$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230352e302f32342d3234203d3e203536303430.roa File: 3130332e3233392e3230352e302f32342d3234203d3e203536303430.roa (raw, json) Hash identifier: DSk6M3XnpfaCZ5YFH7NeYScsfw0GVrf2EJmbCXl7LfI= Subject key identifier: 53:DB:89:0B:69:5B:93:72:A9:72:5B:24:80:35:BF:B6:69:F4:63:E1 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 1FEEDFC69E0031EC38294C3950B3048207770441 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230352e302f32342d3234203d3e203536303430.roa Signing time: Mon 13 Apr 2026 02:27:53 +0000 ROA not before: Mon 13 Apr 2026 02:22:53 +0000 ROA not after: Mon 12 Apr 2027 02:27:53 +0000 asID: 56040 IP address blocks: 103.239.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:ee:df:c6:9e:00:31:ec:38:29:4c:39:50:b3:04:82:07:77:04:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 02:22:53 2026 GMT Not After : Apr 12 02:27:53 2027 GMT Subject: CN=53DB890B695B9372A9725B248035BFB669F463E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:13:90:42:74:24:80:80:d5:a8:68:a8:9e: 79:11:93:ec:09:b4:70:eb:f3:4e:44:2b:7e:da:6f: 75:a7:a3:6d:03:34:2b:ff:97:cc:ce:f4:a4:1d:f9: 98:1d:7e:f1:1d:9a:ca:68:e5:2c:24:1a:88:d7:2d: 48:18:66:16:fa:8f:f0:b4:b3:39:e1:53:80:56:06: 52:ad:50:c2:29:ec:7e:13:23:d7:14:40:4d:0e:79: 00:53:ee:b3:e6:6c:ec:f2:9d:f2:37:d6:7b:5d:b2: 16:da:eb:db:43:7e:fc:c8:61:86:f0:77:b8:1a:1e: bd:51:0f:36:9c:a5:7a:7e:a2:46:17:74:f7:14:2a: 27:fe:a7:50:d9:0d:68:9a:79:1c:2f:67:bd:29:c1: 04:e4:47:33:dc:bf:fd:07:d2:4b:65:47:50:70:1c: 04:65:ea:44:16:c0:bb:70:6c:57:ca:39:f4:80:8a: da:2c:e8:a9:63:6b:72:07:5c:4e:01:ba:92:82:b8: 56:18:0f:35:63:ca:01:3b:3b:d1:26:90:ab:3b:71: 43:6c:05:2a:0c:a2:61:7e:58:94:98:9a:61:b3:c2: 2f:62:d6:15:66:6c:29:f6:3e:e5:ce:62:b8:4c:72: 87:be:da:ea:64:28:d5:0f:21:d9:70:77:86:34:6f: a8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DB:89:0B:69:5B:93:72:A9:72:5B:24:80:35:BF:B6:69:F4:63:E1 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e3233392e3230352e302f32342d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.205.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:57:7f:6a:1d:66:ce:a4:34:32:ca:a2:d9:a6:3c:39:58:d9: c5:20:4b:7d:7a:da:c7:6d:08:44:da:e7:fe:fa:ca:ce:63:44: 09:f7:6b:08:cf:9d:ce:a9:a3:25:8a:32:4f:ce:f9:28:d8:3d: 04:4f:5d:61:9b:87:ed:5c:7c:20:26:59:48:0b:a8:81:61:70: c2:66:5b:7a:c5:2e:8a:d0:64:8a:20:e3:b2:53:cf:fd:7d:9f: 6e:fb:f3:c4:4e:df:e3:df:86:0c:14:99:9b:38:cf:69:12:3b: 05:86:57:b8:4a:e5:d2:69:15:44:a3:cd:fc:0f:ef:53:54:cd: aa:0a:c1:d4:1b:e8:29:2e:f2:46:c3:d3:ab:8e:73:a2:5f:05: 82:4e:23:3f:60:e4:61:33:0f:00:85:c7:30:9d:bd:e0:d4:3c: 19:38:7c:57:1c:57:5a:6d:20:a6:b1:12:0e:ca:46:96:6c:ce: 5d:c5:eb:65:1d:1e:4a:48:99:02:a5:d0:6c:25:e1:6d:ec:c0: 2f:38:aa:4a:db:a3:c0:a5:d6:c2:f2:c1:03:b9:3a:c6:48:8a: 2f:19:55:60:7e:d8:bc:9f:b5:0e:1e:63:74:95:ee:36:c3:d3: 79:25:6a:0a:72:5e:b2:18:c3:bb:63:89:d1:dc:6c:27:61:a7: 15:4b:ac:ee -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUH+7fxp4AMew4KUw5ULMEggd3BEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMjIyNTNaFw0yNzA0MTIwMjI3NTNaMDMxMTAvBgNV BAMTKDUzREI4OTBCNjk1QjkzNzJBOTcyNUIyNDgwMzVCRkI2NjlGNDYzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17xOQQnQkgIDVqGionnkRk+wJ tHDr805EK37ab3Wno20DNCv/l8zO9KQd+ZgdfvEdmspo5SwkGojXLUgYZhb6j/C0 sznhU4BWBlKtUMIp7H4TI9cUQE0OeQBT7rPmbOzynfI31ntdshba69tDfvzIYYbw d7gaHr1RDzacpXp+okYXdPcUKif+p1DZDWiaeRwvZ70pwQTkRzPcv/0H0ktlR1Bw HARl6kQWwLtwbFfKOfSAitos6Klja3IHXE4BupKCuFYYDzVjygE7O9EmkKs7cUNs BSoMomF+WJSYmmGzwi9i1hVmbCn2PuXOYrhMcoe+2upkKNUPIdlwd4Y0b6hjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUU9uJC2lbk3KpclskgDW/tmn0Y+EwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8zMTMwMzMyZTMy MzMzOTJlMzIzMDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfvzTANBgkqhkiG9w0BAQsFAAOCAQEAfld/ah1mzqQ0Msqi2aY8 OVjZxSBLfXrax20IRNrn/vrKzmNECfdrCM+dzqmjJYoyT875KNg9BE9dYZuH7Vx8 ICZZSAuogWFwwmZbesUuitBkiiDjslPP/X2fbvvzxE7f49+GDBSZmzjPaRI7BYZX uErl0mkVRKPN/A/vU1TNqgrB1BvoKS7yRsPTq45zol8Fgk4jP2DkYTMPAIXHMJ29 4NQ8GTh8VxxXWm0gprESDspGlmzOXcXrZR0eSkiZAqXQbCXhbezALziqStujwKXW wvLBA7k6xkiKLxlVYH7YvJ+1Dh5jdJXuNsPTeSVqCnJeshjDu2OJ0dxsJ2GnFUus 7g== -----END CERTIFICATE-----Generated at Mon Apr 13 15:31:18 2026 by rpki-client