$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132372e302f32342d3234203d3e203633363431.roa File: 3130332e37342e3132372e302f32342d3234203d3e203633363431.roa (raw, json) Hash identifier: xNfaZgqNzsRpeAccIGGKpVr4WQ+x5VrEcNlaEwre5Yw= Subject key identifier: 3B:90:09:88:AB:67:55:05:3F:2D:72:51:0E:94:BA:7E:0A:6F:EF:31 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 577BA67F991C122C7EF85801B2981D79C083A778 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132372e302f32342d3234203d3e203633363431.roa Signing time: Wed 22 Apr 2026 13:45:39 +0000 ROA not before: Wed 22 Apr 2026 13:40:39 +0000 ROA not after: Wed 21 Apr 2027 13:45:39 +0000 asID: 63641 IP address blocks: 103.74.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:7b:a6:7f:99:1c:12:2c:7e:f8:58:01:b2:98:1d:79:c0:83:a7:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 13:40:39 2026 GMT Not After : Apr 21 13:45:39 2027 GMT Subject: CN=3B900988AB6755053F2D72510E94BA7E0A6FEF31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:7e:28:9f:c1:1f:4f:40:ee:af:27:ad:6a:dc: a4:b0:2a:c3:48:49:8a:42:ea:eb:f8:55:66:61:52: f8:a8:64:5c:a6:f1:9a:52:b3:38:22:18:4e:55:2e: 0c:c9:91:b7:7e:e9:be:7f:49:8a:ba:08:f4:28:d1: 99:8e:38:da:14:fc:56:7f:3a:d8:67:c2:6b:3d:7b: dd:22:a8:2f:40:e4:42:da:00:88:fc:67:40:5b:00: 6e:b9:21:36:71:29:57:78:a9:8a:cc:62:25:ac:43: bb:0e:fc:7e:ca:d4:35:a6:c4:56:ee:73:98:25:0d: 9c:bd:ae:7e:08:94:4a:16:6e:7c:42:14:8c:12:34: 06:a2:50:4b:78:11:ba:ef:48:b2:d9:0f:92:16:a1: 3e:c9:65:ff:be:42:17:63:ac:c7:bb:1b:af:d2:a3: 3f:93:32:01:70:89:ef:9d:31:96:21:02:b1:f2:81: 09:32:50:c1:8e:bd:57:13:70:72:22:ff:41:5b:57: 62:43:6d:d1:bd:83:e5:79:61:7a:6b:db:49:ee:dd: e6:5b:1e:33:e7:26:b2:ea:9d:cb:5e:3e:cb:4c:58: eb:9a:ad:58:57:07:38:7b:4f:18:60:68:87:9d:ae: 22:56:01:36:eb:2b:87:1d:28:ee:da:c7:d3:3a:93: 8d:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:90:09:88:AB:67:55:05:3F:2D:72:51:0E:94:BA:7E:0A:6F:EF:31 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/3130332e37342e3132372e302f32342d3234203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.74.127.0/24 Signature Algorithm: sha256WithRSAEncryption 94:8d:f6:ba:1c:54:c3:80:86:48:9e:2d:fd:92:91:1e:43:34: 76:e0:ac:28:de:87:1e:f1:bb:a7:ec:f2:ac:d3:e0:27:2d:a9: de:7d:d0:a4:ee:20:e5:44:d4:78:7c:61:ad:5d:1c:9f:17:8e: 45:64:a7:93:ee:16:3c:39:12:a8:4c:bd:c4:ed:2a:af:f6:6d: f9:17:89:8d:c5:85:47:bb:4e:da:3f:40:d2:74:12:dd:9d:b3: 4c:37:7e:7e:9b:a4:92:89:7d:8c:51:36:e1:82:c8:3c:a9:d0: 32:d5:1c:0d:26:5c:db:03:b3:8e:29:f5:f4:c3:8e:b8:4f:ae: 55:33:7d:b9:94:f1:85:f5:05:6c:f2:8d:c4:5b:28:1c:10:91: 72:8b:99:de:4d:37:f5:3d:b2:20:56:6b:ee:45:2d:57:ee:82: a2:e0:f5:91:64:e4:69:bd:3e:27:10:72:a5:76:26:58:90:cf: 5b:e8:b4:46:1f:7e:5a:63:43:50:7c:87:ea:b2:3c:c7:6d:89: ac:ec:2e:dd:e0:b9:07:96:33:a8:ac:29:bd:6b:8c:a8:4a:4e: a2:5f:28:c9:26:02:f6:c8:c5:e9:0c:77:50:df:7f:ea:6c:0c: b8:b4:3a:34:bd:9c:db:26:90:03:6f:72:0d:f4:0e:ce:23:11: 8f:23:7b:0b -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUV3umf5kcEix++FgBspgdecCDp3gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxMzQwMzlaFw0yNzA0MjExMzQ1MzlaMDMxMTAvBgNV BAMTKDNCOTAwOTg4QUI2NzU1MDUzRjJENzI1MTBFOTRCQTdFMEE2RkVGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUfiifwR9PQO6vJ61q3KSwKsNI SYpC6uv4VWZhUvioZFym8ZpSszgiGE5VLgzJkbd+6b5/SYq6CPQo0ZmOONoU/FZ/ Othnwms9e90iqC9A5ELaAIj8Z0BbAG65ITZxKVd4qYrMYiWsQ7sO/H7K1DWmxFbu c5glDZy9rn4IlEoWbnxCFIwSNAaiUEt4EbrvSLLZD5IWoT7JZf++QhdjrMe7G6/S oz+TMgFwie+dMZYhArHygQkyUMGOvVcTcHIi/0FbV2JDbdG9g+V5YXpr20nu3eZb HjPnJrLqnctePstMWOuarVhXBzh7TxhgaIedriJWATbrK4cdKO7ax9M6k40VAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUO5AJiKtnVQU/LXJRDpS6fgpv7zEwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMxMzAzMzJlMzcz NDJlMzEzMjM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGdKfzANBgkqhkiG9w0BAQsFAAOCAQEAlI32uhxUw4CGSJ4t/ZKRHkM0 duCsKN6HHvG7p+zyrNPgJy2p3n3QpO4g5UTUeHxhrV0cnxeORWSnk+4WPDkSqEy9 xO0qr/Zt+ReJjcWFR7tO2j9A0nQS3Z2zTDd+fpukkol9jFE24YLIPKnQMtUcDSZc 2wOzjin19MOOuE+uVTN9uZTxhfUFbPKNxFsoHBCRcouZ3k039T2yIFZr7kUtV+6C ouD1kWTkab0+JxBypXYmWJDPW+i0Rh9+WmNDUHyH6rI8x22JrOwu3eC5B5YzqKwp vWuMqEpOol8oySYC9sjF6Qx3UN9/6mwMuLQ6NL2c2yaQA29yDfQOziMRjyN7Cw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:07 2026 by rpki-client