$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32322d3232203d3e2030.roa File: 3130332e3231392e39322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: j74cm2QwHIqr+lIxHnrAgAdJm6Rll+5EH43OysbzN2M= Subject key identifier: 1B:24:94:1A:5F:C4:53:B8:4A:DF:3A:51:97:8A:B6:63:11:A0:38:B8 Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 709067DBED8F7B2EFAE8E9AADD092BF4BED07ECC Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32322d3232203d3e2030.roa Signing time: Fri 10 Apr 2026 05:58:05 +0000 ROA not before: Fri 10 Apr 2026 05:53:05 +0000 ROA not after: Fri 09 Apr 2027 05:58:05 +0000 asID: 0 IP address blocks: 103.219.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:90:67:db:ed:8f:7b:2e:fa:e8:e9:aa:dd:09:2b:f4:be:d0:7e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 05:53:05 2026 GMT Not After : Apr 9 05:58:05 2027 GMT Subject: CN=1B24941A5FC453B84ADF3A51978AB66311A038B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:a0:66:da:74:b0:a4:47:77:99:f0:30:28: 39:45:ec:1d:df:c1:a3:7b:f8:b2:f4:cf:40:29:51: 74:5b:16:d1:6e:37:00:7e:8e:da:b5:20:8c:c8:46: db:6e:d4:5b:f8:16:8f:93:05:da:e3:df:d3:14:a6: 8a:69:9d:10:99:9c:a8:4e:42:01:d9:cc:3a:58:41: 70:ab:f3:bd:04:4a:9b:69:e4:0f:73:b3:a1:cd:41: 91:bd:41:a6:04:19:e6:dd:fa:a4:46:cd:68:74:3d: a6:26:39:77:31:b4:ab:cb:f1:db:56:ac:96:93:f2: 1e:7f:09:68:e8:02:4b:78:c2:0d:2f:5c:e8:89:54: 44:2d:ad:17:e2:b4:0f:8d:e1:2f:33:bd:1b:6a:b3: 44:25:c4:7f:5a:99:9b:7a:fe:be:d7:2e:66:94:2d: e4:cb:58:c0:82:5a:41:b8:5f:64:6a:08:dc:e0:d5: 73:e1:70:29:56:e5:9a:57:df:8b:d1:71:f4:e0:f0: a4:5e:dd:79:12:9e:83:4a:ad:3d:0a:b5:20:4e:67: 70:68:a5:c8:9d:ca:24:48:37:1b:24:68:29:81:11: 9c:39:9d:a0:6c:d8:36:93:cb:3b:28:65:9d:69:56: 14:74:34:b0:2e:0a:62:af:87:20:8a:3f:f6:09:c0: a4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:24:94:1A:5F:C4:53:B8:4A:DF:3A:51:97:8A:B6:63:11:A0:38:B8 X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.92.0/22 Signature Algorithm: sha256WithRSAEncryption 4d:e6:a3:91:d5:14:39:92:09:42:36:b3:35:2e:c5:42:c1:03: 36:a8:d3:03:b0:b1:f9:55:75:96:69:4a:1b:ce:1c:47:4a:d5: 10:ba:ce:79:35:03:81:b5:05:f6:d2:aa:44:c5:b8:a5:50:e9: 81:99:78:19:b1:29:01:fb:20:b0:92:7d:9b:b4:e8:58:98:e7: b4:27:b2:f6:9c:2c:40:2f:1d:23:d5:4a:61:8c:86:d5:66:49: c1:aa:c7:59:da:5c:7f:5e:a1:49:09:33:ee:c5:b0:be:8f:2d: 03:28:bb:d0:63:ce:ab:e6:eb:93:57:dd:80:6a:7f:4b:2c:37: 99:16:78:83:89:4c:ec:5b:8b:04:0e:6f:91:4a:52:b5:76:b4: 24:61:c6:ae:a6:ae:7d:26:56:c0:9e:43:89:95:29:02:e9:02: 21:fe:a4:08:63:ae:52:04:56:fd:b6:e6:36:94:fb:74:85:f5: 32:51:77:25:20:fb:60:78:ad:b1:5b:47:70:fc:67:31:75:d8: ce:65:02:5d:93:b6:b6:64:6c:8b:8c:39:4f:ce:0c:d0:73:48: 36:8b:f4:fb:f7:f5:98:47:1d:24:de:d9:c7:f6:0a:b5:f5:22: 44:4d:96:3d:c1:85:66:ba:fc:56:59:c2:f4:8d:37:61:18:4b: 30:2e:5f:9b -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUcJBn2+2Pey766Omq3Qkr9L7QfswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwNTUzMDVaFw0yNzA0MDkwNTU4MDVaMDMxMTAvBgNV BAMTKDFCMjQ5NDFBNUZDNDUzQjg0QURGM0E1MTk3OEFCNjYzMTFBMDM4QjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrdKBm2nSwpEd3mfAwKDlF7B3f waN7+LL0z0ApUXRbFtFuNwB+jtq1IIzIRttu1Fv4Fo+TBdrj39MUpoppnRCZnKhO QgHZzDpYQXCr870ESptp5A9zs6HNQZG9QaYEGebd+qRGzWh0PaYmOXcxtKvL8dtW rJaT8h5/CWjoAkt4wg0vXOiJVEQtrRfitA+N4S8zvRtqs0QlxH9amZt6/r7XLmaU LeTLWMCCWkG4X2RqCNzg1XPhcClW5ZpX34vRcfTg8KRe3XkSnoNKrT0KtSBOZ3Bo pcidyiRINxskaCmBEZw5naBs2DaTyzsoZZ1pVhR0NLAuCmKvhyCKP/YJwKSfAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUGySUGl/EU7hK3zpRl4q2YxGgOLgwHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzEzMDMzMmUzMjMx MzkyZTM5MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfb XDANBgkqhkiG9w0BAQsFAAOCAQEATeajkdUUOZIJQjazNS7FQsEDNqjTA7Cx+VV1 lmlKG84cR0rVELrOeTUDgbUF9tKqRMW4pVDpgZl4GbEpAfsgsJJ9m7ToWJjntCey 9pwsQC8dI9VKYYyG1WZJwarHWdpcf16hSQkz7sWwvo8tAyi70GPOq+brk1fdgGp/ Syw3mRZ4g4lM7FuLBA5vkUpStXa0JGHGrqaufSZWwJ5DiZUpAukCIf6kCGOuUgRW /bbmNpT7dIX1MlF3JSD7YHitsVtHcPxnMXXYzmUCXZO2tmRsi4w5T84M0HNINov0 +/f1mEcdJN7Zx/YKtfUiRE2WPcGFZrr8VlnC9I03YRhLMC5fmw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:15 2026 by rpki-client