$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3130332e39312e3230382e302f32322d3332203d3e20313339313830.roa File: 3130332e39312e3230382e302f32322d3332203d3e20313339313830.roa (raw, json) Hash identifier: ZkktRdSWs1+woxoswQ7oHIbLhfx5y9scEt40zlDYlgM= Subject key identifier: AB:96:1A:F0:0C:BF:97:30:8C:F6:06:7B:86:05:6B:C8:F1:56:DE:B0 Certificate issuer: /CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Certificate serial: 2767DC90326AC283BC84ED1454CD83A7C14E3A91 Authority key identifier: 8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3130332e39312e3230382e302f32322d3332203d3e20313339313830.roa Signing time: Mon 20 Apr 2026 17:54:49 +0000 ROA not before: Mon 20 Apr 2026 17:49:49 +0000 ROA not after: Mon 19 Apr 2027 17:54:49 +0000 asID: 139180 IP address blocks: 103.91.208.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:67:dc:90:32:6a:c2:83:bc:84:ed:14:54:cd:83:a7:c1:4e:3a:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E80FA24E5DFF3073621050FF18487025A2A5198 Validity Not Before: Apr 20 17:49:49 2026 GMT Not After : Apr 19 17:54:49 2027 GMT Subject: CN=AB961AF00CBF97308CF6067B86056BC8F156DEB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:56:e4:57:4d:f3:6b:c4:cd:e9:63:4d:35:d0: 0e:69:ad:9a:92:e8:76:2a:da:0e:ab:68:0d:44:e1: ee:c6:79:9f:30:1e:20:29:76:73:3c:22:b9:fe:a7: 45:26:49:0a:e8:ec:2c:21:d7:03:72:18:d0:1b:0d: 00:f5:65:2f:c3:48:8b:bb:49:48:53:51:90:d4:18: fa:bb:2d:f6:18:8a:ca:a1:9d:bc:1e:b9:a4:30:43: ad:e5:00:bc:5d:e4:85:26:af:68:50:f5:9e:9e:8b: 31:74:ae:7f:32:eb:95:0a:05:59:be:fe:bd:33:ca: 5d:85:7e:10:2b:cb:87:3d:b3:e5:1c:d2:64:47:2e: a0:60:ed:e5:9d:1e:89:a5:e7:b0:4a:79:a4:7d:3e: ad:3d:4b:45:33:6e:65:95:53:c1:58:ea:9d:30:d8: 7b:ba:05:2e:b2:50:7e:7b:e2:8a:5e:c2:95:04:bb: f3:bc:88:8a:17:d6:29:b4:58:16:63:89:c8:7b:3c: f8:ae:70:c9:4f:82:79:36:07:41:4e:5a:9e:8b:06: 3f:dc:a8:58:18:97:26:be:5f:df:89:9d:a3:34:8b: 83:ca:2a:ca:00:84:e9:a5:2b:61:20:35:57:66:aa: 16:b1:1a:13:2f:b1:03:a2:d7:86:de:11:ab:26:25: 2a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:96:1A:F0:0C:BF:97:30:8C:F6:06:7B:86:05:6B:C8:F1:56:DE:B0 X509v3 Authority Key Identifier: keyid:8E:80:FA:24:E5:DF:F3:07:36:21:05:0F:F1:84:87:02:5A:2A:51:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/8E80FA24E5DFF3073621050FF18487025A2A5198.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/8E80FA24E5DFF3073621050FF18487025A2A5198.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577334786/0/3130332e39312e3230382e302f32322d3332203d3e20313339313830.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.91.208.0/22 Signature Algorithm: sha256WithRSAEncryption 1a:45:08:21:4e:b7:29:67:21:b6:32:32:f8:87:4e:91:c8:fb: 7b:36:51:cc:11:1f:bb:0c:4e:c6:df:78:94:06:6d:79:00:85: 18:cb:59:09:77:47:d7:ad:8c:73:bd:1a:6c:61:05:43:0c:9c: 66:f7:b4:fa:c2:85:57:49:1b:13:e3:a7:c8:a3:f8:92:1b:4b: 17:65:bc:37:e4:1e:c1:7f:5f:c4:6f:4c:41:6c:03:b4:f0:9b: 4f:99:93:c5:2a:66:22:32:fb:fc:29:a2:66:07:1a:cd:b8:78: 0e:08:c9:dd:94:b9:17:18:bb:1f:18:2c:4a:24:f9:16:d1:3d: 74:ac:87:69:4d:25:9c:9b:c4:40:d3:78:31:eb:0c:2e:dc:c1: 5a:94:07:de:5f:6a:10:89:9e:98:c8:16:be:49:ea:72:70:b1: 3a:7a:f1:50:86:ec:4b:17:ae:38:30:11:bf:5d:04:0d:17:9c: aa:d3:e1:8d:f7:af:96:a8:b7:7d:20:56:3b:93:ee:49:cb:0b: 2f:83:b7:9f:20:04:30:26:44:58:48:0c:ae:da:56:af:70:a3: 73:f0:66:27:e0:aa:cc:9f:16:7e:2a:57:38:3e:f8:eb:08:f4: 24:cc:8f:b5:cc:e7:94:cf:83:5e:23:ca:c6:bd:0d:a5:34:f8: c2:58:0a:57 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJ2fckDJqwoO8hO0UVM2Dp8FOOpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1 QTJBNTE5ODAeFw0yNjA0MjAxNzQ5NDlaFw0yNzA0MTkxNzU0NDlaMDMxMTAvBgNV BAMTKEFCOTYxQUYwMENCRjk3MzA4Q0Y2MDY3Qjg2MDU2QkM4RjE1NkRFQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbVuRXTfNrxM3pY0010A5prZqS 6HYq2g6raA1E4e7GeZ8wHiApdnM8Irn+p0UmSQro7Cwh1wNyGNAbDQD1ZS/DSIu7 SUhTUZDUGPq7LfYYisqhnbweuaQwQ63lALxd5IUmr2hQ9Z6eizF0rn8y65UKBVm+ /r0zyl2FfhAry4c9s+Uc0mRHLqBg7eWdHoml57BKeaR9Pq09S0UzbmWVU8FY6p0w 2Hu6BS6yUH574opewpUEu/O8iIoX1im0WBZjich7PPiucMlPgnk2B0FOWp6LBj/c qFgYlya+X9+JnaM0i4PKKsoAhOmlK2EgNVdmqhaxGhMvsQOi14beEasmJSpDAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUq5Ya8Ay/lzCM9gZ7hgVryPFW3rAwHwYDVR0j BBgwFoAUjoD6JOXf8wc2IQUP8YSHAloqUZgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzMzNDc4Ni8wLzhFODBGQTI0RTVERkYzMDczNjIxMDUwRkYxODQ4 NzAyNUEyQTUxOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOEU4MEZBMjRFNURGRjMwNzM2MjEwNTBGRjE4NDg3MDI1QTJBNTE5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODI3NDE1NzczMzQ3ODYvMC8zMTMwMzMyZTM5 MzEyZTMyMzAzODJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzMzOTMxMzgzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmdb0DANBgkqhkiG9w0BAQsFAAOCAQEAGkUIIU63KWchtjIy+IdO kcj7ezZRzBEfuwxOxt94lAZteQCFGMtZCXdH162Mc70abGEFQwycZve0+sKFV0kb E+OnyKP4khtLF2W8N+QewX9fxG9MQWwDtPCbT5mTxSpmIjL7/CmiZgcazbh4DgjJ 3ZS5Fxi7HxgsSiT5FtE9dKyHaU0lnJvEQNN4MesMLtzBWpQH3l9qEImemMgWvknq cnCxOnrxUIbsSxeuODARv10EDRecqtPhjfevlqi3fSBWO5PuScsLL4O3nyAEMCZE WEgMrtpWr3Cjc/BmJ+CqzJ8WfipXOD746wj0JMyPtcznlM+DXiPKxr0NpTT4wlgK Vw== -----END CERTIFICATE-----Generated at Wed May 13 20:57:45 2026 by rpki-client