$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35322e302f32322d3232203d3e2034383437.roa File: 3130332e3233332e35322e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: EYI7dPp+ufYGt51QJPcMZ+MZuVWehYYjFTxEk5qY3IA= Subject key identifier: 73:96:36:EA:5E:F9:D0:B3:4A:15:0E:AF:ED:55:0C:F5:A8:A4:49:19 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 757BDF3E101323099E00C8E4D0B669BAD0E0FB19 Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35322e302f32322d3232203d3e2034383437.roa Signing time: Mon 13 Apr 2026 07:12:28 +0000 ROA not before: Mon 13 Apr 2026 07:07:28 +0000 ROA not after: Mon 12 Apr 2027 07:12:28 +0000 asID: 4847 IP address blocks: 103.233.52.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:7b:df:3e:10:13:23:09:9e:00:c8:e4:d0:b6:69:ba:d0:e0:fb:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 07:07:28 2026 GMT Not After : Apr 12 07:12:28 2027 GMT Subject: CN=739636EA5EF9D0B34A150EAFED550CF5A8A44919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:fb:9c:32:1f:74:2e:38:e7:2d:e0:09:1e:ca: dc:69:1a:be:6c:cd:bd:df:ac:f7:2f:f4:41:7c:cf: f7:a0:a2:f5:ed:12:3a:73:1c:1b:3a:d2:cc:bb:10: 6a:28:8c:d2:73:4a:db:23:82:18:70:e7:b4:c0:98: b4:e3:e3:b7:eb:98:18:1e:65:fc:31:27:50:6c:1f: 00:3f:67:09:57:c0:94:a5:44:8c:d6:9e:17:da:ce: a7:06:ba:7a:71:1e:f5:54:cf:d8:fb:69:9e:2a:d6: 0b:41:f8:8d:61:36:2c:26:a4:f0:0d:b7:9e:94:8f: 6a:41:d7:32:d8:25:87:cb:c5:71:93:70:f6:2e:f4: fb:db:a0:7e:de:81:c1:41:90:e9:52:69:11:65:50: 91:6b:1f:ed:04:d4:2e:cd:ba:5f:9a:11:e0:38:d9: 9a:c9:02:d7:26:e7:08:8c:eb:f6:d7:ec:d2:61:d3: 61:66:fc:7f:a8:42:c3:49:50:f7:59:61:a8:60:19: c4:98:f5:c1:d0:3c:a4:22:be:10:98:79:fa:35:a9: fd:0a:76:4b:c2:db:22:9c:6a:e6:0f:95:71:65:18: c0:ba:5d:1f:dc:a8:7c:1f:ae:24:40:63:16:26:0f: 11:f9:bc:92:44:34:19:ec:3d:e7:21:64:27:0b:2c: bd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:96:36:EA:5E:F9:D0:B3:4A:15:0E:AF:ED:55:0C:F5:A8:A4:49:19 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35322e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.233.52.0/22 Signature Algorithm: sha256WithRSAEncryption 19:fb:71:34:1d:8e:f0:4e:33:91:03:ba:0c:0b:90:aa:c5:7c: 36:73:19:e3:91:ee:76:48:58:31:a0:5c:7b:57:20:c1:43:b3: 0d:de:96:ba:3c:2a:0b:65:b4:9b:fd:c0:de:c1:66:41:0a:d5: 6a:c9:b5:c7:30:6d:8c:c5:ff:69:1d:ef:67:0d:15:c3:ca:9d: de:b6:ea:4b:a7:23:24:86:46:03:ac:f2:71:19:69:19:6d:db: be:f2:81:99:85:72:66:e2:d5:e7:fb:23:18:41:fc:24:41:b8: 42:fe:80:c9:66:01:0f:79:28:8c:f8:9d:b3:03:c5:bd:11:f7: 4b:35:6e:83:fe:4a:73:42:6c:3e:47:5d:33:f9:8a:05:d1:cf: e6:81:12:0e:6f:df:e8:ff:1c:52:eb:bf:b1:fd:80:bb:49:44: 3b:bb:16:67:d7:43:e5:f5:c4:27:12:d2:14:be:2e:99:89:9b: 27:80:ca:77:b3:1a:57:90:fb:b3:f3:81:3d:6e:45:a6:78:72: 76:96:b5:5d:b9:7d:cd:cd:2c:7f:a4:a8:cb:c2:df:0c:c2:c4: 00:9d:0e:69:37:5a:88:9f:93:0b:34:31:5f:99:9e:95:2d:82: d9:45:ea:27:18:15:2a:1a:a2:3d:38:cb:55:80:a8:21:51:7a: 22:e1:43:97 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUdXvfPhATIwmeAMjk0LZputDg+xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNzA3MjhaFw0yNzA0MTIwNzEyMjhaMDMxMTAvBgNV BAMTKDczOTYzNkVBNUVGOUQwQjM0QTE1MEVBRkVENTUwQ0Y1QThBNDQ5MTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL+5wyH3QuOOct4AkeytxpGr5s zb3frPcv9EF8z/egovXtEjpzHBs60sy7EGoojNJzStsjghhw57TAmLTj47frmBge ZfwxJ1BsHwA/ZwlXwJSlRIzWnhfazqcGunpxHvVUz9j7aZ4q1gtB+I1hNiwmpPAN t56Uj2pB1zLYJYfLxXGTcPYu9PvboH7egcFBkOlSaRFlUJFrH+0E1C7Nul+aEeA4 2ZrJAtcm5wiM6/bX7NJh02Fm/H+oQsNJUPdZYahgGcSY9cHQPKQivhCYefo1qf0K dkvC2yKcauYPlXFlGMC6XR/cqHwfriRAYxYmDxH5vJJENBnsPechZCcLLL0vAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUc5Y26l750LNKFQ6v7VUM9aikSRkwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTYzMjE1Mzc3OTg5NjM1LzAvMzEzMDMzMmUzMjMz MzMyZTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmfpNDANBgkqhkiG9w0BAQsFAAOCAQEAGftxNB2O8E4zkQO6DAuQqsV8NnMZ 45HudkhYMaBce1cgwUOzDd6WujwqC2W0m/3A3sFmQQrVasm1xzBtjMX/aR3vZw0V w8qd3rbqS6cjJIZGA6zycRlpGW3bvvKBmYVyZuLV5/sjGEH8JEG4Qv6AyWYBD3ko jPidswPFvRH3SzVug/5Kc0JsPkddM/mKBdHP5oESDm/f6P8cUuu/sf2Au0lEO7sW Z9dD5fXEJxLSFL4umYmbJ4DKd7MaV5D7s/OBPW5Fpnhydpa1Xbl9zc0sf6Soy8Lf DMLEAJ0OaTdaiJ+TCzQxX5melS2C2UXqJxgVKhqiPTjLVYCoIVF6IuFDlw== -----END CERTIFICATE-----Generated at Mon Apr 13 17:47:48 2026 by rpki-client