$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa File: 3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa (raw, json) Hash identifier: SpRHV7V4pnGkU6gDkXhrpXngWaTJMrmqk9q6h2tNamo= Subject key identifier: A5:3A:EF:C6:70:A0:2D:70:86:FE:9F:B9:0E:82:18:70:33:67:3F:8D Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 62E863DDFA3AB47C658FF38EBBBB76107A836E30 Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa Signing time: Fri 10 Apr 2026 02:21:09 +0000 ROA not before: Fri 10 Apr 2026 02:16:09 +0000 ROA not after: Fri 09 Apr 2027 02:21:09 +0000 asID: 135061 IP address blocks: 103.95.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e8:63:dd:fa:3a:b4:7c:65:8f:f3:8e:bb:bb:76:10:7a:83:6e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 02:16:09 2026 GMT Not After : Apr 9 02:21:09 2027 GMT Subject: CN=A53AEFC670A02D7086FE9FB90E82187033673F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:83:fb:d8:a6:64:8d:a7:7d:eb:23:00:3c:12: 50:92:4f:db:42:f4:f9:d6:ea:31:49:3d:ac:29:91: 58:25:cb:4c:8b:37:93:c5:37:1f:83:f5:54:7e:f0: 0a:30:46:a7:2d:8a:81:99:c4:c1:0f:4f:af:82:b1: bb:37:34:7a:e2:10:e9:db:49:14:c0:ad:2f:ab:0b: a2:45:75:28:26:63:bb:9b:a8:c2:bd:17:eb:55:94: b9:31:28:56:0c:29:8a:56:93:70:5e:7c:00:39:43: 0f:4e:da:04:cd:aa:cc:e2:95:bb:93:54:c9:f0:ee: af:d6:46:c2:65:1f:15:08:91:03:49:fc:10:e2:2d: 1e:bc:cb:bc:2c:fc:e0:a1:45:50:b4:98:79:aa:cf: d4:0b:30:7d:6d:b1:0f:80:04:d4:56:f5:d8:70:e5: 80:d5:90:e2:02:04:2f:48:e9:f4:ee:78:17:6b:d1: f3:c0:66:30:65:47:6d:de:3e:6f:b3:49:6e:d6:b4: c4:8d:ea:b0:e5:68:99:be:af:fd:12:35:ed:62:c7: 65:8b:dc:58:5f:f1:d5:42:a5:47:88:f1:86:4d:2a: 61:40:4a:c3:0e:8b:61:cc:94:f5:a3:9e:4d:46:72: 8b:d4:a2:61:02:a0:80:50:27:42:72:43:80:59:6b: 22:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:3A:EF:C6:70:A0:2D:70:86:FE:9F:B9:0E:82:18:70:33:67:3F:8D X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235322e302f32342d3234203d3e20313335303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.252.0/24 Signature Algorithm: sha256WithRSAEncryption 9c:36:03:b8:8e:ef:c6:95:35:e5:68:41:be:26:9e:41:24:60: 2f:56:c8:36:82:2d:ca:8f:59:ef:fa:0e:65:17:ae:f9:23:90: 10:17:07:0d:cd:b3:1f:e7:7d:23:00:25:d4:2d:85:46:82:c4: c4:a4:ee:36:a1:84:72:78:9d:b2:f5:19:5d:ac:f3:be:bb:79: 28:b9:c7:d2:9e:a2:42:4f:6d:2f:91:90:fa:36:20:68:9f:80: a8:4c:fc:05:49:a4:8d:e0:a3:e5:35:38:b4:2a:cf:1e:34:2b: 9e:f0:6a:78:b8:dc:f9:ea:3b:aa:2f:8a:ed:72:f0:bd:7a:13: 1f:a9:91:95:5f:cc:14:fc:d3:64:98:e7:31:e9:1c:14:3b:5e: 71:04:44:40:1b:f1:93:ad:54:2a:44:e6:2a:fa:e3:ce:58:71: 8d:96:88:63:d5:08:92:bd:4a:98:d3:3a:63:70:fc:25:20:4e: 59:88:b7:01:e7:e2:28:85:ac:a4:b6:9e:00:73:24:cf:38:c7: 22:1f:44:a5:01:d1:3d:46:33:ab:bf:f3:d4:79:ee:0a:73:ae: e4:14:b6:65:0d:a7:54:df:1b:16:f6:1a:d4:2c:4b:8f:1a:8e: 9c:67:57:70:1f:d6:12:bc:73:29:32:d8:40:08:37:fd:83:a9: 32:b9:4c:2f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUYuhj3fo6tHxlj/OOu7t2EHqDbjAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwMjE2MDlaFw0yNzA0MDkwMjIxMDlaMDMxMTAvBgNV BAMTKEE1M0FFRkM2NzBBMDJENzA4NkZFOUZCOTBFODIxODcwMzM2NzNGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZg/vYpmSNp33rIwA8ElCST9tC 9PnW6jFJPawpkVgly0yLN5PFNx+D9VR+8AowRqctioGZxMEPT6+Csbs3NHriEOnb SRTArS+rC6JFdSgmY7ubqMK9F+tVlLkxKFYMKYpWk3BefAA5Qw9O2gTNqszilbuT VMnw7q/WRsJlHxUIkQNJ/BDiLR68y7ws/OChRVC0mHmqz9QLMH1tsQ+ABNRW9dhw 5YDVkOICBC9I6fTueBdr0fPAZjBlR23ePm+zSW7WtMSN6rDlaJm+r/0SNe1ix2WL 3Fhf8dVCpUeI8YZNKmFASsMOi2HMlPWjnk1GcovUomECoIBQJ0JyQ4BZayK/AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUpTrvxnCgLXCG/p+5DoIYcDNnP40wHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc4NTgxNzkvMC8zMTMwMzMyZTM5 MzUyZTMyMzUzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMwMzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGdf/DANBgkqhkiG9w0BAQsFAAOCAQEAnDYDuI7vxpU15WhBviae QSRgL1bINoItyo9Z7/oOZReu+SOQEBcHDc2zH+d9IwAl1C2FRoLExKTuNqGEcnid svUZXazzvrt5KLnH0p6iQk9tL5GQ+jYgaJ+AqEz8BUmkjeCj5TU4tCrPHjQrnvBq eLjc+eo7qi+K7XLwvXoTH6mRlV/MFPzTZJjnMekcFDtecQREQBvxk61UKkTmKvrj zlhxjZaIY9UIkr1KmNM6Y3D8JSBOWYi3AefiKIWspLaeAHMkzzjHIh9EpQHRPUYz q7/z1HnuCnOu5BS2ZQ2nVN8bFvYa1CxLjxqOnGdXcB/WErxzKTLYQAg3/YOpMrlM Lw== -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:30 2026 by rpki-client