$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa File: 3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa (raw, json) Hash identifier: EeCbVZ8eWIjYjevJQ1udtZuLCSkHUsj9Yj5AaZL7S4U= Subject key identifier: 15:2F:30:D0:28:9B:14:A7:71:15:64:63:C4:BC:A0:63:60:86:F7:A1 Certificate issuer: /CN=E23C4800CA452B1A8E6214923C01540E30830232 Certificate serial: 0A79537BF91CD0E98BA723209463AF608F660EED Authority key identifier: E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa Signing time: Sat 07 Mar 2026 15:51:01 +0000 ROA not before: Sat 07 Mar 2026 15:46:01 +0000 ROA not after: Sat 06 Mar 2027 15:51:01 +0000 asID: 146834 IP address blocks: 103.139.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:79:53:7b:f9:1c:d0:e9:8b:a7:23:20:94:63:af:60:8f:66:0e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E23C4800CA452B1A8E6214923C01540E30830232 Validity Not Before: Mar 7 15:46:01 2026 GMT Not After : Mar 6 15:51:01 2027 GMT Subject: CN=152F30D0289B14A771156463C4BCA0636086F7A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:b9:83:1f:48:aa:45:23:bc:18:74:ed:d2: ab:5b:94:51:1a:7c:85:f9:3a:5b:c5:48:3f:27:68: 0e:92:57:4c:37:11:5b:03:01:67:09:1c:b9:28:81: 2a:26:7b:3d:c4:c8:f9:23:05:28:5b:e6:a9:64:54: ba:ef:10:2f:45:7d:e1:98:72:d7:a7:58:19:03:9e: d3:0b:99:52:03:9a:33:02:19:4a:fb:dd:c6:73:d3: 35:d9:a7:22:17:54:a6:6b:cd:b3:15:be:50:84:8a: 72:44:b7:b3:68:67:8a:0e:79:a1:e8:47:10:78:a8: 36:0d:b3:d2:d0:26:f3:c1:9f:6a:4b:1f:39:39:10: d5:a6:91:88:de:29:eb:a0:e1:d9:c6:92:65:aa:1d: 3e:b5:94:89:15:39:72:c1:e0:fb:7d:71:29:fb:0e: a0:d3:93:3c:9e:35:31:d3:bf:aa:9f:e3:80:bb:90: 55:12:c0:ea:9f:ac:a0:51:c3:ae:8d:c2:f6:eb:c7: f4:e1:8c:ef:af:ed:7f:fd:e8:ed:9a:5d:d0:a1:e0: 3c:75:86:b5:32:d7:39:e6:dc:43:22:8f:fd:88:7d: fa:ef:ee:7b:88:a8:5c:33:e7:a8:05:a3:08:ca:74: 80:90:d5:4b:0e:5f:77:39:9f:0e:a9:83:49:ec:27: 99:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:2F:30:D0:28:9B:14:A7:71:15:64:63:C4:BC:A0:63:60:86:F7:A1 X509v3 Authority Key Identifier: keyid:E2:3C:48:00:CA:45:2B:1A:8E:62:14:92:3C:01:54:0E:30:83:02:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/E23C4800CA452B1A8E6214923C01540E30830232.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E23C4800CA452B1A8E6214923C01540E30830232.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347388929/0/3130332e3133392e3133362e302f32342d3234203d3e20313436383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.136.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:a2:df:af:63:c2:ab:c3:de:c3:72:27:77:8f:87:14:3f:10: 5c:19:33:d2:cf:97:2c:2b:59:01:f7:df:85:6f:a5:a4:a2:cc: cf:dd:cb:76:7b:02:c8:e3:31:20:a2:d1:10:cc:b7:9b:87:c0: 71:71:8d:a1:69:5e:2a:14:19:20:85:e6:98:49:57:d0:59:10: 7f:1c:a5:30:18:5c:0e:88:77:2c:b8:06:f9:86:87:fb:42:27: c4:6b:d4:3b:31:36:34:7c:25:cf:2b:8c:7d:f1:e5:d0:dd:75: e5:14:7c:e1:50:b3:65:b7:95:22:27:ab:0a:7f:b3:e0:0c:37: 94:c3:a6:4f:42:ae:9e:3d:2e:9a:10:d7:e7:35:0b:c2:6a:dc: 79:2a:08:a9:ff:60:01:54:07:9e:e9:2b:b3:b5:ee:bb:71:da: 52:4a:99:66:7e:25:f5:85:db:0f:fd:0a:6b:19:f4:36:ae:77: 5f:df:7c:7b:a2:7c:a9:35:04:54:a7:d3:7d:01:c2:b6:05:56: c0:6d:f1:63:4f:72:a9:47:69:09:f2:75:bf:70:cf:a7:17:4b: 05:bb:f3:91:29:4c:bf:65:64:9d:62:c3:f6:ae:3c:ed:26:15: ed:af:67:44:4d:fa:bf:0f:be:31:0a:c3:f5:42:8a:2e:4a:3f: a4:21:10:36 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUCnlTe/kc0OmLpyMglGOvYI9mDu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUz MDgzMDIzMjAeFw0yNjAzMDcxNTQ2MDFaFw0yNzAzMDYxNTUxMDFaMDMxMTAvBgNV BAMTKDE1MkYzMEQwMjg5QjE0QTc3MTE1NjQ2M0M0QkNBMDYzNjA4NkY3QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBybmDH0iqRSO8GHTt0qtblFEa fIX5OlvFSD8naA6SV0w3EVsDAWcJHLkogSomez3EyPkjBShb5qlkVLrvEC9FfeGY ctenWBkDntMLmVIDmjMCGUr73cZz0zXZpyIXVKZrzbMVvlCEinJEt7NoZ4oOeaHo RxB4qDYNs9LQJvPBn2pLHzk5ENWmkYjeKeug4dnGkmWqHT61lIkVOXLB4Pt9cSn7 DqDTkzyeNTHTv6qf44C7kFUSwOqfrKBRw66Nwvbrx/ThjO+v7X/96O2aXdCh4Dx1 hrUy1znm3EMij/2Iffrv7nuIqFwz56gFowjKdICQ1UsOX3c5nw6pg0nsJ5mFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUFS8w0CibFKdxFWRjxLygY2CG96EwHwYDVR0j BBgwFoAU4jxIAMpFKxqOYhSSPAFUDjCDAjIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzM4ODkyOS8wL0UyM0M0ODAwQ0E0NTJCMUE4RTYyMTQ5MjNDMDE1 NDBFMzA4MzAyMzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTIzQzQ4MDBDQTQ1MkIxQThFNjIxNDkyM0MwMTU0MEUzMDgzMDIzMi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ3Mzg4OTI5LzAvMzEzMDMzMmUz MTMzMzkyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzMz NC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAGeLiDANBgkqhkiG9w0BAQsFAAOCAQEAPaLfr2PCq8Pew3In d4+HFD8QXBkz0s+XLCtZAfffhW+lpKLMz93LdnsCyOMxIKLREMy3m4fAcXGNoWle KhQZIIXmmElX0FkQfxylMBhcDoh3LLgG+YaH+0InxGvUOzE2NHwlzyuMffHl0N11 5RR84VCzZbeVIierCn+z4Aw3lMOmT0Kunj0umhDX5zULwmrceSoIqf9gAVQHnukr s7Xuu3HaUkqZZn4l9YXbD/0Kaxn0Nq53X998e6J8qTUEVKfTfQHCtgVWwG3xY09y qUdpCfJ1v3DPpxdLBbvzkSlMv2VknWLD9q487SYV7a9nRE36vw++MQrD9UKKLko/ pCEQNg== -----END CERTIFICATE-----Generated at Fri Mar 27 02:08:06 2026 by rpki-client