$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32322d3232203d3e20313334373638.roa File: 3130332e3233362e36382e302f32322d3232203d3e20313334373638.roa (raw, json) Hash identifier: sN3HNrLlIe1pF12HRsnwPkq9GhOgaLOK0OFpqeNqDJM= Subject key identifier: D1:C5:0D:C3:74:31:E6:E3:FD:D1:56:46:FE:E6:D1:2B:78:1B:A4:57 Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 28891E9876A1FA92C6E22A7212E4A34D3F53A40C Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32322d3232203d3e20313334373638.roa Signing time: Thu 09 Apr 2026 09:15:58 +0000 ROA not before: Thu 09 Apr 2026 09:10:58 +0000 ROA not after: Thu 08 Apr 2027 09:15:58 +0000 asID: 134768 IP address blocks: 103.236.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:89:1e:98:76:a1:fa:92:c6:e2:2a:72:12:e4:a3:4d:3f:53:a4:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Apr 9 09:10:58 2026 GMT Not After : Apr 8 09:15:58 2027 GMT Subject: CN=D1C50DC37431E6E3FDD15646FEE6D12B781BA457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8d:6e:66:cd:7f:97:e9:d8:e4:7b:7b:a6:eb: 91:e8:32:78:d2:23:ea:3f:35:4a:e0:99:df:10:0e: 21:d3:46:36:ab:3c:de:b3:68:9f:b7:71:d4:32:5e: 06:a8:40:5f:f8:11:65:08:76:28:22:35:d8:50:6e: 4e:08:6f:bc:7e:94:88:32:7e:e0:e7:4d:ea:32:84: ae:20:53:a1:33:80:52:13:02:53:fd:f5:4b:43:99: e6:d3:39:1e:59:8b:6d:6b:99:c9:d1:0c:2d:5d:e5: bf:cd:c8:5b:e9:b5:be:56:ef:21:73:ec:1a:41:c0: 13:d9:8c:6a:58:06:f7:b3:8a:ee:44:e7:dc:63:08: c2:05:3c:d1:ea:e9:e0:d1:29:af:cd:6b:95:c3:df: ed:b7:cc:da:0d:80:c4:1f:44:e0:e1:57:8f:b9:9c: 76:51:41:a6:23:e5:c3:d7:a8:54:84:6d:26:40:cb: 7d:a2:ef:7d:6b:b4:a5:7f:8b:8d:fb:26:ef:fd:2c: 4b:0a:73:c3:de:ed:79:f1:14:50:d5:a9:af:02:d4: 90:7a:c8:a3:f0:04:56:56:45:bc:6f:66:1a:7b:7c: a1:d7:c8:fd:2c:6a:1c:53:25:92:e9:b1:d1:54:e2: 02:e9:79:dd:71:7b:28:85:7d:7e:a5:d9:87:a3:35: 50:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C5:0D:C3:74:31:E6:E3:FD:D1:56:46:FE:E6:D1:2B:78:1B:A4:57 X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e36382e302f32322d3232203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.68.0/22 Signature Algorithm: sha256WithRSAEncryption a4:b1:38:dc:30:10:c4:89:b2:d9:57:fe:ca:71:fd:8b:84:ba: 5f:4a:8c:00:3d:29:00:4e:16:06:da:e9:4b:47:73:98:5b:ed: ec:e1:40:60:fa:ad:ee:87:28:a9:a4:17:5a:a4:f4:9f:c7:37: 98:8d:98:d9:29:78:9d:96:de:f8:b3:d1:10:02:29:bc:a6:7b: fa:9b:5c:75:ca:89:bf:76:7c:3b:65:a2:71:f6:79:21:77:eb: 40:48:59:d2:1c:b9:4e:fa:55:c8:b4:a4:2c:dc:f0:29:39:64: 52:67:04:41:d6:7b:bc:e4:d3:01:84:d0:8c:29:32:d6:00:ca: 17:a8:49:65:fb:30:ea:fe:b5:7f:19:f2:ab:3f:82:d3:29:e7: e2:44:07:66:4e:af:89:4f:3e:3f:96:72:6f:50:2d:17:30:b3: 26:b7:83:4f:bc:de:ec:05:51:22:d4:b1:66:66:20:16:cf:5e: 46:f3:5f:2e:ca:46:6e:d6:65:69:25:0d:d9:23:3a:6c:12:95: ad:de:93:58:6f:3e:2f:9f:d9:4a:46:23:08:c6:70:29:e2:0e: 00:f9:d6:75:f5:19:15:7e:f3:d9:99:1c:dd:4a:53:d7:66:33: 57:d6:99:45:d0:90:2a:b7:31:35:db:27:97:3c:51:d5:03:37: 17:53:81:ed -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKIkemHah+pLG4ipyEuSjTT9TpAwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjA0MDkwOTEwNThaFw0yNzA0MDgwOTE1NThaMDMxMTAvBgNV BAMTKEQxQzUwREMzNzQzMUU2RTNGREQxNTY0NkZFRTZEMTJCNzgxQkE0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjW5mzX+X6djke3um65HoMnjS I+o/NUrgmd8QDiHTRjarPN6zaJ+3cdQyXgaoQF/4EWUIdigiNdhQbk4Ib7x+lIgy fuDnTeoyhK4gU6EzgFITAlP99UtDmebTOR5Zi21rmcnRDC1d5b/NyFvptb5W7yFz 7BpBwBPZjGpYBveziu5E59xjCMIFPNHq6eDRKa/Na5XD3+23zNoNgMQfRODhV4+5 nHZRQaYj5cPXqFSEbSZAy32i731rtKV/i437Ju/9LEsKc8Pe7XnxFFDVqa8C1JB6 yKPwBFZWRbxvZhp7fKHXyP0sahxTJZLpsdFU4gLped1xeyiFfX6l2YejNVAjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQU0cUNw3Qx5uP90VZG/ubRK3gbpFcwHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzYzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfsRDANBgkqhkiG9w0BAQsFAAOCAQEApLE43DAQxImy2Vf+ynH9 i4S6X0qMAD0pAE4WBtrpS0dzmFvt7OFAYPqt7ocoqaQXWqT0n8c3mI2Y2Sl4nZbe +LPREAIpvKZ7+ptcdcqJv3Z8O2WicfZ5IXfrQEhZ0hy5TvpVyLSkLNzwKTlkUmcE QdZ7vOTTAYTQjCky1gDKF6hJZfsw6v61fxnyqz+C0ynn4kQHZk6viU8+P5Zyb1At FzCzJreDT7ze7AVRItSxZmYgFs9eRvNfLspGbtZlaSUN2SM6bBKVrd6TWG8+L5/Z SkYjCMZwKeIOAPnWdfUZFX7z2Zkc3UpT12YzV9aZRdCQKrcxNdsnlzxR1QM3F1OB 7Q== -----END CERTIFICATE-----Generated at Mon Apr 13 13:51:37 2026 by rpki-client