$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e32342e3137362e302f32322d3232203d3e203539303732.roa File: 3130332e32342e3137362e302f32322d3232203d3e203539303732.roa (raw, json) Hash identifier: T83A0nhY2rHA4sN3mO3P5tUJfQ79vOxGS+0CJKHN3qI= Subject key identifier: 2B:31:85:D7:41:12:F8:D2:C4:C7:46:A9:A9:F0:38:02:99:2C:04:F2 Certificate issuer: /CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Certificate serial: 66030F2BC7A4E88CBCA0E28A0EACBE5D8FA13F10 Authority key identifier: 15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e32342e3137362e302f32322d3232203d3e203539303732.roa Signing time: Wed 22 Apr 2026 06:18:52 +0000 ROA not before: Wed 22 Apr 2026 06:13:52 +0000 ROA not after: Wed 21 Apr 2027 06:18:52 +0000 asID: 59072 IP address blocks: 103.24.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 11:12:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:03:0f:2b:c7:a4:e8:8c:bc:a0:e2:8a:0e:ac:be:5d:8f:a1:3f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=158B95F55D548B072B42C2C2820ACE7D9908E60F Validity Not Before: Apr 22 06:13:52 2026 GMT Not After : Apr 21 06:18:52 2027 GMT Subject: CN=2B3185D74112F8D2C4C746A9A9F03802992C04F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bf:66:2a:df:66:ff:05:59:d3:95:1a:ae:e0: 64:0b:e4:cf:42:15:91:47:a7:94:71:c6:17:83:8e: bf:d9:71:33:d3:19:fd:3a:e1:31:6d:f0:e7:cd:99: 3c:d3:aa:c6:ba:36:25:f6:ad:c3:62:39:9e:94:f2: 79:e5:94:eb:1c:63:18:55:51:4f:a5:1d:06:52:f0: 36:f7:04:88:42:91:9a:a2:5a:84:07:a2:6d:23:1e: 3f:61:e4:e9:21:1e:b5:92:a0:d8:6d:bd:f1:bc:bd: fb:00:9d:98:10:5f:7e:93:e7:0f:89:71:e4:cf:30: 17:73:c8:34:cb:58:8b:10:71:d4:33:33:ab:f4:ba: 38:4b:d8:fe:13:da:19:8a:e6:59:de:e5:62:18:81: a7:63:0c:64:22:d7:6f:f3:da:58:5a:d0:10:30:23: 0a:ef:bb:57:21:b3:cc:8c:f3:99:ec:e9:80:fa:16: 10:d9:de:7d:bc:31:00:2f:25:a5:46:9b:17:ce:0e: dd:a8:e9:31:59:3f:98:a7:c6:41:2c:e1:41:a4:57: 14:1f:07:7e:a2:fd:20:5a:a5:72:92:2b:90:1c:17: 00:18:5e:f4:e1:48:57:4e:a4:be:10:4d:17:08:d2: ab:86:ad:1a:97:fe:fc:89:a4:8c:f1:21:dd:f4:49: ef:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:31:85:D7:41:12:F8:D2:C4:C7:46:A9:A9:F0:38:02:99:2C:04:F2 X509v3 Authority Key Identifier: keyid:15:8B:95:F5:5D:54:8B:07:2B:42:C2:C2:82:0A:CE:7D:99:08:E6:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/158B95F55D548B072B42C2C2820ACE7D9908E60F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/158B95F55D548B072B42C2C2820ACE7D9908E60F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099216366411448321/0/3130332e32342e3137362e302f32322d3232203d3e203539303732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.24.176.0/22 Signature Algorithm: sha256WithRSAEncryption 31:52:76:ca:ba:6c:b9:eb:c4:49:c2:06:dd:04:6f:5a:05:fe: df:49:ba:8c:4b:71:f4:ef:94:0d:84:62:25:09:10:44:92:bf: a4:a3:ea:1a:c2:08:3a:09:cb:40:cb:33:d7:ae:3b:ac:57:03: 78:0a:ea:2a:b3:43:30:1f:c7:77:03:20:20:4a:09:f4:c9:96: 0d:f9:87:55:4e:1d:93:90:36:c8:9d:4e:26:b4:6d:21:84:5a: 1b:04:35:a7:26:c4:ab:c2:b6:09:cb:16:e6:b0:50:4d:21:fd: 82:3a:91:07:56:bb:61:a6:f9:1d:db:e8:38:1a:9f:2e:03:a1: 3f:27:a5:bd:d0:17:43:dc:38:7a:21:df:36:ea:67:c1:b5:b6: 2b:ef:67:57:e4:30:0f:8b:b6:3e:58:65:7b:e2:7e:09:88:3e: a2:af:f2:e2:71:e6:30:77:c4:d1:d9:e7:b5:85:45:67:10:c5: 29:75:7f:e4:e2:93:7f:78:38:5e:f9:42:c3:30:d4:34:06:f4: 0c:6a:e0:df:e3:cc:09:af:24:fc:b7:13:d9:ff:d6:40:f3:03: d2:59:f7:aa:4c:cd:5b:50:86:0f:47:9b:b8:97:85:94:6a:59: ae:3a:25:bf:c1:be:df:e2:76:22:2a:b4:60:f6:99:ed:a7:92: 97:75:8b:98 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZgMPK8ek6Iy8oOKKDqy+XY+hPxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5 OTA4RTYwRjAeFw0yNjA0MjIwNjEzNTJaFw0yNzA0MjEwNjE4NTJaMDMxMTAvBgNV BAMTKDJCMzE4NUQ3NDExMkY4RDJDNEM3NDZBOUE5RjAzODAyOTkyQzA0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNv2Yq32b/BVnTlRqu4GQL5M9C FZFHp5RxxheDjr/ZcTPTGf064TFt8OfNmTzTqsa6NiX2rcNiOZ6U8nnllOscYxhV UU+lHQZS8Db3BIhCkZqiWoQHom0jHj9h5OkhHrWSoNhtvfG8vfsAnZgQX36T5w+J ceTPMBdzyDTLWIsQcdQzM6v0ujhL2P4T2hmK5lne5WIYgadjDGQi12/z2lha0BAw Iwrvu1chs8yM85ns6YD6FhDZ3n28MQAvJaVGmxfODt2o6TFZP5inxkEs4UGkVxQf B36i/SBapXKSK5AcFwAYXvThSFdOpL4QTRcI0quGrRqX/vyJpIzxId30Se+zAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUKzGF10ES+NLEx0apqfA4ApksBPIwHwYDVR0j BBgwFoAUFYuV9V1UiwcrQsLCggrOfZkI5g8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTIxNjM2NjQxMTQ0ODMyMS8wLzE1OEI5NUY1NUQ1NDhCMDcyQjQyQzJDMjgyMEFD RTdEOTkwOEU2MEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTU4Qjk1RjU1RDU0OEIwNzJCNDJDMkMyODIwQUNFN0Q5OTA4RTYwRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTIxNjM2NjQxMTQ0ODMyMS8wLzMxMzAzMzJlMzIz NDJlMzEzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzczMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAmcYsDANBgkqhkiG9w0BAQsFAAOCAQEAMVJ2yrpsuevEScIG3QRvWgX+ 30m6jEtx9O+UDYRiJQkQRJK/pKPqGsIIOgnLQMsz1647rFcDeArqKrNDMB/HdwMg IEoJ9MmWDfmHVU4dk5A2yJ1OJrRtIYRaGwQ1pybEq8K2CcsW5rBQTSH9gjqRB1a7 Yab5HdvoOBqfLgOhPyelvdAXQ9w4eiHfNupnwbW2K+9nV+QwD4u2Plhle+J+CYg+ oq/y4nHmMHfE0dnntYVFZxDFKXV/5OKTf3g4XvlCwzDUNAb0DGrg3+PMCa8k/LcT 2f/WQPMD0ln3qkzNW1CGD0ebuJeFlGpZrjolv8G+3+J2Iiq0YPaZ7aeSl3WLmA== -----END CERTIFICATE-----Generated at Mon Apr 27 19:26:14 2026 by rpki-client