$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137342e302f32332d3233203d3e20313331353036.roa File: 3130332e3135362e3137342e302f32332d3233203d3e20313331353036.roa (raw, json) Hash identifier: PYP5jUQdczOCSYcN+CjV3ROnD900kbAkh56NJYA1EoQ= Subject key identifier: 75:CE:FF:72:16:50:6E:1B:B3:0D:64:0F:3C:9C:22:72:40:B6:4A:B4 Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163 Certificate serial: 6009B7627D8E397CA3FA26D2D425369D8216C656 Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137342e302f32332d3233203d3e20313331353036.roa Signing time: Thu 09 Apr 2026 02:00:17 +0000 ROA not before: Thu 09 Apr 2026 01:55:17 +0000 ROA not after: Thu 08 Apr 2027 02:00:17 +0000 asID: 131506 IP address blocks: 103.156.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:09:b7:62:7d:8e:39:7c:a3:fa:26:d2:d4:25:36:9d:82:16:c6:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163 Validity Not Before: Apr 9 01:55:17 2026 GMT Not After : Apr 8 02:00:17 2027 GMT Subject: CN=75CEFF7216506E1BB30D640F3C9C227240B64AB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f6:88:84:e9:6d:ba:c8:b7:e8:2b:2c:52:f7: dd:8d:56:14:0b:f5:31:d0:7f:17:d1:5b:96:19:cd: c0:71:24:15:95:c5:f6:73:3a:17:62:d8:15:8c:9b: bc:a2:7c:9b:28:4c:08:d7:ca:4a:ea:6c:18:e0:ae: c6:44:cd:6a:4a:6d:99:a6:e1:d4:50:8c:9b:5e:ac: 0e:cc:91:d2:c5:1e:e8:8e:90:83:2e:ea:86:fb:33: eb:89:d5:99:a6:df:ef:47:fc:61:df:d7:a3:bd:07: 80:68:a6:ed:1b:20:bf:a4:03:95:dd:26:04:21:c1: 01:41:92:62:96:3f:3e:d4:29:f5:da:a1:26:78:47: 5e:b4:9d:c4:42:1e:19:1d:51:fe:c9:14:a5:97:2c: eb:42:07:29:2f:1e:23:ac:1b:e8:e5:2d:4d:3a:b8: 65:f3:f2:42:28:6b:b6:78:94:83:36:2f:7b:cc:f7: da:7e:a2:84:f3:20:3d:ae:a1:4b:c1:36:83:c8:d7: 71:3f:76:90:9c:35:76:34:45:e5:d1:38:56:98:93: bf:30:90:ba:13:9b:ab:c6:03:ae:57:53:93:5a:4e: e3:77:af:1e:c6:f9:7c:7f:16:89:b4:9b:87:a5:ee: 0c:21:d4:27:50:1c:76:c1:a9:b0:de:9e:ea:39:54: dd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:CE:FF:72:16:50:6E:1B:B3:0D:64:0F:3C:9C:22:72:40:B6:4A:B4 X509v3 Authority Key Identifier: keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/3130332e3135362e3137342e302f32332d3233203d3e20313331353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.156.174.0/23 Signature Algorithm: sha256WithRSAEncryption cc:72:99:aa:fa:ab:09:6a:f6:a8:cc:6a:d7:bf:4e:25:d2:97: 64:6f:4e:ce:dd:25:c4:59:a2:72:bb:93:d4:3a:0f:ea:46:6d: 38:f0:84:1e:12:80:81:2d:1b:b7:98:3e:89:f5:bf:ab:c2:c8: a2:f0:16:aa:e8:be:63:91:4c:1e:9f:d6:48:4f:93:eb:03:1d: a1:d7:90:39:e4:68:41:ad:f1:71:20:d6:db:51:d3:39:d0:02: 83:eb:a3:80:97:27:c3:e5:64:c4:88:64:f3:34:56:0c:ae:92: 21:ba:4d:62:8c:1a:c4:4d:cf:89:a6:32:a2:10:f9:e1:08:5d: 0e:59:70:7e:fe:bd:2e:11:9b:32:89:09:86:86:8b:58:cc:d6: b1:fd:3f:a4:06:6c:3e:c0:8c:89:84:92:fa:f1:6e:2a:be:6b: 46:16:be:cd:b5:2d:d6:f6:27:6e:09:3d:57:bc:6e:77:17:f3: 62:d8:fc:d5:48:48:68:a8:cd:1b:b3:0c:9d:68:6f:12:9f:3b: c8:9b:db:bc:55:15:be:51:d7:67:34:b6:88:c4:41:56:d3:a3: a6:0a:04:56:cb:cd:d9:3b:66:36:79:62:6b:2a:08:1b:6b:7a: cb:1a:1c:a9:9b:0c:4b:99:e7:25:b1:b9:02:a3:1f:57:a1:9d: 05:fd:c2:9b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUYAm3Yn2OOXyj+ibS1CU2nYIWxlYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0 RDZENTE2MzAeFw0yNjA0MDkwMTU1MTdaFw0yNzA0MDgwMjAwMTdaMDMxMTAvBgNV BAMTKDc1Q0VGRjcyMTY1MDZFMUJCMzBENjQwRjNDOUMyMjcyNDBCNjRBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM9oiE6W26yLfoKyxS992NVhQL 9THQfxfRW5YZzcBxJBWVxfZzOhdi2BWMm7yifJsoTAjXykrqbBjgrsZEzWpKbZmm 4dRQjJterA7MkdLFHuiOkIMu6ob7M+uJ1Zmm3+9H/GHf16O9B4Bopu0bIL+kA5Xd JgQhwQFBkmKWPz7UKfXaoSZ4R160ncRCHhkdUf7JFKWXLOtCBykvHiOsG+jlLU06 uGXz8kIoa7Z4lIM2L3vM99p+ooTzID2uoUvBNoPI13E/dpCcNXY0ReXROFaYk78w kLoTm6vGA65XU5NaTuN3rx7G+Xx/Fom0m4el7gwh1CdQHHbBqbDenuo5VN0DAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUdc7/chZQbhuzDWQPPJwickC2SrQwHwYDVR0j BBgwFoAU7q8h8h+VHf/OjrnPKW+Pkk1tUWMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQzNjE2MjU0Nzc0NDc3MC8wL0VFQUYyMUYyMUY5NTFERkZDRThFQjlDRjI5NkY4 RjkyNEQ2RDUxNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0RDZENTE2My5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk0NDM2MTYyNTQ3NzQ0NzcwLzAvMzEzMDMzMmUz MTM1MzYyZTMxMzczNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzMTM1MzAz Ni5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAWecrjANBgkqhkiG9w0BAQsFAAOCAQEAzHKZqvqrCWr2qMxq 179OJdKXZG9Ozt0lxFmicruT1DoP6kZtOPCEHhKAgS0bt5g+ifW/q8LIovAWqui+ Y5FMHp/WSE+T6wMdodeQOeRoQa3xcSDW21HTOdACg+ujgJcnw+VkxIhk8zRWDK6S IbpNYowaxE3PiaYyohD54QhdDllwfv69LhGbMokJhoaLWMzWsf0/pAZsPsCMiYSS +vFuKr5rRha+zbUt1vYnbgk9V7xudxfzYtj81UhIaKjNG7MMnWhvEp87yJvbvFUV vlHXZzS2iMRBVtOjpgoEVsvN2TtmNnliayoIG2t6yxocqZsMS5nnJbG5AqMfV6Gd Bf3Cmw== -----END CERTIFICATE-----Generated at Mon Apr 13 15:21:52 2026 by rpki-client