$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203137363231.roa File: 3130332e37342e3132352e302f32342d3234203d3e203137363231.roa (raw, json) Hash identifier: qMWWo5q86HtN7uDMsrS2vqUL77D9Vh2h2rcgRd5tPsI= Subject key identifier: C5:45:2B:EF:4A:4E:D1:4B:69:C3:0D:15:75:64:68:02:5E:4B:81:B4 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 214B2D29D6FDB6B975063945A9CE522F82AFE8B2 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203137363231.roa Signing time: Wed 22 Apr 2026 13:42:25 +0000 ROA not before: Wed 22 Apr 2026 13:37:25 +0000 ROA not after: Wed 21 Apr 2027 13:42:25 +0000 asID: 17621 IP address blocks: 103.74.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4b:2d:29:d6:fd:b6:b9:75:06:39:45:a9:ce:52:2f:82:af:e8:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 13:37:25 2026 GMT Not After : Apr 21 13:42:25 2027 GMT Subject: CN=C5452BEF4A4ED14B69C30D15756468025E4B81B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:77:82:68:6f:51:67:55:a1:12:67:8a:d4: 54:e1:fa:ff:a5:9c:7b:45:26:d7:c9:b0:71:3a:9f: e5:ec:3f:40:0e:77:c8:90:eb:b0:51:90:10:e6:4d: 62:13:e5:86:1b:f8:7b:4e:a8:75:89:da:8d:ad:d4: f6:3f:e8:4e:e5:1c:92:ba:3f:11:3a:ed:64:24:66: 44:e0:97:4c:76:7d:16:37:01:a9:73:67:2c:9e:3e: c7:c8:fc:f7:fa:c2:31:d5:ba:9a:27:cc:83:f1:1a: aa:df:4d:46:1a:86:48:3f:f0:ed:63:5b:f1:88:b8: e9:e6:fe:bb:c6:50:83:f1:ff:80:8f:48:2e:ca:c1: 61:56:9b:8f:71:00:4b:72:a9:98:a5:99:50:c0:20: 35:1e:98:79:fa:ba:00:87:bd:d7:e0:eb:83:40:77: 42:01:61:d7:92:08:32:85:ee:b6:d9:07:55:8a:fd: 4b:85:25:2b:fa:fc:0e:c0:61:eb:81:d3:75:5d:22: 6e:bb:b0:3f:ce:2a:09:e3:29:d1:08:42:72:16:0c: 63:f9:f0:86:32:45:a6:40:78:34:dc:bb:17:11:31: 06:e2:7a:21:59:15:6f:ff:68:ba:4f:a0:7b:62:f5: 75:e2:8c:24:06:f5:f2:c3:4c:f9:3a:9c:ec:7f:9b: 69:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:45:2B:EF:4A:4E:D1:4B:69:C3:0D:15:75:64:68:02:5E:4B:81:B4 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132352e302f32342d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.74.125.0/24 Signature Algorithm: sha256WithRSAEncryption 98:3e:99:af:c2:85:52:da:d0:e9:17:9f:cc:63:82:a0:92:a3: 1c:af:25:cc:6b:d3:94:58:27:89:d1:92:8b:e8:07:cf:24:7a: 91:e8:3c:21:36:31:a6:78:5a:da:4a:aa:d5:20:d6:fc:0e:39: 21:7b:1f:a9:be:d4:2f:7f:8f:eb:60:07:15:7a:c1:01:7d:cc: 12:a0:3f:fa:9b:17:8e:23:41:f6:3d:c1:84:1c:6b:71:03:3f: c1:f1:79:f8:7f:0c:0d:08:ca:d0:30:79:43:0c:2d:e7:7c:af: f2:52:e6:a5:11:1a:30:98:b7:1b:4f:b3:7a:5f:19:f9:3b:1a: b8:cf:8f:33:f8:d8:93:a0:c3:d7:5e:8f:e0:2c:ee:58:70:3f: 03:c1:91:41:28:42:b0:18:37:23:74:a8:e7:38:18:1f:a2:9a: d8:d6:91:c1:e0:21:a5:b0:c0:58:f7:dc:11:d3:c9:3d:fb:7f: ae:27:2b:71:62:86:48:66:e7:6f:de:14:53:6a:af:1f:27:29: e7:6d:38:a3:14:fb:bf:45:d2:99:da:f6:aa:d2:3b:ca:b7:e1: 24:f7:96:f9:88:da:d4:54:e6:9d:94:ad:01:ec:d3:bc:bd:b8: 29:99:a6:a1:5c:f4:c6:c9:d8:01:eb:77:3e:28:de:b5:53:32: 07:b8:cd:6d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIUstKdb9trl1BjlFqc5SL4Kv6LIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxMzM3MjVaFw0yNzA0MjExMzQyMjVaMDMxMTAvBgNV BAMTKEM1NDUyQkVGNEE0RUQxNEI2OUMzMEQxNTc1NjQ2ODAyNUU0QjgxQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDF3eCaG9RZ1WhEmeK1FTh+v+l nHtFJtfJsHE6n+XsP0AOd8iQ67BRkBDmTWIT5YYb+HtOqHWJ2o2t1PY/6E7lHJK6 PxE67WQkZkTgl0x2fRY3AalzZyyePsfI/Pf6wjHVuponzIPxGqrfTUYahkg/8O1j W/GIuOnm/rvGUIPx/4CPSC7KwWFWm49xAEtyqZilmVDAIDUemHn6ugCHvdfg64NA d0IBYdeSCDKF7rbZB1WK/UuFJSv6/A7AYeuB03VdIm67sD/OKgnjKdEIQnIWDGP5 8IYyRaZAeDTcuxcRMQbieiFZFW//aLpPoHti9XXijCQG9fLDTPk6nOx/m2lxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxUUr70pO0Utpww0VdWRoAl5LgbQwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzAzMzJlMzcz NDJlMzEzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGdKfTANBgkqhkiG9w0BAQsFAAOCAQEAmD6Zr8KFUtrQ6RefzGOCoJKj HK8lzGvTlFgnidGSi+gHzyR6keg8ITYxpnha2kqq1SDW/A45IXsfqb7UL3+P62AH FXrBAX3MEqA/+psXjiNB9j3BhBxrcQM/wfF5+H8MDQjK0DB5Qwwt53yv8lLmpREa MJi3G0+zel8Z+TsauM+PM/jYk6DD116P4CzuWHA/A8GRQShCsBg3I3So5zgYH6Ka 2NaRweAhpbDAWPfcEdPJPft/ricrcWKGSGbnb94UU2qvHycp5204oxT7v0XSmdr2 qtI7yrfhJPeW+Yja1FTmnZStAezTvL24KZmmoVz0xsnYAet3PijetVMyB7jNbQ== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:08 2026 by rpki-client