$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3130332e33372e37322e302f32322d3234203d3e203233373234.roa File: 3130332e33372e37322e302f32322d3234203d3e203233373234.roa (raw, json) Hash identifier: rAiiLRlDaAu9yU4CiqwSOdTQCMfT/ce3UWfcOAnkSig= Subject key identifier: 66:7F:32:8B:6C:23:A0:AD:7E:07:05:EF:61:56:FC:F4:04:ED:24:97 Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 39FF41B7AC83D2153D436E64220F679FF985003C Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3130332e33372e37322e302f32322d3234203d3e203233373234.roa Signing time: Fri 10 Apr 2026 09:44:57 +0000 ROA not before: Fri 10 Apr 2026 09:39:57 +0000 ROA not after: Fri 09 Apr 2027 09:44:57 +0000 asID: 23724 IP address blocks: 103.37.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ff:41:b7:ac:83:d2:15:3d:43:6e:64:22:0f:67:9f:f9:85:00:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 10 09:39:57 2026 GMT Not After : Apr 9 09:44:57 2027 GMT Subject: CN=667F328B6C23A0AD7E0705EF6156FCF404ED2497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b4:4f:81:4b:9a:a8:07:cc:06:4b:16:6d:4c: 92:3b:39:57:b6:a3:79:44:c1:74:0b:61:47:ae:aa: 77:92:2e:a1:c5:c1:8c:74:9f:3e:d3:c1:40:de:e5: 87:db:07:8b:89:55:50:6e:c7:94:0e:01:3b:f4:cb: 56:bf:48:30:5b:24:e4:e3:d5:39:48:e8:d4:68:71: 25:d1:7c:4d:8c:7c:5a:42:07:03:8b:6d:49:e4:2c: 85:a0:62:a1:15:3c:e4:bc:c1:fd:fc:c4:59:b6:3a: 22:a1:cf:e3:b3:1d:cc:b6:50:a2:24:34:9f:bb:bb: 40:50:1e:33:0c:e9:33:18:fe:78:8a:ad:87:1c:dd: e2:7c:c5:93:21:f9:6b:01:28:20:01:dc:c5:83:c4: 9a:97:1f:c3:79:24:45:82:e1:b1:a0:1d:7d:bd:a1: 35:c6:da:65:cd:fe:21:6a:1b:52:47:3a:79:16:fc: 77:cd:3c:d0:12:10:be:13:f5:8b:4d:35:82:3c:1a: 49:a7:b2:c8:70:76:65:17:af:1b:e2:bc:34:2b:e7: bf:7d:74:19:ee:c4:9a:c5:91:a1:70:c7:08:35:0f: bf:28:bf:f8:50:19:a6:25:76:76:67:65:6b:d9:1d: 5a:ce:2d:61:8e:3c:99:21:0f:8c:ba:23:43:91:a1: 5a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:7F:32:8B:6C:23:A0:AD:7E:07:05:EF:61:56:FC:F4:04:ED:24:97 X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3130332e33372e37322e302f32322d3234203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.72.0/22 Signature Algorithm: sha256WithRSAEncryption 19:37:b9:10:37:b7:78:82:28:70:04:53:0d:7c:4a:3b:b4:74: a4:fa:7f:a8:8b:09:63:b6:74:47:18:dc:f6:27:d6:a5:4b:46: 50:49:dc:56:fb:63:ef:eb:0b:b2:0a:16:25:d8:55:a7:d0:c6: 50:04:0f:5d:67:43:7f:c0:96:24:14:11:1f:85:34:a2:66:33: af:72:be:82:7b:cd:64:bc:4e:3b:d0:b9:32:88:b2:a5:18:c5: bb:db:0d:4a:cc:36:fa:6b:45:75:16:8c:3f:98:3b:10:f7:59: 7e:b4:d7:a3:52:02:ee:6b:6f:c5:25:17:41:cd:63:9a:a3:68: ab:a0:2d:e0:2c:83:df:c5:8f:be:04:91:13:0b:9b:db:3e:58: 56:6c:e1:06:b8:17:18:18:3c:79:9d:2c:c6:d1:5a:70:10:83: 7f:38:65:24:cb:69:b4:01:6e:2a:25:f0:40:f2:97:54:c6:c5: 64:1f:7d:4e:94:56:9a:f4:4e:13:0f:37:24:9f:62:20:3b:82: 40:e2:05:86:c0:6e:21:c9:14:7a:98:e6:77:c0:da:ba:7a:bb: 0b:2c:36:96:92:46:b4:e7:ec:9c:47:00:ce:22:cf:9b:3d:3a: b1:2a:ac:2e:34:da:1a:ec:b1:ff:a5:61:31:de:9b:ca:29:14: 9d:d1:3f:33 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUOf9Bt6yD0hU9Q25kIg9nn/mFADwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTAwOTM5NTdaFw0yNzA0MDkwOTQ0NTdaMDMxMTAvBgNV BAMTKDY2N0YzMjhCNkMyM0EwQUQ3RTA3MDVFRjYxNTZGQ0Y0MDRFRDI0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtE+BS5qoB8wGSxZtTJI7OVe2 o3lEwXQLYUeuqneSLqHFwYx0nz7TwUDe5YfbB4uJVVBux5QOATv0y1a/SDBbJOTj 1TlI6NRocSXRfE2MfFpCBwOLbUnkLIWgYqEVPOS8wf38xFm2OiKhz+OzHcy2UKIk NJ+7u0BQHjMM6TMY/niKrYcc3eJ8xZMh+WsBKCAB3MWDxJqXH8N5JEWC4bGgHX29 oTXG2mXN/iFqG1JHOnkW/HfNPNASEL4T9YtNNYI8GkmnsshwdmUXrxvivDQr5799 dBnuxJrFkaFwxwg1D78ov/hQGaYldnZnZWvZHVrOLWGOPJkhD4y6I0ORoVorAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUZn8yi2wjoK1+BwXvYVb89ATtJJcwHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2LzAvMzEzMDMzMmUzMzM3 MmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmclSDANBgkqhkiG9w0BAQsFAAOCAQEAGTe5EDe3eIIocARTDXxKO7R0pPp/ qIsJY7Z0Rxjc9ifWpUtGUEncVvtj7+sLsgoWJdhVp9DGUAQPXWdDf8CWJBQRH4U0 omYzr3K+gnvNZLxOO9C5MoiypRjFu9sNSsw2+mtFdRaMP5g7EPdZfrTXo1IC7mtv xSUXQc1jmqNoq6At4CyD38WPvgSREwub2z5YVmzhBrgXGBg8eZ0sxtFacBCDfzhl JMtptAFuKiXwQPKXVMbFZB99TpRWmvROEw83JJ9iIDuCQOIFhsBuIckUepjmd8Da unq7Cyw2lpJGtOfsnEcAziLPmz06sSqsLjTaGuyx/6VhMd6byikUndE/Mw== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:37 2026 by rpki-client