$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094821744662806529/0/3130332e3137302e342e302f32342d3234203d3e2034383136.roa File: 3130332e3137302e342e302f32342d3234203d3e2034383136.roa (raw, json) Hash identifier: hSNLNQfMyyPIEy3FNApslXZYFlxGq5H4UAU40MPlMqM= Subject key identifier: AE:05:02:69:2A:77:36:D6:63:B7:7E:0B:FA:0C:0E:65:98:48:3E:95 Certificate issuer: /CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Certificate serial: 690030C71494CB6E4C66F2F42BFA9FE69D1F531F Authority key identifier: A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/3130332e3137302e342e302f32342d3234203d3e2034383136.roa Signing time: Fri 10 Apr 2026 03:11:49 +0000 ROA not before: Fri 10 Apr 2026 03:06:49 +0000 ROA not after: Fri 09 Apr 2027 03:11:49 +0000 asID: 4816 IP address blocks: 103.170.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 05:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:00:30:c7:14:94:cb:6e:4c:66:f2:f4:2b:fa:9f:e6:9d:1f:53:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0156195ADCF332776D96A9CE2D7A36C4A1B42EC Validity Not Before: Apr 10 03:06:49 2026 GMT Not After : Apr 9 03:11:49 2027 GMT Subject: CN=AE0502692A7736D663B77E0BFA0C0E6598483E95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:f1:69:b9:f6:b3:05:3a:38:1f:f3:42:2e: 4e:15:e0:91:4b:c4:da:05:e3:c6:64:ab:e8:c9:4c: 55:e7:24:ba:92:f5:bc:39:51:af:d8:8b:e5:64:e2: 32:b6:d9:87:45:78:3d:58:75:84:c6:f1:d6:78:ea: 6b:55:e5:ba:9c:c9:86:b8:92:8c:f5:3d:53:6d:2f: a1:c1:5c:0e:b1:07:76:d3:68:29:82:ea:21:55:f7: 2e:c7:35:17:bb:12:15:85:7a:96:3f:4b:8b:a1:58: aa:af:be:92:c9:88:63:db:b6:cf:81:9d:cf:c3:d1: 40:68:63:e5:1f:de:f1:d7:42:e3:bb:f9:cb:99:de: 1d:b1:fb:43:a7:af:ff:4c:9b:8d:91:5d:b2:45:c7: 17:5c:f3:da:3f:c7:2c:ec:89:f2:84:62:a2:53:9e: 70:15:af:2c:4d:8b:6c:ab:84:0c:ab:42:5c:ab:48: e5:d8:93:ea:67:13:ec:a2:43:99:74:13:68:bf:a2: ff:bc:fa:b4:65:3d:96:ea:45:f3:a3:bc:dc:ba:b9: d4:30:eb:69:b9:a6:a2:03:45:2c:d9:6f:da:2a:99: d5:4b:06:e9:7b:28:26:ea:36:cb:36:5f:36:f5:0c: 91:a8:6e:5e:fa:ab:c1:4a:93:b9:f3:f1:0e:3b:8b: 93:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:05:02:69:2A:77:36:D6:63:B7:7E:0B:FA:0C:0E:65:98:48:3E:95 X509v3 Authority Key Identifier: keyid:A0:15:61:95:AD:CF:33:27:76:D9:6A:9C:E2:D7:A3:6C:4A:1B:42:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A0156195ADCF332776D96A9CE2D7A36C4A1B42EC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094821744662806529/0/3130332e3137302e342e302f32342d3234203d3e2034383136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.170.4.0/24 Signature Algorithm: sha256WithRSAEncryption 49:a7:80:9b:55:4f:ee:f4:ff:f5:5f:a0:62:61:b1:3a:c4:93: b7:7b:10:26:fb:ff:52:bf:c3:15:b0:35:68:a6:e9:50:89:14: 10:b4:18:7d:cb:bf:49:67:a4:67:b7:19:6d:01:af:08:ca:e4: 5d:86:29:bb:13:a3:50:2a:d3:0f:ed:bc:5c:2e:07:42:be:2c: 90:4d:ef:85:e0:e6:72:ed:99:18:08:a4:ee:ba:8c:90:61:89: 8f:de:26:ea:98:d1:19:67:f6:d6:f0:f8:db:2f:3c:81:e5:80: 62:2a:89:42:43:d7:ae:e2:8a:70:05:72:3c:c4:02:d5:74:99: 94:26:a9:0d:7d:bc:dc:85:4f:20:cc:e0:46:92:e2:05:11:61: fe:8c:14:1d:b0:f5:fb:9f:21:ae:c9:30:31:50:2d:70:c2:74: ae:96:c2:65:7b:e6:e2:be:a6:fa:40:52:04:48:ad:c9:ec:b6: e3:89:10:db:01:6b:6e:76:84:11:8a:98:c2:3b:6b:92:af:57: 10:81:51:2c:43:71:79:16:b1:ae:55:4b:d8:64:48:07:76:35: 00:6e:21:21:4f:02:3f:ad:10:f5:c3:e2:b4:e0:ae:06:e6:3c: a0:50:0e:8e:b5:70:a5:02:e2:19:b7:b0:39:a2:dc:6b:56:9e: 79:92:18:bd -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUaQAwxxSUy25MZvL0K/qf5p0fUx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0 QTFCNDJFQzAeFw0yNjA0MTAwMzA2NDlaFw0yNzA0MDkwMzExNDlaMDMxMTAvBgNV BAMTKEFFMDUwMjY5MkE3NzM2RDY2M0I3N0UwQkZBMEMwRTY1OTg0ODNFOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePfFpufazBTo4H/NCLk4V4JFL xNoF48Zkq+jJTFXnJLqS9bw5Ua/Yi+Vk4jK22YdFeD1YdYTG8dZ46mtV5bqcyYa4 koz1PVNtL6HBXA6xB3bTaCmC6iFV9y7HNRe7EhWFepY/S4uhWKqvvpLJiGPbts+B nc/D0UBoY+Uf3vHXQuO7+cuZ3h2x+0Onr/9Mm42RXbJFxxdc89o/xyzsifKEYqJT nnAVryxNi2yrhAyrQlyrSOXYk+pnE+yiQ5l0E2i/ov+8+rRlPZbqRfOjvNy6udQw 62m5pqIDRSzZb9oqmdVLBul7KCbqNss2Xzb1DJGobl76q8FKk7nz8Q47i5MvAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUrgUCaSp3NtZjt34L+gwOZZhIPpUwHwYDVR0j BBgwFoAUoBVhla3PMyd22Wqc4tejbEobQuwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgyMTc0NDY2MjgwNjUyOS8wL0EwMTU2MTk1QURDRjMzMjc3NkQ5NkE5Q0UyRDdB MzZDNEExQjQyRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTAxNTYxOTVBRENGMzMyNzc2RDk2QTlDRTJEN0EzNkM0QTFCNDJFQy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODIxNzQ0NjYyODA2NTI5LzAvMzEzMDMzMmUzMTM3 MzAyZTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMxMzYucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnqgQwDQYJKoZIhvcNAQELBQADggEBAEmngJtVT+70//VfoGJhsTrEk7d7ECb7 /1K/wxWwNWim6VCJFBC0GH3Lv0lnpGe3GW0BrwjK5F2GKbsTo1Aq0w/tvFwuB0K+ LJBN74Xg5nLtmRgIpO66jJBhiY/eJuqY0Rln9tbw+NsvPIHlgGIqiUJD167iinAF cjzEAtV0mZQmqQ19vNyFTyDM4EaS4gURYf6MFB2w9fufIa7JMDFQLXDCdK6WwmV7 5uK+pvpAUgRIrcnstuOJENsBa252hBGKmMI7a5KvVxCBUSxDcXkWsa5VS9hkSAd2 NQBuISFPAj+tEPXD4rTgrgbmPKBQDo61cKUC4hm3sDmi3GtWnnmSGL0= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:13 2026 by rpki-client