$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37392e302f32342d3234203d3e203538343636.roa File: 3130332e35362e37392e302f32342d3234203d3e203538343636.roa (raw, json) Hash identifier: a2ZvPYlJ+VfFAhB3jALdNHCAr8okKe4s5j9azyTOzyk= Subject key identifier: E2:8B:60:BB:FE:CB:EA:70:2E:43:79:48:22:1F:B5:18:80:C2:39:AA Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 431BA9FD05D5A1F0E79A66E259D5C2EA060D09BC Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37392e302f32342d3234203d3e203538343636.roa Signing time: Mon 13 Apr 2026 02:27:54 +0000 ROA not before: Mon 13 Apr 2026 02:22:54 +0000 ROA not after: Mon 12 Apr 2027 02:27:54 +0000 asID: 58466 IP address blocks: 103.56.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:1b:a9:fd:05:d5:a1:f0:e7:9a:66:e2:59:d5:c2:ea:06:0d:09:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 02:22:54 2026 GMT Not After : Apr 12 02:27:54 2027 GMT Subject: CN=E28B60BBFECBEA702E437948221FB51880C239AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:fb:16:51:62:ed:7b:f7:ea:85:90:e1:a1: b4:fc:31:54:29:16:54:49:71:d3:72:7d:dc:77:b5: dc:40:69:59:da:8f:02:b9:70:bf:2a:0f:56:b5:1b: fe:e8:58:e5:01:db:bf:b2:e9:ba:ea:bc:48:06:18: 0a:1e:b2:bc:92:3e:0c:de:bc:2a:5b:03:b9:e7:cb: 8c:cd:37:26:b1:ea:db:0c:b8:3f:75:09:c3:21:b0: 96:e9:74:0c:ab:4d:87:33:e6:f3:5b:99:e1:c2:39: 1d:d6:b1:f1:2d:fa:07:c8:d2:f4:07:94:39:f2:c0: 11:a4:d5:13:0f:60:a4:1b:44:5a:f1:71:8d:43:29: 09:89:e5:ac:ab:64:db:f1:c7:c8:e5:6c:71:1b:4a: 63:15:03:56:1b:fe:69:7d:df:fe:27:2e:9b:5f:f6: 84:1f:9e:c5:a7:30:8f:2a:9e:cd:94:87:47:76:9c: ef:01:2f:24:1b:ea:8d:4e:e0:20:51:06:5f:cc:33: 90:ac:8c:e4:e1:ce:3b:57:0f:fa:d9:cc:3a:27:ae: c4:11:52:7b:dd:79:24:e1:1f:b3:1a:36:6b:8c:08: 63:ea:69:22:b4:26:b1:d2:aa:90:77:6e:67:b8:ce: 5c:e1:9d:99:4d:92:1a:f1:a9:87:d0:04:e1:ad:74: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8B:60:BB:FE:CB:EA:70:2E:43:79:48:22:1F:B5:18:80:C2:39:AA X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/3130332e35362e37392e302f32342d3234203d3e203538343636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.79.0/24 Signature Algorithm: sha256WithRSAEncryption 76:78:23:cf:1d:ea:b9:9d:42:bb:d8:80:c2:26:43:fb:47:fb: ab:1f:65:d9:fa:8a:cb:3c:10:dd:b6:38:ba:ef:08:cb:67:d8: 32:30:72:5f:97:04:03:28:b9:c9:90:0a:42:d9:3d:67:79:30: 8a:b4:7b:86:de:8a:a1:78:d8:18:bb:e6:c9:53:13:9a:8d:4d: e8:9c:63:09:a0:8a:30:12:4c:28:62:dd:4a:67:8c:c5:19:b2: cf:f6:53:f8:99:94:f3:5e:59:7f:73:02:63:3e:ed:a6:66:25: d1:7d:4f:0d:5e:b3:4b:fe:1d:75:43:80:fc:cd:c0:4e:55:4f: 01:aa:dc:1a:b3:f0:86:72:4e:fc:a5:70:84:4c:b6:eb:e1:16: 36:a3:3e:7c:d7:de:72:a1:46:23:1b:5d:f1:72:74:fe:db:5b: 54:9d:82:0d:68:a7:c0:19:de:bb:6a:00:e6:de:3d:96:af:b9: 21:ea:ec:4a:1b:c8:ed:21:54:42:26:cc:2e:d2:04:77:f9:a0: 8f:89:c5:38:eb:0b:9c:31:63:f0:5e:dd:91:49:4a:b7:72:ab: 5d:3b:7f:a0:63:e3:39:c7:d0:b5:eb:21:0a:7a:9d:2f:c7:13: f3:1d:17:42:7d:7f:f7:7d:c0:2a:55:7d:e6:3f:1c:d9:5a:96: 4c:83:1e:8d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUQxup/QXVofDnmmbiWdXC6gYNCbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMjIyNTRaFw0yNzA0MTIwMjI3NTRaMDMxMTAvBgNV BAMTKEUyOEI2MEJCRkVDQkVBNzAyRTQzNzk0ODIyMUZCNTE4ODBDMjM5QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFv/sWUWLte/fqhZDhobT8MVQp FlRJcdNyfdx3tdxAaVnajwK5cL8qD1a1G/7oWOUB27+y6brqvEgGGAoesrySPgze vCpbA7nny4zNNyax6tsMuD91CcMhsJbpdAyrTYcz5vNbmeHCOR3WsfEt+gfI0vQH lDnywBGk1RMPYKQbRFrxcY1DKQmJ5ayrZNvxx8jlbHEbSmMVA1Yb/ml93/4nLptf 9oQfnsWnMI8qns2Uh0d2nO8BLyQb6o1O4CBRBl/MM5CsjOThzjtXD/rZzDonrsQR UnvdeSThH7MaNmuMCGPqaSK0JrHSqpB3bme4zlzhnZlNkhrxqYfQBOGtdGRjAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU4otgu/7L6nAuQ3lIIh+1GIDCOaowHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NzIwMjU5LzAvMzEzMDMzMmUzNTM2 MmUzNzM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGc4TzANBgkqhkiG9w0BAQsFAAOCAQEAdngjzx3quZ1Cu9iAwiZD+0f7qx9l 2fqKyzwQ3bY4uu8Iy2fYMjByX5cEAyi5yZAKQtk9Z3kwirR7ht6KoXjYGLvmyVMT mo1N6JxjCaCKMBJMKGLdSmeMxRmyz/ZT+JmU815Zf3MCYz7tpmYl0X1PDV6zS/4d dUOA/M3ATlVPAarcGrPwhnJO/KVwhEy26+EWNqM+fNfecqFGIxtd8XJ0/ttbVJ2C DWinwBneu2oA5t49lq+5IersShvI7SFUQibMLtIEd/mgj4nFOOsLnDFj8F7dkUlK t3KrXTt/oGPjOcfQteshCnqdL8cT8x0XQn1/933AKlV95j8c2VqWTIMejQ== -----END CERTIFICATE-----Generated at Mon Apr 13 15:30:56 2026 by rpki-client