$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096716299456741377/0/3130332e3232332e37362e302f32322d3232203d3e2030.roa File: 3130332e3232332e37362e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: lsMCQiUAYT2yLHixyfGmRfrF8XX2XYil8P8ZKQUWZ5w= Subject key identifier: FB:35:24:B7:2A:5A:46:98:B8:A4:54:53:9E:8B:B6:AE:8C:0C:BE:B8 Certificate issuer: /CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Certificate serial: 2D673F131F95AA07C57547A338718FE9D9D89176 Authority key identifier: BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/3130332e3232332e37362e302f32322d3232203d3e2030.roa Signing time: Mon 27 Apr 2026 03:44:04 +0000 ROA not before: Mon 27 Apr 2026 03:39:04 +0000 ROA not after: Mon 26 Apr 2027 03:44:04 +0000 asID: 0 IP address blocks: 103.223.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 07:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:67:3f:13:1f:95:aa:07:c5:75:47:a3:38:71:8f:e9:d9:d8:91:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF2CC5E7AE1027E33C5247AB67FBD696135E32B3 Validity Not Before: Apr 27 03:39:04 2026 GMT Not After : Apr 26 03:44:04 2027 GMT Subject: CN=FB3524B72A5A4698B8A454539E8BB6AE8C0CBEB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:eb:74:bb:87:12:d0:85:6f:18:8e:9f:ed:7f: bb:00:60:c9:36:c3:ef:13:4d:bd:9d:08:7e:54:af: b5:42:49:de:5b:84:4f:46:ec:3b:32:00:d9:60:57: 36:f7:76:28:59:68:a4:5a:f7:a2:fb:52:30:2f:2a: 48:04:2a:bb:3b:59:4a:1a:a7:f3:1f:47:1a:41:00: 8c:89:11:63:b1:cb:9a:ba:d7:a3:27:ed:e6:3e:d0: 45:e9:0a:32:08:93:70:b1:11:53:d1:f3:b5:87:2c: 44:23:b0:9a:e9:1d:ef:25:09:04:c9:6a:7d:bf:34: 92:9c:1a:44:e1:29:0a:70:18:11:4f:30:32:00:6d: fe:25:61:74:de:5c:3e:e4:c7:03:fa:71:5e:dc:62: ea:c2:e3:e2:60:45:2a:72:e4:bd:eb:54:ae:3f:a2: 87:f5:e0:41:5c:97:41:bc:00:a4:b3:83:b2:e8:bf: 22:d2:ac:a9:cb:65:dd:42:9e:17:63:9b:ec:ad:3a: 4d:67:44:ea:ea:af:41:34:a6:fd:8d:8e:80:81:86: f7:28:fe:2c:d2:a6:ae:95:68:b8:8b:5c:09:bb:4f: 0c:f2:51:2c:52:0b:7e:7a:cb:e6:aa:be:a8:34:67: cb:41:d3:ea:06:c1:2b:68:38:59:53:cb:86:84:9d: 4c:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:35:24:B7:2A:5A:46:98:B8:A4:54:53:9E:8B:B6:AE:8C:0C:BE:B8 X509v3 Authority Key Identifier: keyid:BF:2C:C5:E7:AE:10:27:E3:3C:52:47:AB:67:FB:D6:96:13:5E:32:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BF2CC5E7AE1027E33C5247AB67FBD696135E32B3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096716299456741377/0/3130332e3232332e37362e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.223.76.0/22 Signature Algorithm: sha256WithRSAEncryption 4e:a7:fd:05:bd:66:9c:1c:3e:15:d3:67:cb:e1:28:e3:7f:80: 7d:6a:48:27:b0:53:6f:01:c2:ec:c8:71:a7:69:4a:69:44:35: a2:29:07:be:08:22:8e:2e:29:48:0f:d6:92:30:e5:ce:15:0f: 2e:d1:1a:a8:4c:53:44:43:07:d8:96:4c:26:64:77:03:bd:bc: 95:8c:29:48:06:25:ad:98:70:65:10:a7:24:fd:03:36:4f:c6: f3:9d:ca:96:50:f0:e3:e5:2b:cc:6f:04:ad:f9:fe:a7:9f:e1: 87:23:ac:b0:a9:39:f8:4f:99:8e:13:92:a2:a0:99:47:54:b3: 17:30:6c:9d:72:e6:86:97:33:79:19:f2:11:de:e8:32:3b:db: af:6f:86:ba:4b:37:81:4e:da:f8:07:3c:ff:7c:5a:21:3f:a5: 42:7e:80:34:95:df:12:cc:23:18:1d:77:62:0a:86:43:04:cb: 2e:48:f1:b8:3b:85:52:39:58:c0:2f:1f:4b:9f:76:04:5c:e5: 2a:67:20:ed:29:a6:31:e7:f3:dd:54:2f:06:ee:40:cd:f4:58: 0f:3e:12:53:84:50:44:4e:b9:46:60:c6:8c:59:56:4b:43:ee: 30:58:dc:da:23:f4:a1:1d:ad:34:70:b9:85:df:ee:ef:f4:9f: 53:c4:8a:c5 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIULWc/Ex+VqgfFdUejOHGP6dnYkXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYx MzVFMzJCMzAeFw0yNjA0MjcwMzM5MDRaFw0yNzA0MjYwMzQ0MDRaMDMxMTAvBgNV BAMTKEZCMzUyNEI3MkE1QTQ2OThCOEE0NTQ1MzlFOEJCNkFFOEMwQ0JFQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ63S7hxLQhW8Yjp/tf7sAYMk2 w+8TTb2dCH5Ur7VCSd5bhE9G7DsyANlgVzb3dihZaKRa96L7UjAvKkgEKrs7WUoa p/MfRxpBAIyJEWOxy5q616Mn7eY+0EXpCjIIk3CxEVPR87WHLEQjsJrpHe8lCQTJ an2/NJKcGkThKQpwGBFPMDIAbf4lYXTeXD7kxwP6cV7cYurC4+JgRSpy5L3rVK4/ oof14EFcl0G8AKSzg7LovyLSrKnLZd1Cnhdjm+ytOk1nROrqr0E0pv2NjoCBhvco /izSpq6VaLiLXAm7TwzyUSxSC356y+aqvqg0Z8tB0+oGwStoOFlTy4aEnUyfAgMB AAGjggILMIICBzAdBgNVHQ4EFgQU+zUktypaRpi4pFRTnou2rowMvrgwHwYDVR0j BBgwFoAUvyzF564QJ+M8UkerZ/vWlhNeMrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcxNjI5OTQ1Njc0MTM3Ny8wL0JGMkNDNUU3QUUxMDI3RTMzQzUyNDdBQjY3RkJE Njk2MTM1RTMyQjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkYyQ0M1RTdBRTEwMjdFMzNDNTI0N0FCNjdGQkQ2OTYxMzVFMzJCMy5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2NzE2Mjk5NDU2NzQxMzc3LzAvMzEzMDMzMmUzMjMy MzMyZTM3MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmff TDANBgkqhkiG9w0BAQsFAAOCAQEATqf9Bb1mnBw+FdNny+Eo43+AfWpIJ7BTbwHC 7Mhxp2lKaUQ1oikHvggiji4pSA/WkjDlzhUPLtEaqExTREMH2JZMJmR3A728lYwp SAYlrZhwZRCnJP0DNk/G853KllDw4+UrzG8Erfn+p5/hhyOssKk5+E+ZjhOSoqCZ R1SzFzBsnXLmhpczeRnyEd7oMjvbr2+Guks3gU7a+Ac8/3xaIT+lQn6ANJXfEswj GB13YgqGQwTLLkjxuDuFUjlYwC8fS592BFzlKmcg7SmmMefz3VQvBu5AzfRYDz4S U4RQRE65RmDGjFlWS0PuMFjc2iP0oR2tNHC5hd/u7/SfU8SKxQ== -----END CERTIFICATE-----Generated at Mon Apr 27 16:37:41 2026 by rpki-client