$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034383337.roa File: 3130332e33372e34342e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: FEjXS+DFxFcSQvR+DFxHGYyi0pXEZjMxHQf01/P9d3w= Subject key identifier: 18:91:8E:51:65:F2:37:4C:B3:42:F7:2A:88:F3:AF:78:36:78:FF:DB Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 0AE4729465CDA08551B7748F42BCC983B5CD9DE5 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034383337.roa Signing time: Tue 28 Apr 2026 02:21:52 +0000 ROA not before: Tue 28 Apr 2026 02:16:52 +0000 ROA not after: Tue 27 Apr 2027 02:21:52 +0000 asID: 4837 IP address blocks: 103.37.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e4:72:94:65:cd:a0:85:51:b7:74:8f:42:bc:c9:83:b5:cd:9d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 02:16:52 2026 GMT Not After : Apr 27 02:21:52 2027 GMT Subject: CN=18918E5165F2374CB342F72A88F3AF783678FFDB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:60:a0:3f:b4:28:d5:0c:08:70:d6:3c:10:28: 6f:28:47:28:48:2a:79:d5:d3:c4:20:a7:80:07:62: e8:06:7d:45:d8:75:89:97:0b:0a:bb:2b:64:dc:5d: 1e:95:7a:5d:6c:f9:40:34:f2:48:d3:15:7d:71:31: 7f:4a:7d:9d:ba:52:f7:be:40:a3:9d:33:ec:a5:d4: e2:56:d5:b2:26:42:99:7c:68:93:81:05:be:d9:e7: 7b:6c:f3:fc:f7:e8:cb:f0:55:f0:ef:3e:ae:ce:5a: 7c:0c:ce:c8:bf:57:fd:95:06:93:9b:aa:90:78:f3: a6:5e:35:aa:4a:33:ad:f3:17:3a:24:a5:1d:ae:3c: 83:85:8d:aa:c5:c9:71:5b:f2:e6:25:13:67:4b:a8: 08:82:86:88:57:f0:06:64:79:a4:87:5d:74:0e:25: 57:6d:a8:e4:ca:f7:8c:4b:6f:63:42:f7:f3:e4:05: 25:43:2e:57:ae:f5:7c:c5:8a:e1:40:bc:f9:a6:96: c0:62:67:e7:1e:3a:6e:a1:3b:32:76:46:9d:61:c4: 61:3c:47:f7:e4:08:fb:85:e1:18:84:e1:1d:66:fb: d4:51:c6:1d:4d:c9:65:e5:ec:62:e0:e0:01:08:b7: da:07:d9:8b:57:d2:6a:21:b4:e3:38:14:90:d6:80: 37:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:91:8E:51:65:F2:37:4C:B3:42:F7:2A:88:F3:AF:78:36:78:FF:DB X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34342e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.44.0/24 Signature Algorithm: sha256WithRSAEncryption 95:1c:85:f7:e2:61:fc:4e:31:0a:ff:f8:2b:d7:3b:4f:2f:cb: f6:e0:bf:15:7b:a2:9a:98:44:88:0a:47:c3:92:d1:b1:47:98: 73:90:b2:f9:89:ba:4c:44:22:b2:8b:d7:89:71:42:ea:ce:5b: 43:5e:c3:67:10:2e:17:f1:01:3a:9b:aa:85:02:38:0f:69:13: b0:3e:1a:2c:62:33:ed:0f:80:2f:93:54:57:17:e0:18:81:3c: 11:6d:07:56:64:53:55:e3:fe:fb:06:fe:e8:26:92:e5:b3:8b: c7:67:a8:73:be:17:ed:03:64:50:c4:e8:ae:81:a6:69:32:3b: 83:b5:e9:2f:b3:2b:4c:7e:a8:49:ef:d0:6f:85:70:23:b6:f6: 58:7c:40:8f:51:13:5a:81:23:77:95:b4:f7:17:e8:57:db:4f: a2:eb:f8:2b:29:47:06:b6:ae:aa:58:75:94:6a:d1:28:b1:cb: f5:02:46:87:e6:a4:f7:ce:1b:de:2c:3d:66:9e:7d:ac:7c:c3: fd:b5:10:4c:16:a3:87:d1:70:fd:33:05:26:52:ad:d3:c2:07: c1:e2:a8:33:9b:d6:a5:af:c1:aa:7a:6b:f2:ff:a0:00:a4:6b: a8:eb:e7:01:a2:f8:4a:b0:97:c4:67:c7:ea:bd:41:01:c8:72: b6:2b:88:91 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUCuRylGXNoIVRt3SPQrzJg7XNneUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMjE2NTJaFw0yNzA0MjcwMjIxNTJaMDMxMTAvBgNV BAMTKDE4OTE4RTUxNjVGMjM3NENCMzQyRjcyQTg4RjNBRjc4MzY3OEZGREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaYKA/tCjVDAhw1jwQKG8oRyhI KnnV08Qgp4AHYugGfUXYdYmXCwq7K2TcXR6Vel1s+UA08kjTFX1xMX9KfZ26Uve+ QKOdM+yl1OJW1bImQpl8aJOBBb7Z53ts8/z36MvwVfDvPq7OWnwMzsi/V/2VBpOb qpB486ZeNapKM63zFzokpR2uPIOFjarFyXFb8uYlE2dLqAiChohX8AZkeaSHXXQO JVdtqOTK94xLb2NC9/PkBSVDLleu9XzFiuFAvPmmlsBiZ+ceOm6hOzJ2Rp1hxGE8 R/fkCPuF4RiE4R1m+9RRxh1NyWXl7GLg4AEIt9oH2YtX0mohtOM4FJDWgDd/AgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUGJGOUWXyN0yzQvcqiPOveDZ4/9swHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzMzM3 MmUzNDM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnJSwwDQYJKoZIhvcNAQELBQADggEBAJUchffiYfxOMQr/+CvXO08vy/bgvxV7 opqYRIgKR8OS0bFHmHOQsvmJukxEIrKL14lxQurOW0New2cQLhfxATqbqoUCOA9p E7A+GixiM+0PgC+TVFcX4BiBPBFtB1ZkU1Xj/vsG/ugmkuWzi8dnqHO+F+0DZFDE 6K6BpmkyO4O16S+zK0x+qEnv0G+FcCO29lh8QI9RE1qBI3eVtPcX6FfbT6Lr+Csp Rwa2rqpYdZRq0Sixy/UCRofmpPfOG94sPWaefax8w/21EEwWo4fRcP0zBSZSrdPC B8HiqDOb1qWvwap6a/L/oACka6jr5wGi+Eqwl8Rnx+q9QQHIcrYriJE= -----END CERTIFICATE-----Generated at Wed May 13 10:16:51 2026 by rpki-client