$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134362e302f32332d3233203d3e203535393931.roa File: 3130332e34342e3134362e302f32332d3233203d3e203535393931.roa (raw, json) Hash identifier: j2GFTR5gTw63ofVwQLqxVpcVOasLh4PPhKjqt/os0Tg= Subject key identifier: 3A:AF:40:48:C6:B8:95:C6:0E:1B:F1:AB:F1:17:37:3B:BA:49:5E:75 Certificate issuer: /CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Certificate serial: 68CADC8A86E665ED897F61B012DB51FFEE6D6A33 Authority key identifier: 11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134362e302f32332d3233203d3e203535393931.roa Signing time: Thu 23 Apr 2026 09:44:31 +0000 ROA not before: Thu 23 Apr 2026 09:39:31 +0000 ROA not after: Thu 22 Apr 2027 09:44:31 +0000 asID: 55991 IP address blocks: 103.44.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:ca:dc:8a:86:e6:65:ed:89:7f:61:b0:12:db:51:ff:ee:6d:6a:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1133679B2C104A0446FA0C3764EEE246C5D21075 Validity Not Before: Apr 23 09:39:31 2026 GMT Not After : Apr 22 09:44:31 2027 GMT Subject: CN=3AAF4048C6B895C60E1BF1ABF117373BBA495E75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9f:24:05:6b:09:78:b2:a8:9f:f7:7a:49:02: e2:c3:22:9f:58:eb:e5:3b:48:81:63:0f:be:fd:1c: ad:9b:0c:9b:91:11:d1:b9:60:6b:9b:66:b6:b7:06: 1a:4a:7f:17:b3:6a:03:bd:3b:09:58:ea:15:9e:be: ff:d2:a7:d0:15:89:06:90:79:12:b8:e6:8c:e8:76: 50:ea:c8:7c:2e:b8:f4:65:14:ab:f4:28:87:f2:60: 96:26:34:63:b2:e3:0c:48:b3:4d:bd:d1:b3:0e:38: 0a:9c:f7:57:ea:7a:ec:7b:e8:33:d8:a3:b5:51:fe: 35:6e:0b:65:6d:09:f7:1e:7b:d3:ac:de:88:9f:63: ba:18:ae:6e:61:70:7a:31:06:da:a6:2b:32:f6:a9: 47:2b:d4:94:f9:24:30:b2:39:63:ef:6a:0c:d5:c5: 6c:f4:77:cb:ea:c0:fe:63:d5:70:a1:ff:25:14:37: ff:0e:e7:f8:4a:10:50:b7:a2:ff:ad:1e:90:12:07: 05:ca:7a:40:99:25:35:6f:a0:82:5e:39:86:67:db: ac:57:2a:ef:c7:83:4e:c2:8e:d9:ea:0c:97:f5:25: 43:e0:44:73:23:a4:a4:ef:fb:45:3e:42:b1:df:4c: 2c:4d:e7:cb:e1:2f:80:42:7b:d0:11:ef:2d:de:05: b6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:AF:40:48:C6:B8:95:C6:0E:1B:F1:AB:F1:17:37:3B:BA:49:5E:75 X509v3 Authority Key Identifier: keyid:11:33:67:9B:2C:10:4A:04:46:FA:0C:37:64:EE:E2:46:C5:D2:10:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/1133679B2C104A0446FA0C3764EEE246C5D21075.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1133679B2C104A0446FA0C3764EEE246C5D21075.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577400322/0/3130332e34342e3134362e302f32332d3233203d3e203535393931.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.44.146.0/23 Signature Algorithm: sha256WithRSAEncryption 97:23:37:da:a3:d9:9b:ed:85:05:5b:07:b5:c2:80:5c:cc:94: 99:96:c0:79:45:e3:71:81:15:e8:ec:a9:7d:01:30:3a:88:45: 9f:6e:f6:c9:f6:50:31:12:02:f4:c3:49:71:3a:ad:49:6f:0a: be:ec:2c:95:b7:b2:1c:c6:20:68:13:70:b5:16:e9:ce:8b:f8: 29:7f:f8:17:4a:79:87:cf:8d:f7:00:eb:c9:ef:c8:f4:5d:9a: 96:e4:aa:af:f4:92:65:44:c6:d5:c0:bf:2c:69:33:3f:a7:78: 90:83:e7:b4:f6:60:8a:ae:d4:37:c4:ba:1e:09:ae:59:fb:9f: 19:ed:90:b5:b8:b7:d6:ce:44:ab:87:ce:64:c2:5a:86:2e:6a: 94:c1:62:48:24:89:cc:14:da:0a:3d:98:6f:8e:91:c9:d6:f8: 06:01:41:fc:0f:31:39:ab:ce:5a:30:98:37:9f:0d:9b:f9:8c: ea:f6:f4:ad:47:88:44:57:8b:0f:62:68:79:b3:bf:6c:df:a2: 8a:ad:17:10:df:d8:d0:d9:a1:85:57:2d:5b:39:bc:f6:24:ca: e4:55:6c:98:d2:8b:e6:1a:15:65:da:2d:7b:15:e4:42:91:8d: 0a:ad:02:d3:ed:fd:35:3e:1b:c8:c4:79:b8:ef:3c:f4:d4:09: 3a:a6:db:90 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUaMrciobmZe2Jf2GwEttR/+5tajMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZD NUQyMTA3NTAeFw0yNjA0MjMwOTM5MzFaFw0yNzA0MjIwOTQ0MzFaMDMxMTAvBgNV BAMTKDNBQUY0MDQ4QzZCODk1QzYwRTFCRjFBQkYxMTczNzNCQkE0OTVFNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnyQFawl4sqif93pJAuLDIp9Y 6+U7SIFjD779HK2bDJuREdG5YGubZra3BhpKfxezagO9OwlY6hWevv/Sp9AViQaQ eRK45ozodlDqyHwuuPRlFKv0KIfyYJYmNGOy4wxIs0290bMOOAqc91fqeux76DPY o7VR/jVuC2VtCfcee9Os3oifY7oYrm5hcHoxBtqmKzL2qUcr1JT5JDCyOWPvagzV xWz0d8vqwP5j1XCh/yUUN/8O5/hKEFC3ov+tHpASBwXKekCZJTVvoIJeOYZn26xX Ku/Hg07CjtnqDJf1JUPgRHMjpKTv+0U+QrHfTCxN58vhL4BCe9AR7y3eBba9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOq9ASMa4lcYOG/Gr8Rc3O7pJXnUwHwYDVR0j BBgwFoAUETNnmywQSgRG+gw3ZO7iRsXSEHUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzQwMDMyMi8wLzExMzM2NzlCMkMxMDRBMDQ0NkZBMEMzNzY0RUVF MjQ2QzVEMjEwNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTEzMzY3OUIyQzEwNEEwNDQ2RkEwQzM3NjRFRUUyNDZDNUQyMTA3NS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4Mjc0MTU3NzQwMDMyMi8wLzMxMzAzMzJlMzQz NDJlMzEzNDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNTM5MzkzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWcskjANBgkqhkiG9w0BAQsFAAOCAQEAlyM32qPZm+2FBVsHtcKAXMyU mZbAeUXjcYEV6OypfQEwOohFn272yfZQMRIC9MNJcTqtSW8KvuwslbeyHMYgaBNw tRbpzov4KX/4F0p5h8+N9wDrye/I9F2aluSqr/SSZUTG1cC/LGkzP6d4kIPntPZg iq7UN8S6HgmuWfufGe2Qtbi31s5Eq4fOZMJahi5qlMFiSCSJzBTaCj2Yb46Rydb4 BgFB/A8xOavOWjCYN58Nm/mM6vb0rUeIRFeLD2JoebO/bN+iiq0XEN/Y0NmhhVct Wzm89iTK5FVsmNKL5hoVZdotexXkQpGNCq0C0+39NT4byMR5uO889NQJOqbbkA== -----END CERTIFICATE-----Generated at Tue Apr 28 01:09:22 2026 by rpki-client