$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548484610/0/3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa File: 3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa (raw, json) Hash identifier: CFAHQAP8THI9wJ8BWhCV4cLNG+81bpwlbJskkyJTB6g= Subject key identifier: 93:B6:15:A8:48:0D:BF:2C:D3:5A:48:3A:A3:32:AF:A8:B8:87:39:6E Certificate issuer: /CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Certificate serial: 49B60282828B7A0DC2CC0CC1A59E8EEE5B1F1225 Authority key identifier: 49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa Signing time: Mon 20 Apr 2026 06:50:53 +0000 ROA not before: Mon 20 Apr 2026 06:45:53 +0000 ROA not after: Mon 19 Apr 2027 06:50:53 +0000 asID: 23650 IP address blocks: 103.107.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 03:45:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:b6:02:82:82:8b:7a:0d:c2:cc:0c:c1:a5:9e:8e:ee:5b:1f:12:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=495094CE8F43C5F12E7D7DE07B9F5E2740383D52 Validity Not Before: Apr 20 06:45:53 2026 GMT Not After : Apr 19 06:50:53 2027 GMT Subject: CN=93B615A8480DBF2CD35A483AA332AFA8B887396E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:da:31:a3:71:3c:b4:e5:e9:74:04:9f:c1: a9:f4:e1:7a:91:61:3c:d8:33:40:79:cf:c6:18:2d: e2:c3:d6:a9:ed:8b:24:d1:8d:c5:0f:54:d3:e6:d7: 42:89:56:9e:b8:21:16:b8:ae:d5:7a:7b:8d:49:a6: 3c:f9:5d:5d:87:08:f8:fa:63:9e:de:11:95:72:c6: f3:05:18:59:c7:8f:b9:92:fb:d3:9d:a3:08:09:b6: a0:01:a8:f2:75:ad:64:e8:20:5b:0e:f2:47:32:96: 13:a4:08:ba:4a:14:b8:0a:26:d5:a4:b2:70:f8:f4: 45:a6:25:56:fa:5d:76:56:5f:db:aa:0e:d1:eb:d6: e9:c1:67:b4:99:73:38:c2:04:69:bf:e0:01:3e:ab: 52:e0:d0:39:00:b1:77:08:3e:80:a5:ad:0d:b4:4f: d8:d8:9d:bd:34:68:73:15:bc:aa:7c:19:ff:1e:28: 44:0e:5e:ff:4a:d9:29:0b:48:dd:96:a1:eb:5f:19: 68:b5:0a:75:b6:25:aa:a6:4d:64:9c:1d:da:bc:f4: 40:1d:89:00:d9:22:15:0e:6b:da:a2:b2:f2:1c:90: cc:fb:44:b0:bc:f6:cb:75:e3:f4:60:68:26:1e:24: d3:37:cd:0d:24:ac:fd:f1:5f:2b:6a:e2:0d:e7:d5: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:B6:15:A8:48:0D:BF:2C:D3:5A:48:3A:A3:32:AF:A8:B8:87:39:6E X509v3 Authority Key Identifier: keyid:49:50:94:CE:8F:43:C5:F1:2E:7D:7D:E0:7B:9F:5E:27:40:38:3D:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/495094CE8F43C5F12E7D7DE07B9F5E2740383D52.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548484610/0/3130332e3130372e3138382e302f32322d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.107.188.0/22 Signature Algorithm: sha256WithRSAEncryption 15:5b:5a:cb:68:87:64:b0:c3:a9:f0:4c:56:4b:f5:99:67:9f: cf:1e:9c:a0:e4:60:c2:97:7c:58:b8:bb:5c:e9:c5:c4:a2:de: e7:a0:e7:a7:74:83:27:27:b3:41:ad:c8:98:82:a9:aa:7b:45: 52:86:c4:e7:fa:f6:84:fd:7f:2e:11:59:81:c8:cb:24:c7:21: 75:78:38:e3:8a:5d:bc:da:0b:a6:3c:3f:ef:c4:ab:b0:b2:9b: 13:34:31:b5:f6:7c:33:74:11:2b:58:fb:a5:a7:9b:9b:1b:9b: e3:e5:d7:92:5d:cc:13:42:0b:97:50:e9:ad:9d:33:63:2a:11: db:79:7f:18:5e:ed:40:05:16:b2:28:13:54:8f:3e:09:cc:c7: c4:95:80:88:64:66:8b:f2:82:06:c9:57:1d:27:0f:6d:20:88: 84:f7:d1:f1:96:e8:71:13:57:9c:ea:65:ad:bf:1c:62:b6:4f: 12:53:d9:b2:0b:52:bb:7c:39:bd:19:8f:bf:e7:d6:50:3f:41: 37:cd:0d:42:35:75:8c:bf:f3:c0:76:06:da:59:c3:eb:45:d1: 68:05:24:00:14:db:97:56:f3:46:ba:37:80:9a:c1:cb:af:bf: cd:4e:1c:6f:33:90:de:d3:39:7a:a9:47:dc:71:b7:61:a3:5e: 6a:8c:45:2a -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSbYCgoKLeg3CzAzBpZ6O7lsfEiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0 MDM4M0Q1MjAeFw0yNjA0MjAwNjQ1NTNaFw0yNzA0MTkwNjUwNTNaMDMxMTAvBgNV BAMTKDkzQjYxNUE4NDgwREJGMkNEMzVBNDgzQUEzMzJBRkE4Qjg4NzM5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/F9oxo3E8tOXpdASfwan04XqR YTzYM0B5z8YYLeLD1qntiyTRjcUPVNPm10KJVp64IRa4rtV6e41Jpjz5XV2HCPj6 Y57eEZVyxvMFGFnHj7mS+9OdowgJtqABqPJ1rWToIFsO8kcylhOkCLpKFLgKJtWk snD49EWmJVb6XXZWX9uqDtHr1unBZ7SZczjCBGm/4AE+q1Lg0DkAsXcIPoClrQ20 T9jYnb00aHMVvKp8Gf8eKEQOXv9K2SkLSN2WoetfGWi1CnW2JaqmTWScHdq89EAd iQDZIhUOa9qisvIckMz7RLC89st14/RgaCYeJNM3zQ0krP3xXytq4g3n1U0BAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUk7YVqEgNvyzTWkg6ozKvqLiHOW4wHwYDVR0j BBgwFoAUSVCUzo9DxfEufX3ge59eJ0A4PVIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODk5MzU0ODQ4NDYxMC8wLzQ5NTA5NENFOEY0M0M1RjEyRTdEN0RFMDdCOUY1 RTI3NDAzODNENTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDk1MDk0Q0U4RjQzQzVGMTJFN0Q3REUwN0I5RjVFMjc0MDM4M0Q1Mi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDg0ODQ2MTAvMC8zMTMwMzMyZTMx MzAzNzJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdrvDANBgkqhkiG9w0BAQsFAAOCAQEAFVtay2iHZLDDqfBMVkv1 mWefzx6coORgwpd8WLi7XOnFxKLe56Dnp3SDJyezQa3ImIKpqntFUobE5/r2hP1/ LhFZgcjLJMchdXg444pdvNoLpjw/78SrsLKbEzQxtfZ8M3QRK1j7paebmxub4+XX kl3ME0ILl1DprZ0zYyoR23l/GF7tQAUWsigTVI8+CczHxJWAiGRmi/KCBslXHScP bSCIhPfR8ZbocRNXnOplrb8cYrZPElPZsgtSu3w5vRmPv+fWUD9BN80NQjV1jL/z wHYG2lnD60XRaAUkABTbl1bzRro3gJrBy6+/zU4cbzOQ3tM5eqlH3HG3YaNeaoxF Kg== -----END CERTIFICATE-----Generated at Mon Apr 27 13:51:45 2026 by rpki-client