$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489159904919553/0/3130332e35362e36302e302f32322d3234203d3e2034383337.roa File: 3130332e35362e36302e302f32322d3234203d3e2034383337.roa (raw, json) Hash identifier: mKJlxyr/WRbef4OB9emm/+yQBALGZtxkCU7lKS7hZzI= Subject key identifier: 7D:D0:B7:E5:24:C4:3F:33:0D:E3:BF:10:11:99:EA:04:6A:2C:5A:8E Certificate issuer: /CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Certificate serial: 3821E4B6A7F55C097C32CF2A6337220CEBEFD708 Authority key identifier: 8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/3130332e35362e36302e302f32322d3234203d3e2034383337.roa Signing time: Mon 20 Apr 2026 06:04:47 +0000 ROA not before: Mon 20 Apr 2026 05:59:47 +0000 ROA not after: Mon 19 Apr 2027 06:04:47 +0000 asID: 4837 IP address blocks: 103.56.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:37:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:21:e4:b6:a7:f5:5c:09:7c:32:cf:2a:63:37:22:0c:eb:ef:d7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8D5E2A2591F29289669C424496BF44B8A3F7EBD7 Validity Not Before: Apr 20 05:59:47 2026 GMT Not After : Apr 19 06:04:47 2027 GMT Subject: CN=7DD0B7E524C43F330DE3BF101199EA046A2C5A8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:15:77:78:8b:9a:7b:bb:d4:e2:ff:83:8e: 0b:b8:b5:e8:d7:d0:15:92:e7:ab:41:70:22:8f:6f: f5:d2:00:cb:92:6b:d7:56:83:97:e9:55:e1:e7:4d: 98:31:19:63:bc:33:c0:83:52:b8:21:16:82:a0:8d: 60:c5:be:2e:5e:8f:d9:d4:08:67:8c:25:22:d2:16: 7d:14:a1:fa:cf:d2:4e:6c:55:c0:8d:e1:6b:ce:0d: a7:dc:30:40:e7:cc:46:f4:99:22:dd:0e:30:f5:e8: aa:a9:a4:b5:8b:32:3b:ff:6f:b2:0c:5c:e0:eb:3f: 38:43:c8:08:3f:19:9d:8d:f5:a4:48:57:ed:5f:25: 02:f2:ad:cb:54:3b:8e:81:2c:e9:0b:93:92:e6:9d: 6e:d7:40:e4:0b:2b:fc:2c:29:be:88:bb:a0:82:9c: 9d:82:4b:96:13:ca:06:38:23:95:6e:f8:d6:05:3e: c1:8e:1d:dd:32:3d:1d:04:2b:f7:fc:de:91:15:c4: c1:37:cc:65:e0:84:4a:67:b6:a6:f9:90:9a:df:a6: ca:4f:6a:d4:b1:19:8e:be:2a:5a:4c:2a:40:5b:8d: 11:ef:51:37:5e:e5:58:4a:a9:fd:0b:1a:80:58:40: e0:65:7d:04:ea:34:5f:60:b5:27:99:eb:58:18:8f: 4d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D0:B7:E5:24:C4:3F:33:0D:E3:BF:10:11:99:EA:04:6A:2C:5A:8E X509v3 Authority Key Identifier: keyid:8D:5E:2A:25:91:F2:92:89:66:9C:42:44:96:BF:44:B8:A3:F7:EB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8D5E2A2591F29289669C424496BF44B8A3F7EBD7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489159904919553/0/3130332e35362e36302e302f32322d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.56.60.0/22 Signature Algorithm: sha256WithRSAEncryption 1f:01:5c:43:41:01:92:87:bc:bc:1b:47:63:29:c8:ef:20:4b: f2:62:79:11:63:bf:94:4f:91:0f:97:d7:f0:43:0f:47:19:3e: 81:8a:7b:c4:14:a8:42:7c:04:b9:e0:c1:3f:bf:e8:4f:16:52: 48:3e:f3:07:6b:2a:8d:32:ed:b2:e8:bc:8e:e3:83:1e:c0:7b: 44:9f:11:e2:e0:8c:d6:cd:b2:88:dc:bd:ae:f2:29:a9:e0:4e: 8b:94:09:1f:fb:88:d4:48:be:e9:51:ba:46:d3:dd:ab:ad:9d: 0a:22:5d:b3:01:d8:2d:73:00:b2:a6:f6:14:ef:3a:6e:1b:ee: 2c:e8:75:a9:71:bf:78:8d:46:4a:54:11:3b:a1:c5:e7:39:d8: bd:44:8c:f6:89:d5:68:2c:1a:2a:76:c2:7c:ea:3d:2e:5d:6b: 02:ca:0d:41:d1:fe:0f:c8:fa:3e:00:3d:aa:94:bd:58:73:55: c9:34:a2:02:77:b7:5b:78:83:5f:13:c9:78:14:06:12:5b:11: e6:35:84:f9:98:d9:3d:ba:19:cf:95:47:f0:91:cb:9f:03:37: cf:1e:9e:65:1d:be:cc:2e:05:89:04:78:64:fa:4f:df:78:59: 4b:be:e4:72:4d:ae:ce:f1:41:06:15:1e:9e:42:7e:0c:28:91: 2e:76:48:1a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUOCHktqf1XAl8Ms8qYzciDOvv1wgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhB M0Y3RUJENzAeFw0yNjA0MjAwNTU5NDdaFw0yNzA0MTkwNjA0NDdaMDMxMTAvBgNV BAMTKDdERDBCN0U1MjRDNDNGMzMwREUzQkYxMDExOTlFQTA0NkEyQzVBOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs7xV3eIuae7vU4v+Djgu4tejX 0BWS56tBcCKPb/XSAMuSa9dWg5fpVeHnTZgxGWO8M8CDUrghFoKgjWDFvi5ej9nU CGeMJSLSFn0UofrP0k5sVcCN4WvODafcMEDnzEb0mSLdDjD16KqppLWLMjv/b7IM XODrPzhDyAg/GZ2N9aRIV+1fJQLyrctUO46BLOkLk5LmnW7XQOQLK/wsKb6Iu6CC nJ2CS5YTygY4I5Vu+NYFPsGOHd0yPR0EK/f83pEVxME3zGXghEpntqb5kJrfpspP atSxGY6+KlpMKkBbjRHvUTde5VhKqf0LGoBYQOBlfQTqNF9gtSeZ61gYj01jAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUfdC35STEPzMN478QEZnqBGosWo4wHwYDVR0j BBgwFoAUjV4qJZHykolmnEJElr9EuKP369cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ4OTE1OTkwNDkxOTU1My8wLzhENUUyQTI1OTFGMjkyODk2NjlDNDI0NDk2QkY0 NEI4QTNGN0VCRDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEQ1RTJBMjU5MUYyOTI4OTY2OUM0MjQ0OTZCRjQ0QjhBM0Y3RUJENy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDg5MTU5OTA0OTE5NTUzLzAvMzEzMDMzMmUzNTM2 MmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAJnODwwDQYJKoZIhvcNAQELBQADggEBAB8BXENBAZKHvLwbR2MpyO8gS/JieRFj v5RPkQ+X1/BDD0cZPoGKe8QUqEJ8BLngwT+/6E8WUkg+8wdrKo0y7bLovI7jgx7A e0SfEeLgjNbNsojcva7yKangTouUCR/7iNRIvulRukbT3autnQoiXbMB2C1zALKm 9hTvOm4b7izodalxv3iNRkpUETuhxec52L1EjPaJ1WgsGip2wnzqPS5dawLKDUHR /g/I+j4APaqUvVhzVck0ogJ3t1t4g18TyXgUBhJbEeY1hPmY2T26Gc+VR/CRy58D N88enmUdvswuBYkEeGT6T994WUu+5HJNrs7xQQYVHp5CfgwokS52SBo= -----END CERTIFICATE-----Generated at Mon Apr 27 20:38:21 2026 by rpki-client