$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35342e302f32332d3233203d3e2039383038.roa File: 3130332e3233332e35342e302f32332d3233203d3e2039383038.roa (raw, json) Hash identifier: Zc/NjvXWlUm2WugtJEeR0iVyZkrYVEHrYk2Cl5ZUlJo= Subject key identifier: CD:A9:C2:38:01:F7:2B:85:9D:80:68:25:C4:E3:50:F2:65:DA:88:A5 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 541541300E0399E1AF3A826DEA90BE084F59A075 Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35342e302f32332d3233203d3e2039383038.roa Signing time: Mon 13 Apr 2026 07:12:27 +0000 ROA not before: Mon 13 Apr 2026 07:07:27 +0000 ROA not after: Mon 12 Apr 2027 07:12:27 +0000 asID: 9808 IP address blocks: 103.233.54.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:15:41:30:0e:03:99:e1:af:3a:82:6d:ea:90:be:08:4f:59:a0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 07:07:27 2026 GMT Not After : Apr 12 07:12:27 2027 GMT Subject: CN=CDA9C23801F72B859D806825C4E350F265DA88A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5b:e0:8e:76:67:e6:9c:0b:55:94:e2:85:e8: c1:c4:97:84:1a:be:21:3a:0d:b9:5a:09:24:67:65: 05:17:53:93:d8:78:b9:35:f0:d5:5d:ef:61:e4:ca: c5:7f:c5:f1:b4:d0:25:83:2d:82:a5:88:e9:c1:53: c4:ce:dc:41:b2:84:4a:d3:eb:8f:2c:25:b6:0a:d4: 93:7e:fe:96:44:57:d6:f8:8f:f0:de:30:c9:0f:da: f9:1c:90:f1:d4:2f:5a:d7:18:1b:6a:3a:2f:ac:20: 44:f5:f6:2d:5e:2b:c5:a1:f7:7d:dc:34:23:3e:b6: 0a:dc:9e:65:67:1b:25:7a:1b:d1:16:55:12:98:1c: 1f:71:54:b8:71:6e:fa:84:a3:8e:b4:f2:a9:97:1f: 71:fd:06:39:81:29:60:53:c0:4d:36:97:77:94:10: ae:3c:b8:5e:41:e0:97:41:18:c4:b2:54:d3:48:b0: c3:75:b2:75:95:c6:ca:79:bd:66:3c:2b:68:b8:9a: cd:50:24:45:f0:e3:25:09:56:d1:83:eb:06:1c:9a: 0f:af:c8:8d:e8:86:ea:af:72:28:e4:90:f7:d5:33: 83:51:d2:18:c4:dc:0c:35:cc:90:c1:fc:49:c1:e0: be:2f:16:fb:cf:ae:d0:7f:c6:ec:d1:71:ce:ed:7f: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A9:C2:38:01:F7:2B:85:9D:80:68:25:C4:E3:50:F2:65:DA:88:A5 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/3130332e3233332e35342e302f32332d3233203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.233.54.0/23 Signature Algorithm: sha256WithRSAEncryption 72:7c:08:db:3c:f2:12:49:fb:47:5e:b9:ba:6a:ff:d4:de:cb: 02:a1:a8:18:e5:10:76:6d:6d:ec:14:22:fe:c4:91:cd:c5:b7: 77:2a:b1:ab:49:2d:49:6f:ed:14:d6:88:9d:96:be:be:e0:54: 06:96:d4:ef:08:37:f6:6c:75:f2:65:5c:45:3c:04:dc:ee:f1: d0:90:c4:c5:00:f1:79:f3:cb:53:b5:77:d6:6c:23:ff:30:8e: 9d:97:1f:db:9f:cb:78:37:80:51:44:a3:d3:95:24:6a:86:55: 85:fd:96:05:74:8d:d3:c7:c0:43:7f:14:e7:ab:59:ae:a0:98: 71:ee:75:18:3e:e7:2c:24:13:bd:c3:6d:04:38:c5:e2:e4:e1: be:67:e8:12:9e:2e:16:5d:10:c7:4c:86:46:f4:50:df:c7:a7: 33:7c:d7:c1:28:42:99:6e:f1:c0:5d:56:d6:ae:fb:c2:71:84: 61:d9:f4:ee:53:3a:93:72:76:b4:5e:a9:4c:21:e1:9a:7e:cb: d0:e2:69:17:61:7e:ea:3b:b2:b5:8c:09:ae:9d:b3:6a:ce:1e: 86:92:7e:72:8f:e2:e6:60:6a:7b:03:5b:1a:0e:09:3e:e2:df: b7:4f:2d:47:7c:78:09:30:69:31:dc:68:7f:91:f5:9b:2b:66: ff:d9:03:01 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVBVBMA4DmeGvOoJt6pC+CE9ZoHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNzA3MjdaFw0yNzA0MTIwNzEyMjdaMDMxMTAvBgNV BAMTKENEQTlDMjM4MDFGNzJCODU5RDgwNjgyNUM0RTM1MEYyNjVEQTg4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4W+COdmfmnAtVlOKF6MHEl4Qa viE6DblaCSRnZQUXU5PYeLk18NVd72HkysV/xfG00CWDLYKliOnBU8TO3EGyhErT 648sJbYK1JN+/pZEV9b4j/DeMMkP2vkckPHUL1rXGBtqOi+sIET19i1eK8Wh933c NCM+tgrcnmVnGyV6G9EWVRKYHB9xVLhxbvqEo4608qmXH3H9BjmBKWBTwE02l3eU EK48uF5B4JdBGMSyVNNIsMN1snWVxsp5vWY8K2i4ms1QJEXw4yUJVtGD6wYcmg+v yI3ohuqvcijkkPfVM4NR0hjE3Aw1zJDB/EnB4L4vFvvPrtB/xuzRcc7tf/zLAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUzanCOAH3K4WdgGglxONQ8mXaiKUwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTYzMjE1Mzc3OTg5NjM1LzAvMzEzMDMzMmUzMjMz MzMyZTM1MzQyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzOTM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAWfpNjANBgkqhkiG9w0BAQsFAAOCAQEAcnwI2zzyEkn7R165umr/1N7LAqGo GOUQdm1t7BQi/sSRzcW3dyqxq0ktSW/tFNaInZa+vuBUBpbU7wg39mx18mVcRTwE 3O7x0JDExQDxefPLU7V31mwj/zCOnZcf25/LeDeAUUSj05UkaoZVhf2WBXSN08fA Q38U56tZrqCYce51GD7nLCQTvcNtBDjF4uThvmfoEp4uFl0Qx0yGRvRQ38enM3zX wShCmW7xwF1W1q77wnGEYdn07lM6k3J2tF6pTCHhmn7L0OJpF2F+6juytYwJrp2z as4ehpJ+co/i5mBqewNbGg4JPuLft08tR3x4CTBpMdxof5H1mytm/9kDAQ== -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:01 2026 by rpki-client