$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32322d3232203d3e20313334373638.roa File: 3130332e3233362e37322e302f32322d3232203d3e20313334373638.roa (raw, json) Hash identifier: lZTY+RjT9I2mnvGGe2e+RkDMPRVFvuGz/QpkMfot46Q= Subject key identifier: BB:EC:18:1E:96:CB:BB:C6:48:8E:68:59:C7:D3:90:93:74:3B:63:B1 Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 4209932CE4CFF882BD3DF2AD3022E164666D13CE Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32322d3232203d3e20313334373638.roa Signing time: Thu 09 Apr 2026 09:15:58 +0000 ROA not before: Thu 09 Apr 2026 09:10:58 +0000 ROA not after: Thu 08 Apr 2027 09:15:58 +0000 asID: 134768 IP address blocks: 103.236.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:09:93:2c:e4:cf:f8:82:bd:3d:f2:ad:30:22:e1:64:66:6d:13:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Apr 9 09:10:58 2026 GMT Not After : Apr 8 09:15:58 2027 GMT Subject: CN=BBEC181E96CBBBC6488E6859C7D39093743B63B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cf:24:55:99:56:d5:cc:99:ba:bb:b1:49:d0: dc:5e:ac:05:e1:ae:7d:b2:46:d0:18:8d:39:f2:c7: 16:b8:59:e3:51:25:33:29:5e:b9:09:7e:3c:ef:b6: 40:80:7d:17:75:61:8c:f4:48:06:0a:c1:a4:b0:52: ad:1d:79:28:72:5a:a8:89:bb:07:de:41:2d:69:79: 3d:e6:12:fc:9a:72:c9:1a:c0:e3:22:46:96:c2:9a: b3:5d:61:92:35:04:aa:44:e6:31:14:a9:11:d6:ad: c6:8c:e8:6a:10:cc:cd:70:09:d3:1f:a1:2c:22:1b: ea:03:d7:e7:7a:7b:d8:2d:97:c6:5b:e4:f9:b5:8c: 63:34:6e:a3:f5:d3:32:c7:41:f8:f8:c8:3f:ef:08: fe:0f:ee:5f:b9:a8:2f:ac:73:32:11:e9:50:09:2f: e6:28:b3:a3:de:fb:82:45:0f:dc:fb:91:bf:f1:81: 7d:8f:c8:61:d5:ca:67:b7:40:62:2d:d5:0c:03:c3: ec:79:f6:6c:71:6b:cf:3d:8c:b8:0c:53:d2:f9:2c: e0:23:10:42:ec:b7:60:49:9c:81:5f:6c:2e:ae:1d: f4:c1:8a:f0:a0:82:1a:d9:36:78:69:db:16:e5:95: ec:37:ba:b6:cc:be:fc:a4:91:7f:87:af:f1:86:26: 02:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:EC:18:1E:96:CB:BB:C6:48:8E:68:59:C7:D3:90:93:74:3B:63:B1 X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37322e302f32322d3232203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.72.0/22 Signature Algorithm: sha256WithRSAEncryption 02:f7:9e:6b:0e:fc:02:f6:9d:2b:1a:ef:23:53:66:3e:c6:e2: e9:44:24:b0:2a:e8:7f:d7:9d:80:47:e4:9e:f2:48:83:cc:3b: e3:74:f4:ff:e5:8f:24:9a:a5:f5:d8:17:b9:5c:8b:45:32:21: 4d:f4:5b:e0:6a:2d:b0:58:0a:ac:8b:e6:f3:78:9e:ad:27:bf: 2f:e7:4e:7b:3a:d3:36:b6:b7:b8:2b:72:ca:f0:87:41:9e:6e: 8e:a0:9e:9d:4f:24:65:b5:ac:02:ce:13:07:1b:fe:22:2f:8e: 55:21:db:c0:0f:14:f6:96:7a:4e:45:63:62:df:6f:3a:b8:4e: aa:6d:ed:7b:02:7d:56:bc:d2:c4:8d:67:be:a9:fe:c5:1c:7c: 5e:6c:d8:e8:ce:3a:7f:74:72:8b:6a:4c:a3:e6:43:95:e0:64: cc:a8:80:ac:22:91:a0:11:3d:d2:29:d4:b1:cc:4d:e0:b8:ef: bf:46:88:93:b0:df:68:fe:89:3e:46:dc:a3:a3:92:27:82:c0: ad:6e:16:52:18:f3:61:b2:89:7b:08:8a:93:25:ff:21:37:9b: 5b:c3:fb:d3:9f:fb:06:5c:b1:1c:f8:61:e8:cf:4d:cf:3c:b2: 27:74:ca:a9:e3:77:e1:7a:ab:33:48:c3:e9:56:54:ae:4e:c7: 07:eb:b8:83 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQgmTLOTP+IK9PfKtMCLhZGZtE84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjA0MDkwOTEwNThaFw0yNzA0MDgwOTE1NThaMDMxMTAvBgNV BAMTKEJCRUMxODFFOTZDQkJCQzY0ODhFNjg1OUM3RDM5MDkzNzQzQjYzQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzyRVmVbVzJm6u7FJ0NxerAXh rn2yRtAYjTnyxxa4WeNRJTMpXrkJfjzvtkCAfRd1YYz0SAYKwaSwUq0deShyWqiJ uwfeQS1peT3mEvyacskawOMiRpbCmrNdYZI1BKpE5jEUqRHWrcaM6GoQzM1wCdMf oSwiG+oD1+d6e9gtl8Zb5Pm1jGM0bqP10zLHQfj4yD/vCP4P7l+5qC+sczIR6VAJ L+Yos6Pe+4JFD9z7kb/xgX2PyGHVyme3QGIt1QwDw+x59mxxa889jLgMU9L5LOAj EELst2BJnIFfbC6uHfTBivCgghrZNnhp2xbllew3urbMvvykkX+Hr/GGJgLpAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUu+wYHpbLu8ZIjmhZx9OQk3Q7Y7EwHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfsSDANBgkqhkiG9w0BAQsFAAOCAQEAAveeaw78AvadKxrvI1Nm Psbi6UQksCrof9edgEfknvJIg8w743T0/+WPJJql9dgXuVyLRTIhTfRb4GotsFgK rIvm83ierSe/L+dOezrTNra3uCtyyvCHQZ5ujqCenU8kZbWsAs4TBxv+Ii+OVSHb wA8U9pZ6TkVjYt9vOrhOqm3tewJ9VrzSxI1nvqn+xRx8XmzY6M46f3Ryi2pMo+ZD leBkzKiArCKRoBE90inUscxN4Ljvv0aIk7DfaP6JPkbco6OSJ4LArW4WUhjzYbKJ ewiKkyX/ITebW8P705/7BlyxHPhh6M9NzzyyJ3TKqeN34XqrM0jD6VZUrk7HB+u4 gw== -----END CERTIFICATE-----Generated at Mon Apr 13 13:51:31 2026 by rpki-client