$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3130332e32312e3134302e302f32322d3232203d3e2034383132.roa File: 3130332e32312e3134302e302f32322d3232203d3e2034383132.roa (raw, json) Hash identifier: yl0VnVjOJBB11Ksw/l6MI8tE6HFSWJZk+mBrBZTIapM= Subject key identifier: 09:3D:4A:FD:DB:C3:78:21:31:5E:F7:69:9C:4F:EB:62:8E:C9:1F:E0 Certificate issuer: /CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Certificate serial: 52B851CF2704201DC001E3725E3202709D50FA39 Authority key identifier: B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3130332e32312e3134302e302f32322d3232203d3e2034383132.roa Signing time: Mon 20 Apr 2026 08:16:34 +0000 ROA not before: Mon 20 Apr 2026 08:11:34 +0000 ROA not after: Mon 19 Apr 2027 08:16:34 +0000 asID: 4812 IP address blocks: 103.21.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 03:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:b8:51:cf:27:04:20:1d:c0:01:e3:72:5e:32:02:70:9d:50:fa:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B479B9B47F8AFC1062B8D469F62A6689067D35EA Validity Not Before: Apr 20 08:11:34 2026 GMT Not After : Apr 19 08:16:34 2027 GMT Subject: CN=093D4AFDDBC37821315EF7699C4FEB628EC91FE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1c:4b:a5:0c:18:18:42:dc:83:ca:86:0d:c8: 3c:5b:63:34:3b:9f:03:2e:ad:05:c6:de:31:55:f2: 1e:24:c1:ac:ef:d9:b4:27:1f:19:1e:4e:24:b5:25: 9b:54:f8:01:db:45:99:14:d1:80:0a:db:70:74:e6: d7:61:cc:b4:76:c8:f8:0d:14:6e:41:bb:3a:71:2f: 21:a0:89:90:33:68:cd:73:25:b5:50:f7:02:b3:15: bb:40:cb:15:3b:18:6f:ee:c0:b6:c7:b1:02:1e:41: 47:4f:3f:29:4b:1e:51:e6:6b:65:b9:40:aa:44:da: 17:a1:5c:1e:0b:00:4f:09:c6:22:ed:2a:ff:00:87: 60:b1:ca:f4:06:56:99:16:7f:3b:1f:3e:1f:e4:75: ea:0a:1f:27:fa:d8:77:5c:58:e7:48:99:48:ac:01: 65:7e:52:f7:ef:64:e2:d8:e7:e2:a3:80:8b:38:5c: 2d:bb:82:ba:be:39:ef:da:79:b1:65:2a:d9:ff:64: 31:3d:8a:79:e6:4a:8e:21:63:12:17:c0:93:7b:53: 40:26:18:88:61:38:09:1f:61:cc:58:87:25:4a:6b: ae:75:f4:36:34:b0:bc:79:5e:2a:01:a0:97:e3:78: be:50:b4:3d:0c:0c:b6:dc:b1:10:0a:82:86:d8:48: 36:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3D:4A:FD:DB:C3:78:21:31:5E:F7:69:9C:4F:EB:62:8E:C9:1F:E0 X509v3 Authority Key Identifier: keyid:B4:79:B9:B4:7F:8A:FC:10:62:B8:D4:69:F6:2A:66:89:06:7D:35:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/B479B9B47F8AFC1062B8D469F62A6689067D35EA.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B479B9B47F8AFC1062B8D469F62A6689067D35EA.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171092993/0/3130332e32312e3134302e302f32322d3232203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.21.140.0/22 Signature Algorithm: sha256WithRSAEncryption 41:52:b1:77:27:c5:48:88:68:cf:05:28:d2:18:9d:ab:df:b0: bc:ab:04:03:38:8a:c6:45:54:b7:0e:fb:fb:8f:4a:98:79:a6: fc:62:a9:c2:58:48:72:9a:ea:ce:f1:8b:4d:1b:5f:21:87:79: 0f:26:7d:f1:f2:d4:1e:29:c1:45:57:11:60:53:34:cf:c8:2a: df:94:d8:44:6a:88:09:47:8f:88:f5:09:c5:e1:40:65:46:80: b3:c5:d9:a0:86:fc:24:16:54:14:41:ad:bd:45:8e:59:4b:ca: 9c:b2:20:09:86:18:2e:de:87:9d:9f:c9:e5:1e:5f:44:73:bd: d6:f6:84:91:96:a7:74:dd:fa:24:0f:5e:f5:2b:28:87:a5:78: ad:37:bd:8c:8e:fa:b8:88:02:1f:96:3a:38:60:4b:a2:d9:ab: 5d:82:d2:c7:18:8d:90:c1:14:2b:76:4b:7a:1d:1f:0f:ab:50: 96:cf:e5:70:dc:b1:08:5e:b2:53:0d:72:00:a6:3b:3d:4c:a1: 90:5d:94:52:62:78:00:c6:2d:b2:68:1b:b4:78:e1:bb:7f:61: bd:2b:e6:2f:60:db:94:30:60:43:a7:13:9b:07:e8:88:b0:fe: b4:e8:bf:9a:36:d5:ce:9a:a6:f1:a7:89:1e:ec:20:9c:20:c5: c1:8c:cf:fd -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUUrhRzycEIB3AAeNyXjICcJ1Q+jkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkw NjdEMzVFQTAeFw0yNjA0MjAwODExMzRaFw0yNzA0MTkwODE2MzRaMDMxMTAvBgNV BAMTKDA5M0Q0QUZEREJDMzc4MjEzMTVFRjc2OTlDNEZFQjYyOEVDOTFGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCHEulDBgYQtyDyoYNyDxbYzQ7 nwMurQXG3jFV8h4kwazv2bQnHxkeTiS1JZtU+AHbRZkU0YAK23B05tdhzLR2yPgN FG5BuzpxLyGgiZAzaM1zJbVQ9wKzFbtAyxU7GG/uwLbHsQIeQUdPPylLHlHma2W5 QKpE2hehXB4LAE8JxiLtKv8Ah2CxyvQGVpkWfzsfPh/kdeoKHyf62HdcWOdImUis AWV+UvfvZOLY5+KjgIs4XC27grq+Oe/aebFlKtn/ZDE9innmSo4hYxIXwJN7U0Am GIhhOAkfYcxYhyVKa6519DY0sLx5XioBoJfjeL5QtD0MDLbcsRAKgobYSDYlAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUCT1K/dvDeCExXvdpnE/rYo7JH+AwHwYDVR0j BBgwFoAUtHm5tH+K/BBiuNRp9ipmiQZ9NeowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODUxNTY4MjE3MTA5Mjk5My8wL0I0NzlCOUI0N0Y4QUZDMTA2MkI4RDQ2OUY2MkE2 Njg5MDY3RDM1RUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjQ3OUI5QjQ3RjhBRkMxMDYyQjhENDY5RjYyQTY2ODkwNjdEMzVFQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NTE1NjgyMTcxMDkyOTkzLzAvMzEzMDMzMmUzMjMx MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcVjDANBgkqhkiG9w0BAQsFAAOCAQEAQVKxdyfFSIhozwUo0hidq9+wvKsE AziKxkVUtw77+49KmHmm/GKpwlhIcprqzvGLTRtfIYd5DyZ98fLUHinBRVcRYFM0 z8gq35TYRGqICUePiPUJxeFAZUaAs8XZoIb8JBZUFEGtvUWOWUvKnLIgCYYYLt6H nZ/J5R5fRHO91vaEkZandN36JA9e9Ssoh6V4rTe9jI76uIgCH5Y6OGBLotmrXYLS xxiNkMEUK3ZLeh0fD6tQls/lcNyxCF6yUw1yAKY7PUyhkF2UUmJ4AMYtsmgbtHjh u39hvSvmL2DblDBgQ6cTmwfoiLD+tOi/mjbVzpqm8aeJHuwgnCDFwYzP/Q== -----END CERTIFICATE-----Generated at Mon Apr 27 08:24:34 2026 by rpki-client