$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e39382e3134342e302f32322d3232203d3e2030.roa File: 3130332e39382e3134342e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: Xaw9XQSyNm1vgWvC0XSN3mDipjx61UW2BUVxC743Iow= Subject key identifier: D4:93:16:AF:96:05:F3:91:98:F7:31:E5:9B:7C:B3:D3:2D:BA:B7:FA Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 2ADC0FEE68E5898C0FAD6A573380A0BF821241F0 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e39382e3134342e302f32322d3232203d3e2030.roa Signing time: Mon 28 Sep 2026 01:00:34 +0000 ROA not before: Mon 28 Sep 2026 00:55:34 +0000 ROA not after: Mon 27 Sep 2027 01:00:34 +0000 asID: 0 IP address blocks: 103.98.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 22:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:dc:0f:ee:68:e5:89:8c:0f:ad:6a:57:33:80:a0:bf:82:12:41:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:34 2026 GMT Not After : Sep 27 01:00:34 2027 GMT Subject: CN=D49316AF9605F39198F731E59B7CB3D32DBAB7FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:59:c6:4c:cb:80:c6:d5:51:d8:e6:42:c2: 30:d6:73:95:6b:74:e3:09:ea:f4:55:2d:db:0c:e4: 79:df:a4:fd:3e:69:0a:fa:3d:04:9e:ec:9e:d0:a4: 6b:31:14:aa:44:cf:69:a0:27:a1:d4:30:d2:15:23: e7:61:7e:5a:4a:20:2a:8a:eb:f1:f9:8f:7d:19:99: c3:74:2c:d3:46:04:df:b9:28:a3:d6:62:86:de:ca: 55:2b:10:3f:d0:da:fe:e0:a9:8f:a7:0a:40:48:22: df:7d:09:e8:4f:7c:bb:f4:d7:26:9d:6f:57:53:79: f0:c4:4b:29:2f:42:0b:de:17:3b:f3:14:e2:e3:c8: 33:a7:ac:35:51:c8:84:6f:73:c1:47:3b:f3:ad:0a: 6a:15:5a:e4:a0:f4:0a:77:c5:eb:38:4d:c7:48:90: c9:10:88:8a:7a:ee:fb:9b:62:bc:4c:2a:b4:7d:8e: f9:58:6b:dc:47:5f:6a:7d:fe:0a:d6:c4:2e:e9:bb: bf:f8:98:0e:13:2a:01:af:70:53:15:18:f9:01:8f: 1b:a3:77:81:8f:53:22:06:56:4e:1e:8a:79:df:82: 4b:98:44:5a:ca:a8:b0:28:9b:78:cc:2e:42:42:75: e2:8a:d1:61:3f:33:fe:c9:78:63:73:dc:b3:da:22: 2f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:93:16:AF:96:05:F3:91:98:F7:31:E5:9B:7C:B3:D3:2D:BA:B7:FA X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e39382e3134342e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.98.144.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:da:a0:99:7d:c0:85:65:46:3b:14:2d:58:d2:86:18:ed:08: 8e:62:d1:19:06:67:ea:ff:a8:23:50:d0:ce:b1:55:8a:1a:cd: bc:76:09:61:ef:f0:ff:c2:30:bb:14:5e:38:6f:3b:14:c0:61: 8d:96:d9:72:39:43:86:a1:66:dc:e1:75:cc:f3:59:50:66:66: 8a:76:29:0d:2c:16:31:92:72:ed:ac:5a:8f:ee:05:80:d2:20: 92:ee:40:96:34:47:7d:0e:d4:de:48:76:1d:eb:51:04:49:e5: 49:b2:01:cb:03:9e:3f:bc:b0:93:58:b8:22:f6:e6:d9:59:c1: 79:dd:51:c4:69:66:ae:50:e9:ee:74:7f:fb:7b:52:56:57:97: f0:bf:e6:96:33:93:73:f8:45:9c:c0:d1:5c:4a:32:a6:5b:93: c4:28:3f:fc:12:65:5c:b2:a3:b9:4e:39:fe:b8:05:06:30:8d: f1:6c:94:f3:1a:6d:c2:77:79:3f:a9:e9:25:2f:9a:eb:da:19: aa:1d:dd:fc:3d:7f:3d:46:95:d5:d2:71:6c:5a:8b:05:2d:d2: de:ad:1e:40:ee:73:99:f7:58:50:9d:89:06:ed:eb:2e:b7:34: 20:24:26:c6:06:9a:80:9e:99:90:ab:b7:c6:6f:69:7f:c0:66: 0f:1b:59:22 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUKtwP7mjliYwPrWpXM4Cgv4ISQfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzRaFw0yNzA5MjcwMTAwMzRaMDMxMTAvBgNV BAMTKEQ0OTMxNkFGOTYwNUYzOTE5OEY3MzFFNTlCN0NCM0QzMkRCQUI3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsDFnGTMuAxtVR2OZCwjDWc5Vr dOMJ6vRVLdsM5HnfpP0+aQr6PQSe7J7QpGsxFKpEz2mgJ6HUMNIVI+dhflpKICqK 6/H5j30ZmcN0LNNGBN+5KKPWYobeylUrED/Q2v7gqY+nCkBIIt99CehPfLv01yad b1dTefDESykvQgveFzvzFOLjyDOnrDVRyIRvc8FHO/OtCmoVWuSg9Ap3xes4TcdI kMkQiIp67vubYrxMKrR9jvlYa9xHX2p9/grWxC7pu7/4mA4TKgGvcFMVGPkBjxuj d4GPUyIGVk4einnfgkuYRFrKqLAom3jMLkJCdeKK0WE/M/7JeGNz3LPaIi8/AgMB AAGjggILMIICBzAdBgNVHQ4EFgQU1JMWr5YF85GY9zHlm3yz0y26t/owHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzOTM4 MmUzMTM0MzQyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdi kDANBgkqhkiG9w0BAQsFAAOCAQEAi9qgmX3AhWVGOxQtWNKGGO0IjmLRGQZn6v+o I1DQzrFVihrNvHYJYe/w/8IwuxReOG87FMBhjZbZcjlDhqFm3OF1zPNZUGZminYp DSwWMZJy7axaj+4FgNIgku5AljRHfQ7U3kh2HetRBEnlSbIBywOeP7ywk1i4Ivbm 2VnBed1RxGlmrlDp7nR/+3tSVleX8L/mljOTc/hFnMDRXEoypluTxCg//BJlXLKj uU45/rgFBjCN8WyU8xptwnd5P6npJS+a69oZqh3d/D1/PUaV1dJxbFqLBS3S3q0e QO5zmfdYUJ2JBu3rLrc0ICQmxgaagJ6ZkKu3xm9pf8BmDxtZIg== -----END CERTIFICATE-----Generated at Wed Oct 7 23:06:37 2026 by rpki-client