$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa File: 3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa (raw, json) Hash identifier: sWJZ7ob+hBERWluyiAYYhM+ulnCXI1uBJ23pDpUyjbc= Subject key identifier: 91:6E:09:BE:B2:AB:C0:94:CB:2E:63:7D:63:E5:EB:4A:97:6A:57:04 Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 36D3DF9AE8A24784B8F7B824F404E55EA130CD68 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa Signing time: Sun 10 May 2026 07:36:31 +0000 ROA not before: Sun 10 May 2026 07:31:31 +0000 ROA not after: Sun 09 May 2027 07:36:31 +0000 asID: 134366 IP address blocks: 103.235.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:d3:df:9a:e8:a2:47:84:b8:f7:b8:24:f4:04:e5:5e:a1:30:cd:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: May 10 07:31:31 2026 GMT Not After : May 9 07:36:31 2027 GMT Subject: CN=916E09BEB2ABC094CB2E637D63E5EB4A976A5704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:76:67:54:0a:59:f6:e9:e7:5b:dd:bf:91: 60:7c:53:55:6a:b3:91:4c:ed:99:aa:c5:18:e5:b3: d5:a2:f2:7a:4a:41:10:ed:f0:4d:52:cb:26:f5:91: 91:89:7d:6f:15:68:a0:b4:46:a7:b5:d3:45:bf:e0: fb:dc:c0:30:73:94:80:f5:4e:09:53:c7:78:b2:7c: b7:fc:0d:02:1a:c0:9c:9e:2d:0e:f3:f5:94:58:71: a5:49:f7:d4:70:9c:76:e8:75:dc:90:87:c0:9d:9c: d2:ba:7a:7c:20:1e:27:9b:82:6c:92:b1:c8:cc:cf: 36:4c:37:7c:a5:cf:6e:00:3e:2d:54:62:4b:64:ed: c2:e9:3d:ae:8e:d4:67:c8:71:f3:c4:12:c5:4d:96: 74:a8:ff:05:23:c4:8b:f1:0a:d7:09:3e:ca:e4:2d: 7c:8a:8f:92:fa:27:f7:a5:4b:ca:8f:13:89:2b:08: 5a:03:7b:63:f8:c2:ac:ff:cb:38:80:a9:d5:04:57: ce:1c:18:8c:d0:c4:51:69:43:2c:c3:a3:1a:e2:c0: 6c:ea:fe:2f:53:93:68:07:ac:8f:07:c4:25:cb:8c: 86:4a:c8:e8:85:92:cc:fc:b7:fb:2e:86:68:75:a2: 97:18:27:0e:06:10:0c:31:76:a1:53:43:4e:82:1d: 7d:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6E:09:BE:B2:AB:C0:94:CB:2E:63:7D:63:E5:EB:4A:97:6A:57:04 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3130332e3233352e38362e302f32342d3234203d3e20313334333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.86.0/24 Signature Algorithm: sha256WithRSAEncryption 9a:a5:a4:a5:8b:22:d1:ea:5b:a5:bb:e4:ed:cc:27:94:64:56: 7a:c4:00:4d:37:11:0d:a4:28:9b:68:6d:1c:6e:78:13:7f:f3: 5b:86:89:e3:d2:01:b2:fd:81:05:29:c8:36:c8:9e:dc:64:56: 6d:f1:35:4a:5e:ce:83:b8:9c:c6:ff:b0:3a:12:82:45:94:c9: 69:17:a9:85:f3:f1:3f:35:56:53:c0:ed:d6:7a:88:9d:bb:de: 22:ca:c6:ed:2e:92:d1:91:2e:65:51:b5:44:f3:d3:20:16:30: 94:3f:33:8a:a4:50:d9:09:44:57:ce:b0:90:31:c2:c8:ab:d7: 2c:c2:17:40:6c:5b:86:aa:82:b1:0d:af:d6:7f:8c:ee:02:30: d0:a0:f5:ef:9a:60:ce:9d:b4:81:d7:24:84:de:ba:68:d2:9f: 9e:5a:11:4a:27:b9:93:8f:b5:93:df:0d:bc:a6:0a:fb:26:56: 82:dd:80:bf:0c:61:10:db:f0:76:7d:e1:c2:d9:43:26:c6:d8: 83:6b:78:44:52:2e:d2:9d:4d:49:ce:97:13:98:ab:77:ec:df: 2c:91:33:b2:05:f2:d0:96:c6:0b:74:f4:80:90:a6:dd:ee:49: 71:70:58:c0:5b:73:8d:e6:55:2f:e0:89:0a:bd:d4:cb:b0:e3: 59:63:d9:a7 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUNtPfmuiiR4S497gk9ATlXqEwzWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA1MTAwNzMxMzFaFw0yNzA1MDkwNzM2MzFaMDMxMTAvBgNV BAMTKDkxNkUwOUJFQjJBQkMwOTRDQjJFNjM3RDYzRTVFQjRBOTc2QTU3MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw63ZnVApZ9unnW92/kWB8U1Vq s5FM7ZmqxRjls9Wi8npKQRDt8E1Syyb1kZGJfW8VaKC0Rqe100W/4PvcwDBzlID1 TglTx3iyfLf8DQIawJyeLQ7z9ZRYcaVJ99RwnHboddyQh8CdnNK6enwgHiebgmyS scjMzzZMN3ylz24APi1UYktk7cLpPa6O1GfIcfPEEsVNlnSo/wUjxIvxCtcJPsrk LXyKj5L6J/elS8qPE4krCFoDe2P4wqz/yziAqdUEV84cGIzQxFFpQyzDoxriwGzq /i9Tk2gHrI8HxCXLjIZKyOiFksz8t/suhmh1opcYJw4GEAwxdqFTQ06CHX0zAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUkW4JvrKrwJTLLmN9Y+XrSpdqVwQwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ1MjM2NTEvMC8zMTMwMzMyZTMy MzMzNTJlMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDMzMzYzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfrVjANBgkqhkiG9w0BAQsFAAOCAQEAmqWkpYsi0epbpbvk7cwn lGRWesQATTcRDaQom2htHG54E3/zW4aJ49IBsv2BBSnINsie3GRWbfE1Sl7Og7ic xv+wOhKCRZTJaRephfPxPzVWU8Dt1nqInbveIsrG7S6S0ZEuZVG1RPPTIBYwlD8z iqRQ2QlEV86wkDHCyKvXLMIXQGxbhqqCsQ2v1n+M7gIw0KD175pgzp20gdckhN66 aNKfnloRSie5k4+1k98NvKYK+yZWgt2AvwxhENvwdn3hwtlDJsbYg2t4RFIu0p1N Sc6XE5ird+zfLJEzsgXy0JbGC3T0gJCm3e5JcXBYwFtzjeZVL+CJCr3Uy7DjWWPZ pw== -----END CERTIFICATE-----Generated at Wed May 13 14:33:34 2026 by rpki-client