$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3230382e31342e302f32332d3233203d3e2039383038.roa File: 3130332e3230382e31342e302f32332d3233203d3e2039383038.roa (raw, json) Hash identifier: 3NQBn3zBFGFYJbBvtfE3POxI+LYc005V12gB1ySDSNU= Subject key identifier: A0:F9:BA:8E:1F:4F:2E:BC:C6:6F:89:D3:C2:11:92:FD:59:99:F0:76 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 0BE67A0536B4178F85031A7395C9BC1F861494D9 Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3230382e31342e302f32332d3233203d3e2039383038.roa Signing time: Mon 13 Apr 2026 07:12:27 +0000 ROA not before: Mon 13 Apr 2026 07:07:27 +0000 ROA not after: Mon 12 Apr 2027 07:12:27 +0000 asID: 9808 IP address blocks: 103.208.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e6:7a:05:36:b4:17:8f:85:03:1a:73:95:c9:bc:1f:86:14:94:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 07:07:27 2026 GMT Not After : Apr 12 07:12:27 2027 GMT Subject: CN=A0F9BA8E1F4F2EBCC66F89D3C21192FD5999F076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:39:c1:c1:92:e3:22:99:da:4e:92:2a:5f:98: 54:8f:89:bb:cd:c2:08:e1:e9:18:85:1b:1f:ed:3f: bb:9a:c6:83:45:99:f9:b2:10:82:fd:a8:70:31:2c: 83:4a:42:db:56:16:34:36:9d:13:5c:6d:c9:e9:7b: 13:3c:f4:5a:a4:e6:26:8b:7e:ea:28:b3:37:1b:2a: 54:8c:80:94:99:30:35:72:0a:a4:3b:f1:e8:8b:4a: d9:77:63:e6:c8:b6:58:57:6f:45:53:29:18:9a:16: 24:a0:74:ea:68:c7:e0:90:d8:d6:8c:50:81:bc:d3: 95:35:fa:e4:1e:f6:4f:27:0d:4a:a4:26:3a:87:8c: c4:79:cc:40:2f:67:53:20:fe:0c:ae:2f:5c:b7:d3: 28:36:68:96:7d:3a:4b:da:fd:37:f5:25:ab:02:19: d0:58:5e:f4:e9:93:4f:de:f1:a1:1c:a0:42:09:f9: 45:83:61:69:44:c7:be:11:97:2e:48:41:17:7d:fe: d6:49:c7:9d:39:b0:98:4e:df:a9:23:8a:da:79:cf: b6:b2:75:92:23:3a:9c:54:86:b6:f2:00:37:ab:5f: 95:40:03:91:ca:75:eb:b8:24:f6:39:83:aa:c0:dc: 34:78:b3:b1:3c:68:67:63:da:37:c3:36:bf:73:ce: bc:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F9:BA:8E:1F:4F:2E:BC:C6:6F:89:D3:C2:11:92:FD:59:99:F0:76 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3230382e31342e302f32332d3233203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.208.14.0/23 Signature Algorithm: sha256WithRSAEncryption 42:da:f8:2f:31:82:3e:6e:43:bd:05:24:03:a9:17:98:95:be: c8:fd:20:76:bf:d3:86:3c:47:1d:15:bd:00:e7:f4:96:ff:d4: 13:f9:ce:8b:3f:59:ba:48:b3:02:7e:19:ae:ce:a9:30:74:47: 13:fb:30:4d:c2:84:ba:b5:49:f9:13:d5:e7:b1:9b:b7:34:24: 0f:1f:04:79:48:75:f5:cb:3d:4a:22:3b:7a:f2:bf:96:54:db: 3f:41:0d:f4:c3:84:ce:df:34:b3:0c:e6:6b:69:5d:0c:05:c0: 69:bb:3a:08:9e:7c:04:9f:3c:42:5d:1f:ed:11:ef:0a:18:c8: ca:d5:cf:d2:e9:b9:23:ec:f1:28:50:1e:f0:7f:ab:4a:34:1c: d0:ea:8e:14:cc:12:02:81:77:ed:59:44:2e:ab:05:67:e4:c6: 1e:42:f2:b5:32:ef:b3:89:06:d4:12:e8:f4:f1:a8:ee:67:21: 79:6d:92:d2:4e:2c:01:1d:71:15:e7:24:02:d2:7c:2a:45:d8: ee:d2:9e:19:5b:54:27:33:08:5c:6a:37:9a:0d:64:4b:0b:de: 66:e4:60:bd:01:e6:66:7e:2b:d4:e6:8a:ee:dc:d1:b5:01:75: fa:ac:1f:b5:f5:34:35:5e:a0:e6:ee:57:b7:79:07:c8:11:85: ed:87:ae:9b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUC+Z6BTa0F4+FAxpzlcm8H4YUlNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNzA3MjdaFw0yNzA0MTIwNzEyMjdaMDMxMTAvBgNV BAMTKEEwRjlCQThFMUY0RjJFQkNDNjZGODlEM0MyMTE5MkZENTk5OUYwNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVOcHBkuMimdpOkipfmFSPibvN wgjh6RiFGx/tP7uaxoNFmfmyEIL9qHAxLINKQttWFjQ2nRNcbcnpexM89Fqk5iaL fuooszcbKlSMgJSZMDVyCqQ78eiLStl3Y+bItlhXb0VTKRiaFiSgdOpox+CQ2NaM UIG805U1+uQe9k8nDUqkJjqHjMR5zEAvZ1Mg/gyuL1y30yg2aJZ9Okva/Tf1JasC GdBYXvTpk0/e8aEcoEIJ+UWDYWlEx74Rly5IQRd9/tZJx505sJhO36kjitp5z7ay dZIjOpxUhrbyADerX5VAA5HKdeu4JPY5g6rA3DR4s7E8aGdj2jfDNr9zzrxXAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUoPm6jh9PLrzGb4nTwhGS/VmZ8HYwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTYzMjE1Mzc3OTg5NjM1LzAvMzEzMDMzMmUzMjMw MzgyZTMxMzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWfQDjANBgkqhkiG9w0BAQsFAAOCAQEAQtr4LzGCPm5DvQUkA6kXmJW+yP0g dr/ThjxHHRW9AOf0lv/UE/nOiz9ZukizAn4Zrs6pMHRHE/swTcKEurVJ+RPV57Gb tzQkDx8EeUh19cs9SiI7evK/llTbP0EN9MOEzt80swzma2ldDAXAabs6CJ58BJ88 Ql0f7RHvChjIytXP0um5I+zxKFAe8H+rSjQc0OqOFMwSAoF37VlELqsFZ+TGHkLy tTLvs4kG1BLo9PGo7mcheW2S0k4sAR1xFeckAtJ8KkXY7tKeGVtUJzMIXGo3mg1k SwveZuRgvQHmZn4r1OaK7tzRtQF1+qwftfU0NV6g5u5Xt3kHyBGF7Yeumw== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:03 2026 by rpki-client