$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa File: 3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa (raw, json) Hash identifier: MJV3liXPzb+8HJt4Ngb1akXn1l5wwQw1ddvEgcsiGwE= Subject key identifier: 0A:96:41:8A:F0:17:2C:0F:38:99:37:33:EC:AD:1A:3C:FA:BF:DA:80 Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Certificate serial: 4F50545E0EA72D27ABCD5C3C52700FE922F780A7 Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa Signing time: Wed 22 Apr 2026 06:18:51 +0000 ROA not before: Wed 22 Apr 2026 06:13:51 +0000 ROA not after: Wed 21 Apr 2027 06:18:51 +0000 asID: 59072 IP address blocks: 103.238.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:50:54:5e:0e:a7:2d:27:ab:cd:5c:3c:52:70:0f:e9:22:f7:80:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Validity Not Before: Apr 22 06:13:51 2026 GMT Not After : Apr 21 06:18:51 2027 GMT Subject: CN=0A96418AF0172C0F38993733ECAD1A3CFABFDA80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b1:83:5b:de:4c:e0:d3:ad:c8:7c:6f:e8:1a: 97:84:08:5a:d4:5c:09:72:c1:e9:67:c2:64:46:e5: 1e:1d:c4:37:b2:62:d2:3c:f2:ea:73:47:a6:9f:54: 54:1d:2a:2f:96:a6:80:24:25:31:18:5d:16:26:11: dd:10:de:42:75:0b:35:7b:e1:55:9b:d7:6a:2a:ee: 56:4f:36:82:6a:83:6f:15:9c:d9:e2:8c:7d:97:9a: c5:c9:35:43:09:2c:78:59:aa:e5:89:ec:96:9f:c8: 08:72:99:9f:21:fb:3b:cd:12:08:86:98:f8:a1:b4: 34:3b:c9:83:c9:82:8d:4a:9f:8d:4e:8e:bc:68:d9: d5:ef:7c:e8:40:ca:81:31:1b:5a:33:cb:d3:b7:d2: 4f:ad:16:3f:03:bf:d7:c1:72:80:91:6c:c6:e8:d6: 0d:b6:45:c3:77:06:a9:75:3c:ae:a3:02:62:b6:bf: 7e:dc:65:b2:c2:d6:eb:5d:ee:1b:bd:d6:3a:aa:8e: 3b:08:d7:ed:8d:50:68:d4:63:16:7f:4f:d6:e9:ae: 17:1d:b3:dc:6d:de:a3:a8:34:1b:57:e4:30:61:15: 59:5a:df:13:de:48:ed:1d:90:d5:3b:c8:99:07:41: 09:c5:96:23:18:3a:80:79:70:a1:55:ec:af:0c:a4: 81:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:96:41:8A:F0:17:2C:0F:38:99:37:33:EC:AD:1A:3C:FA:BF:DA:80 X509v3 Authority Key Identifier: keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e3233382e3138382e302f32322d3232203d3e203539303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.238.188.0/22 Signature Algorithm: sha256WithRSAEncryption 01:1e:2e:61:c7:fa:f6:ba:27:79:1b:17:e6:cf:a6:84:78:6c: 29:11:b9:f4:83:69:07:7d:71:35:ea:bd:71:09:3e:ce:71:cd: b1:fd:22:85:71:1b:f5:03:c5:04:4d:06:9e:22:43:a9:2a:11: 51:38:6e:25:59:80:d3:a4:4a:91:af:b6:8c:b5:be:f0:6e:1f: 98:7b:db:3d:35:fd:42:65:30:6a:23:24:1e:2c:34:18:53:29: c5:0c:0a:3a:9a:2a:54:5b:e5:5e:98:4c:96:bf:6b:c4:34:67: 79:cd:c0:34:3b:09:94:06:e8:e5:2b:bb:0c:b6:0e:ad:cf:0b: 38:d3:92:33:cd:07:19:f1:7e:43:d6:c1:26:ec:b2:bd:a6:5a: d3:10:f8:e3:27:46:cf:38:83:41:c3:d4:ec:3a:31:f2:a2:b0: 7e:e5:a3:36:0b:34:1c:96:44:4a:65:38:39:d8:67:00:f0:8a: 5c:fd:ec:1a:0e:8e:3f:a7:06:b7:4d:2f:5d:eb:d8:02:83:53: 92:38:b5:dd:28:ab:4c:4b:5a:b1:ae:57:30:08:00:84:9b:b7: da:cc:c1:a8:a4:bf:e4:2a:08:f4:7a:56:da:0f:57:98:aa:fb: a1:fe:4a:bc:c4:ed:27:9c:dc:26:c4:89:a0:c5:7d:95:5c:28: 58:84:e3:74 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUT1BUXg6nLSerzVw8UnAP6SL3gKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5 OTA4RTYwRjAeFw0yNjA0MjIwNjEzNTFaFw0yNzA0MjEwNjE4NTFaMDMxMTAvBgNV BAMTKDBBOTY0MThBRjAxNzJDMEYzODk5MzczM0VDQUQxQTNDRkFCRkRBODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4sYNb3kzg063IfG/oGpeECFrU XAlywelnwmRG5R4dxDeyYtI88upzR6afVFQdKi+WpoAkJTEYXRYmEd0Q3kJ1CzV7 4VWb12oq7lZPNoJqg28VnNnijH2XmsXJNUMJLHhZquWJ7JafyAhymZ8h+zvNEgiG mPihtDQ7yYPJgo1Kn41Ojrxo2dXvfOhAyoExG1ozy9O30k+tFj8Dv9fBcoCRbMbo 1g22RcN3Bql1PK6jAmK2v37cZbLC1utd7hu91jqqjjsI1+2NUGjUYxZ/T9bprhcd s9xt3qOoNBtX5DBhFVla3xPeSO0dkNU7yJkHQQnFliMYOoB5cKFV7K8MpIEjAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUCpZBivAXLA84mTcz7K0aPPq/2oAwHwYDVR0j BBgwFoAUFYuV9V1UiwcrQsLCggrOfZkI5g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTIxNjM2NjQxMTQ0ODMyMS8wLzE1OEI5NUY1NUQ1NDhCMDcyQjQyQzJDMjgyMEFD RTdEOTkwOEU2MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5OTA4RTYwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTkyMTYzNjY0MTE0NDgzMjEvMC8zMTMwMzMyZTMy MzMzODJlMzEzODM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfuvDANBgkqhkiG9w0BAQsFAAOCAQEAAR4uYcf69roneRsX5s+m hHhsKRG59INpB31xNeq9cQk+znHNsf0ihXEb9QPFBE0GniJDqSoRUThuJVmA06RK ka+2jLW+8G4fmHvbPTX9QmUwaiMkHiw0GFMpxQwKOpoqVFvlXphMlr9rxDRnec3A NDsJlAbo5Su7DLYOrc8LONOSM80HGfF+Q9bBJuyyvaZa0xD44ydGzziDQcPU7Dox 8qKwfuWjNgs0HJZESmU4OdhnAPCKXP3sGg6OP6cGt00vXevYAoNTkji13SirTEta sa5XMAgAhJu32szBqKS/5CoI9HpW2g9XmKr7of5KvMTtJ5zcJsSJoMV9lVwoWITj dA== -----END CERTIFICATE-----Generated at Mon Apr 27 19:27:14 2026 by rpki-client