$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3130332e32322e3138382e302f32322d3332203d3e203536303035.roa File: 3130332e32322e3138382e302f32322d3332203d3e203536303035.roa (raw, json) Hash identifier: B03I5yVUQruydbajsgM/nt8B4b/Gp3zemKCUIu5eu+k= Subject key identifier: C5:1D:13:8F:0E:1F:C6:6D:D1:0E:B0:A9:54:00:19:CC:96:D3:AC:90 Certificate issuer: /CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Certificate serial: 1C9047F27F8F6DEA84D3786FE6C07F41E5D0EC99 Authority key identifier: BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3130332e32322e3138382e302f32322d3332203d3e203536303035.roa Signing time: Mon 13 Apr 2026 03:32:55 +0000 ROA not before: Mon 13 Apr 2026 03:27:55 +0000 ROA not after: Mon 12 Apr 2027 03:32:55 +0000 asID: 56005 IP address blocks: 103.22.188.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:90:47:f2:7f:8f:6d:ea:84:d3:78:6f:e6:c0:7f:41:e5:d0:ec:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13 Validity Not Before: Apr 13 03:27:55 2026 GMT Not After : Apr 12 03:32:55 2027 GMT Subject: CN=C51D138F0E1FC66DD10EB0A9540019CC96D3AC90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:50:05:c7:b4:a8:55:cd:36:62:55:bb:5a: 3b:7d:e6:74:7c:ab:17:c6:45:77:77:c2:34:72:96: b7:dc:04:6e:a0:45:73:7e:ca:76:51:5a:4f:2d:03: 39:71:79:5c:0a:cd:b7:94:9a:5f:e0:c5:bc:c8:86: bb:d2:62:89:ee:9f:c8:c7:ae:e8:5d:2b:48:8b:4c: 2e:c1:3e:67:5b:71:19:b9:de:50:a0:23:25:d9:71: 83:33:92:a5:4e:be:d1:6c:94:81:ee:b7:cd:81:2c: 5c:44:b2:43:26:dc:65:da:b8:0d:49:0b:e8:3e:ac: 0b:bd:c1:cd:25:ad:c6:8c:66:a9:de:29:5f:81:43: f8:b2:ed:ca:d2:d6:03:77:70:83:ae:c1:b0:21:ee: 93:79:e3:a2:d3:05:c9:20:09:00:b7:15:7f:a9:d6: 8d:f4:65:05:bb:a2:82:d2:30:3b:e7:56:ee:6a:4b: da:19:d4:71:33:15:8a:87:5b:6b:5c:ec:8e:c2:f4: 05:66:78:b0:69:9c:2a:11:02:8a:9c:ae:04:a6:da: 00:8b:1b:30:2e:9b:8c:db:2a:a6:ac:32:13:ba:8b: 0e:58:d1:89:ac:74:e1:c1:5d:8a:97:06:ae:ff:2f: f5:23:88:dd:25:6d:97:a8:22:96:fc:4f:25:52:b7: 42:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1D:13:8F:0E:1F:C6:6D:D1:0E:B0:A9:54:00:19:CC:96:D3:AC:90 X509v3 Authority Key Identifier: keyid:BC:A8:E2:6E:86:DC:27:A4:10:DD:A5:3B:0D:AA:D2:1C:DD:9A:DB:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BCA8E26E86DC27A410DDA53B0DAAD21CDD9ADB13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347192321/0/3130332e32322e3138382e302f32322d3332203d3e203536303035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.22.188.0/22 Signature Algorithm: sha256WithRSAEncryption 20:b4:6e:a6:dc:fd:78:3f:cb:52:c0:6d:48:ee:16:a8:d0:e2: 1a:19:cd:ce:5d:ad:50:a7:05:04:39:7d:bf:fc:f8:42:95:a9: d5:39:cc:a3:73:e9:f6:6b:02:74:89:91:7b:cb:0b:fb:6c:9f: 83:a2:50:16:7d:45:0c:b3:ea:b6:b4:2f:a1:71:5f:fc:e5:bd: aa:59:c2:9b:75:3e:06:46:4d:df:06:64:3e:04:89:03:cf:c9: 52:d1:81:c3:e2:0d:2f:be:69:41:95:5e:ba:51:40:33:31:1e: a3:38:87:f0:73:b2:9f:53:9a:f2:2e:0c:e3:7e:aa:7f:a9:8a: 18:60:ea:8b:b6:d7:a4:17:42:5c:f8:09:fa:a1:2b:22:0f:f9: 64:2b:93:fb:c7:3a:af:45:ad:0e:c3:40:ce:4e:36:b0:b2:0d: c9:f1:8b:68:71:b1:62:47:1b:d5:97:a9:ac:1a:25:1a:e5:56: 8d:fe:c3:59:c9:c8:38:2c:c4:80:31:4a:b1:0d:c3:30:da:ae: 53:2f:8c:bc:ab:f7:c4:14:8e:95:d0:3a:de:89:67:9d:1b:df: b6:d6:f2:22:4e:94:03:fb:90:93:8e:c0:95:d4:fd:28:e7:12: d6:fb:c7:18:7d:20:72:4a:8e:57:ba:d7:92:94:08:e5:5c:25: b7:7b:2e:f6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUHJBH8n+PbeqE03hv5sB/QeXQ7JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNE RDlBREIxMzAeFw0yNjA0MTMwMzI3NTVaFw0yNzA0MTIwMzMyNTVaMDMxMTAvBgNV BAMTKEM1MUQxMzhGMEUxRkM2NkREMTBFQjBBOTU0MDAxOUNDOTZEM0FDOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFlAFx7SoVc02YlW7Wjt95nR8 qxfGRXd3wjRylrfcBG6gRXN+ynZRWk8tAzlxeVwKzbeUml/gxbzIhrvSYonun8jH ruhdK0iLTC7BPmdbcRm53lCgIyXZcYMzkqVOvtFslIHut82BLFxEskMm3GXauA1J C+g+rAu9wc0lrcaMZqneKV+BQ/iy7crS1gN3cIOuwbAh7pN546LTBckgCQC3FX+p 1o30ZQW7ooLSMDvnVu5qS9oZ1HEzFYqHW2tc7I7C9AVmeLBpnCoRAoqcrgSm2gCL GzAum4zbKqasMhO6iw5Y0YmsdOHBXYqXBq7/L/UjiN0lbZeoIpb8TyVSt0JjAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUxR0Tjw4fxm3RDrCpVAAZzJbTrJAwHwYDVR0j BBgwFoAUvKjibobcJ6QQ3aU7DarSHN2a2xMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzE5MjMyMS8wL0JDQThFMjZFODZEQzI3QTQxMEREQTUzQjBEQUFE MjFDREQ5QURCMTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkNBOEUyNkU4NkRDMjdBNDEwRERBNTNCMERBQUQyMUNERDlBREIxMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0NzE5MjMyMS8wLzMxMzAzMzJlMzIz MjJlMzEzODM4MmUzMDJmMzIzMjJkMzMzMjIwM2QzZTIwMzUzNjMwMzAzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmcWvDANBgkqhkiG9w0BAQsFAAOCAQEAILRuptz9eD/LUsBtSO4WqNDi GhnNzl2tUKcFBDl9v/z4QpWp1TnMo3Pp9msCdImRe8sL+2yfg6JQFn1FDLPqtrQv oXFf/OW9qlnCm3U+BkZN3wZkPgSJA8/JUtGBw+INL75pQZVeulFAMzEeoziH8HOy n1Oa8i4M436qf6mKGGDqi7bXpBdCXPgJ+qErIg/5ZCuT+8c6r0WtDsNAzk42sLIN yfGLaHGxYkcb1ZeprBolGuVWjf7DWcnIOCzEgDFKsQ3DMNquUy+MvKv3xBSOldA6 3olnnRvfttbyIk6UA/uQk47AldT9KOcS1vvHGH0gckqOV7rXkpQI5Vwlt3su9g== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:48 2026 by rpki-client