$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32342d3234203d3e20313436373732.roa File: 3130332e3231392e38362e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: R/rCDfiWFqlqcod2NVjhGm5lLmuyaFu/pyXuhb2N/OU= Subject key identifier: 43:51:D8:31:B5:C8:D3:60:E5:09:9D:CC:C4:FD:8F:4E:6D:C3:EC:F5 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 25C3D21C54340FEA6210B745AC4BAF71823C3641 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32342d3234203d3e20313436373732.roa Signing time: Fri 24 Apr 2026 07:34:55 +0000 ROA not before: Fri 24 Apr 2026 07:29:55 +0000 ROA not after: Fri 23 Apr 2027 07:34:55 +0000 asID: 146772 IP address blocks: 103.219.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:c3:d2:1c:54:34:0f:ea:62:10:b7:45:ac:4b:af:71:82:3c:36:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 24 07:29:55 2026 GMT Not After : Apr 23 07:34:55 2027 GMT Subject: CN=4351D831B5C8D360E5099DCCC4FD8F4E6DC3ECF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d7:b6:1b:29:71:76:1f:ee:1b:d6:a9:a5:0f: 4e:eb:15:8c:41:3c:3e:71:47:d4:3c:d0:6a:fc:94: e2:b3:52:08:34:7a:90:0f:f1:40:c0:ec:fe:f8:0e: ba:5d:dd:e1:b2:7d:43:63:aa:19:05:5f:81:66:98: 6c:cd:7c:05:41:4f:0b:0d:b5:db:b1:87:1f:98:65: 42:2f:53:13:f1:45:90:24:97:65:68:2a:c8:aa:ff: 04:f1:7b:3b:e1:7d:6d:86:65:29:5d:fe:9d:8a:0a: 20:84:ee:31:33:ba:70:ea:0e:d5:cd:ef:13:54:9a: f4:c1:bc:05:f9:08:08:d2:43:37:f9:f4:f2:d9:22: b7:9c:7f:e8:6b:ee:b1:4c:9c:14:72:a0:76:30:fc: fd:87:b1:53:e2:4a:ec:da:2f:81:f2:fd:de:f6:08: 66:f6:69:be:71:f1:df:d1:0b:7f:25:4e:a5:ae:43: 30:04:3c:a9:ef:e9:ac:d2:5a:d4:de:5a:c5:34:61: de:03:a0:0c:61:cc:a3:92:ef:d3:df:6e:1e:7c:3d: 09:db:3c:57:eb:50:e7:c9:de:c6:14:f4:d1:66:aa: 16:e5:b5:bf:6e:54:d1:f2:2e:79:86:5a:3a:4b:10: 3a:ee:14:76:09:f4:56:38:46:05:4b:06:7c:f7:2f: c2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:51:D8:31:B5:C8:D3:60:E5:09:9D:CC:C4:FD:8F:4E:6D:C3:EC:F5 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38362e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.86.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:fe:9f:ce:6d:1d:23:83:c3:54:0a:be:09:03:1f:31:5d:40: 4a:76:e4:7b:6b:54:89:ae:58:b4:4d:97:c1:a7:72:85:ba:c9: ac:25:8b:21:01:6f:3b:81:5f:ac:46:5d:9b:ec:b0:7e:91:2b: 6b:c2:08:f5:b3:59:9a:82:37:ab:7f:2b:de:7c:67:96:d4:8c: dd:11:16:8c:17:72:31:16:ac:f8:66:5b:be:c8:1f:6d:9d:7b: f8:47:76:b0:2b:5a:cc:53:2e:7b:6f:ca:97:0f:2a:dd:0e:e8: 90:74:b3:76:45:8f:a8:e3:fc:5f:2b:31:f1:3b:af:46:1f:23: 3c:e9:18:d0:98:e2:8b:c9:6a:db:45:03:f2:33:c5:6c:ec:61: 4d:29:c4:8b:1b:64:cd:78:1f:a4:37:df:21:97:b5:46:6b:8d: d0:08:4e:b7:06:69:af:7d:50:73:76:be:11:b3:b6:87:6b:d9: 4d:a6:e2:24:45:cd:f3:fd:07:73:43:d0:27:db:1b:f5:ec:bd: e7:bf:ef:fe:84:7a:83:10:fc:38:b3:3d:cb:1e:1f:5f:fe:f0: e0:d1:4e:61:2a:2a:f6:4f:60:a8:43:5c:9f:8c:18:bb:2f:6f: 49:d5:cc:73:8a:41:6e:0d:62:5b:11:15:20:c9:6f:26:cb:a0: fb:87:0b:b4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUJcPSHFQ0D+piELdFrEuvcYI8NkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MjQwNzI5NTVaFw0yNzA0MjMwNzM0NTVaMDMxMTAvBgNV BAMTKDQzNTFEODMxQjVDOEQzNjBFNTA5OURDQ0M0RkQ4RjRFNkRDM0VDRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC117YbKXF2H+4b1qmlD07rFYxB PD5xR9Q80Gr8lOKzUgg0epAP8UDA7P74Drpd3eGyfUNjqhkFX4FmmGzNfAVBTwsN tduxhx+YZUIvUxPxRZAkl2VoKsiq/wTxezvhfW2GZSld/p2KCiCE7jEzunDqDtXN 7xNUmvTBvAX5CAjSQzf59PLZIrecf+hr7rFMnBRyoHYw/P2HsVPiSuzaL4Hy/d72 CGb2ab5x8d/RC38lTqWuQzAEPKnv6azSWtTeWsU0Yd4DoAxhzKOS79Pfbh58PQnb PFfrUOfJ3sYU9NFmqhbltb9uVNHyLnmGWjpLEDruFHYJ9FY4RgVLBnz3L8KVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUQ1HYMbXI02DlCZ3MxP2PTm3D7PUwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zMTMwMzMyZTMy MzEzOTJlMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfbVjANBgkqhkiG9w0BAQsFAAOCAQEAHP6fzm0dI4PDVAq+CQMf MV1ASnbke2tUia5YtE2XwadyhbrJrCWLIQFvO4FfrEZdm+ywfpEra8II9bNZmoI3 q38r3nxnltSM3REWjBdyMRas+GZbvsgfbZ17+Ed2sCtazFMue2/Klw8q3Q7okHSz dkWPqOP8Xysx8TuvRh8jPOkY0Jjii8lq20UD8jPFbOxhTSnEixtkzXgfpDffIZe1 RmuN0AhOtwZpr31Qc3a+EbO2h2vZTabiJEXN8/0Hc0PQJ9sb9ey957/v/oR6gxD8 OLM9yx4fX/7w4NFOYSoq9k9gqENcn4wYuy9vSdXMc4pBbg1iWxEVIMlvJsug+4cL tA== -----END CERTIFICATE-----Generated at Wed May 13 15:06:28 2026 by rpki-client