$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034383337.roa File: 3130332e33372e34362e302f32342d3234203d3e2034383337.roa (raw, json) Hash identifier: E4QGkRU27RcklPd3yHQZEq3cnFRe/pEUFcnnXRIiR+I= Subject key identifier: 70:4D:A0:B0:D2:FB:CE:E3:6B:C7:90:AA:40:20:51:C7:59:6E:99:0E Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 07F68E88942522A7A6D2212A833A3D7EAEF6765E Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034383337.roa Signing time: Mon 28 Sep 2026 01:00:36 +0000 ROA not before: Mon 28 Sep 2026 00:55:36 +0000 ROA not after: Mon 27 Sep 2027 01:00:36 +0000 asID: 4837 IP address blocks: 103.37.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 11:02:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:f6:8e:88:94:25:22:a7:a6:d2:21:2a:83:3a:3d:7e:ae:f6:76:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Sep 28 00:55:36 2026 GMT Not After : Sep 27 01:00:36 2027 GMT Subject: CN=704DA0B0D2FBCEE36BC790AA402051C7596E990E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:b6:e5:af:b3:bd:27:83:02:b0:45:fb:6c: cc:3e:5a:52:55:66:c5:dc:bd:a5:88:9d:4b:e5:c0: 67:58:b9:91:93:9b:f9:41:57:34:45:14:75:9d:b9: 04:12:f9:35:04:de:ac:67:08:df:56:10:94:0f:7a: 10:46:34:9b:63:6a:88:74:20:3c:c4:c4:54:02:df: c4:61:89:59:98:66:59:ce:5a:92:7e:74:77:90:3a: 1c:69:19:a2:44:16:f2:72:e1:d8:30:9c:4d:34:80: fc:1a:7e:9d:50:07:39:a2:cc:df:8d:db:2b:79:2a: 50:47:d7:ae:23:e8:c1:8d:01:40:08:3e:25:28:3b: 1a:c1:b4:ac:65:3e:9e:e5:97:b7:5a:6c:97:43:a2: ed:b4:4b:59:ac:d7:2a:12:77:e7:22:51:29:06:80: 09:ac:a6:12:c9:28:23:89:10:5d:ea:1f:f6:8b:82: ee:4d:db:08:f8:ec:9f:52:77:04:59:d3:59:45:c8: d8:ac:68:39:f4:d5:19:25:b3:5d:5e:8e:79:c4:de: 45:76:45:1a:b2:46:ec:0a:28:45:f8:19:49:c2:ca: ac:b4:34:39:10:66:db:d0:42:2a:2e:d5:36:0c:bb: 62:26:6e:9d:88:0b:69:c7:f9:fb:61:de:20:09:25: fe:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:4D:A0:B0:D2:FB:CE:E3:6B:C7:90:AA:40:20:51:C7:59:6E:99:0E X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e33372e34362e302f32342d3234203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.37.46.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:81:42:d3:6b:3d:e1:cd:01:e4:59:30:b4:10:91:b1:c3:6f: ba:8d:13:43:a1:1c:45:aa:3f:36:39:9a:cd:5b:7a:7b:76:66: 36:d4:70:68:e5:12:4b:89:f0:81:ec:c3:c7:be:b9:66:33:78: 6f:2a:23:29:d8:79:5b:ed:9f:4c:95:0b:4b:2d:d5:e2:29:18: a2:8e:dd:e2:17:17:b6:5c:c4:7c:b3:5b:25:38:ce:44:29:2b: f5:14:e3:d2:1e:78:5b:da:86:3b:04:ce:e9:18:0b:ab:1f:ca: fa:fc:9d:d4:32:3b:23:f4:ce:28:50:1e:de:65:57:06:dc:12: 32:3a:ae:ce:eb:1f:b4:35:ff:8f:63:26:f0:15:da:b4:85:8b: 77:46:91:de:b0:65:f0:3b:1e:61:de:e6:77:40:d6:f4:fe:31: 3c:f3:24:1e:e5:f3:eb:27:2c:4b:1a:c6:ff:bc:53:aa:e0:0f: 6c:e7:32:b3:8a:3c:5b:e3:b0:32:9a:aa:0f:b3:af:b7:85:99: b5:b6:c9:6f:19:7a:f7:f7:b4:59:65:6f:1f:93:56:52:99:2a: 4e:58:18:31:7f:c1:6a:a0:a1:f5:98:a5:d0:c7:04:71:44:07: 71:89:60:4d:e6:51:55:06:83:1a:17:a1:05:a3:72:71:f5:00: 44:57:ef:24 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUB/aOiJQlIqem0iEqgzo9fq72dl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjA5MjgwMDU1MzZaFw0yNzA5MjcwMTAwMzZaMDMxMTAvBgNV BAMTKDcwNERBMEIwRDJGQkNFRTM2QkM3OTBBQTQwMjA1MUM3NTk2RTk5MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCterblr7O9J4MCsEX7bMw+WlJV ZsXcvaWInUvlwGdYuZGTm/lBVzRFFHWduQQS+TUE3qxnCN9WEJQPehBGNJtjaoh0 IDzExFQC38RhiVmYZlnOWpJ+dHeQOhxpGaJEFvJy4dgwnE00gPwafp1QBzmizN+N 2yt5KlBH164j6MGNAUAIPiUoOxrBtKxlPp7ll7dabJdDou20S1ms1yoSd+ciUSkG gAmsphLJKCOJEF3qH/aLgu5N2wj47J9SdwRZ01lFyNisaDn01Rkls11ejnnE3kV2 RRqyRuwKKEX4GUnCyqy0NDkQZtvQQiou1TYMu2Imbp2IC2nH+fth3iAJJf4ZAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUcE2gsNL7zuNrx5CqQCBRx1lumQ4wHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzMzM3 MmUzNDM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BABnJS4wDQYJKoZIhvcNAQELBQADggEBAIyBQtNrPeHNAeRZMLQQkbHDb7qNE0Oh HEWqPzY5ms1bent2ZjbUcGjlEkuJ8IHsw8e+uWYzeG8qIynYeVvtn0yVC0st1eIp GKKO3eIXF7ZcxHyzWyU4zkQpK/UU49IeeFvahjsEzukYC6sfyvr8ndQyOyP0zihQ Ht5lVwbcEjI6rs7rH7Q1/49jJvAV2rSFi3dGkd6wZfA7HmHe5ndA1vT+MTzzJB7l 8+snLEsaxv+8U6rgD2znMrOKPFvjsDKaqg+zr7eFmbW2yW8Zevf3tFllbx+TVlKZ Kk5YGDF/wWqgofWYpdDHBHFEB3GJYE3mUVUGgxoXoQWjcnH1AERX7yQ= -----END CERTIFICATE-----Generated at Sat Oct 10 14:50:11 2026 by rpki-client