$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034383337.roa File: 3130332e33372e34352e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: tIIVeUn7drstyZnAbENdxG2PUqDeZk4YmgO6tnyAyr8= Subject key identifier: CD:F1:CD:3D:2B:EC:E5:DA:1F:06:B0:F4:C5:DE:04:ED:B6:96:60:EA Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 3BE1370A4DF310938B388D3B93B660A22195D649 Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034383337.roa Signing time: Tue 28 Apr 2026 02:21:52 +0000 ROA not before: Tue 28 Apr 2026 02:16:52 +0000 ROA not after: Tue 27 Apr 2027 02:21:52 +0000 asID: 4837 IP address blocks: 103.37.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:26:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:e1:37:0a:4d:f3:10:93:8b:38:8d:3b:93:b6:60:a2:21:95:d6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Apr 28 02:16:52 2026 GMT Not After : Apr 27 02:21:52 2027 GMT Subject: CN=CDF1CD3D2BECE5DA1F06B0F4C5DE04EDB69660EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:38:6c:8a:2d:d7:70:d0:95:9e:d5:e0:dc:b6: 0e:f8:6d:dd:27:e6:fe:89:90:0e:e2:ef:42:9b:15: df:b8:83:e4:7e:3b:fd:22:b1:38:0d:b5:6a:c8:b4: 09:77:eb:04:0e:87:2d:8f:7c:fe:cd:5c:e7:2b:d9: 1f:4e:38:16:c1:9e:82:42:9d:47:e9:50:47:8e:f8: 3f:5d:0b:aa:d1:43:fd:3d:17:38:f6:d8:27:90:4b: 52:8f:90:13:7b:c0:2e:56:3f:df:15:f5:d0:6e:43: 07:fd:8f:21:9b:6a:c5:04:4c:63:4f:81:7d:2e:fd: 7a:0b:48:49:46:94:36:a1:e4:fc:66:37:12:fd:e9: 2f:55:8b:d8:b8:23:ff:c7:fc:ee:ca:6e:dd:4c:87: b6:08:9c:fc:b6:af:1d:23:4f:55:16:3e:aa:97:73: 73:7b:30:fa:a1:2d:1f:c1:b3:ec:c8:b1:57:98:36: 2d:74:41:7a:96:f7:6f:bc:b6:3b:84:25:99:c5:95: cf:c9:4f:fe:d4:79:8b:a6:e8:1a:f0:81:4f:12:c8: 1b:3c:90:bb:48:2d:26:fb:21:ac:0c:b9:e7:2b:4a: da:d9:47:d5:dd:fc:1e:57:d5:c5:05:f4:94:0e:ec: 33:d9:21:82:f2:f4:01:70:ca:fb:bb:5f:81:ab:8e: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F1:CD:3D:2B:EC:E5:DA:1F:06:B0:F4:C5:DE:04:ED:B6:96:60:EA X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34352e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.45.0/24 Signature Algorithm: sha256WithRSAEncryption 33:c1:4d:31:61:95:45:74:7f:c4:d2:60:05:3e:3f:86:c1:75: ba:ab:99:22:cb:c4:51:79:20:b7:97:35:82:ae:6e:fa:9e:10: 2f:d4:89:5d:3a:9e:ea:83:e1:43:d5:ad:e0:f8:37:c7:69:cb: 3a:94:dd:6b:8b:82:51:6d:b2:9d:7a:16:cf:3a:80:9a:ee:43: bb:48:dd:ca:ec:4c:d7:64:3c:ca:10:11:15:48:af:24:9f:e7: 86:b7:ef:4f:7f:71:9e:55:b0:7a:57:c7:d7:45:7b:e9:27:59: 79:51:36:48:21:f8:5a:62:34:4a:a7:0f:71:7f:d4:f6:a8:70: 44:71:ef:e7:33:5b:d5:2d:c4:02:ad:ee:e3:3c:d5:24:f9:89: 9d:da:16:4d:0b:6b:f0:77:a5:3c:ae:99:c5:7a:fa:2d:dd:e9: 98:e8:c0:29:78:74:64:fa:95:d5:e4:df:d6:22:7c:3e:98:25: 96:d8:d2:6c:71:25:17:dd:ed:da:1d:4f:61:41:7a:25:37:59: e9:d3:36:39:8a:fc:52:b5:e2:b6:ce:a4:d9:89:ef:1c:85:2a: c8:bf:fb:c4:96:74:bf:6f:6b:8e:0a:0b:40:86:1d:ff:35:58: 99:5a:68:1a:80:ae:a7:b0:bb:a3:11:38:5e:e1:8b:2d:11:ca: 08:9a:d2:ed -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUO+E3Ck3zEJOLOI07k7ZgoiGV1kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA0MjgwMjE2NTJaFw0yNzA0MjcwMjIxNTJaMDMxMTAvBgNV BAMTKENERjFDRDNEMkJFQ0U1REExRjA2QjBGNEM1REUwNEVEQjY5NjYwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2OGyKLddw0JWe1eDctg74bd0n 5v6JkA7i70KbFd+4g+R+O/0isTgNtWrItAl36wQOhy2PfP7NXOcr2R9OOBbBnoJC nUfpUEeO+D9dC6rRQ/09Fzj22CeQS1KPkBN7wC5WP98V9dBuQwf9jyGbasUETGNP gX0u/XoLSElGlDah5PxmNxL96S9Vi9i4I//H/O7Kbt1Mh7YInPy2rx0jT1UWPqqX c3N7MPqhLR/Bs+zIsVeYNi10QXqW92+8tjuEJZnFlc/JT/7UeYum6BrwgU8SyBs8 kLtILSb7IawMuecrStrZR9Xd/B5X1cUF9JQO7DPZIYLy9AFwyvu7X4GrjtJbAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUzfHNPSvs5dofBrD0xd4E7baWYOowHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzMzM3 MmUzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnJS0wDQYJKoZIhvcNAQELBQADggEBADPBTTFhlUV0f8TSYAU+P4bBdbqrmSLL xFF5ILeXNYKubvqeEC/UiV06nuqD4UPVreD4N8dpyzqU3WuLglFtsp16Fs86gJru Q7tI3crsTNdkPMoQERVIrySf54a3709/cZ5VsHpXx9dFe+knWXlRNkgh+FpiNEqn D3F/1PaocERx7+czW9UtxAKt7uM81ST5iZ3aFk0La/B3pTyumcV6+i3d6ZjowCl4 dGT6ldXk39YifD6YJZbY0mxxJRfd7dodT2FBeiU3WenTNjmK/FK14rbOpNmJ7xyF Ksi/+8SWdL9va44KC0CGHf81WJlaaBqArqewu6MROF7hiy0Rygia0u0= -----END CERTIFICATE-----Generated at Wed May 13 10:23:32 2026 by rpki-client