$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e203233363530.roa File: 3130332e3138332e3132322e302f32332d3234203d3e203233363530.roa (raw, json) Hash identifier: JcdO+3r0aD53kTB+3F/anxsgPOsfTMIPnoRq4UI3MaQ= Subject key identifier: 29:21:58:44:E8:E1:42:76:13:A5:38:AC:D2:51:DE:9C:F3:23:66:18 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 4ADADAA2B8F2DB8ABF65554DF9DF188EEB2957A5 Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e203233363530.roa Signing time: Mon 20 Apr 2026 06:38:34 +0000 ROA not before: Mon 20 Apr 2026 06:33:34 +0000 ROA not after: Mon 19 Apr 2027 06:38:34 +0000 asID: 23650 IP address blocks: 103.183.122.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:da:da:a2:b8:f2:db:8a:bf:65:55:4d:f9:df:18:8e:eb:29:57:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:33:34 2026 GMT Not After : Apr 19 06:38:34 2027 GMT Subject: CN=29215844E8E1427613A538ACD251DE9CF3236618 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:93:e4:e9:65:6c:ce:7a:e0:43:c8:0b:58:1e: 0a:a8:57:25:5f:9f:f6:f6:1c:5a:c8:15:fa:37:8f: 6f:0a:20:6a:b4:51:47:5c:f7:12:d3:d3:49:d6:5c: 78:4a:86:fb:bc:af:de:05:0c:3c:08:4a:12:1e:82: 5a:19:8b:15:55:c9:67:94:ad:bb:7c:65:d2:a6:c2: 0e:b5:16:5d:11:b6:8c:ba:e8:02:13:86:03:bf:8e: 89:0d:ee:ed:a8:de:5c:18:88:12:02:16:b1:40:de: 74:7d:05:d1:bb:a9:2a:c5:18:60:ca:c6:01:16:82: 0b:4f:fa:6f:97:4b:2b:6b:b7:c8:36:90:05:e5:9c: 57:f1:2c:8a:02:64:7b:a4:83:47:ad:56:c2:42:6e: 06:3c:cd:7a:11:3d:db:71:3b:50:cc:02:09:23:89: f3:15:14:4a:1f:22:15:4b:a2:fe:7e:b9:82:54:aa: 33:e0:78:cd:31:2d:90:9f:b3:3d:fe:32:ff:e9:5f: f0:c0:af:39:46:e7:a3:94:d0:8e:ad:9d:aa:92:8d: 9f:fb:67:bf:ac:46:c8:93:87:66:d5:6a:b0:a1:78: 10:94:ec:52:51:c2:3a:bc:f6:c2:98:76:6c:02:bf: 95:db:9a:e6:22:0f:11:56:37:ab:eb:b2:4c:2c:55: 5d:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:58:44:E8:E1:42:76:13:A5:38:AC:D2:51:DE:9C:F3:23:66:18 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132322e302f32332d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.122.0/23 Signature Algorithm: sha256WithRSAEncryption 58:2f:31:70:41:04:80:b0:7f:ad:b8:99:db:ce:1b:b8:63:aa: 42:7c:1c:aa:9d:f4:b1:54:d6:1c:25:cb:e5:03:41:3c:f3:ef: 19:d5:12:5d:73:fd:61:94:94:d2:be:22:7f:3c:44:4b:7e:5b: 7f:8d:40:b2:d4:56:f1:33:bf:57:be:6a:2c:fd:79:07:1d:5c: a9:1d:36:b7:09:e4:b3:ec:a9:f2:be:91:86:09:b0:fa:ef:35: 32:0a:01:7a:c5:e7:0a:a9:c4:17:63:9d:4c:75:4c:5f:04:d7: 16:91:e5:b7:f5:4a:23:c3:3f:d4:de:38:fa:a1:ec:aa:a2:5f: 89:a6:10:4a:65:98:3f:8c:3e:6f:89:ba:77:d8:5f:65:8d:ae: 2c:3d:07:1f:f2:2d:2d:e6:48:6b:8d:09:94:9f:8b:41:16:2d: f5:6a:77:64:eb:b7:30:84:43:87:6c:ee:01:a8:b3:e2:ad:c5: 7e:c9:ae:48:0f:f8:e0:0e:05:3a:3b:4f:5c:7e:66:f6:2f:c5: b7:2b:5a:1b:b0:3d:ae:4d:52:32:f3:b2:f4:a9:fa:09:d7:d0: e1:bd:66:c2:41:a4:4d:d7:d2:09:32:f4:6c:4d:99:7c:d0:40: 9b:d1:25:3f:44:49:42:9c:24:5a:d2:cc:6d:3f:ea:88:9d:e9: 45:e1:e7:ac -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUStraorjy24q/ZVVN+d8YjuspV6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjMzMzRaFw0yNzA0MTkwNjM4MzRaMDMxMTAvBgNV BAMTKDI5MjE1ODQ0RThFMTQyNzYxM0E1MzhBQ0QyNTFERTlDRjMyMzY2MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJk+TpZWzOeuBDyAtYHgqoVyVf n/b2HFrIFfo3j28KIGq0UUdc9xLT00nWXHhKhvu8r94FDDwIShIegloZixVVyWeU rbt8ZdKmwg61Fl0Rtoy66AIThgO/jokN7u2o3lwYiBICFrFA3nR9BdG7qSrFGGDK xgEWggtP+m+XSytrt8g2kAXlnFfxLIoCZHukg0etVsJCbgY8zXoRPdtxO1DMAgkj ifMVFEofIhVLov5+uYJUqjPgeM0xLZCfsz3+Mv/pX/DArzlG56OU0I6tnaqSjZ/7 Z7+sRsiTh2bVarCheBCU7FJRwjq89sKYdmwCv5XbmuYiDxFWN6vrskwsVV19AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUKSFYROjhQnYTpTis0lHenPMjZhgwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zMTMwMzMyZTMx MzgzMzJlMzEzMjMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe3ejANBgkqhkiG9w0BAQsFAAOCAQEAWC8xcEEEgLB/rbiZ284b uGOqQnwcqp30sVTWHCXL5QNBPPPvGdUSXXP9YZSU0r4ifzxES35bf41AstRW8TO/ V75qLP15Bx1cqR02twnks+yp8r6Rhgmw+u81MgoBesXnCqnEF2OdTHVMXwTXFpHl t/VKI8M/1N44+qHsqqJfiaYQSmWYP4w+b4m6d9hfZY2uLD0HH/ItLeZIa40JlJ+L QRYt9Wp3ZOu3MIRDh2zuAaiz4q3FfsmuSA/44A4FOjtPXH5m9i/FtytaG7A9rk1S MvOy9Kn6CdfQ4b1mwkGkTdfSCTL0bE2ZfNBAm9ElP0RJQpwkWtLMbT/qiJ3pReHn rA== -----END CERTIFICATE-----Generated at Wed Apr 22 04:05:13 2026 by rpki-client