:35:91:c1:53:51:d8:a5:ae: 72:6f:46:34:d5:7b:62:73:a9:d1:48:2e:ea:db:0e: f7:36:38:b0:85:6c:d3:7a:31:42:80:30:91:7f:61: 3a:18:93:63:35:3e:bb:62:9d:9c:48:c0:70:e5:4f: 81:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:95:05:FA:FE:72:8C:D1:23:15:D3:0C:C1:1F:71:2F:C5:E6:CB:1C X509v3 Authority Key Identifier: keyid:36:A0:D1:0D:A5:13:DC:7A:C8:B6:8A:8B:94:93:6C:33:D0:F1:33:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/36A0D10DA513DC7AC8B68A8B94936C33D0F1331D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097072106652303362/0/3130332e3231352e3134302e302f32322d3232203d3e203538353139.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.215.140.0/22 Signature Algorithm: sha256WithRSAEncryption 04:28:5f:da:e1:83:ea:45:99:22:00:e3:54:ee:21:c2:38:04: 2c:05:e1:6d:84:d5:d0:dc:52:b9:51:df:0c:a3:99:23:5d:fc: 1b:8d:4f:18:87:dd:16:54:1b:65:c8:0f:f3:23:8d:db:20:72: 47:1a:f3:72:43:f3:13:92:90:7f:fc:04:21:71:7b:9b:1a:f7: 88:4e:cf:cd:8d:38:f6:16:6f:c7:33:a1:16:1b:77:2d:44:73: 6b:13:9c:80:dc:49:54:95:39:02:05:eb:f2:8b:4b:70:16:bf: ef:8b:5d:02:0e:be:37:b7:1d:26:96:1d:a3:28:3a:43:78:f6: 91:8e:88:48:98:bb:c2:b7:5b:ab:2c:37:41:2e:7a:dc:74:a9: f3:55:11:7b:03:a6:fb:78:68:52:ac:9f:1d:ed:29:c2:2f:5c: 38:2d:bb:e4:3f:e1:2a:fe:c7:fd:eb:b4:d2:12:3b:fc:ab:9a: 00:75:bb:07:e5:fd:d6:bb:1e:68:22:c8:88:8b:f9:94:ca:24: e7:2e:2d:66:5d:89:0c:d1:79:86:b7:7a:c2:9d:e7:32:60:ea: fc:81:be:b1:13:33:1b:b3:6d:4f:67:3f:0e:10:49:35:a1:13: 87:72:8c:29:96:66:71:cc:1f:ce:f0:dc:fb:6e:9f:a0:be:2f: 3b:aa:ac:30 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJMyCUyKT6piocPNxsYa3wpTlGJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNE MEYxMzMxRDAeFw0yNjA0MTYwODMwMTdaFw0yNzA0MTUwODM1MTdaMDMxMTAvBgNV BAMTKEE0OTUwNUZBRkU3MjhDRDEyMzE1RDMwQ0MxMUY3MTJGQzVFNkNCMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpNLWmYpm+y1A8/DLSfRaKePP RN845cULBcWo20mgZnHptuqgU13N8UWABlfQBDF5mzXVJvYFNjAJ7A5goaX/PjMT 8O4JH8Yw7+DBRlVjZ3Rmf4Nsq7L2AoV5m5MLs5FogxFgzKKA8FZUYFzwfsdyy5Ao f0Y6eV/kpjicxK9jNJU9HCyGMF++aoy5QSDtLG1qvXU2WdfACQkargnkOFILY/mk uvo7MEeJtMyKRVuE5ExDS+wf5i/WQW/NwEP1aPMC4aUBrUp09PY1kcFTUdilrnJv RjTVe2JzqdFILurbDvc2OLCFbNN6MUKAMJF/YToYk2M1PrtinZxIwHDlT4GRAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUpJUF+v5yjNEjFdMMwR9xL8XmyxwwHwYDVR0j BBgwFoAUNqDRDaUT3HrItoqLlJNsM9DxMx0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA3MjEwNjY1MjMwMzM2Mi8wLzM2QTBEMTBEQTUxM0RDN0FDOEI2OEE4Qjk0OTM2 QzMzRDBGMTMzMUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzZBMEQxMERBNTEzREM3QUM4QjY4QThCOTQ5MzZDMzNEMEYxMzMxRC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTcwNzIxMDY2NTIzMDMzNjIvMC8zMTMwMzMyZTMy MzEzNTJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM1MzEzOS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfXjDANBgkqhkiG9w0BAQsFAAOCAQEABChf2uGD6kWZIgDjVO4h wjgELAXhbYTV0NxSuVHfDKOZI138G41PGIfdFlQbZcgP8yON2yByRxrzckPzE5KQ f/wEIXF7mxr3iE7PzY049hZvxzOhFht3LURzaxOcgNxJVJU5AgXr8otLcBa/74td Ag6+N7cdJpYdoyg6Q3j2kY6ISJi7wrdbqyw3QS563HSp81URewOm+3hoUqyfHe0p wi9cOC275D/hKv7H/eu00hI7/KuaAHW7B+X91rseaCLIiIv5lMok5y4tZl2JDNF5 hrd6wp3nMmDq/IG+sRMzG7NtT2c/DhBJNaETh3KMKZZmccwfzvDc+26foL4vO6qs MA== -----END CERTIFICATE-----Generated at Fri Apr 17 20:17:03 2026 by rpki-client