$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098866748322480129/0/3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa File: 3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa (raw, json) Hash identifier: s+D2jjcXHT/GQYsoTxwHVqiHduQEa+gXupnaABFCM4o= Subject key identifier: 63:68:70:09:01:29:7E:DB:FA:FE:33:E3:FC:D6:C1:C7:48:08:26:53 Certificate issuer: /CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Certificate serial: 5B1D8401D227E48A4BBA7A2BE5A251B0365DB51E Authority key identifier: 99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa Signing time: Thu 23 Apr 2026 02:00:00 +0000 ROA not before: Thu 23 Apr 2026 01:55:00 +0000 ROA not after: Thu 22 Apr 2027 02:00:00 +0000 asID: 17621 IP address blocks: 103.108.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Apr 2026 20:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:1d:84:01:d2:27:e4:8a:4b:ba:7a:2b:e5:a2:51:b0:36:5d:b5:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=995BA01C0B092573CADD5623058BBB6C2E0C6F9C Validity Not Before: Apr 23 01:55:00 2026 GMT Not After : Apr 22 02:00:00 2027 GMT Subject: CN=6368700901297EDBFAFE33E3FCD6C1C748082653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:8e:ae:98:0d:a6:db:73:1b:f5:a5:fb:92:93: 4a:a5:77:27:da:65:a3:14:5e:e5:22:a2:39:fc:84: 6a:f2:5a:9b:83:53:69:f3:9d:78:d0:c5:f8:db:ca: bd:da:a7:c8:76:74:dc:28:e0:5a:86:ee:a5:64:1a: e6:27:28:1f:c0:a3:3a:6d:e7:c8:f4:6b:8c:9c:75: 44:66:4d:57:8a:cd:1f:15:38:e1:d3:8b:03:1f:3e: 3c:c0:6c:1e:20:b2:7a:aa:9c:89:ee:0c:1b:40:d6: 24:3a:58:32:fc:05:35:4b:13:8e:36:f9:f3:bb:4c: 80:dd:a6:3e:be:3e:6b:d9:c8:b7:ed:b4:e7:4d:58: 19:32:9f:42:cf:50:f0:eb:4a:25:70:48:91:e7:6d: 85:f2:e8:66:09:da:83:12:d1:a6:10:e7:02:4f:33: f6:c9:ea:3a:88:ae:18:52:e6:29:70:2c:d8:13:51: 2d:b4:f6:5e:c8:95:6e:eb:42:79:18:f1:27:87:09: 0b:2e:93:75:8c:84:6a:d2:05:55:b7:14:d5:28:04: 32:8e:ca:0a:5d:84:00:f7:f8:36:a6:3f:55:90:5f: e8:71:09:db:d7:cb:5c:87:60:b7:c7:6b:85:03:e9: f9:b6:a2:05:e9:0f:19:2f:1e:ca:8f:76:36:29:e7: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:68:70:09:01:29:7E:DB:FA:FE:33:E3:FC:D6:C1:C7:48:08:26:53 X509v3 Authority Key Identifier: keyid:99:5B:A0:1C:0B:09:25:73:CA:DD:56:23:05:8B:BB:6C:2E:0C:6F:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/995BA01C0B092573CADD5623058BBB6C2E0C6F9C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098866748322480129/0/3130332e3130382e3234372e302f32342d3234203d3e203137363231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.108.247.0/24 Signature Algorithm: sha256WithRSAEncryption 65:3c:a9:a6:0d:0a:1e:62:99:5c:08:94:f1:58:59:be:25:cb: 14:a6:eb:ff:34:a7:6d:dd:3e:fc:84:3e:79:f3:6e:28:fa:fd: 3c:6c:05:f1:e5:f1:aa:83:39:ce:06:6d:7d:5c:4d:66:06:0e: a9:a4:56:fe:e1:51:ba:51:e3:2c:47:e0:a9:55:b9:91:76:a5: 37:3b:eb:de:e0:f9:b1:75:0a:3f:53:c2:eb:4b:ec:91:d5:56: 74:3e:b2:2f:0c:03:48:0d:45:45:ef:86:a4:55:a2:38:4e:a8: 2b:6a:b4:58:5e:36:44:d0:58:9a:0d:23:9f:0e:19:6f:aa:e5: 43:ac:fd:c5:12:2b:4c:47:6b:13:da:1d:60:dc:0d:63:9a:5b: c6:dc:ed:5b:ea:9e:62:25:f9:e4:9a:12:69:a1:4d:a0:91:25: 26:0d:c8:e4:18:3d:c3:7f:5f:88:34:05:bd:ae:dd:a6:8e:03: 65:b0:cd:9f:de:e2:05:3f:9f:cc:f9:5d:5b:90:31:09:e5:fe: 9f:32:39:a9:df:25:f5:2a:bc:da:99:7b:31:d2:cb:94:3e:7a: f2:d5:af:dc:ad:52:ac:3a:74:76:ed:2e:85:3a:4b:a7:8a:8f: 6d:0f:5c:67:bd:6f:22:0b:aa:17:c9:2a:e9:84:7f:e2:21:e7: 12:a0:93:53 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUWx2EAdIn5IpLunor5aJRsDZdtR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMy RTBDNkY5QzAeFw0yNjA0MjMwMTU1MDBaFw0yNzA0MjIwMjAwMDBaMDMxMTAvBgNV BAMTKDYzNjg3MDA5MDEyOTdFREJGQUZFMzNFM0ZDRDZDMUM3NDgwODI2NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsjq6YDabbcxv1pfuSk0qldyfa ZaMUXuUiojn8hGryWpuDU2nznXjQxfjbyr3ap8h2dNwo4FqG7qVkGuYnKB/Aozpt 58j0a4ycdURmTVeKzR8VOOHTiwMfPjzAbB4gsnqqnInuDBtA1iQ6WDL8BTVLE442 +fO7TIDdpj6+PmvZyLfttOdNWBkyn0LPUPDrSiVwSJHnbYXy6GYJ2oMS0aYQ5wJP M/bJ6jqIrhhS5ilwLNgTUS209l7IlW7rQnkY8SeHCQsuk3WMhGrSBVW3FNUoBDKO ygpdhAD3+DamP1WQX+hxCdvXy1yHYLfHa4UD6fm2ogXpDxkvHsqPdjYp5+dnAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUY2hwCQEpftv6/jPj/NbBx0gIJlMwHwYDVR0j BBgwFoAUmVugHAsJJXPK3VYjBYu7bC4Mb5wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODg2Njc0ODMyMjQ4MDEyOS8wLzk5NUJBMDFDMEIwOTI1NzNDQURENTYyMzA1OEJC QjZDMkUwQzZGOUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTk1QkEwMUMwQjA5MjU3M0NBREQ1NjIzMDU4QkJCNkMyRTBDNkY5Qy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTg4NjY3NDgzMjI0ODAxMjkvMC8zMTMwMzMyZTMx MzAzODJlMzIzNDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzNzM2MzIzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGds9zANBgkqhkiG9w0BAQsFAAOCAQEAZTyppg0KHmKZXAiU8VhZ viXLFKbr/zSnbd0+/IQ+efNuKPr9PGwF8eXxqoM5zgZtfVxNZgYOqaRW/uFRulHj LEfgqVW5kXalNzvr3uD5sXUKP1PC60vskdVWdD6yLwwDSA1FRe+GpFWiOE6oK2q0 WF42RNBYmg0jnw4Zb6rlQ6z9xRIrTEdrE9odYNwNY5pbxtztW+qeYiX55JoSaaFN oJElJg3I5Bg9w39fiDQFva7dpo4DZbDNn97iBT+fzPldW5AxCeX+nzI5qd8l9Sq8 2pl7MdLLlD568tWv3K1SrDp0du0uhTpLp4qPbQ9cZ71vIguqF8kq6YR/4iHnEqCT Uw== -----END CERTIFICATE-----Generated at Mon Apr 27 13:34:16 2026 by rpki-client