$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e203536303430.roa File: 3130332e35362e37362e302f32342d3234203d3e203536303430.roa (raw, json) Hash identifier: S0ibJK/LXYJ212kDehN8NGHUDYlk99qx8kr5YHeEyDo= Subject key identifier: BE:14:A0:42:DA:DC:FF:4C:86:3F:B0:52:88:E2:B9:94:EF:DC:0D:03 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 710D07EDB4FC3322611698EFE33DF4B782D9CAC3 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e203536303430.roa Signing time: Mon 13 Apr 2026 08:43:53 +0000 ROA not before: Mon 13 Apr 2026 08:38:53 +0000 ROA not after: Mon 12 Apr 2027 08:43:53 +0000 asID: 56040 IP address blocks: 103.56.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0d:07:ed:b4:fc:33:22:61:16:98:ef:e3:3d:f4:b7:82:d9:ca:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 08:38:53 2026 GMT Not After : Apr 12 08:43:53 2027 GMT Subject: CN=BE14A042DADCFF4C863FB05288E2B994EFDC0D03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a4:d0:5f:c3:99:ad:ab:91:79:c5:e8:e3:e3: e8:a9:e9:9a:f8:7a:b1:7f:1e:d7:88:67:2d:d2:23: 52:a2:46:04:b3:06:02:a2:3f:8f:ce:d7:9a:6b:81: 6a:11:22:22:ef:51:02:5d:a5:48:34:5b:f0:e1:66: 53:c3:ff:9a:e8:64:b1:a6:3c:09:b4:5f:cd:5a:37: 4d:af:f4:6b:00:29:c5:98:13:a6:17:47:4c:65:a3: 2f:c2:02:1c:f6:8b:20:c3:50:d8:47:5e:62:ea:1c: 3b:93:3a:c5:ca:f0:34:e1:28:96:3e:bc:5c:0d:8c: fb:be:2a:8c:8e:21:55:d6:2d:6f:6d:09:19:19:c5: e5:47:bb:9e:d1:72:95:81:5f:7a:8c:01:1a:9f:59: 89:66:97:5d:5a:d3:c7:d6:54:62:f8:94:44:8d:68: 20:0b:65:c6:16:2e:68:92:1a:bd:31:68:8f:ab:4d: f7:93:88:50:43:f9:dc:0b:55:5a:35:b8:5a:99:01: 29:8e:6a:66:ef:a0:d3:c4:c9:98:0d:ae:7a:5e:3f: 9b:d1:37:b2:f5:44:49:c2:ab:92:67:2c:1a:2a:e8: 7b:f6:33:3f:95:5e:3f:e9:03:a6:01:a7:ea:58:35: dd:96:d5:aa:35:0a:19:74:af:4c:c1:23:d7:35:8f: 90:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:14:A0:42:DA:DC:FF:4C:86:3F:B0:52:88:E2:B9:94:EF:DC:0D:03 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.76.0/24 Signature Algorithm: sha256WithRSAEncryption 45:a6:05:7e:4e:54:cd:f8:6b:ea:51:c4:35:08:56:d6:10:d0: 01:b7:bc:41:e2:6a:55:94:68:9f:d3:f9:57:2d:b6:a9:70:ab: 26:cc:60:fb:c8:2b:c8:50:ce:c3:f6:f3:2d:92:ea:70:c4:d4: b1:39:d5:26:cc:e7:f0:89:da:1d:75:e0:b0:7c:f9:dc:75:6b: 89:dd:dc:c4:2c:d7:a4:46:23:4d:f2:98:30:1e:e6:14:8f:39: d5:c2:cf:28:13:4b:08:30:34:24:ec:56:02:ec:ae:d5:56:16: 68:d8:71:11:20:98:ac:13:b3:ac:6e:b0:ff:44:01:69:74:ca: 49:5e:99:48:7b:14:5b:d7:7e:42:26:92:c6:36:6a:d7:ce:98: 3f:28:9b:f5:17:42:5c:7b:b7:30:45:b7:2c:70:c1:11:39:4e: 2f:11:86:de:44:f9:18:24:d9:d5:eb:eb:96:e9:4a:53:9a:46: 04:ef:dc:31:15:4e:ea:fa:07:60:61:16:bf:88:0d:fe:0f:cc: 74:c5:41:15:b9:3d:d6:7e:e1:43:81:6d:86:33:8f:cc:02:78: de:32:74:43:9a:e3:2a:c2:19:01:36:15:2d:f1:71:38:16:14: 84:17:66:6c:7c:f6:1f:1c:3b:a2:f0:c8:51:09:37:30:a8:48: 2d:35:e2:b6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUcQ0H7bT8MyJhFpjv4z30t4LZysMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwODM4NTNaFw0yNzA0MTIwODQzNTNaMDMxMTAvBgNV BAMTKEJFMTRBMDQyREFEQ0ZGNEM4NjNGQjA1Mjg4RTJCOTk0RUZEQzBEMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPpNBfw5mtq5F5xejj4+ip6Zr4 erF/HteIZy3SI1KiRgSzBgKiP4/O15prgWoRIiLvUQJdpUg0W/DhZlPD/5roZLGm PAm0X81aN02v9GsAKcWYE6YXR0xloy/CAhz2iyDDUNhHXmLqHDuTOsXK8DThKJY+ vFwNjPu+KoyOIVXWLW9tCRkZxeVHu57RcpWBX3qMARqfWYlml11a08fWVGL4lESN aCALZcYWLmiSGr0xaI+rTfeTiFBD+dwLVVo1uFqZASmOambvoNPEyZgNrnpeP5vR N7L1REnCq5JnLBoq6Hv2Mz+VXj/pA6YBp+pYNd2W1ao1Chl0r0zBI9c1j5A9AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUvhSgQtrc/0yGP7BSiOK5lO/cDQMwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NzIwMjU5LzAvMzEzMDMzMmUzNTM2 MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGc4TDANBgkqhkiG9w0BAQsFAAOCAQEARaYFfk5Uzfhr6lHENQhW1hDQAbe8 QeJqVZRon9P5Vy22qXCrJsxg+8gryFDOw/bzLZLqcMTUsTnVJszn8InaHXXgsHz5 3HVrid3cxCzXpEYjTfKYMB7mFI851cLPKBNLCDA0JOxWAuyu1VYWaNhxESCYrBOz rG6w/0QBaXTKSV6ZSHsUW9d+QiaSxjZq186YPyib9RdCXHu3MEW3LHDBETlOLxGG 3kT5GCTZ1evrlulKU5pGBO/cMRVO6voHYGEWv4gN/g/MdMVBFbk91n7hQ4FthjOP zAJ43jJ0Q5rjKsIZATYVLfFxOBYUhBdmbHz2Hxw7ovDIUQk3MKhILTXitg== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:57 2026 by rpki-client