$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234352e302f32342d3234203d3e20313432303032.roa File: 3130312e3233372e3234352e302f32342d3234203d3e20313432303032.roa (raw, json) Hash identifier: elb19/fdv4U54orJZTaHPnZo24ruPUFkJrsSKevVnk4= Subject key identifier: 04:F4:C2:26:41:2F:99:A4:93:A3:66:1A:9D:C5:DC:20:22:DD:80:99 Certificate issuer: /CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Certificate serial: 026F1D5ED424FF661DB748FEF8FA76BDDA04FD4C Authority key identifier: 9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234352e302f32342d3234203d3e20313432303032.roa Signing time: Mon 16 Mar 2026 10:30:03 +0000 ROA not before: Mon 16 Mar 2026 10:25:03 +0000 ROA not after: Mon 15 Mar 2027 10:30:03 +0000 asID: 142002 IP address blocks: 101.237.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 03:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6f:1d:5e:d4:24:ff:66:1d:b7:48:fe:f8:fa:76:bd:da:04:fd:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9BF34B3817748D3E69CC3880F13A8383A9AA3C2C Validity Not Before: Mar 16 10:25:03 2026 GMT Not After : Mar 15 10:30:03 2027 GMT Subject: CN=04F4C226412F99A493A3661A9DC5DC2022DD8099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:c3:84:be:ae:64:21:bb:df:cd:51:58:1e: 6d:90:53:07:61:b6:45:67:3b:2e:e8:c0:39:c9:44: 92:e9:8b:94:8b:ca:55:67:ec:7c:5e:6e:84:0b:94: 7c:0b:da:c4:e0:35:79:c9:f4:9b:63:63:b9:27:2c: 7a:55:bd:9c:5c:d1:8e:d0:8b:60:d7:fd:0b:d1:54: 6a:9f:96:25:a1:8f:61:38:89:a4:ff:da:b8:fc:a4: c6:ea:c7:e3:cf:b2:49:05:a9:9d:18:94:25:c0:08: 58:5e:2d:2c:bb:bb:4b:60:e3:6f:90:c6:e3:ca:50: 38:16:2d:d1:e5:de:c2:cf:2c:68:17:5f:04:c6:4a: b3:b4:7c:85:8d:b4:ba:75:87:81:5c:aa:23:0d:93: 67:d3:81:5c:4e:22:ee:48:7c:29:43:ad:e9:f7:a5: 2d:1e:30:2a:8f:0a:62:a6:67:70:41:0b:4c:2b:71: ec:d0:06:e5:46:8c:b0:4a:38:07:95:a0:43:6e:73: c9:19:1d:a7:1f:9c:e4:2b:ee:2e:c3:8f:a2:dd:b3: b8:a0:25:61:6d:4f:23:4f:ae:4f:01:be:cd:ca:ee: 63:45:5f:e1:27:70:b4:6a:49:68:b5:4c:45:24:e3: e1:24:61:00:98:b4:73:2c:b9:e4:28:81:e4:21:04: f7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:F4:C2:26:41:2F:99:A4:93:A3:66:1A:9D:C5:DC:20:22:DD:80:99 X509v3 Authority Key Identifier: keyid:9B:F3:4B:38:17:74:8D:3E:69:CC:38:80:F1:3A:83:83:A9:AA:3C:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9BF34B3817748D3E69CC3880F13A8383A9AA3C2C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394589187/0/3130312e3233372e3234352e302f32342d3234203d3e20313432303032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 101.237.245.0/24 Signature Algorithm: sha256WithRSAEncryption 09:ef:47:2c:0a:da:58:5f:53:d5:84:8e:cd:3e:9d:09:bd:f3: d8:10:41:97:d8:93:61:a8:0a:7a:f2:ac:89:d7:42:1e:31:3d: e4:6f:3c:e1:57:79:f8:c5:0e:77:dc:8c:c7:11:2f:91:7d:e2: 28:d7:54:d2:2c:a0:af:2b:3c:44:be:57:fc:4c:dc:22:fa:48: fc:c3:6a:eb:0a:45:7a:d9:d4:6a:50:5e:d1:bd:37:12:99:c7: 72:5b:d7:95:f9:b5:cb:45:59:83:3a:7c:04:60:c8:ec:2b:dc: 69:26:a6:5c:91:73:85:02:8d:72:9a:67:a2:2e:d1:3e:9e:b5: 35:96:27:3c:13:7a:29:df:2d:07:8a:9a:ab:c6:45:7e:87:0f: 1f:ce:dd:db:e8:f9:31:2b:51:a3:52:af:71:ea:9f:db:99:60: 34:a5:16:f3:6a:0e:98:b0:5a:5b:04:a1:f4:de:5a:0c:f2:c7: 94:a1:5e:4c:9a:6e:a3:e0:71:c1:cf:a5:3c:84:5f:27:90:b2: 66:30:0d:48:e8:92:b3:1d:e6:93:25:3d:9b:a0:25:d9:b1:26: de:19:dc:80:5b:b4:1d:36:5f:0a:c8:44:51:44:57:5e:c7:d0: be:04:e8:a0:35:ff:b3:90:17:5d:cd:7a:69:11:7c:1e:60:e6: 69:f5:52:e1 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUAm8dXtQk/2Ydt0j++Pp2vdoE/UwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNB OUFBM0MyQzAeFw0yNjAzMTYxMDI1MDNaFw0yNzAzMTUxMDMwMDNaMDMxMTAvBgNV BAMTKDA0RjRDMjI2NDEyRjk5QTQ5M0EzNjYxQTlEQzVEQzIwMjJERDgwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClH8OEvq5kIbvfzVFYHm2QUwdh tkVnOy7owDnJRJLpi5SLylVn7HxeboQLlHwL2sTgNXnJ9JtjY7knLHpVvZxc0Y7Q i2DX/QvRVGqfliWhj2E4iaT/2rj8pMbqx+PPskkFqZ0YlCXACFheLSy7u0tg42+Q xuPKUDgWLdHl3sLPLGgXXwTGSrO0fIWNtLp1h4FcqiMNk2fTgVxOIu5IfClDren3 pS0eMCqPCmKmZ3BBC0wrcezQBuVGjLBKOAeVoENuc8kZHacfnOQr7i7Dj6Lds7ig JWFtTyNPrk8Bvs3K7mNFX+EncLRqSWi1TEUk4+EkYQCYtHMsueQogeQhBPexAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUBPTCJkEvmaSTo2YancXcICLdgJkwHwYDVR0j BBgwFoAUm/NLOBd0jT5pzDiA8TqDg6mqPCwwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDU4OTE4Ny8wLzlCRjM0QjM4MTc3NDhEM0U2OUNDMzg4MEYxM0E4 MzgzQTlBQTNDMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUJGMzRCMzgxNzc0OEQzRTY5Q0MzODgwRjEzQTgzODNBOUFBM0MyQy5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTg5MTg3LzAvMzEzMDMxMmUz MjMzMzcyZTMyMzQzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMjMwMzAz Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGXt9TANBgkqhkiG9w0BAQsFAAOCAQEACe9HLAraWF9T1YSO zT6dCb3z2BBBl9iTYagKevKsiddCHjE95G884Vd5+MUOd9yMxxEvkX3iKNdU0iyg rys8RL5X/EzcIvpI/MNq6wpFetnUalBe0b03EpnHclvXlfm1y0VZgzp8BGDI7Cvc aSamXJFzhQKNcppnoi7RPp61NZYnPBN6Kd8tB4qaq8ZFfocPH87d2+j5MStRo1Kv ceqf25lgNKUW82oOmLBaWwSh9N5aDPLHlKFeTJpuo+Bxwc+lPIRfJ5CyZjANSOiS sx3mkyU9m6Al2bEm3hncgFu0HTZfCshEUURXXsfQvgTooDX/s5AXXc16aRF8HmDm afVS4Q== -----END CERTIFICATE-----Generated at Thu Mar 26 20:39:43 2026 by rpki-client