$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32332d3233203d3e203633353637.roa File: 3130332e3233392e3234342e302f32332d3233203d3e203633353637.roa (raw, json) Hash identifier: dI7GN01rY6wQo4G5rM8bHIW0mes9Do9ezHj2JH3CxYg= Subject key identifier: 8E:E8:FE:B7:41:4C:68:68:E1:0A:5E:FE:22:24:E5:87:EE:32:24:EC Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 28DFFBEF07F17318F7F3179EF6785B54E01F5248 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32332d3233203d3e203633353637.roa Signing time: Thu 26 Mar 2026 07:44:15 +0000 ROA not before: Thu 26 Mar 2026 07:39:15 +0000 ROA not after: Thu 25 Mar 2027 07:44:15 +0000 asID: 63567 IP address blocks: 103.239.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:df:fb:ef:07:f1:73:18:f7:f3:17:9e:f6:78:5b:54:e0:1f:52:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Mar 26 07:39:15 2026 GMT Not After : Mar 25 07:44:15 2027 GMT Subject: CN=8EE8FEB7414C6868E10A5EFE2224E587EE3224EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a5:55:31:df:2c:ea:be:ae:89:bf:4f:81:a9: f4:9e:04:4c:4a:59:c7:d4:59:65:d8:d3:ba:52:ed: e8:42:aa:b5:9d:60:47:85:4b:47:9f:30:95:4d:9a: 61:56:53:67:80:30:c3:9c:50:78:b7:46:60:a4:34: f2:e8:a7:1c:83:a7:0b:b4:75:09:26:a0:5b:a0:a7: 40:90:10:49:5d:b8:a2:e8:e3:82:20:4d:56:9f:61: 7a:a3:06:9e:bc:d3:92:29:55:e9:d7:9a:a9:5a:67: b5:86:e2:c8:9b:09:47:a2:fa:ff:6a:18:7b:18:6e: c8:dc:c6:9a:5a:6e:90:ab:0a:13:3c:1b:8f:49:a9: 95:48:e0:8b:cf:c5:33:d3:58:84:1a:26:a1:19:87: 76:3d:5d:cd:7d:e2:f1:05:86:4b:0f:08:34:a4:1d: 9e:e5:0d:4d:02:b1:3b:e5:96:df:6a:cf:2b:7a:b7: 5a:cc:85:95:e4:cc:d1:51:55:f9:3c:ea:d2:93:27: 2c:6f:4c:ae:76:be:51:b0:81:7e:19:b2:a9:38:43: 45:23:ec:38:03:eb:27:f1:34:b1:ff:b9:39:90:ff: b5:8e:6d:f7:e7:72:42:fa:1f:47:18:a4:e0:32:7e: ab:0d:a8:a7:00:00:c6:4c:e1:dc:69:49:3a:94:5f: 56:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:FE:B7:41:4C:68:68:E1:0A:5E:FE:22:24:E5:87:EE:32:24:EC X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e3233392e3234342e302f32332d3233203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.239.244.0/23 Signature Algorithm: sha256WithRSAEncryption ba:5c:09:8b:f4:7d:4a:46:41:7b:26:a1:a4:67:64:8e:b4:95: 5d:8c:96:7b:b8:79:7e:da:b5:03:4d:28:a3:52:0e:f0:be:30: 34:1f:ce:51:ca:13:22:e0:98:7f:a0:6c:48:65:f4:f4:5d:a4: de:f2:d2:39:f6:60:b9:89:ca:d6:4e:1b:31:e5:b2:ed:f5:da: 0c:8b:42:75:35:ce:f4:f2:ee:25:b4:22:22:74:87:fd:1b:6b: d2:96:24:c7:32:e3:70:38:60:40:f4:4d:16:a9:f2:48:15:1a: 49:c9:5b:28:6d:e6:fc:1e:d2:63:ea:f2:c3:ba:00:a4:1c:9e: ee:ce:30:f7:d6:bc:a8:23:57:18:40:3a:26:74:e3:74:68:ba: dd:1a:1f:b1:b6:57:18:35:35:e0:b9:e0:73:fe:ba:c2:45:d9: 7a:b8:01:d6:0d:08:40:8f:d4:f3:9b:47:6f:da:76:b6:c1:56: ff:97:f5:76:f0:b2:d7:41:eb:3a:1c:ea:53:ad:cc:6d:cd:9b: 74:5e:36:c0:5a:20:ae:9a:91:c2:10:fd:48:88:a3:e3:98:84: e9:f5:ff:3b:7c:0c:3f:c6:ae:32:6c:1f:fd:95:32:eb:98:d1: 83:63:d8:99:d4:4c:5c:d2:61:95:9a:45:49:91:ac:83:e0:46: 83:fc:97:bf -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUKN/77wfxcxj38xee9nhbVOAfUkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAzMjYwNzM5MTVaFw0yNzAzMjUwNzQ0MTVaMDMxMTAvBgNV BAMTKDhFRThGRUI3NDE0QzY4NjhFMTBBNUVGRTIyMjRFNTg3RUUzMjI0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCypVUx3yzqvq6Jv0+BqfSeBExK WcfUWWXY07pS7ehCqrWdYEeFS0efMJVNmmFWU2eAMMOcUHi3RmCkNPLopxyDpwu0 dQkmoFugp0CQEElduKLo44IgTVafYXqjBp6805IpVenXmqlaZ7WG4sibCUei+v9q GHsYbsjcxppabpCrChM8G49JqZVI4IvPxTPTWIQaJqEZh3Y9Xc194vEFhksPCDSk HZ7lDU0CsTvllt9qzyt6t1rMhZXkzNFRVfk86tKTJyxvTK52vlGwgX4Zsqk4Q0Uj 7DgD6yfxNLH/uTmQ/7WObffnckL6H0cYpOAyfqsNqKcAAMZM4dxpSTqUX1b1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUjuj+t0FMaGjhCl7+IiTlh+4yJOwwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3ODU3OTUvMC8zMTMwMzMyZTMy MzMzOTJlMzIzNDM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzYzMzM1MzYzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWfv9DANBgkqhkiG9w0BAQsFAAOCAQEAulwJi/R9SkZBeyahpGdk jrSVXYyWe7h5ftq1A00oo1IO8L4wNB/OUcoTIuCYf6BsSGX09F2k3vLSOfZguYnK 1k4bMeWy7fXaDItCdTXO9PLuJbQiInSH/Rtr0pYkxzLjcDhgQPRNFqnySBUaSclb KG3m/B7SY+ryw7oApBye7s4w99a8qCNXGEA6JnTjdGi63RofsbZXGDU14Lngc/66 wkXZergB1g0IQI/U85tHb9p2tsFW/5f1dvCy10HrOhzqU63Mbc2bdF42wFogrpqR whD9SIij45iE6fX/O3wMP8auMmwf/ZUy65jRg2PYmdRMXNJhlZpFSZGsg+BGg/yX vw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:58:04 2026 by rpki-client