$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa File: 3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa (raw, json) Hash identifier: ftrNTt6HvGXc0hv+CqGPcICXjekXrJU5cCjVOODRBKw= Subject key identifier: 19:11:00:99:5C:8E:1E:A0:D3:38:60:06:25:DD:98:63:B5:30:28:8B Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 12F2B08BCC8C82C89C514D5FD6E0BEBC70E2B57B Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa Signing time: Fri 10 Apr 2026 02:21:09 +0000 ROA not before: Fri 10 Apr 2026 02:16:09 +0000 ROA not after: Fri 09 Apr 2027 02:21:09 +0000 asID: 135061 IP address blocks: 103.95.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:f2:b0:8b:cc:8c:82:c8:9c:51:4d:5f:d6:e0:be:bc:70:e2:b5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 02:16:09 2026 GMT Not After : Apr 9 02:21:09 2027 GMT Subject: CN=191100995C8E1EA0D338600625DD9863B530288B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:90:44:27:65:e2:ea:74:cf:2a:82:59:d9:32: d2:a6:f2:af:db:a8:21:a1:d3:e2:39:3e:0e:8b:37: 19:20:34:9a:5d:f3:80:62:fd:96:20:ec:b6:09:c7: 57:e4:1e:fb:01:6d:0c:0c:7c:bd:05:78:fe:b6:6f: 94:4e:28:60:7e:a2:8e:c5:e8:f7:74:b0:7c:48:05: 01:b6:76:21:f8:2c:a6:d5:0a:ee:7f:e0:22:ed:69: a1:1f:f4:59:20:fe:4d:8c:d0:da:7a:92:fa:b6:94: 15:29:d1:ac:a4:58:fb:4d:a6:07:eb:ea:f7:95:8e: 87:df:e2:76:12:f1:b3:b5:3c:c7:0e:3f:c6:0e:0a: 02:d1:67:9c:21:95:2d:b9:31:f8:05:41:51:9e:a0: fd:83:d2:50:e7:74:d7:50:b9:b6:68:51:93:12:a4: 7b:c5:17:38:35:ef:6d:d2:f7:3b:d8:9d:99:01:6b: 8e:89:4f:aa:85:49:54:b7:cd:0b:e1:58:c9:29:02: 6e:b4:d2:2a:bb:2e:93:ca:b5:0c:3d:53:c2:69:18: e4:43:7b:d9:33:c0:c5:bc:52:48:4a:c6:98:b4:a2: 85:ff:ad:54:d6:d3:0a:8a:d3:d9:35:10:70:f5:67: be:13:7e:f1:d4:67:42:9d:2b:7a:e5:79:30:d6:81: 3f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:11:00:99:5C:8E:1E:A0:D3:38:60:06:25:DD:98:63:B5:30:28:8B X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3130332e39352e3235352e302f32342d3234203d3e20313335303631.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.95.255.0/24 Signature Algorithm: sha256WithRSAEncryption 69:d6:08:78:22:bd:b5:4b:35:c7:0b:f0:b3:e8:0b:cc:75:7f: 34:8b:42:cf:ef:ca:4e:cb:c3:9a:09:a9:bf:e7:90:e3:6a:5f: 92:19:29:7f:ed:53:c5:ab:21:61:ec:fe:f9:64:90:86:05:aa: d5:12:b6:40:39:b3:4b:b0:1f:3b:27:19:5c:2a:bb:dc:ea:26: f9:da:a1:57:52:66:f2:8f:8f:1c:48:e8:39:85:c2:80:04:3e: 67:9a:0c:64:e4:ee:5a:b5:8c:af:5c:d6:72:a5:3f:41:2c:ed: 76:4e:9a:e3:6d:f1:f5:e9:92:b2:0e:50:5c:ee:ef:69:59:39: a8:31:9c:f9:37:3a:ee:fb:bc:81:68:98:60:66:0a:ab:d7:21: 5d:5b:c4:0e:8f:82:e5:ee:d4:41:71:c7:72:62:4b:c2:7f:60: 45:1f:61:e5:ab:5b:df:7c:22:4d:c8:1b:4f:36:8f:c9:11:33: 35:08:b8:96:c2:e9:18:32:93:8b:2a:2d:d8:7f:23:bd:c2:11: 97:e0:23:c8:93:29:b7:83:58:b8:59:2e:34:88:d5:a7:e0:b8: 48:7e:11:9e:28:7c:ec:c9:b7:d3:77:3f:d6:66:6b:5f:2c:59: 1c:a3:81:03:2e:0d:2b:40:f9:de:58:89:dd:e7:28:30:3a:22: 52:96:8e:cc -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUEvKwi8yMgsicUU1f1uC+vHDitXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwMjE2MDlaFw0yNzA0MDkwMjIxMDlaMDMxMTAvBgNV BAMTKDE5MTEwMDk5NUM4RTFFQTBEMzM4NjAwNjI1REQ5ODYzQjUzMDI4OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJkEQnZeLqdM8qglnZMtKm8q/b qCGh0+I5Pg6LNxkgNJpd84Bi/ZYg7LYJx1fkHvsBbQwMfL0FeP62b5ROKGB+oo7F 6Pd0sHxIBQG2diH4LKbVCu5/4CLtaaEf9Fkg/k2M0Np6kvq2lBUp0aykWPtNpgfr 6veVjoff4nYS8bO1PMcOP8YOCgLRZ5whlS25MfgFQVGeoP2D0lDndNdQubZoUZMS pHvFFzg1723S9zvYnZkBa46JT6qFSVS3zQvhWMkpAm600iq7LpPKtQw9U8JpGORD e9kzwMW8UkhKxpi0ooX/rVTW0wqK09k1EHD1Z74TfvHUZ0KdK3rleTDWgT/dAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUGREAmVyOHqDTOGAGJd2YY7UwKIswHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc4NTgxNzkvMC8zMTMwMzMyZTM5 MzUyZTMyMzUzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNTMwMzYzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGdf/zANBgkqhkiG9w0BAQsFAAOCAQEAadYIeCK9tUs1xwvws+gL zHV/NItCz+/KTsvDmgmpv+eQ42pfkhkpf+1TxashYez++WSQhgWq1RK2QDmzS7Af OycZXCq73Oom+dqhV1Jm8o+PHEjoOYXCgAQ+Z5oMZOTuWrWMr1zWcqU/QSztdk6a 423x9emSsg5QXO7vaVk5qDGc+Tc67vu8gWiYYGYKq9chXVvEDo+C5e7UQXHHcmJL wn9gRR9h5atb33wiTcgbTzaPyREzNQi4lsLpGDKTiyot2H8jvcIRl+AjyJMpt4NY uFkuNIjVp+C4SH4Rnih87Mm303c/1mZrXyxZHKOBAy4NK0D53liJ3ecoMDoiUpaO zA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:42 2026 by rpki-client