$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e203536303436.roa File: 3130332e3138332e3132342e302f32332d3234203d3e203536303436.roa (raw, json) Hash identifier: HYoG5cQcKyW7p9bL7UA6hs+pWS3kP8LpzMMxtPJBUmI= Subject key identifier: 66:8B:B3:9F:EB:08:6E:56:3C:1E:9C:58:CF:DF:53:84:7B:17:0F:A4 Certificate issuer: /CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Certificate serial: 35C6CFA4CE26340E4B98EE02388377B6A3C81FBF Authority key identifier: 53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e203536303436.roa Signing time: Mon 20 Apr 2026 06:53:03 +0000 ROA not before: Mon 20 Apr 2026 06:48:03 +0000 ROA not after: Mon 19 Apr 2027 06:53:03 +0000 asID: 56046 IP address blocks: 103.183.124.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 18:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:c6:cf:a4:ce:26:34:0e:4b:98:ee:02:38:83:77:b6:a3:c8:1f:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532EC95D9EE276D965620B7E40CA50B4AB8FCB0B Validity Not Before: Apr 20 06:48:03 2026 GMT Not After : Apr 19 06:53:03 2027 GMT Subject: CN=668BB39FEB086E563C1E9C58CFDF53847B170FA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e5:e5:d3:3c:74:fe:b5:ae:52:64:7a:21:02: 7c:dc:24:26:ad:04:80:4a:a4:a0:08:6a:1d:1e:aa: 34:8c:f5:8f:3b:c9:d2:e5:f7:39:46:61:1e:6f:e2: ae:e0:ff:8c:12:be:15:ba:8d:71:e6:da:56:41:28: 03:9f:27:dd:24:92:0f:5b:76:c2:2a:42:27:0d:18: 04:69:73:cf:a8:55:2a:07:40:6b:17:f3:2a:85:40: eb:ef:a0:ca:dc:5b:b2:04:3d:d8:6d:e7:43:25:64: 8a:97:21:7f:0b:e8:03:55:43:2e:50:53:5b:33:5a: 64:68:6a:51:36:f3:24:85:4a:8c:05:54:af:bd:b7: 31:17:09:ab:7d:e1:5d:78:3a:47:8b:24:43:d0:36: e0:38:37:2a:70:51:1c:47:7d:0b:a7:f9:2c:5c:32: c4:5f:19:7b:68:30:63:fc:50:36:35:a3:06:ff:19: 40:24:1f:59:eb:30:d3:09:2d:a4:f9:ae:78:0e:4a: b7:a5:4a:3e:6d:85:a9:3d:8a:bf:30:49:18:4e:0d: ac:ab:50:f0:b8:39:cb:5f:9b:c8:a2:d3:26:38:55: c2:16:a8:2d:b1:ad:55:20:06:0c:f6:d5:82:9a:01: 7b:51:14:8d:7e:f5:2c:1d:47:7c:b6:c7:40:a4:52: 9c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:8B:B3:9F:EB:08:6E:56:3C:1E:9C:58:CF:DF:53:84:7B:17:0F:A4 X509v3 Authority Key Identifier: keyid:53:2E:C9:5D:9E:E2:76:D9:65:62:0B:7E:40:CA:50:B4:AB:8F:CB:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/532EC95D9EE276D965620B7E40CA50B4AB8FCB0B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098490496617021442/0/3130332e3138332e3132342e302f32332d3234203d3e203536303436.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.183.124.0/23 Signature Algorithm: sha256WithRSAEncryption 11:bd:7b:69:fd:1a:78:59:8b:f4:1c:33:8b:96:97:fd:9b:23: 47:fc:4a:df:8a:b3:28:59:dc:d1:73:ec:0c:4c:d6:d1:97:57: 39:10:9c:68:0a:82:d8:e9:1d:0e:86:a3:94:ff:83:10:c3:8d: 99:52:53:14:98:96:01:b5:df:96:02:ec:87:65:f9:35:12:e0: 46:22:e9:a8:d8:5f:ca:5a:ef:66:ca:e4:6d:da:9d:92:b2:ae: c2:ad:1e:a6:e9:7b:72:75:44:8c:d4:a5:8c:e3:b5:bf:3d:73: f3:de:94:2b:e2:ff:8e:ec:0d:da:6a:11:16:f2:cb:67:c5:0b: d1:0f:87:15:b3:48:ef:b8:a2:94:07:49:e6:e9:6d:08:6c:d4: ba:b5:ea:70:d5:91:a6:58:1e:05:ba:5c:f7:49:86:ba:86:25: a6:b9:e7:9f:be:81:77:11:7d:3b:f2:51:96:14:82:91:e0:eb: 57:5c:99:3b:4c:c5:48:9a:af:ab:24:f9:7a:77:e6:f7:40:57: c5:26:73:af:31:01:1b:90:49:06:b6:1e:e3:65:e8:12:e8:9e: 4e:e7:40:0e:24:23:cf:a9:df:49:c1:62:3b:3b:e9:b2:66:d1: 20:04:12:68:d1:3d:b3:d9:83:6f:32:c7:46:7b:4d:f6:f1:56: cf:e8:8d:66 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNcbPpM4mNA5LmO4COIN3tqPIH78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRB QjhGQ0IwQjAeFw0yNjA0MjAwNjQ4MDNaFw0yNzA0MTkwNjUzMDNaMDMxMTAvBgNV BAMTKDY2OEJCMzlGRUIwODZFNTYzQzFFOUM1OENGREY1Mzg0N0IxNzBGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC45eXTPHT+ta5SZHohAnzcJCat BIBKpKAIah0eqjSM9Y87ydLl9zlGYR5v4q7g/4wSvhW6jXHm2lZBKAOfJ90kkg9b dsIqQicNGARpc8+oVSoHQGsX8yqFQOvvoMrcW7IEPdht50MlZIqXIX8L6ANVQy5Q U1szWmRoalE28ySFSowFVK+9tzEXCat94V14OkeLJEPQNuA4NypwURxHfQun+Sxc MsRfGXtoMGP8UDY1owb/GUAkH1nrMNMJLaT5rngOSrelSj5thak9ir8wSRhODayr UPC4Octfm8ii0yY4VcIWqC2xrVUgBgz21YKaAXtRFI1+9SwdR3y2x0CkUpydAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUZouzn+sIblY8HpxYz99ThHsXD6QwHwYDVR0j BBgwFoAUUy7JXZ7idtllYgt+QMpQtKuPywswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5MDQ5NjYxNzAyMTQ0Mi8wLzUzMkVDOTVEOUVFMjc2RDk2NTYyMEI3RTQwQ0E1 MEI0QUI4RkNCMEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTMyRUM5NUQ5RUUyNzZEOTY1NjIwQjdFNDBDQTUwQjRBQjhGQ0IwQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg0OTA0OTY2MTcwMjE0NDIvMC8zMTMwMzMyZTMx MzgzMzJlMzEzMjM0MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWe3fDANBgkqhkiG9w0BAQsFAAOCAQEAEb17af0aeFmL9Bwzi5aX /ZsjR/xK34qzKFnc0XPsDEzW0ZdXORCcaAqC2OkdDoajlP+DEMONmVJTFJiWAbXf lgLsh2X5NRLgRiLpqNhfylrvZsrkbdqdkrKuwq0epul7cnVEjNSljOO1vz1z896U K+L/juwN2moRFvLLZ8UL0Q+HFbNI77iilAdJ5ultCGzUurXqcNWRplgeBbpc90mG uoYlprnnn76BdxF9O/JRlhSCkeDrV1yZO0zFSJqvqyT5enfm90BXxSZzrzEBG5BJ BrYe42XoEuieTudADiQjz6nfScFiOzvpsmbRIAQSaNE9s9mDbzLHRntN9vFWz+iN Zg== -----END CERTIFICATE-----Generated at Tue Apr 21 22:52:35 2026 by rpki-client