$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa File: 3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa (raw, json) Hash identifier: UU8+VwXx5kLXE1vREUzKeaHXeDerUJ/54dl+hLa2H6g= Subject key identifier: 08:36:7B:AB:A3:EE:3D:D9:AA:BA:29:7E:A6:75:82:CD:AA:CA:B1:8E Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Certificate serial: 3AB05B29F2EB3DFE9C72C774BE698D400D08FF30 Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa Signing time: Tue 10 Mar 2026 02:00:27 +0000 ROA not before: Tue 10 Mar 2026 01:55:27 +0000 ROA not after: Tue 09 Mar 2027 02:00:27 +0000 asID: 151231 IP address blocks: 103.104.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:b0:5b:29:f2:eb:3d:fe:9c:72:c7:74:be:69:8d:40:0d:08:ff:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Validity Not Before: Mar 10 01:55:27 2026 GMT Not After : Mar 9 02:00:27 2027 GMT Subject: CN=08367BABA3EE3DD9AABA297EA67582CDAACAB18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:bd:14:08:0f:6f:f2:2a:46:a9:61:11:b3: fc:16:b4:de:19:0d:d8:85:ea:c1:b5:c6:fd:07:10: 70:50:e3:7d:c7:3a:db:1d:78:19:84:b5:c4:01:b7: b3:70:06:4e:3d:f0:be:66:84:3e:42:d6:35:52:69: fe:ae:27:82:26:fc:f2:1f:b3:56:2e:34:ed:06:ee: 55:60:e4:73:1b:4d:ed:05:33:92:79:75:11:b1:19: c6:90:e5:21:49:5c:f3:1b:59:41:48:16:70:db:73: 2a:e7:30:41:16:68:cd:14:dd:eb:3a:88:04:49:b2: ea:02:67:e8:2e:ae:f5:38:e2:fa:7d:de:02:06:71: fc:d3:cd:e2:15:2e:97:25:2a:6e:94:16:d3:45:07: 68:72:51:d5:1a:2e:86:24:81:0a:ce:d8:c8:49:be: 58:5f:81:ef:8f:48:f9:84:d5:f8:f3:14:40:a2:82: 17:73:f8:46:ef:f9:d7:24:73:44:3c:14:f5:9c:ff: 5a:87:8b:39:b7:46:fa:75:83:18:05:fb:d2:43:9c: ff:13:07:6c:e8:cd:24:cd:c7:c1:87:3c:0a:87:fc: 9d:ea:f1:3d:fd:70:6f:00:9a:e3:b4:a7:8f:4e:d0: eb:55:b2:1c:37:d1:22:7e:b7:aa:e5:9f:11:57:fe: 83:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:36:7B:AB:A3:EE:3D:D9:AA:BA:29:7E:A6:75:82:CD:AA:CA:B1:8E X509v3 Authority Key Identifier: keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/3130332e3130342e3135322e302f32322d3234203d3e20313531323331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.104.152.0/22 Signature Algorithm: sha256WithRSAEncryption 7a:0c:8e:b6:41:df:7f:cb:2f:39:3b:0a:cd:ab:b2:50:35:13: 55:0e:38:5d:ba:e8:aa:48:9c:50:59:dc:d3:a7:77:d5:33:cd: 82:26:40:af:e0:c0:b7:a7:d7:6f:78:67:a3:23:b1:d9:21:95: c9:e9:56:5e:9f:20:b2:1c:33:b0:f3:74:6b:6d:db:ac:1f:cc: 27:56:94:e6:3d:2b:69:46:05:4b:b0:b8:0a:e5:e9:da:a1:e0: 94:35:0d:85:49:39:90:a0:01:5a:04:28:e5:82:ab:1c:24:27: 14:80:ca:0d:f4:c6:97:17:a2:9d:5b:ab:ac:35:b1:6a:a3:ff: 15:95:47:2a:5d:86:7f:fa:e5:f4:87:0e:d3:0e:b0:5e:d4:c0: 7e:de:cc:84:f9:f0:a4:ad:7c:fe:f9:12:fb:07:3f:19:77:0b: ba:5a:44:40:4b:d3:f5:ee:bb:10:70:d3:33:7e:ee:b4:38:f4: 21:ce:e7:16:1a:3c:75:0e:33:44:bb:dd:c0:00:88:d4:d1:cf: e1:67:d6:24:1f:48:fe:00:b1:c2:93:dd:2a:bf:88:89:23:a4: 5b:3c:89:f9:80:a4:a2:e8:83:28:1c:0f:5e:83:2a:b7:12:55: b0:e4:1a:c9:15:ee:64:38:a9:3c:81:57:38:57:c6:e3:00:be: 71:9f:7a:08 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUOrBbKfLrPf6ccsd0vmmNQA0I/zAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1 NjhCMDBEODAeFw0yNjAzMTAwMTU1MjdaFw0yNzAzMDkwMjAwMjdaMDMxMTAvBgNV BAMTKDA4MzY3QkFCQTNFRTNERDlBQUJBMjk3RUE2NzU4MkNEQUFDQUIxOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrl70UCA9v8ipGqWERs/wWtN4Z DdiF6sG1xv0HEHBQ433HOtsdeBmEtcQBt7NwBk498L5mhD5C1jVSaf6uJ4Im/PIf s1YuNO0G7lVg5HMbTe0FM5J5dRGxGcaQ5SFJXPMbWUFIFnDbcyrnMEEWaM0U3es6 iARJsuoCZ+gurvU44vp93gIGcfzTzeIVLpclKm6UFtNFB2hyUdUaLoYkgQrO2MhJ vlhfge+PSPmE1fjzFECighdz+Ebv+dckc0Q8FPWc/1qHizm3Rvp1gxgF+9JDnP8T B2zozSTNx8GHPAqH/J3q8T39cG8AmuO0p49O0OtVshw30SJ+t6rlnxFX/oMVAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUCDZ7q6PuPdmquil+pnWCzarKsY4wHwYDVR0j BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgzMjIxOTcyMDA4OTYzLzAvMzEzMDMzMmUz MTMwMzQyZTMxMzUzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzMz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmdomDANBgkqhkiG9w0BAQsFAAOCAQEAegyOtkHff8svOTsK zauyUDUTVQ44XbroqkicUFnc06d31TPNgiZAr+DAt6fXb3hnoyOx2SGVyelWXp8g shwzsPN0a23brB/MJ1aU5j0raUYFS7C4CuXp2qHglDUNhUk5kKABWgQo5YKrHCQn FIDKDfTGlxeinVurrDWxaqP/FZVHKl2Gf/rl9IcO0w6wXtTAft7MhPnwpK18/vkS +wc/GXcLulpEQEvT9e67EHDTM37utDj0Ic7nFho8dQ4zRLvdwACI1NHP4WfWJB9I /gCxwpPdKr+IiSOkWzyJ+YCkouiDKBwPXoMqtxJVsOQayRXuZDipPIFXOFfG4wC+ cZ96CA== -----END CERTIFICATE-----Generated at Fri Mar 27 03:21:45 2026 by rpki-client