$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3130332e33372e37322e302f32322d3234203d3e2039383038.roa File: 3130332e33372e37322e302f32322d3234203d3e2039383038.roa (raw, json) Hash identifier: U7inuEUOrUpWs6efo5tQkf56iYTNB9gC3+th4vi7A0E= Subject key identifier: 86:C3:93:10:89:2E:40:7D:1E:4F:32:08:48:CB:0B:DF:94:00:4A:CE Certificate issuer: /CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Certificate serial: 074F3EB31237B0D4C6017001A8C662E4202B5EFF Authority key identifier: D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3130332e33372e37322e302f32322d3234203d3e2039383038.roa Signing time: Fri 10 Apr 2026 09:44:58 +0000 ROA not before: Fri 10 Apr 2026 09:39:58 +0000 ROA not after: Fri 09 Apr 2027 09:44:58 +0000 asID: 9808 IP address blocks: 103.37.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4f:3e:b3:12:37:b0:d4:c6:01:70:01:a8:c6:62:e4:20:2b:5e:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6805DB309057612CC9272CB2C85BA6CB0D389E5 Validity Not Before: Apr 10 09:39:58 2026 GMT Not After : Apr 9 09:44:58 2027 GMT Subject: CN=86C39310892E407D1E4F320848CB0BDF94004ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:bb:a6:26:00:a7:bd:f4:43:5f:0e:97:7f: 6c:f0:0c:34:f3:59:94:71:26:f3:17:30:cf:1c:cd: 93:a0:23:97:87:d6:24:cb:e0:6b:2a:40:67:a2:80: 0e:b5:82:17:07:20:41:1f:0d:f1:90:95:c1:fe:4b: b1:98:b1:24:e0:d9:c3:0f:19:f1:99:0f:0c:cc:2f: 8f:0e:39:a7:84:ba:f5:67:41:67:e4:13:57:e4:90: 83:f4:1e:92:06:7f:03:fe:93:79:0f:e3:5b:1b:1a: 87:49:81:0b:28:11:49:19:7c:2f:f0:56:0e:fd:e3: 2e:a0:d2:e8:21:a6:ca:89:68:33:5f:08:f2:84:48: 40:70:68:57:32:1c:ec:b4:bb:1f:8e:c2:33:ed:80: 43:78:02:93:c9:dc:e1:2b:e5:e8:cc:98:9b:51:d8: 62:73:b0:9b:a8:e9:f6:4c:f4:d4:5e:33:ce:1a:e5: b0:a2:7a:c9:89:c8:34:35:41:49:a3:c7:d0:db:60: 77:4f:ed:f0:c1:20:67:5b:53:8b:99:e5:6d:8e:06: f4:1c:ca:b0:2c:87:8e:c8:36:35:27:3f:a3:00:31: cf:1d:52:46:5e:39:f8:26:41:97:39:c5:0d:89:5e: 68:78:9e:95:ec:4a:60:f9:84:49:58:fc:79:2f:35: 29:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C3:93:10:89:2E:40:7D:1E:4F:32:08:48:CB:0B:DF:94:00:4A:CE X509v3 Authority Key Identifier: keyid:D6:80:5D:B3:09:05:76:12:CC:92:72:CB:2C:85:BA:6C:B0:D3:89:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/D6805DB309057612CC9272CB2C85BA6CB0D389E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D6805DB309057612CC9272CB2C85BA6CB0D389E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1068363599790997506/0/3130332e33372e37322e302f32322d3234203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.72.0/22 Signature Algorithm: sha256WithRSAEncryption 05:f0:d5:fd:03:52:1a:24:83:4e:4e:23:d9:41:8a:15:44:91: ce:00:b6:c7:f7:4c:b7:63:3f:16:e3:7a:ae:9c:32:95:bf:6d: 91:3f:d9:fa:2b:ba:5c:d0:ff:bd:eb:6f:df:88:ca:aa:a4:b4: 40:53:7e:3b:eb:2a:b0:db:b8:e0:b3:f5:82:c0:8e:ff:b6:47: 27:f4:82:0c:03:de:2a:f3:ab:f6:04:a8:65:89:3a:7a:d8:a7: 01:cb:97:a5:75:0a:42:09:21:2d:77:83:ea:ee:ce:6b:63:dd: fc:c9:f1:41:ac:b9:6c:e1:46:5c:ff:3f:f5:14:15:7d:b8:1e: 85:27:32:25:0c:ea:4d:a0:c4:de:96:5f:0f:b8:e6:ab:d6:c7: ce:15:c2:2c:93:81:ec:f9:95:bc:ec:9b:31:38:8f:d4:d1:83: 2c:f8:be:3b:df:5c:8b:22:c0:a9:64:b8:da:11:5c:ef:05:9b: 71:5f:45:2e:e0:31:2e:cb:2b:59:56:13:e4:44:a8:b8:b9:e0: 32:84:f2:24:e3:b9:77:6a:6c:e4:64:2b:6b:76:8c:1c:fd:0c: 58:a3:8e:ff:7a:9f:69:45:7a:f2:02:ae:2c:14:e1:43:f0:2c: 72:9b:61:b5:7e:ea:7d:29:79:b3:6a:56:67:69:1e:cf:a3:00: 1c:b2:22:14 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUB08+sxI3sNTGAXABqMZi5CArXv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNC MEQzODlFNTAeFw0yNjA0MTAwOTM5NThaFw0yNzA0MDkwOTQ0NThaMDMxMTAvBgNV BAMTKDg2QzM5MzEwODkyRTQwN0QxRTRGMzIwODQ4Q0IwQkRGOTQwMDRBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCus7umJgCnvfRDXw6Xf2zwDDTz WZRxJvMXMM8czZOgI5eH1iTL4GsqQGeigA61ghcHIEEfDfGQlcH+S7GYsSTg2cMP GfGZDwzML48OOaeEuvVnQWfkE1fkkIP0HpIGfwP+k3kP41sbGodJgQsoEUkZfC/w Vg794y6g0ughpsqJaDNfCPKESEBwaFcyHOy0ux+OwjPtgEN4ApPJ3OEr5ejMmJtR 2GJzsJuo6fZM9NReM84a5bCiesmJyDQ1QUmjx9DbYHdP7fDBIGdbU4uZ5W2OBvQc yrAsh47INjUnP6MAMc8dUkZeOfgmQZc5xQ2JXmh4npXsSmD5hElY/HkvNSl1AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUhsOTEIkuQH0eTzIISMsL35QASs4wHwYDVR0j BBgwFoAU1oBdswkFdhLMknLLLIW6bLDTieUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 ODM2MzU5OTc5MDk5NzUwNi8wL0Q2ODA1REIzMDkwNTc2MTJDQzkyNzJDQjJDODVC QTZDQjBEMzg5RTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDY4MDVEQjMwOTA1NzYxMkNDOTI3MkNCMkM4NUJBNkNCMEQzODlFNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY4MzYzNTk5NzkwOTk3NTA2LzAvMzEzMDMzMmUzMzM3 MmUzNzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnJUgwDQYJKoZIhvcNAQELBQADggEBAAXw1f0DUhokg05OI9lBihVEkc4Atsf3 TLdjPxbjeq6cMpW/bZE/2forulzQ/73rb9+IyqqktEBTfjvrKrDbuOCz9YLAjv+2 Ryf0ggwD3irzq/YEqGWJOnrYpwHLl6V1CkIJIS13g+ruzmtj3fzJ8UGsuWzhRlz/ P/UUFX24HoUnMiUM6k2gxN6WXw+45qvWx84VwiyTgez5lbzsmzE4j9TRgyz4vjvf XIsiwKlkuNoRXO8Fm3FfRS7gMS7LK1lWE+REqLi54DKE8iTjuXdqbORkK2t2jBz9 DFijjv96n2lFevICriwU4UPwLHKbYbV+6n0pebNqVmdpHs+jAByyIhQ= -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:38 2026 by rpki-client