$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32322d3232203d3e20313334373638.roa File: 3130332e3233362e37362e302f32322d3232203d3e20313334373638.roa (raw, json) Hash identifier: gJ9jvlC244kMuMFYa7r97Mgn6661kQ5LMrX3/d1fgVU= Subject key identifier: 65:2B:D2:CA:BF:9C:5D:3D:2F:E5:B9:AC:38:7E:D5:35:5F:DE:94:B6 Certificate issuer: /CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Certificate serial: 1E53CD305C5C5B39308D11F9C091C5F57C7D2EC6 Authority key identifier: C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32322d3232203d3e20313334373638.roa Signing time: Thu 09 Apr 2026 09:15:57 +0000 ROA not before: Thu 09 Apr 2026 09:10:57 +0000 ROA not after: Thu 08 Apr 2027 09:15:57 +0000 asID: 134768 IP address blocks: 103.236.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:53:cd:30:5c:5c:5b:39:30:8d:11:f9:c0:91:c5:f5:7c:7d:2e:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C38BD0765C4FF987B70BD4790E738FA576EAAA15 Validity Not Before: Apr 9 09:10:57 2026 GMT Not After : Apr 8 09:15:57 2027 GMT Subject: CN=652BD2CABF9C5D3D2FE5B9AC387ED5355FDE94B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:d2:df:64:8d:24:04:1d:fa:fe:fa:de:1f: 77:80:61:72:71:cb:15:60:cd:11:7f:46:b4:46:71: e3:aa:73:8b:fe:e4:3e:60:9e:64:31:a3:9e:66:d0: 64:b1:d9:a9:b6:65:4f:ee:2e:05:15:0e:5a:7b:f6: 34:27:9c:88:f1:3a:47:e5:74:f4:21:45:6d:91:b1: 70:ff:42:1d:72:ac:f3:cc:5e:46:6e:d3:a6:5c:56: 53:ea:53:99:17:a8:e3:45:db:9f:d4:69:01:4c:b2: 7f:dd:18:27:5e:3c:3f:50:2f:59:60:dd:a2:c9:8b: de:7d:f3:8b:e0:18:c6:c5:26:c7:a4:ab:7b:90:d4: 7e:2c:32:7b:90:8d:6b:9c:b5:76:76:05:75:bd:71: 8b:ae:67:93:fb:32:64:ab:f1:03:59:be:74:d3:c6: d6:4f:97:38:c4:bc:8a:65:1f:63:91:8e:6a:32:5a: ce:72:66:3b:e7:e6:12:37:cd:07:ce:74:1d:d3:6d: ff:0a:aa:da:57:64:e2:28:ca:29:7d:23:80:0f:37: 9e:d8:7d:c2:14:6e:5b:83:bf:64:04:05:6e:aa:98: 61:a4:f0:02:47:a7:f7:17:5e:9d:94:58:39:ed:83: b3:87:75:56:c6:ea:77:72:de:fe:ac:9c:1d:f0:95: 85:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:2B:D2:CA:BF:9C:5D:3D:2F:E5:B9:AC:38:7E:D5:35:5F:DE:94:B6 X509v3 Authority Key Identifier: keyid:C3:8B:D0:76:5C:4F:F9:87:B7:0B:D4:79:0E:73:8F:A5:76:EA:AA:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/C38BD0765C4FF987B70BD4790E738FA576EAAA15.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C38BD0765C4FF987B70BD4790E738FA576EAAA15.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217455107/0/3130332e3233362e37362e302f32322d3232203d3e20313334373638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.236.76.0/22 Signature Algorithm: sha256WithRSAEncryption 70:89:6f:74:ac:a3:f1:21:f9:76:78:73:6c:a1:d3:31:39:8e: 5a:8b:f9:fa:6c:21:b5:60:5b:9e:61:a9:c5:59:93:11:6a:cf: 7c:c4:f8:c1:13:6c:ce:52:43:1c:0c:22:9c:24:ce:79:ca:c9: b0:c2:1a:65:29:42:d7:5e:f6:f1:0f:e6:b9:32:b4:db:6a:92: 33:bb:83:0c:fb:55:42:92:a5:ca:32:d9:0b:ea:a4:48:8c:b2: 9c:d5:80:65:cc:c4:33:43:17:4a:c2:ac:e0:55:d0:5d:1d:a3: e0:5f:16:88:11:12:92:e2:58:55:b3:f1:1f:9e:2d:22:d9:94: 1c:36:2c:03:16:c9:82:16:50:c9:41:e2:00:df:91:12:9e:99: 9e:8c:cb:f6:88:27:47:62:80:57:02:b6:45:6d:1c:87:18:25: e3:c1:4c:98:c8:76:43:6c:39:8d:15:56:c7:bb:0c:26:4e:39: da:0c:a3:ee:49:a6:5d:59:67:06:b1:0f:76:ea:e9:3a:6d:15: 3f:94:b1:51:74:55:62:42:63:13:a9:a6:76:d9:71:a1:e9:99: df:20:10:1a:77:48:ac:c0:71:d0:71:f9:a8:9e:68:89:06:80: 9e:ac:2f:31:44:fa:da:bd:dc:f3:4c:c4:cf:99:7b:11:f8:46: 31:f5:77:08 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUHlPNMFxcWzkwjRH5wJHF9Xx9LsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3 NkVBQUExNTAeFw0yNjA0MDkwOTEwNTdaFw0yNzA0MDgwOTE1NTdaMDMxMTAvBgNV BAMTKDY1MkJEMkNBQkY5QzVEM0QyRkU1QjlBQzM4N0VENTM1NUZERTk0QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+9LfZI0kBB36/vreH3eAYXJx yxVgzRF/RrRGceOqc4v+5D5gnmQxo55m0GSx2am2ZU/uLgUVDlp79jQnnIjxOkfl dPQhRW2RsXD/Qh1yrPPMXkZu06ZcVlPqU5kXqONF25/UaQFMsn/dGCdePD9QL1lg 3aLJi95984vgGMbFJsekq3uQ1H4sMnuQjWuctXZ2BXW9cYuuZ5P7MmSr8QNZvnTT xtZPlzjEvIplH2ORjmoyWs5yZjvn5hI3zQfOdB3Tbf8KqtpXZOIoyil9I4APN57Y fcIUbluDv2QEBW6qmGGk8AJHp/cXXp2UWDntg7OHdVbG6ndy3v6snB3wlYVXAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUZSvSyr+cXT0v5bmsOH7VNV/elLYwHwYDVR0j BBgwFoAUw4vQdlxP+Ye3C9R5DnOPpXbqqhUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzQ1NTEwNy8wL0MzOEJEMDc2NUM0RkY5ODdCNzBCRDQ3OTBFNzM4 RkE1NzZFQUFBMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzM4QkQwNzY1QzRGRjk4N0I3MEJENDc5MEU3MzhGQTU3NkVBQUExNS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTc0NTUxMDcvMC8zMTMwMzMyZTMy MzMzNjJlMzczNjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNDM3MzYzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfsTDANBgkqhkiG9w0BAQsFAAOCAQEAcIlvdKyj8SH5dnhzbKHT MTmOWov5+mwhtWBbnmGpxVmTEWrPfMT4wRNszlJDHAwinCTOecrJsMIaZSlC1172 8Q/muTK022qSM7uDDPtVQpKlyjLZC+qkSIyynNWAZczEM0MXSsKs4FXQXR2j4F8W iBESkuJYVbPxH54tItmUHDYsAxbJghZQyUHiAN+REp6ZnozL9ognR2KAVwK2RW0c hxgl48FMmMh2Q2w5jRVWx7sMJk452gyj7kmmXVlnBrEPdurpOm0VP5SxUXRVYkJj E6mmdtlxoemZ3yAQGndIrMBx0HH5qJ5oiQaAnqwvMUT62r3c80zEz5l7EfhGMfV3 CA== -----END CERTIFICATE-----Generated at Mon Apr 13 13:51:37 2026 by rpki-client