$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3234332e3133382e302f32342d3234203d3e20313333313138.roa File: 3130332e3234332e3133382e302f32342d3234203d3e20313333313138.roa (raw, json) Hash identifier: sYiLh3ZmX7lufSgsI2JQRF8Rv9LWfNq/u6H02cu6qeY= Subject key identifier: 7D:94:3D:66:F5:2B:94:9E:4A:27:E7:87:60:AE:EB:9D:1C:DC:FC:46 Certificate issuer: /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D Certificate serial: 6A081F58A8D0DDC58CADBE825C1D5D309E06B6A5 Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3234332e3133382e302f32342d3234203d3e20313333313138.roa Signing time: Fri 15 May 2026 09:22:19 +0000 ROA not before: Fri 15 May 2026 09:17:19 +0000 ROA not after: Fri 14 May 2027 09:22:19 +0000 asID: 133118 IP address blocks: 103.243.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:08:1f:58:a8:d0:dd:c5:8c:ad:be:82:5c:1d:5d:30:9e:06:b6:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D Validity Not Before: May 15 09:17:19 2026 GMT Not After : May 14 09:22:19 2027 GMT Subject: CN=7D943D66F52B949E4A27E78760AEEB9D1CDCFC46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a5:3d:ee:5a:51:19:2a:b9:a0:19:8c:4c:71: ae:e3:bd:a7:3a:fa:d9:31:4c:f7:f5:bb:6e:7c:03: 12:52:7b:22:8b:26:97:26:7d:e0:9b:59:d3:5d:ca: b1:11:34:c3:45:65:38:14:8b:a9:9d:18:c1:e8:e2: 18:73:9b:75:07:ec:80:76:c8:0c:e4:a1:44:3a:09: 48:dd:d1:e0:00:41:fb:29:e8:3e:c3:8c:48:23:b6: 51:44:15:fc:4e:52:ae:f7:13:57:b6:c3:18:01:07: 44:85:39:36:df:c6:8d:16:7b:dc:19:ff:47:a1:57: e2:25:b2:f3:2f:10:54:f4:57:f9:f2:05:18:ac:d5: 6e:c9:09:3f:45:80:21:5e:2f:18:41:21:6b:ad:89: cc:09:e1:02:25:db:d7:cd:23:1d:94:c2:c6:dd:22: d9:59:f1:94:e6:d4:9c:f5:55:7b:e8:ff:43:6f:10: ce:d9:b5:7a:c9:05:25:a2:20:d3:8a:45:f5:4a:32: 1f:b2:fc:41:6d:7c:ad:3b:d8:77:67:40:81:e2:c3: 5e:c0:bb:9b:a4:58:23:cf:39:64:ce:ac:b1:da:47: e0:2e:ce:3b:b6:70:fe:ba:7f:6e:e5:e6:51:08:a0: 7d:d7:6a:fa:a2:db:fb:e7:a3:08:2e:6c:91:ca:7e: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:94:3D:66:F5:2B:94:9E:4A:27:E7:87:60:AE:EB:9D:1C:DC:FC:46 X509v3 Authority Key Identifier: keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/3130332e3234332e3133382e302f32342d3234203d3e20313333313138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.243.138.0/24 Signature Algorithm: sha256WithRSAEncryption a6:ce:d9:dd:a8:02:a8:0e:d1:6c:da:f6:bc:bd:9c:51:9a:9a: 51:41:b5:77:a5:aa:43:ad:69:d2:c9:7f:75:ed:35:8d:69:22: 78:9a:ab:20:25:12:ee:61:68:03:72:01:47:da:0e:7d:67:fa: 09:42:f1:95:ab:83:53:ba:6e:a4:b6:2c:aa:3e:95:1b:cf:9c: c6:ff:48:6e:22:18:dd:7f:dc:c1:4d:d5:32:38:e9:cc:93:55: dc:f5:39:33:74:51:40:e5:b7:8a:cb:7f:b3:1f:be:d4:8c:fa: 33:ae:59:a9:c7:58:1e:1a:ba:b2:c5:7b:de:0c:fb:ee:67:18: bb:09:e5:60:16:6f:00:9e:c6:07:09:20:91:1e:a4:a0:95:dd: 9e:b8:ad:e1:a2:77:93:f4:bc:6d:94:2a:46:ff:fb:57:18:2c: ed:fb:bf:32:0e:08:77:0d:47:f7:00:81:09:40:57:d9:95:22: 61:f0:64:63:6a:2e:0c:78:74:ad:67:e0:e7:8c:a5:61:19:8d: 90:e4:e0:29:e0:18:ac:60:61:23:7d:b1:90:c5:df:84:ea:e1: f6:8e:6d:f8:39:ca:d4:d0:78:f9:98:33:87:7d:7e:cf:3c:78: 72:02:b9:b4:56:33:53:9b:1c:73:19:a9:17:48:06:3a:cd:08: 7f:09:81:aa -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUaggfWKjQ3cWMrb6CXB1dMJ4GtqUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5 NEFCQUE5RDAeFw0yNjA1MTUwOTE3MTlaFw0yNzA1MTQwOTIyMTlaMDMxMTAvBgNV BAMTKDdEOTQzRDY2RjUyQjk0OUU0QTI3RTc4NzYwQUVFQjlEMUNEQ0ZDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYpT3uWlEZKrmgGYxMca7jvac6 +tkxTPf1u258AxJSeyKLJpcmfeCbWdNdyrERNMNFZTgUi6mdGMHo4hhzm3UH7IB2 yAzkoUQ6CUjd0eAAQfsp6D7DjEgjtlFEFfxOUq73E1e2wxgBB0SFOTbfxo0We9wZ /0ehV+IlsvMvEFT0V/nyBRis1W7JCT9FgCFeLxhBIWuticwJ4QIl29fNIx2Uwsbd ItlZ8ZTm1Jz1VXvo/0NvEM7ZtXrJBSWiINOKRfVKMh+y/EFtfK072HdnQIHiw17A u5ukWCPPOWTOrLHaR+Auzju2cP66f27l5lEIoH3Xavqi2/vnowgubJHKfrHFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUfZQ9ZvUrlJ5KJ+eHYK7rnRzc/EYwHwYDVR0j BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzEzMDMzMmUz MjM0MzMyZTMxMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMzMxMzEz OC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGfzijANBgkqhkiG9w0BAQsFAAOCAQEAps7Z3agCqA7RbNr2 vL2cUZqaUUG1d6WqQ61p0sl/de01jWkieJqrICUS7mFoA3IBR9oOfWf6CULxlauD U7pupLYsqj6VG8+cxv9IbiIY3X/cwU3VMjjpzJNV3PU5M3RRQOW3ist/sx++1Iz6 M65ZqcdYHhq6ssV73gz77mcYuwnlYBZvAJ7GBwkgkR6koJXdnrit4aJ3k/S8bZQq Rv/7Vxgs7fu/Mg4Idw1H9wCBCUBX2ZUiYfBkY2ouDHh0rWfg54ylYRmNkOTgKeAY rGBhI32xkMXfhOrh9o5t+DnK1NB4+Zgzh31+zzx4cgK5tFYzU5sccxmpF0gGOs0I fwmBqg== -----END CERTIFICATE-----Generated at Fri May 29 23:56:50 2026 by rpki-client