$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39362e302f32322d3232203d3e2030.roa File: 3130332e3231392e39362e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: ECzMsRo2+VtyKHyE+R1CJStSfXL53TCmBxgmXwH/WmI= Subject key identifier: 39:7B:07:A8:00:5C:5B:E2:F8:BF:8F:C8:23:52:65:28:78:06:01:B2 Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 1726C57F7DAB443E1DDAE54CFAEDF065334A5286 Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39362e302f32322d3232203d3e2030.roa Signing time: Fri 10 Apr 2026 05:58:05 +0000 ROA not before: Fri 10 Apr 2026 05:53:05 +0000 ROA not after: Fri 09 Apr 2027 05:58:05 +0000 asID: 0 IP address blocks: 103.219.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:26:c5:7f:7d:ab:44:3e:1d:da:e5:4c:fa:ed:f0:65:33:4a:52:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 05:53:05 2026 GMT Not After : Apr 9 05:58:05 2027 GMT Subject: CN=397B07A8005C5BE2F8BF8FC823526528780601B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:79:d4:4c:a1:b9:85:42:fe:e0:7b:46:80: e2:91:32:fa:86:fa:b8:e0:0b:6c:46:4d:57:ab:80: 58:a5:6f:a9:f4:2b:e8:14:aa:03:fe:f6:88:19:4d: e3:69:b1:cd:0b:e7:1e:96:41:22:72:cb:aa:94:83: 23:1b:ca:52:b8:25:75:e4:e6:af:43:15:7f:13:f0: ef:3d:cf:e3:92:a2:9f:55:c9:84:f7:15:48:16:e1: f4:f9:4b:e3:ed:24:99:e0:24:e9:08:4d:00:54:ae: 70:17:82:2c:9b:85:77:94:9a:83:a9:68:42:3e:09: 66:b9:18:b2:28:e8:b4:e2:84:f6:b1:9f:22:79:28: bb:e9:fc:b6:78:96:0c:7e:57:3c:cd:7b:28:f9:ab: 40:93:8c:f0:e6:97:99:ed:51:10:25:e2:41:f1:e2: 24:ce:87:ed:d2:a7:9c:64:13:ca:0e:67:c5:01:10: fa:a7:b0:a1:4f:b6:c5:f7:ec:49:2a:d2:6e:f5:e5: fc:6b:e8:8b:48:08:49:95:86:71:40:dd:4d:b8:1a: 52:14:8d:0e:48:50:51:1d:4a:92:68:d7:1a:77:87: c2:cd:16:6c:c7:18:c0:3e:cd:15:58:13:0b:60:25: 43:40:36:d8:2c:f8:9f:b0:d9:47:d0:5f:7a:9a:97: 56:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7B:07:A8:00:5C:5B:E2:F8:BF:8F:C8:23:52:65:28:78:06:01:B2 X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e3231392e39362e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.96.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:63:92:4b:35:ce:66:83:41:d4:b6:35:41:9b:6f:ed:e2:98: ca:4e:14:32:36:9f:72:c4:77:83:5d:2a:2e:1e:11:8a:76:94: d1:31:9e:f9:84:db:ef:40:51:a7:82:12:34:f9:01:17:50:d0: 15:f2:6d:ce:ab:b9:c6:a1:76:1e:62:12:85:95:01:8c:eb:0c: a3:ce:d2:85:e2:1f:a4:6e:39:af:dd:b1:76:4f:0f:ca:7d:14: 8e:e4:78:c6:ca:5a:60:9e:30:84:68:bb:20:4c:26:aa:fa:0d: fb:29:7f:57:0e:dd:81:73:5a:7a:29:8a:75:ac:bc:47:78:d6: 08:61:fe:9b:cc:4c:f3:8a:62:ce:68:e9:94:02:b2:c6:2e:97: 9c:01:ef:48:ec:62:f8:82:fc:7e:d2:be:b8:92:60:6b:da:33: 4f:80:1f:8b:11:08:3f:38:c9:71:90:78:5a:45:ed:93:a4:e6: b8:1c:be:c4:0e:53:35:e7:e2:cc:db:da:29:c8:29:a5:a7:be: ed:59:84:7e:71:8b:4a:55:c5:3c:c6:b5:d8:d8:3b:1f:1f:3c: 7f:2f:3a:ba:c1:da:93:5c:e7:72:cd:9a:9b:82:7f:83:0f:40: b1:1b:67:58:bc:13:49:80:6f:2c:fb:64:4c:44:b8:0a:ae:84: f6:3f:c6:5f -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUFybFf32rRD4d2uVM+u3wZTNKUoYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwNTUzMDVaFw0yNzA0MDkwNTU4MDVaMDMxMTAvBgNV BAMTKDM5N0IwN0E4MDA1QzVCRTJGOEJGOEZDODIzNTI2NTI4NzgwNjAxQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClv3nUTKG5hUL+4HtGgOKRMvqG +rjgC2xGTVergFilb6n0K+gUqgP+9ogZTeNpsc0L5x6WQSJyy6qUgyMbylK4JXXk 5q9DFX8T8O89z+OSop9VyYT3FUgW4fT5S+PtJJngJOkITQBUrnAXgiybhXeUmoOp aEI+CWa5GLIo6LTihPaxnyJ5KLvp/LZ4lgx+VzzNeyj5q0CTjPDml5ntURAl4kHx 4iTOh+3Sp5xkE8oOZ8UBEPqnsKFPtsX37Ekq0m715fxr6ItICEmVhnFA3U24GlIU jQ5IUFEdSpJo1xp3h8LNFmzHGMA+zRVYEwtgJUNANtgs+J+w2UfQX3qal1ahAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUOXsHqABcW+L4v4/II1JlKHgGAbIwHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzEzMDMzMmUzMjMx MzkyZTM5MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmfb YDANBgkqhkiG9w0BAQsFAAOCAQEAK2OSSzXOZoNB1LY1QZtv7eKYyk4UMjafcsR3 g10qLh4RinaU0TGe+YTb70BRp4ISNPkBF1DQFfJtzqu5xqF2HmIShZUBjOsMo87S heIfpG45r92xdk8Pyn0UjuR4xspaYJ4whGi7IEwmqvoN+yl/Vw7dgXNaeimKday8 R3jWCGH+m8xM84pizmjplAKyxi6XnAHvSOxi+IL8ftK+uJJga9ozT4AfixEIPzjJ cZB4WkXtk6TmuBy+xA5TNefizNvaKcgppae+7VmEfnGLSlXFPMa12Ng7Hx88fy86 usHak1zncs2am4J/gw9AsRtnWLwTSYBvLPtkTES4Cq6E9j/GXw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:19 2026 by rpki-client