$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132342e302f32322d3232203d3e203633363534.roa File: 3130332e37382e3132342e302f32322d3232203d3e203633363534.roa (raw, json) Hash identifier: uYs6fO1/g3sgQhRLmL6xn7AxEm3lgSIqHQsxteKIieA= Subject key identifier: C9:A4:CB:84:94:20:9F:69:91:14:4C:CE:92:58:78:6C:B5:B8:B2:B2 Certificate issuer: /CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Certificate serial: 4B7DEBE85E2600B1B23FB998E9DE160FD34BD53B Authority key identifier: CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132342e302f32322d3232203d3e203633363534.roa Signing time: Mon 27 Apr 2026 01:30:52 +0000 ROA not before: Mon 27 Apr 2026 01:25:52 +0000 ROA not after: Mon 26 Apr 2027 01:30:52 +0000 asID: 63654 IP address blocks: 103.78.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 03:14:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7d:eb:e8:5e:26:00:b1:b2:3f:b9:98:e9:de:16:0f:d3:4b:d5:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CD2AB13A444BFE19493186434EE872CEC8A1952E Validity Not Before: Apr 27 01:25:52 2026 GMT Not After : Apr 26 01:30:52 2027 GMT Subject: CN=C9A4CB8494209F6991144CCE9258786CB5B8B2B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b9:1c:a3:15:7a:dd:1e:c1:f8:5b:8a:b7:dd: 31:61:0f:d3:97:fd:56:e3:33:d3:f3:11:5c:29:c9: 7a:21:0b:1c:ce:9b:5f:9e:95:b3:03:51:d1:79:7f: af:33:86:86:7f:cc:90:3e:25:fc:09:c9:f2:4c:fa: 73:bb:fc:32:34:85:fd:5c:7f:ab:b8:8f:2b:79:30: df:e4:4e:da:e0:de:15:6f:0f:9f:6a:a2:ce:13:a3: e3:a4:95:30:8a:02:f2:70:63:37:fc:0a:ee:6a:39: 01:5e:66:bc:51:60:ed:2d:31:98:85:a3:e2:ac:c4: 87:6d:1a:d2:97:a8:ad:cf:30:fc:3f:7d:1d:95:24: 41:4b:94:7c:1f:78:76:a4:b5:76:56:c8:87:51:3a: 99:52:5d:c6:fc:94:bc:78:f9:1d:4b:48:51:14:f0: 4d:ba:e1:ba:de:09:75:5c:37:98:c6:0d:47:72:bd: 76:b6:d5:8d:d8:f4:87:a4:54:ea:4f:ed:d2:27:43: c4:84:12:1e:b2:b2:a0:71:ec:52:2b:65:43:7b:c9: 0c:b5:b3:df:62:ed:d7:f2:bd:97:d8:b4:01:09:86: f0:01:84:f5:af:48:46:4b:10:75:9c:92:92:09:36: 40:bf:c3:41:96:44:b9:38:e2:6d:45:13:1a:48:13: 65:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A4:CB:84:94:20:9F:69:91:14:4C:CE:92:58:78:6C:B5:B8:B2:B2 X509v3 Authority Key Identifier: keyid:CD:2A:B1:3A:44:4B:FE:19:49:31:86:43:4E:E8:72:CE:C8:A1:95:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/CD2AB13A444BFE19493186434EE872CEC8A1952E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CD2AB13A444BFE19493186434EE872CEC8A1952E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097041815845994499/0/3130332e37382e3132342e302f32322d3232203d3e203633363534.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.78.124.0/22 Signature Algorithm: sha256WithRSAEncryption 73:8c:29:88:e8:bc:59:82:59:21:25:f4:88:e4:87:91:87:de: 8f:92:16:2c:69:75:9a:34:e3:46:0b:8c:c4:b3:e8:f6:fc:7a: db:d0:1d:db:8a:c4:af:6a:db:cc:9e:e0:30:f0:86:c4:cf:40: 2a:9d:ce:95:84:a0:19:11:0b:23:6f:70:b1:32:51:71:48:65: 39:5e:d2:a4:96:bb:3e:a3:08:bc:ad:5b:20:0e:3e:62:f2:fa: 89:08:7d:4a:b5:0a:ed:06:e3:10:18:c2:21:7b:cb:c6:80:32: c5:c2:f1:6b:04:6c:5e:6b:a5:b1:e4:f1:4a:49:33:e9:b9:35: b3:21:ae:1e:e5:50:79:85:82:68:a2:0d:73:19:bb:b7:3b:a5: b7:a4:23:21:a6:4c:43:fd:19:89:bf:d9:93:2b:14:ba:96:c8: d3:a1:ba:ff:0e:f9:41:f2:5e:6f:82:29:ac:05:2d:ec:5b:07: 6e:9f:74:6a:98:b3:f6:cd:68:76:5c:fc:8b:c2:ea:17:58:24: 54:b8:cb:9d:a3:74:34:7c:26:9f:fc:f8:42:42:1a:00:c1:a8: 2f:bb:c0:51:2e:bf:cd:32:96:17:db:cf:2e:f5:5b:0d:75:c6: b5:54:01:4e:ab:86:ed:72:d8:c1:a5:62:35:1c:2f:34:56:df: 0f:0a:93:d9 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUS33r6F4mALGyP7mY6d4WD9NL1TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VD OEExOTUyRTAeFw0yNjA0MjcwMTI1NTJaFw0yNzA0MjYwMTMwNTJaMDMxMTAvBgNV BAMTKEM5QTRDQjg0OTQyMDlGNjk5MTE0NENDRTkyNTg3ODZDQjVCOEIyQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjuRyjFXrdHsH4W4q33TFhD9OX /VbjM9PzEVwpyXohCxzOm1+elbMDUdF5f68zhoZ/zJA+JfwJyfJM+nO7/DI0hf1c f6u4jyt5MN/kTtrg3hVvD59qos4To+OklTCKAvJwYzf8Cu5qOQFeZrxRYO0tMZiF o+KsxIdtGtKXqK3PMPw/fR2VJEFLlHwfeHaktXZWyIdROplSXcb8lLx4+R1LSFEU 8E264breCXVcN5jGDUdyvXa21Y3Y9IekVOpP7dInQ8SEEh6ysqBx7FIrZUN7yQy1 s99i7dfyvZfYtAEJhvABhPWvSEZLEHWckpIJNkC/w0GWRLk44m1FExpIE2X1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUyaTLhJQgn2mRFEzOklh4bLW4srIwHwYDVR0j BBgwFoAUzSqxOkRL/hlJMYZDTuhyzsihlS4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA0MTgxNTg0NTk5NDQ5OS8wL0NEMkFCMTNBNDQ0QkZFMTk0OTMxODY0MzRFRTg3 MkNFQzhBMTk1MkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0QyQUIxM0E0NDRCRkUxOTQ5MzE4NjQzNEVFODcyQ0VDOEExOTUyRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NzA0MTgxNTg0NTk5NDQ5OS8wLzMxMzAzMzJlMzcz ODJlMzEzMjM0MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzUzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmdOfDANBgkqhkiG9w0BAQsFAAOCAQEAc4wpiOi8WYJZISX0iOSHkYfe j5IWLGl1mjTjRguMxLPo9vx629Ad24rEr2rbzJ7gMPCGxM9AKp3OlYSgGRELI29w sTJRcUhlOV7SpJa7PqMIvK1bIA4+YvL6iQh9SrUK7QbjEBjCIXvLxoAyxcLxawRs XmulseTxSkkz6bk1syGuHuVQeYWCaKINcxm7tzult6QjIaZMQ/0Zib/ZkysUupbI 06G6/w75QfJeb4IprAUt7FsHbp90apiz9s1odlz8i8LqF1gkVLjLnaN0NHwmn/z4 QkIaAMGoL7vAUS6/zTKWF9vPLvVbDXXGtVQBTquG7XLYwaViNRwvNFbfDwqT2Q== -----END CERTIFICATE-----Generated at Mon Apr 27 19:26:15 2026 by rpki-client