$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203633353637.roa File: 3130332e34302e31322e302f32322d3232203d3e203633353637.roa (raw, json) Hash identifier: 8ZHqMV4bYpZXtB2AbrTcsm6gRwHRjeG/vPFWn5gbPUQ= Subject key identifier: E8:C1:0B:36:15:E2:E1:42:FD:46:7F:A2:E6:EF:7F:E4:05:A7:20:48 Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Certificate serial: 7044D149A47C34E32F6FAD484A1661681065450A Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203633353637.roa Signing time: Thu 26 Mar 2026 07:44:15 +0000 ROA not before: Thu 26 Mar 2026 07:39:15 +0000 ROA not after: Thu 25 Mar 2027 07:44:15 +0000 asID: 63567 IP address blocks: 103.40.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:44:d1:49:a4:7c:34:e3:2f:6f:ad:48:4a:16:61:68:10:65:45:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E Validity Not Before: Mar 26 07:39:15 2026 GMT Not After : Mar 25 07:44:15 2027 GMT Subject: CN=E8C10B3615E2E142FD467FA2E6EF7FE405A72048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:0d:b2:63:0f:28:17:13:74:51:40:0a:ab:95: 4c:af:60:c5:95:fe:7a:3a:04:0b:f4:2a:0c:78:0d: 65:4d:99:ad:e0:76:6b:77:e7:a1:96:7f:87:3e:fa: 41:32:4e:e1:bb:3c:a2:48:c0:94:1b:85:c1:89:42: 75:65:a8:5e:f2:2c:d5:91:b8:23:a3:43:53:81:0f: 1b:d8:aa:fb:cd:0f:ee:b0:eb:b5:40:00:46:02:14: 80:61:1d:4e:29:c0:46:fe:74:1c:16:9f:91:ad:08: dc:a4:54:56:c0:0e:83:e9:55:91:97:77:91:e1:3c: 28:82:f2:73:68:e5:eb:96:17:2e:ae:b6:18:fa:93: 8d:12:5d:8f:79:0a:f2:5c:63:84:7f:c7:26:fc:b7: be:e1:ee:93:fb:42:e5:cc:84:e4:a1:95:3b:d3:a4: a6:05:c4:a5:e2:72:35:e9:00:68:9c:a2:c6:3b:47: 89:5c:97:6d:28:00:7c:38:3c:75:e3:04:9d:09:65: 24:aa:a8:a0:ba:29:54:cf:ed:1d:27:45:64:2e:9c: f1:1a:75:ac:e5:75:84:ab:a7:26:ca:fa:39:37:93: 5d:ad:db:3d:d2:8d:3b:e4:68:d3:64:07:61:27:ca: fa:5b:c5:e1:d9:d1:35:b8:35:e6:1b:a9:be:24:c5: d4:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:C1:0B:36:15:E2:E1:42:FD:46:7F:A2:E6:EF:7F:E4:05:A7:20:48 X509v3 Authority Key Identifier: keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/3130332e34302e31322e302f32322d3232203d3e203633353637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.40.12.0/22 Signature Algorithm: sha256WithRSAEncryption 93:c5:74:68:a8:12:4e:b2:e1:a6:39:4f:c0:30:7b:07:c5:86: 70:53:ee:fb:6c:90:52:e6:e5:e9:25:cd:5c:10:3b:67:a6:28: d8:b9:17:77:9d:75:62:b4:8f:65:7c:5e:35:25:19:b6:cb:ca: 23:b3:1a:2b:7e:62:74:a2:e5:b3:5d:82:70:f8:60:59:52:57: b6:a9:75:00:30:6b:8b:98:b9:e8:5f:68:6c:49:06:54:84:e2: c4:92:9d:12:f6:29:48:a8:eb:bf:10:d6:39:c8:74:a8:30:a0: 79:68:1f:7f:02:8e:02:dd:7b:e3:cc:1b:e9:99:8b:32:0a:8c: b0:61:eb:e7:50:11:ba:5d:6e:69:5f:e5:73:45:26:1a:29:54: d4:29:0b:e6:27:0b:b4:d5:1c:91:88:42:cc:d1:03:a2:3e:29: c7:ef:40:c7:8a:48:d8:5b:36:89:c1:46:58:eb:66:2e:31:4a: ab:c3:45:7a:3b:8c:88:2a:df:ad:82:cd:12:fc:6c:3a:92:87: 2c:8d:8f:5e:f9:4a:cb:8a:f4:04:17:49:79:f2:81:c6:ea:82: c2:27:ce:ef:aa:93:19:f7:96:4b:4c:18:9b:2e:1f:bd:8e:e2: 62:fb:d9:03:64:34:e0:13:d5:6e:9e:d1:70:61:b9:28:cc:06: 40:79:89:03 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUcETRSaR8NOMvb61IShZhaBBlRQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FD MjlBMjU0RTAeFw0yNjAzMjYwNzM5MTVaFw0yNzAzMjUwNzQ0MTVaMDMxMTAvBgNV BAMTKEU4QzEwQjM2MTVFMkUxNDJGRDQ2N0ZBMkU2RUY3RkU0MDVBNzIwNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWDbJjDygXE3RRQAqrlUyvYMWV /no6BAv0Kgx4DWVNma3gdmt356GWf4c++kEyTuG7PKJIwJQbhcGJQnVlqF7yLNWR uCOjQ1OBDxvYqvvND+6w67VAAEYCFIBhHU4pwEb+dBwWn5GtCNykVFbADoPpVZGX d5HhPCiC8nNo5euWFy6uthj6k40SXY95CvJcY4R/xyb8t77h7pP7QuXMhOShlTvT pKYFxKXicjXpAGicosY7R4lcl20oAHw4PHXjBJ0JZSSqqKC6KVTP7R0nRWQunPEa dazldYSrpybK+jk3k12t2z3SjTvkaNNkB2EnyvpbxeHZ0TW4NeYbqb4kxdSDAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU6MELNhXi4UL9Rn+i5u9/5AWnIEgwHwYDVR0j BBgwFoAUccm/5Mj9fnd6HJ5V36YKOsKaJU4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDc4NTc5NS8wLzcxQzlCRkU0QzhGRDdFNzc3QTFDOUU1NURGQTYw QTNBQzI5QTI1NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzFDOUJGRTRDOEZEN0U3NzdBMUM5RTU1REZBNjBBM0FDMjlBMjU0RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0Nzg1Nzk1LzAvMzEzMDMzMmUzNDMw MmUzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM1MzYzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAmcoDDANBgkqhkiG9w0BAQsFAAOCAQEAk8V0aKgSTrLhpjlPwDB7B8WGcFPu +2yQUubl6SXNXBA7Z6Yo2LkXd511YrSPZXxeNSUZtsvKI7MaK35idKLls12CcPhg WVJXtql1ADBri5i56F9obEkGVITixJKdEvYpSKjrvxDWOch0qDCgeWgffwKOAt17 48wb6ZmLMgqMsGHr51ARul1uaV/lc0UmGilU1CkL5icLtNUckYhCzNEDoj4px+9A x4pI2Fs2icFGWOtmLjFKq8NFejuMiCrfrYLNEvxsOpKHLI2PXvlKy4r0BBdJefKB xuqCwifO76qTGfeWS0wYmy4fvY7iYvvZA2Q04BPVbp7RcGG5KMwGQHmJAw== -----END CERTIFICATE-----Generated at Fri Mar 27 06:56:59 2026 by rpki-client