$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313532333230.roa File: 3130332e3136362e35322e302f32332d3234203d3e20313532333230.roa (raw, json) Hash identifier: 3TRbYHq703El7Neqe3loR720kcmC0cXg2mR3/oCz70A= Subject key identifier: C5:DF:EE:F2:77:66:0B:60:64:8B:38:DC:BC:AF:1F:44:10:57:64:37 Certificate issuer: /CN=9B5519650F0653145F5D42879890BE1251C8F463 Certificate serial: 05DF49E0761CEEE20B2C82B476A81D8ED9C1E192 Authority key identifier: 9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313532333230.roa Signing time: Tue 31 Mar 2026 14:07:49 +0000 ROA not before: Tue 31 Mar 2026 14:02:49 +0000 ROA not after: Tue 30 Mar 2027 14:07:49 +0000 asID: 152320 IP address blocks: 103.166.52.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 07 Apr 2026 03:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:df:49:e0:76:1c:ee:e2:0b:2c:82:b4:76:a8:1d:8e:d9:c1:e1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9B5519650F0653145F5D42879890BE1251C8F463 Validity Not Before: Mar 31 14:02:49 2026 GMT Not After : Mar 30 14:07:49 2027 GMT Subject: CN=C5DFEEF277660B60648B38DCBCAF1F4410576437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e8:56:0d:d1:bf:76:ff:2d:b4:de:69:d9:1f: f6:ba:e1:fa:8c:9c:31:a6:4b:13:ae:71:b9:7e:27: 2b:03:0c:bb:d3:04:27:3b:85:f4:75:18:88:e6:eb: 95:69:2d:33:58:85:4d:de:6d:71:a0:95:98:b5:03: a1:41:f9:74:6e:9d:02:16:55:55:51:3c:7d:bf:7b: 9e:07:df:41:6d:51:50:aa:65:78:a6:b5:a1:79:73: ea:1d:0d:fd:ad:26:b7:24:e8:47:d7:60:60:2a:b4: 78:98:90:43:3a:00:43:bd:c9:1e:c0:43:2f:9c:f1: 91:8c:01:92:58:40:08:de:bc:51:90:86:96:af:23: f1:18:ef:88:63:0f:f4:48:e3:57:5e:1b:13:49:50: 4e:03:21:2a:48:91:72:58:00:0b:fc:20:26:46:f6: 6f:87:dd:18:21:af:ce:35:8f:13:81:85:fe:be:31: 80:a3:88:34:44:71:74:19:b3:90:e1:47:30:49:99: 34:b4:cf:01:fa:18:2d:0e:fc:7d:5c:f4:7d:90:3f: e4:4f:ca:e7:23:6d:d3:51:1c:56:02:41:c0:5e:84: 80:d7:a4:1c:79:57:2a:df:6d:22:c5:c4:33:14:75: 79:0e:48:ef:6d:4a:62:24:ba:69:83:0b:cb:78:20: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:DF:EE:F2:77:66:0B:60:64:8B:38:DC:BC:AF:1F:44:10:57:64:37 X509v3 Authority Key Identifier: keyid:9B:55:19:65:0F:06:53:14:5F:5D:42:87:98:90:BE:12:51:C8:F4:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/9B5519650F0653145F5D42879890BE1251C8F463.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9B5519650F0653145F5D42879890BE1251C8F463.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091362986968219649/0/3130332e3136362e35322e302f32332d3234203d3e20313532333230.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.166.52.0/23 Signature Algorithm: sha256WithRSAEncryption 80:80:ee:9f:a1:32:52:ea:58:61:c9:c9:c2:97:e6:18:70:b9: f6:bb:ad:9b:3c:b7:b9:d8:04:94:f8:79:7a:64:62:e0:6f:3e: 6b:8c:50:b8:76:f3:81:eb:33:45:83:7c:2a:97:91:f3:56:fa: fb:77:c5:25:a2:ce:93:e4:a6:88:27:c8:98:d3:71:a8:41:62: 68:ce:07:cc:61:aa:b3:5d:e5:3f:00:50:ef:65:88:36:45:67: a5:6d:30:18:e0:57:3b:f1:4b:0b:c9:82:a7:d3:12:4e:80:0e: e6:34:a4:3b:c2:01:26:53:49:35:6f:53:11:33:50:88:50:6a: 5f:59:ad:ce:69:30:b3:58:7e:82:a9:9b:c7:6b:9c:e1:02:6a: 36:88:e0:25:5d:ed:35:89:73:10:10:c8:48:b5:85:8f:43:08: 67:0c:cb:e6:6b:0c:40:37:4d:34:9f:77:cd:ba:95:c5:8a:f4: c7:89:ff:d7:7c:d2:05:bd:af:d8:0d:4c:86:ff:c4:e4:0f:51: d2:d2:1e:a1:63:d7:8f:ad:2b:ba:4a:46:7a:83:88:39:e3:21: 5d:08:88:d3:f6:19:eb:b8:f1:82:60:30:56:5c:47:42:c4:e3: 05:2e:79:0c:35:fa:a9:2d:91:5f:e0:f9:c2:27:b0:4d:06:64: 99:23:a3:79 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBd9J4HYc7uILLIK0dqgdjtnB4ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUI1NTE5NjUwRjA2NTMxNDVGNUQ0Mjg3OTg5MEJFMTI1 MUM4RjQ2MzAeFw0yNjAzMzExNDAyNDlaFw0yNzAzMzAxNDA3NDlaMDMxMTAvBgNV BAMTKEM1REZFRUYyNzc2NjBCNjA2NDhCMzhEQ0JDQUYxRjQ0MTA1NzY0MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ6FYN0b92/y203mnZH/a64fqM nDGmSxOucbl+JysDDLvTBCc7hfR1GIjm65VpLTNYhU3ebXGglZi1A6FB+XRunQIW VVVRPH2/e54H30FtUVCqZXimtaF5c+odDf2tJrck6EfXYGAqtHiYkEM6AEO9yR7A Qy+c8ZGMAZJYQAjevFGQhpavI/EY74hjD/RI41deGxNJUE4DISpIkXJYAAv8ICZG 9m+H3Rghr841jxOBhf6+MYCjiDREcXQZs5DhRzBJmTS0zwH6GC0O/H1c9H2QP+RP yucjbdNRHFYCQcBehIDXpBx5VyrfbSLFxDMUdXkOSO9tSmIkummDC8t4ICF/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUxd/u8ndmC2BkizjcvK8fRBBXZDcwHwYDVR0j BBgwFoAUm1UZZQ8GUxRfXUKHmJC+ElHI9GMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTM2Mjk4Njk2ODIxOTY0OS8wLzlCNTUxOTY1MEYwNjUzMTQ1RjVENDI4Nzk4OTBC RTEyNTFDOEY0NjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUI1NTE5NjUwRjA2NTMxNDVGNUQ0Mjg3OTg5MEJFMTI1MUM4RjQ2My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTEzNjI5ODY5NjgyMTk2NDkvMC8zMTMwMzMyZTMx MzYzNjJlMzUzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMjMzMzIzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWemNDANBgkqhkiG9w0BAQsFAAOCAQEAgIDun6EyUupYYcnJwpfm GHC59rutmzy3udgElPh5emRi4G8+a4xQuHbzgeszRYN8KpeR81b6+3fFJaLOk+Sm iCfImNNxqEFiaM4HzGGqs13lPwBQ72WINkVnpW0wGOBXO/FLC8mCp9MSToAO5jSk O8IBJlNJNW9TETNQiFBqX1mtzmkws1h+gqmbx2uc4QJqNojgJV3tNYlzEBDISLWF j0MIZwzL5msMQDdNNJ93zbqVxYr0x4n/13zSBb2v2A1Mhv/E5A9R0tIeoWPXj60r ukpGeoOIOeMhXQiI0/YZ67jxgmAwVlxHQsTjBS55DDX6qS2RX+D5wiewTQZkmSOj eQ== -----END CERTIFICATE-----Generated at Mon Apr 6 12:40:45 2026 by rpki-client