$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa File: 3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa (raw, json) Hash identifier: Tvh8h6nNlEm1u5qQIZfifEHO2U1ep0EaYaYXiBzZYfU= Subject key identifier: A1:6B:ED:D6:5C:7E:F4:8F:25:10:43:CF:E8:AA:9E:F4:C6:DD:B7:55 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 70EAE6565DF8AC19A3F49A68ECA571A9E07E84C0 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa Signing time: Fri 10 Apr 2026 08:39:33 +0000 ROA not before: Fri 10 Apr 2026 08:34:33 +0000 ROA not after: Fri 09 Apr 2027 08:39:33 +0000 asID: 151263 IP address blocks: 103.20.128.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ea:e6:56:5d:f8:ac:19:a3:f4:9a:68:ec:a5:71:a9:e0:7e:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Apr 10 08:34:33 2026 GMT Not After : Apr 9 08:39:33 2027 GMT Subject: CN=A16BEDD65C7EF48F251043CFE8AA9EF4C6DDB755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b1:a6:2a:c7:79:42:c3:e8:22:db:d5:ad:41: 73:5f:96:4d:89:75:a1:e0:8d:74:2b:cf:87:a2:54: ee:a5:62:79:db:a9:42:21:ba:6d:0a:4c:23:a0:4d: ee:68:ae:80:7d:36:3b:74:68:27:42:46:67:42:34: 1f:66:88:c8:2c:24:7f:68:7c:09:3b:85:9d:7b:41: 05:70:a2:d9:7c:3f:ea:33:dc:d9:6c:f4:3d:24:19: 74:8e:48:ce:a2:87:c3:e2:83:9f:04:7a:f6:37:bb: 99:ec:e2:1d:9b:d1:3c:ba:73:09:ff:3e:6e:44:f9: ba:19:e4:e1:3a:38:fb:de:54:53:92:ce:4d:b4:c4: eb:53:65:d2:ce:62:bc:58:2a:d0:f8:66:38:58:e1: 79:42:ee:93:24:a2:1e:6b:1f:8f:33:dc:fb:ed:cf: 88:21:26:19:4d:77:95:86:ed:10:58:39:4d:d1:58: 09:e0:bf:0b:97:6d:a3:cd:bb:ed:62:3c:02:9b:e8: 76:06:04:f5:d2:b0:5b:02:d5:a9:08:98:55:4b:3c: 1a:a1:2e:c4:d8:38:81:43:51:5d:05:d8:2d:cc:fb: 52:4d:43:2d:8b:88:63:52:57:ea:d9:c3:c2:ea:e7: ea:16:ca:80:ac:28:6b:6d:30:66:39:e0:3e:42:7d: 31:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:6B:ED:D6:5C:7E:F4:8F:25:10:43:CF:E8:AA:9E:F4:C6:DD:B7:55 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e32302e3132382e302f32322d3332203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.128.0/22 Signature Algorithm: sha256WithRSAEncryption 25:d1:9c:b7:7e:01:87:ff:10:b9:e4:7c:14:28:ae:62:d9:74: 31:0b:80:bf:7b:e4:8d:4c:0b:23:eb:ac:1c:c9:fa:d0:76:c7: 5a:55:01:14:73:c8:b5:95:7d:86:29:97:cd:21:b5:ff:d9:9a: 5f:5d:4b:d2:97:b5:8a:60:a5:3c:42:11:4a:3e:84:b4:11:f8: 14:7a:18:b6:64:db:05:4a:7b:df:84:63:2c:f6:0a:06:52:23: 57:ce:db:60:2e:85:a9:ca:f5:54:70:0c:ab:28:d7:b0:db:58: d0:50:9c:b5:2a:8d:89:60:fa:87:58:ee:4e:02:f3:17:92:d5: cb:a4:bf:47:ab:f4:f6:8b:a8:b0:83:fc:79:0d:8d:2a:5d:35: 1c:76:00:18:eb:83:28:b7:aa:70:14:da:82:8e:e3:a4:64:c5: f6:50:85:c0:4b:cc:ea:a7:2e:e5:23:d9:88:2d:a3:9c:79:43: e4:89:93:be:50:ff:57:a6:20:03:31:68:32:6c:36:88:2a:ac: 05:0b:17:76:d9:fa:ab:b0:de:35:0c:ae:ce:b5:aa:54:45:48: 3b:43:55:93:64:a4:3e:6b:18:f1:6f:11:e8:33:54:d9:34:5d: 48:b1:18:94:78:88:18:82:7d:af:a8:ac:ee:c7:0c:0f:b6:c7: 33:f9:c4:c8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUcOrmVl34rBmj9Jpo7KVxqeB+hMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA0MTAwODM0MzNaFw0yNzA0MDkwODM5MzNaMDMxMTAvBgNV BAMTKEExNkJFREQ2NUM3RUY0OEYyNTEwNDNDRkU4QUE5RUY0QzZEREI3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhsaYqx3lCw+gi29WtQXNflk2J daHgjXQrz4eiVO6lYnnbqUIhum0KTCOgTe5oroB9Njt0aCdCRmdCNB9miMgsJH9o fAk7hZ17QQVwotl8P+oz3Nls9D0kGXSOSM6ih8Pig58EevY3u5ns4h2b0Ty6cwn/ Pm5E+boZ5OE6OPveVFOSzk20xOtTZdLOYrxYKtD4ZjhY4XlC7pMkoh5rH48z3Pvt z4ghJhlNd5WG7RBYOU3RWAngvwuXbaPNu+1iPAKb6HYGBPXSsFsC1akImFVLPBqh LsTYOIFDUV0F2C3M+1JNQy2LiGNSV+rZw8Lq5+oWyoCsKGttMGY54D5CfTF1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUoWvt1lx+9I8lEEPP6Kqe9Mbdt1UwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTMy MzAyZTMxMzIzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmcUgDANBgkqhkiG9w0BAQsFAAOCAQEAJdGct34Bh/8QueR8FCiu Ytl0MQuAv3vkjUwLI+usHMn60HbHWlUBFHPItZV9himXzSG1/9maX11L0pe1imCl PEIRSj6EtBH4FHoYtmTbBUp734RjLPYKBlIjV87bYC6Fqcr1VHAMqyjXsNtY0FCc tSqNiWD6h1juTgLzF5LVy6S/R6v09ouosIP8eQ2NKl01HHYAGOuDKLeqcBTago7j pGTF9lCFwEvM6qcu5SPZiC2jnHlD5ImTvlD/V6YgAzFoMmw2iCqsBQsXdtn6q7De NQyuzrWqVEVIO0NVk2SkPmsY8W8R6DNU2TRdSLEYlHiIGIJ9r6is7scMD7bHM/nE yA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:29 2026 by rpki-client