$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa File: 3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa (raw, json) Hash identifier: ayiRQLB0vCQOVj4IcpJdzMo4ohtXvgd7waElFg36mCA= Subject key identifier: 87:C0:B7:DF:30:AA:39:E7:90:0F:AD:9B:17:39:29:5D:A7:D3:7E:CE Certificate issuer: /CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Certificate serial: 67C4EBE1AB07D03BAA75C606FB96021528928EB1 Authority key identifier: 19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa Signing time: Mon 27 Apr 2026 01:25:15 +0000 ROA not before: Mon 27 Apr 2026 01:20:15 +0000 ROA not after: Mon 26 Apr 2027 01:25:15 +0000 asID: 63654 IP address blocks: 103.116.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:c4:eb:e1:ab:07:d0:3b:aa:75:c6:06:fb:96:02:15:28:92:8e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=191E76D74421148B42FA2A7F663270AE7FAD25F9 Validity Not Before: Apr 27 01:20:15 2026 GMT Not After : Apr 26 01:25:15 2027 GMT Subject: CN=87C0B7DF30AA39E7900FAD9B1739295DA7D37ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6f:ca:af:ca:82:44:a2:47:1a:11:e1:69:22: 19:c4:8d:d2:b6:8c:a9:fe:2f:c0:51:12:8e:a9:fe: 9a:8c:c7:36:26:f9:b3:6c:64:18:38:4e:a6:db:6f: c5:65:3c:57:8d:f6:22:96:68:25:6e:6c:58:ca:49: ef:62:bd:85:b1:2a:aa:77:6d:0b:c2:29:97:9a:1f: d4:95:7f:fe:e9:da:8a:42:16:92:bb:bf:34:23:00: 36:b2:28:27:fe:d1:5a:ac:79:a7:56:ef:a0:c6:87: e3:67:e4:d5:e0:9d:e8:dd:40:01:08:d3:14:3f:f5: a9:09:d1:21:3a:5f:bf:33:a1:16:f8:5a:2b:56:f8: 8e:2e:20:ef:08:f5:04:5f:52:1e:30:cf:0f:1b:87: 70:86:d6:b0:4e:b6:9e:41:2c:a2:a8:03:e3:03:a8: 87:f8:e3:ee:a8:8d:74:d7:6a:8c:a3:48:8f:18:79: 88:6c:bf:61:82:69:63:83:ee:1e:da:c8:05:20:ab: 24:ec:b4:e6:f7:b4:9e:4b:71:45:cd:58:c4:91:3b: 7d:2d:7e:ea:04:c6:3f:12:29:a4:f7:5f:a5:0c:e5: 62:a3:d8:dc:f7:6a:c4:92:f6:5b:71:96:de:c4:d9: 2a:38:ec:ee:a7:db:33:55:ac:be:4d:ab:d3:f4:ac: be:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C0:B7:DF:30:AA:39:E7:90:0F:AD:9B:17:39:29:5D:A7:D3:7E:CE X509v3 Authority Key Identifier: keyid:19:1E:76:D7:44:21:14:8B:42:FA:2A:7F:66:32:70:AE:7F:AD:25:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/191E76D74421148B42FA2A7F663270AE7FAD25F9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/191E76D74421148B42FA2A7F663270AE7FAD25F9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347126785/0/3130332e3131362e3132302e302f32332d3233203d3e203633363534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.116.120.0/23 Signature Algorithm: sha256WithRSAEncryption 22:80:ec:7b:15:ac:56:e9:db:1a:a5:5b:b9:19:15:ea:3d:82: b5:05:dd:28:be:f3:2e:12:62:68:ab:88:ac:c9:a3:3d:15:7c: cf:e1:ef:a7:6d:f4:ff:6e:68:fb:c2:c8:cf:63:45:c2:6b:76: ec:47:0a:db:72:1b:04:72:09:d3:89:99:52:17:32:d7:4a:aa: 3d:5a:56:00:cc:4a:7f:8e:90:85:14:9a:04:4d:27:64:ef:57: 1f:98:e2:08:ae:d3:73:a0:70:64:01:74:05:49:f3:47:d5:5b: 6f:d9:63:e4:c7:df:44:90:ac:bf:74:bc:50:09:45:76:a9:af: 3c:1d:2c:56:3f:ab:66:88:af:74:2f:12:bf:1c:06:fa:c7:03: 4b:83:a8:62:c4:fc:17:5f:54:bf:c2:7b:83:03:de:14:96:9d: ea:d2:72:93:e8:40:70:8d:7b:b4:30:9d:a0:fd:d8:89:47:25: c6:01:24:fb:b0:da:9d:b0:95:60:3c:4b:16:b6:71:ba:8a:bc: 47:f2:87:80:6c:45:0d:f3:61:c9:a0:02:43:7f:90:ca:d5:6c: 47:82:24:8e:a1:c8:63:db:e8:20:a1:ca:a4:f1:3a:e1:cd:8b: f9:eb:40:d5:61:68:93:8b:b3:5f:62:95:3b:f6:e9:ca:f8:5d: c7:8c:c9:02 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUZ8Tr4asH0DuqdcYG+5YCFSiSjrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3 RkFEMjVGOTAeFw0yNjA0MjcwMTIwMTVaFw0yNzA0MjYwMTI1MTVaMDMxMTAvBgNV BAMTKDg3QzBCN0RGMzBBQTM5RTc5MDBGQUQ5QjE3MzkyOTVEQTdEMzdFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXb8qvyoJEokcaEeFpIhnEjdK2 jKn+L8BREo6p/pqMxzYm+bNsZBg4Tqbbb8VlPFeN9iKWaCVubFjKSe9ivYWxKqp3 bQvCKZeaH9SVf/7p2opCFpK7vzQjADayKCf+0VqseadW76DGh+Nn5NXgnejdQAEI 0xQ/9akJ0SE6X78zoRb4WitW+I4uIO8I9QRfUh4wzw8bh3CG1rBOtp5BLKKoA+MD qIf44+6ojXTXaoyjSI8YeYhsv2GCaWOD7h7ayAUgqyTstOb3tJ5LcUXNWMSRO30t fuoExj8SKaT3X6UM5WKj2Nz3asSS9ltxlt7E2So47O6n2zNVrL5Nq9P0rL7TAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUh8C33zCqOeeQD62bFzkpXafTfs4wHwYDVR0j BBgwFoAUGR5210QhFItC+ip/ZjJwrn+tJfkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzEyNjc4NS8wLzE5MUU3NkQ3NDQyMTE0OEI0MkZBMkE3RjY2MzI3 MEFFN0ZBRDI1RjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTkxRTc2RDc0NDIxMTQ4QjQyRkEyQTdGNjYzMjcwQUU3RkFEMjVGOS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODIzMzAzNDcxMjY3ODUvMC8zMTMwMzMyZTMx MzEzNjJlMzEzMjMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMzM2MzUzNC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWd0eDANBgkqhkiG9w0BAQsFAAOCAQEAIoDsexWsVunbGqVbuRkV 6j2CtQXdKL7zLhJiaKuIrMmjPRV8z+Hvp230/25o+8LIz2NFwmt27EcK23IbBHIJ 04mZUhcy10qqPVpWAMxKf46QhRSaBE0nZO9XH5jiCK7Tc6BwZAF0BUnzR9Vbb9lj 5MffRJCsv3S8UAlFdqmvPB0sVj+rZoivdC8SvxwG+scDS4OoYsT8F19Uv8J7gwPe FJad6tJyk+hAcI17tDCdoP3YiUclxgEk+7DanbCVYDxLFrZxuoq8R/KHgGxFDfNh yaACQ3+QytVsR4IkjqHIY9voIKHKpPE64c2L+etA1WFok4uzX2KVO/bpyvhdx4zJ Ag== -----END CERTIFICATE-----Generated at Mon Apr 27 20:38:26 2026 by rpki-client