$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3230382e31322e302f32332d3233203d3e2039383038.roa File: 3130332e3230382e31322e302f32332d3233203d3e2039383038.roa (raw, json) Hash identifier: pGGhWM4q1OcBlKfc7LwCUYgqVmCmmmj7XvoCtMRqT7A= Subject key identifier: 45:C2:11:C4:BD:71:FE:26:FF:09:5B:74:CC:96:A0:C2:1C:59:EF:DC Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 177181E00A6421D1C5C32EA5AF9F21248DE315C2 Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3230382e31322e302f32332d3233203d3e2039383038.roa Signing time: Mon 13 Apr 2026 07:12:27 +0000 ROA not before: Mon 13 Apr 2026 07:07:27 +0000 ROA not after: Mon 12 Apr 2027 07:12:27 +0000 asID: 9808 IP address blocks: 103.208.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:71:81:e0:0a:64:21:d1:c5:c3:2e:a5:af:9f:21:24:8d:e3:15:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 07:07:27 2026 GMT Not After : Apr 12 07:12:27 2027 GMT Subject: CN=45C211C4BD71FE26FF095B74CC96A0C21C59EFDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:76:c6:7d:f2:b8:2b:41:12:38:69:68:d5:b9: 1b:6c:df:92:83:9d:fa:33:33:36:9f:9d:13:ef:16: 9f:e9:26:10:fa:46:29:e2:fe:44:8e:b4:a4:24:7f: 60:45:9e:13:0d:c8:0c:b8:63:85:04:6b:51:32:49: 23:18:e5:4d:76:98:93:13:2f:63:de:08:19:87:6e: 94:43:97:ba:d5:92:e3:93:07:8d:9a:04:3f:1e:61: 2e:3c:b3:3d:b6:60:ed:53:de:c1:c4:72:44:d0:25: 9a:fa:d6:ab:0d:46:bf:83:c7:1b:16:86:b4:a0:a9: dc:0d:1c:b9:2c:96:41:6b:dc:f0:ee:ae:01:19:43: d6:f1:21:61:a5:59:53:ea:7a:00:55:01:d2:e9:fd: 85:7f:1a:b9:6e:ab:60:30:02:1e:49:0e:ca:13:4b: 88:fa:41:4f:fe:1a:a9:6f:37:76:55:84:48:6a:c1: d9:75:02:1e:39:1f:c0:52:23:ac:47:6e:77:10:47: 06:cb:68:a4:f0:ea:e7:98:f1:f6:6f:9f:5f:e7:63: de:72:70:76:ca:7b:36:d2:b2:b0:bc:ab:be:0f:0f: c8:91:5f:9c:fa:c1:eb:d8:80:0f:14:fb:9a:ed:46: e8:48:de:1e:59:bc:67:e9:77:24:b1:b0:c7:03:0d: e9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:C2:11:C4:BD:71:FE:26:FF:09:5B:74:CC:96:A0:C2:1C:59:EF:DC X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3230382e31322e302f32332d3233203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.208.12.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:ad:6a:77:2f:cc:c4:f8:0b:90:09:68:3f:49:bd:6e:82:0b: a5:b1:76:ce:45:36:3e:6d:83:3c:f7:0f:5b:b1:b3:19:0e:f5: 51:c5:22:52:33:2a:ea:c8:6c:a2:da:40:5d:a5:30:f6:b9:8e: 8e:69:da:6e:1e:e1:46:a3:51:51:24:ba:5b:3c:9c:a2:73:a2: a1:dc:94:e3:cb:26:f3:36:3d:8d:97:c5:d3:7d:52:29:e6:d0: c8:95:15:b5:27:41:ee:b8:1c:99:5c:fd:dd:b4:23:50:0c:d3: 17:4e:bd:bc:d3:6a:c6:ad:ce:9b:17:a5:9e:d8:ee:ac:1c:4a: 71:6d:ba:4b:61:a0:a3:06:1f:47:9d:3a:17:b7:2f:3f:48:ff: 56:5f:d1:81:91:00:a6:d4:06:59:89:f8:94:56:82:62:f4:5f: df:f9:07:f7:a8:ab:46:dc:2f:55:be:b4:33:80:53:68:82:71: af:87:73:a1:70:ec:45:24:1a:24:48:61:bf:fc:84:6d:de:18: 4b:23:a0:4b:68:52:37:e1:bc:49:02:61:f9:6d:ac:e0:79:9b: 80:a8:39:ac:a7:61:19:0b:5b:97:e8:08:a9:25:e0:52:c6:c9: 32:bc:51:9b:03:b4:b6:b1:84:cb:5c:a5:5f:6f:cb:73:98:da: 87:b5:42:2b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUF3GB4ApkIdHFwy6lr58hJI3jFcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNzA3MjdaFw0yNzA0MTIwNzEyMjdaMDMxMTAvBgNV BAMTKDQ1QzIxMUM0QkQ3MUZFMjZGRjA5NUI3NENDOTZBMEMyMUM1OUVGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdsZ98rgrQRI4aWjVuRts35KD nfozMzafnRPvFp/pJhD6Rini/kSOtKQkf2BFnhMNyAy4Y4UEa1EySSMY5U12mJMT L2PeCBmHbpRDl7rVkuOTB42aBD8eYS48sz22YO1T3sHEckTQJZr61qsNRr+DxxsW hrSgqdwNHLkslkFr3PDurgEZQ9bxIWGlWVPqegBVAdLp/YV/Grluq2AwAh5JDsoT S4j6QU/+GqlvN3ZVhEhqwdl1Ah45H8BSI6xHbncQRwbLaKTw6ueY8fZvn1/nY95y cHbKezbSsrC8q74PD8iRX5z6wevYgA8U+5rtRuhI3h5ZvGfpdySxsMcDDek7AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQURcIRxL1x/ib/CVt0zJagwhxZ79wwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTYzMjE1Mzc3OTg5NjM1LzAvMzEzMDMzMmUzMjMw MzgyZTMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWfQDDANBgkqhkiG9w0BAQsFAAOCAQEAPa1qdy/MxPgLkAloP0m9boILpbF2 zkU2Pm2DPPcPW7GzGQ71UcUiUjMq6shsotpAXaUw9rmOjmnabh7hRqNRUSS6Wzyc onOiodyU48sm8zY9jZfF031SKebQyJUVtSdB7rgcmVz93bQjUAzTF069vNNqxq3O mxelntjurBxKcW26S2GgowYfR506F7cvP0j/Vl/RgZEAptQGWYn4lFaCYvRf3/kH 96irRtwvVb60M4BTaIJxr4dzoXDsRSQaJEhhv/yEbd4YSyOgS2hSN+G8SQJh+W2s 4HmbgKg5rKdhGQtbl+gIqSXgUsbJMrxRmwO0trGEy1ylX2/Lc5jah7VCKw== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:01 2026 by rpki-client