$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e203539303433.roa File: 3130332e3233392e3230342e302f32322d3232203d3e203539303433.roa (raw, json) Hash identifier: HaDm+C6cHjWk8eChSKycH8FybrBRCsOynVImQBNjDsE= Subject key identifier: 18:4F:9D:1A:DA:79:CD:BF:59:83:42:9C:F2:0D:86:E5:EB:D5:11:B1 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 6AF1FC585972AD22CAB5A93CEF9C6431F95E7FC4 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e203539303433.roa Signing time: Mon 13 Apr 2026 02:11:45 +0000 ROA not before: Mon 13 Apr 2026 02:06:45 +0000 ROA not after: Mon 12 Apr 2027 02:11:45 +0000 asID: 59043 IP address blocks: 103.239.204.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:f1:fc:58:59:72:ad:22:ca:b5:a9:3c:ef:9c:64:31:f9:5e:7f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 02:06:45 2026 GMT Not After : Apr 12 02:11:45 2027 GMT Subject: CN=184F9D1ADA79CDBF5983429CF20D86E5EBD511B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:47:38:8b:3b:cb:78:1a:b5:12:ee:94:23:c8: 85:4a:83:c1:e1:95:75:93:a6:39:a9:03:0e:90:3a: 4b:c3:b6:3d:58:ca:74:98:11:66:bf:97:c1:bd:e1: 9d:1c:23:a7:98:b9:56:d4:43:2b:4d:3e:c6:5b:9e: 44:da:29:5f:63:32:ea:db:f8:1c:3a:44:fc:89:df: ca:7f:b1:5a:9c:2b:29:21:50:8a:75:2f:09:c9:7d: ae:e9:37:e2:79:85:b3:59:21:0a:82:ad:80:1d:42: dd:46:d5:2d:c6:8a:3f:1c:41:26:cf:95:bd:8e:94: 83:a2:8f:a5:e0:29:73:0c:7c:2c:1f:9b:ac:25:af: 27:37:0f:d2:67:8d:40:36:8c:97:f7:11:69:df:95: 61:9a:1f:85:56:d7:1e:2d:e2:15:38:60:ba:fc:3d: af:42:da:5c:80:76:20:de:22:ef:31:c2:af:ef:3e: 37:cc:ce:68:ca:a6:99:b1:ab:75:39:32:74:06:da: 14:1a:87:3a:9b:2b:70:4a:9e:2c:95:a9:31:9d:76: f9:2a:d8:fd:91:a3:9b:e2:b0:24:5e:03:59:5b:ef: a5:34:98:8d:b2:ee:b5:b6:29:8c:20:bc:cb:24:67: ae:a8:31:bb:e4:48:7b:2a:d9:64:55:7c:07:5e:bb: da:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4F:9D:1A:DA:79:CD:BF:59:83:42:9C:F2:0D:86:E5:EB:D5:11:B1 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230342e302f32322d3232203d3e203539303433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.204.0/22 Signature Algorithm: sha256WithRSAEncryption 41:b5:4b:d5:2d:b6:9d:31:22:c0:55:9f:28:e0:c1:99:09:f8: a8:d1:0d:8a:ca:8c:32:a5:85:eb:b0:82:46:b6:7f:bc:5e:20: 29:a0:66:19:4c:06:e2:05:8b:03:a0:c1:f1:98:9a:70:06:a9: d4:4c:71:fa:32:cf:9a:b6:83:f3:57:79:15:31:05:e8:12:f1: c9:78:94:b0:7d:29:b6:61:ac:c1:58:6d:bc:f9:6b:15:56:d2: a8:d5:c1:60:5c:c5:04:c1:8a:24:4d:12:b7:a8:f1:31:a6:5c: 26:ee:06:ed:ad:1b:70:6a:d8:4a:90:d4:4b:fb:e3:a3:9b:f1: 63:f5:98:a2:c2:2a:27:c8:df:25:6c:74:93:96:45:50:82:9f: ff:b9:5d:51:2f:13:57:a1:70:52:31:e4:c6:3a:29:e4:f9:7a: b7:c0:e5:6c:78:1e:22:94:c3:af:72:f8:64:1d:24:92:98:62: b7:93:c6:21:7c:3c:40:5f:bf:31:91:52:e8:11:36:a0:cd:ca: ab:1e:1a:ba:65:5f:f2:73:97:15:5e:7d:8e:3d:f1:44:7e:b1: e5:5a:19:18:a9:72:f2:9b:3e:9a:ad:6b:a6:e9:d5:14:95:33: 69:58:72:25:f1:4a:15:ec:cd:a8:61:27:91:b5:1a:ab:ad:55: a5:a8:65:6b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUavH8WFlyrSLKtak875xkMflef8QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMjA2NDVaFw0yNzA0MTIwMjExNDVaMDMxMTAvBgNV BAMTKDE4NEY5RDFBREE3OUNEQkY1OTgzNDI5Q0YyMEQ4NkU1RUJENTExQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRziLO8t4GrUS7pQjyIVKg8Hh lXWTpjmpAw6QOkvDtj1YynSYEWa/l8G94Z0cI6eYuVbUQytNPsZbnkTaKV9jMurb +Bw6RPyJ38p/sVqcKykhUIp1LwnJfa7pN+J5hbNZIQqCrYAdQt1G1S3Gij8cQSbP lb2OlIOij6XgKXMMfCwfm6wlryc3D9JnjUA2jJf3EWnflWGaH4VW1x4t4hU4YLr8 Pa9C2lyAdiDeIu8xwq/vPjfMzmjKppmxq3U5MnQG2hQahzqbK3BKniyVqTGddvkq 2P2Ro5visCReA1lb76U0mI2y7rW2KYwgvMskZ66oMbvkSHsq2WRVfAdeu9qdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUGE+dGtp5zb9Zg0Kc8g2G5evVEbEwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8zMTMwMzMyZTMy MzMzOTJlMzIzMDM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzQzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfvzDANBgkqhkiG9w0BAQsFAAOCAQEAQbVL1S22nTEiwFWfKODB mQn4qNENisqMMqWF67CCRrZ/vF4gKaBmGUwG4gWLA6DB8ZiacAap1Exx+jLPmraD 81d5FTEF6BLxyXiUsH0ptmGswVhtvPlrFVbSqNXBYFzFBMGKJE0St6jxMaZcJu4G 7a0bcGrYSpDUS/vjo5vxY/WYosIqJ8jfJWx0k5ZFUIKf/7ldUS8TV6FwUjHkxjop 5Pl6t8DlbHgeIpTDr3L4ZB0kkphit5PGIXw8QF+/MZFS6BE2oM3Kqx4aumVf8nOX FV59jj3xRH6x5VoZGKly8ps+mq1rpunVFJUzaVhyJfFKFezNqGEnkbUaq61Vpahl aw== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:56 2026 by rpki-client