$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e203538343636.roa File: 3130332e35362e37362e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: R1hxKKYTfXhQuFkFGluK3tACxevJigS0e+7JkvDFOfY= Subject key identifier: A1:38:1C:31:B8:2C:0E:D3:B1:D2:4C:20:26:4F:A6:78:EF:BA:32:A7 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 5EC8043F4699C5A262A537DB7D7138F03A814273 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e203538343636.roa Signing time: Mon 13 Apr 2026 02:27:54 +0000 ROA not before: Mon 13 Apr 2026 02:22:54 +0000 ROA not after: Mon 12 Apr 2027 02:27:54 +0000 asID: 58466 IP address blocks: 103.56.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:c8:04:3f:46:99:c5:a2:62:a5:37:db:7d:71:38:f0:3a:81:42:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 02:22:54 2026 GMT Not After : Apr 12 02:27:54 2027 GMT Subject: CN=A1381C31B82C0ED3B1D24C20264FA678EFBA32A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:42:67:1c:dd:f3:d3:6a:97:12:ca:dd:e1:93: 8a:ec:df:43:84:55:eb:93:92:ed:30:fa:3a:fc:e7: 96:00:4f:fe:c5:9d:97:ef:ca:75:bc:71:5c:f5:62: a7:2a:f5:1e:f8:8a:42:29:8d:76:ca:a9:56:82:1d: 72:67:0a:90:a8:63:c8:18:62:3e:91:ab:de:c1:a7: 7f:5a:f2:5a:08:d5:46:2d:79:eb:f8:ad:df:3c:e8: 31:eb:b2:ab:4a:55:9a:6d:e3:c1:08:78:c2:9c:ba: 9d:5f:46:63:f8:a9:d6:7b:cb:65:ac:ae:4d:68:03: 3b:3f:cb:8c:3d:dc:6f:0d:57:eb:10:32:0c:72:cb: 2e:ca:92:a7:dc:5c:d0:ac:98:78:ad:f8:2d:d0:2a: d3:46:7e:2a:ba:f0:dc:a9:d5:d4:a4:df:24:2b:d8: 3d:33:2f:45:77:ae:d0:9a:2c:e9:ed:45:4f:6a:ef: 13:9f:e0:85:36:94:b2:c3:8c:4c:fa:bd:34:76:68: 88:ad:a7:ae:89:40:ee:a0:d0:06:03:ce:53:58:b2: 94:5c:89:8a:49:f4:4c:89:70:ae:4b:eb:12:3e:c9: c8:50:0d:98:38:44:8d:85:05:15:96:c0:69:fb:4b: 6f:d9:38:6b:e1:da:00:2e:d7:77:4e:f6:8b:cc:3e: 19:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:38:1C:31:B8:2C:0E:D3:B1:D2:4C:20:26:4F:A6:78:EF:BA:32:A7 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37362e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.76.0/24 Signature Algorithm: sha256WithRSAEncryption 83:7d:ca:a3:c3:10:0f:9e:c7:86:61:af:4a:b9:ce:20:54:8a: 55:e1:bd:6c:68:03:63:06:f7:82:dc:80:f4:3c:f4:3f:83:b2: 3c:bc:68:f6:7c:c5:08:37:fa:7f:69:e3:7e:d8:83:a4:0b:f2: 8e:dc:38:8b:29:f1:db:2d:ce:c4:d3:56:77:f9:e0:43:a5:e6: e1:34:20:b4:3e:19:65:25:1d:c7:48:91:d9:f1:29:27:25:64: 4b:e9:63:de:85:62:94:f9:36:75:df:62:ad:4d:65:19:e3:8a: f6:42:96:94:84:52:4f:88:a3:04:36:fa:cc:30:d8:1a:50:5b: 37:d7:36:d7:a0:07:48:e6:25:bc:cb:8c:c6:b1:9c:09:64:73: 77:bd:38:f6:dc:39:ac:a4:15:c7:66:c1:24:81:c7:ce:be:eb: 4c:e4:8c:7d:be:61:8f:9f:b7:69:52:c7:95:b8:4f:f6:7e:83: 37:f2:e6:89:74:91:e6:dc:d3:a7:46:83:ba:01:a0:00:eb:0e: 8a:84:86:7c:3b:e5:01:9a:72:40:71:73:28:51:a5:5c:9d:b2: 69:9a:4d:a8:bd:b1:d2:58:f2:b0:fb:a0:61:cf:f8:c6:a7:68: 5b:ed:87:17:a2:2c:1d:76:c0:68:5a:6a:13:90:47:74:45:41: af:b8:c0:c8 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUXsgEP0aZxaJipTfbfXE48DqBQnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMjIyNTRaFw0yNzA0MTIwMjI3NTRaMDMxMTAvBgNV BAMTKEExMzgxQzMxQjgyQzBFRDNCMUQyNEMyMDI2NEZBNjc4RUZCQTMyQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClQmcc3fPTapcSyt3hk4rs30OE VeuTku0w+jr855YAT/7FnZfvynW8cVz1Yqcq9R74ikIpjXbKqVaCHXJnCpCoY8gY Yj6Rq97Bp39a8loI1UYteev4rd886DHrsqtKVZpt48EIeMKcup1fRmP4qdZ7y2Ws rk1oAzs/y4w93G8NV+sQMgxyyy7KkqfcXNCsmHit+C3QKtNGfiq68Nyp1dSk3yQr 2D0zL0V3rtCaLOntRU9q7xOf4IU2lLLDjEz6vTR2aIitp66JQO6g0AYDzlNYspRc iYpJ9EyJcK5L6xI+ychQDZg4RI2FBRWWwGn7S2/ZOGvh2gAu13dO9ovMPhnHAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUoTgcMbgsDtOx0kwgJk+meO+6MqcwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NzIwMjU5LzAvMzEzMDMzMmUzNTM2 MmUzNzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGc4TDANBgkqhkiG9w0BAQsFAAOCAQEAg33Ko8MQD57HhmGvSrnOIFSKVeG9 bGgDYwb3gtyA9Dz0P4OyPLxo9nzFCDf6f2njftiDpAvyjtw4iynx2y3OxNNWd/ng Q6Xm4TQgtD4ZZSUdx0iR2fEpJyVkS+lj3oVilPk2dd9irU1lGeOK9kKWlIRST4ij BDb6zDDYGlBbN9c216AHSOYlvMuMxrGcCWRzd7049tw5rKQVx2bBJIHHzr7rTOSM fb5hj5+3aVLHlbhP9n6DN/LmiXSR5tzTp0aDugGgAOsOioSGfDvlAZpyQHFzKFGl XJ2yaZpNqL2x0ljysPugYc/4xqdoW+2HF6IsHXbAaFpqE5BHdEVBr7jAyA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:57 2026 by rpki-client