$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/3130332e3232332e36382e302f32322d3232203d3e2030.roa File: 3130332e3232332e36382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: 4xQOioC1mdU6Yv1xuNedR2u5RvEAiHf8+gk7vks3wcs= Subject key identifier: F2:61:D8:32:C9:A3:53:EF:AF:4D:2B:EC:8C:5C:84:45:F0:8E:57:3F Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 0FE95B12368A4B98D25866DF11DEC0E1CBE44ECB Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/3130332e3232332e36382e302f32322d3232203d3e2030.roa Signing time: Mon 27 Apr 2026 03:44:05 +0000 ROA not before: Mon 27 Apr 2026 03:39:05 +0000 ROA not after: Mon 26 Apr 2027 03:44:05 +0000 asID: 0 IP address blocks: 103.223.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:e9:5b:12:36:8a:4b:98:d2:58:66:df:11:de:c0:e1:cb:e4:4e:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Apr 27 03:39:05 2026 GMT Not After : Apr 26 03:44:05 2027 GMT Subject: CN=F261D832C9A353EFAF4D2BEC8C5C8445F08E573F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:13:85:98:da:8e:37:e2:29:76:3e:79:50:b2: 1e:95:9e:43:be:4a:93:93:4c:5d:02:bc:6e:8d:bd: e2:30:b6:7a:74:96:34:bc:27:d6:9c:95:c3:0c:46: 8a:32:0d:a4:86:2d:e0:7e:72:6a:24:36:9a:96:a1: c7:ad:eb:c0:7b:ab:04:3e:be:1c:7f:64:92:87:c2: 80:13:66:7b:13:56:3b:36:f0:27:b3:81:0c:a2:59: d5:3f:d8:30:ac:37:94:d3:56:43:bf:05:d5:27:a5: a7:c5:20:72:6b:54:c9:eb:56:2d:cc:9e:26:a9:6a: 5d:c1:77:e9:dc:c0:06:a9:8b:03:c5:66:f9:30:27: b0:cf:08:bb:27:7e:4c:cf:37:12:bc:d5:c5:df:21: fc:86:7e:2f:2f:d1:4b:02:5f:72:6f:b1:85:bd:c6: 52:1f:68:96:80:31:f8:89:65:eb:40:49:4d:a5:54: 69:4a:26:0b:2f:63:34:25:77:df:66:38:df:81:7c: d4:0e:e8:49:a6:7a:e1:fe:62:2b:b1:15:b4:4f:5c: 50:21:96:a6:13:d2:ed:bf:b0:b9:17:62:f3:a6:c3: 13:fe:3d:70:ee:95:ea:27:68:99:2d:a2:1b:85:c3: 92:b6:ae:ac:e9:9d:4c:e9:09:fb:83:e1:aa:e6:75: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:61:D8:32:C9:A3:53:EF:AF:4D:2B:EC:8C:5C:84:45:F0:8E:57:3F X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/3130332e3232332e36382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.223.68.0/22 Signature Algorithm: sha256WithRSAEncryption 6d:44:11:30:e3:89:d9:40:d7:84:d4:7d:e7:4c:07:b2:f9:f7: 9e:8f:e8:19:55:61:55:cd:07:6a:fb:36:5f:2f:ba:7d:e8:44: 15:53:05:68:07:fb:dc:68:0f:46:44:07:43:41:81:02:44:cb: b9:44:11:cc:88:d0:9d:6a:35:11:55:fe:7f:b0:0e:a1:94:45: 52:8c:09:93:b5:9f:a8:4a:4d:e7:46:50:a2:5d:83:e4:9d:82: 96:d5:86:b7:df:58:2d:dd:b9:4e:2f:4b:89:2e:85:c6:78:10: a2:ae:69:1b:c4:c4:e6:4e:97:f6:29:20:64:d4:51:ad:7c:69: 62:02:ef:f5:cd:ce:b0:99:ce:81:7b:61:47:81:0d:2d:26:e6: 6b:49:5e:cb:1d:70:c9:ec:65:dc:bb:51:4c:10:ea:f9:15:ee: 93:66:8f:3b:a9:b1:21:1f:d2:d8:a3:46:51:41:58:91:4f:e3: 60:a6:2c:ea:6e:f8:67:55:2d:5a:06:0b:46:1a:11:bb:88:29: a2:8a:ba:2e:ca:ba:70:4f:36:6c:07:2e:b7:f2:1d:eb:dc:d6: ec:bb:9f:9a:5e:2c:7a:22:58:dc:3a:7c:35:99:7a:39:9b:74: 57:c5:72:97:1a:3f:59:2a:51:6e:11:04:f4:e8:58:0f:03:61: 00:cc:e3:81 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUD+lbEjaKS5jSWGbfEd7A4cvkTsswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA0MjcwMzM5MDVaFw0yNzA0MjYwMzQ0MDVaMDMxMTAvBgNV BAMTKEYyNjFEODMyQzlBMzUzRUZBRjREMkJFQzhDNUM4NDQ1RjA4RTU3M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTE4WY2o434il2PnlQsh6VnkO+ SpOTTF0CvG6NveIwtnp0ljS8J9aclcMMRooyDaSGLeB+cmokNpqWocet68B7qwQ+ vhx/ZJKHwoATZnsTVjs28CezgQyiWdU/2DCsN5TTVkO/BdUnpafFIHJrVMnrVi3M niapal3Bd+ncwAapiwPFZvkwJ7DPCLsnfkzPNxK81cXfIfyGfi8v0UsCX3JvsYW9 xlIfaJaAMfiJZetASU2lVGlKJgsvYzQld99mON+BfNQO6EmmeuH+YiuxFbRPXFAh lqYT0u2/sLkXYvOmwxP+PXDuleonaJktohuFw5K2rqzpnUzpCfuD4armdYURAgMB AAGjggILMIICBzAdBgNVHQ4EFgQU8mHYMsmjU++vTSvsjFyERfCOVz8wHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzE2Mjk5NDU2NzQxMzc3LzAvMzEzMDMzMmUzMjMy MzMyZTM2MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmff RDANBgkqhkiG9w0BAQsFAAOCAQEAbUQRMOOJ2UDXhNR950wHsvn3no/oGVVhVc0H avs2Xy+6fehEFVMFaAf73GgPRkQHQ0GBAkTLuUQRzIjQnWo1EVX+f7AOoZRFUowJ k7WfqEpN50ZQol2D5J2CltWGt99YLd25Ti9LiS6FxngQoq5pG8TE5k6X9ikgZNRR rXxpYgLv9c3OsJnOgXthR4ENLSbma0leyx1wyexl3LtRTBDq+RXuk2aPO6mxIR/S 2KNGUUFYkU/jYKYs6m74Z1UtWgYLRhoRu4gpooq6Lsq6cE82bAcut/Id69zW7Luf ml4seiJY3Dp8NZl6OZt0V8Vylxo/WSpRbhEE9OhYDwNhAMzjgQ== -----END CERTIFICATE-----Generated at Mon Apr 27 16:37:41 2026 by rpki-client