$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38372e302f32342d3234203d3e20313436373732.roa File: 3130332e3231392e38372e302f32342d3234203d3e20313436373732.roa (raw, json) Hash identifier: BRl4mQ6cdOwfk/Kx+aDhlCnxDNICpywBM8raPfvbf6o= Subject key identifier: 99:85:62:1C:85:03:CC:3A:28:92:60:6C:6E:1E:C4:B4:62:3C:EB:74 Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Certificate serial: 5751D3E74053B09D38F2D80D30F34570638C94F0 Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38372e302f32342d3234203d3e20313436373732.roa Signing time: Fri 24 Apr 2026 07:34:54 +0000 ROA not before: Fri 24 Apr 2026 07:29:54 +0000 ROA not after: Fri 23 Apr 2027 07:34:54 +0000 asID: 146772 IP address blocks: 103.219.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:51:d3:e7:40:53:b0:9d:38:f2:d8:0d:30:f3:45:70:63:8c:94:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8 Validity Not Before: Apr 24 07:29:54 2026 GMT Not After : Apr 23 07:34:54 2027 GMT Subject: CN=9985621C8503CC3A2892606C6E1EC4B4623CEB74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:95:31:8b:a8:38:93:a5:a9:4f:4f:c1:0d: ed:33:32:7a:b7:07:4c:d1:6a:6c:49:f2:ef:3b:32: e4:7f:b1:9e:3e:32:1a:27:ca:6d:0d:0d:e3:c6:55: e1:ce:26:98:76:d5:ca:8b:0d:12:62:fe:bd:f1:8c: 2d:6d:1e:3d:21:b2:46:f0:12:f5:c3:a9:a9:13:c2: 62:9b:40:9d:13:55:49:5c:b6:00:8d:0c:40:b1:c5: f3:1f:0d:03:a4:fd:6b:4e:b3:b4:92:f4:4d:86:cf: da:b2:d5:9c:20:a0:66:24:f5:94:13:11:13:cd:81: 70:99:03:f3:34:b6:a0:b3:72:9d:d2:f7:fb:38:5d: f4:74:2d:1c:b3:23:66:0c:c7:7b:ff:a7:c7:e1:c3: e2:72:65:e5:86:ac:a5:bf:77:9b:91:96:aa:58:46: d6:36:e2:2b:f7:55:de:07:eb:42:81:88:5d:6b:15: 34:0c:d8:79:d4:e0:49:4b:74:cd:e0:df:45:13:89: d1:f4:ab:34:47:19:b1:9e:db:f3:66:bd:16:e6:d8: 04:6f:19:57:48:11:bb:78:5a:53:f3:ec:cf:7d:ee: da:93:b7:a7:5e:c0:94:d7:d0:92:30:b5:43:07:27: a3:ae:cb:cb:38:7c:2a:58:94:6d:67:c0:6d:c2:cc: a2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:85:62:1C:85:03:CC:3A:28:92:60:6C:6E:1E:C4:B4:62:3C:EB:74 X509v3 Authority Key Identifier: keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3130332e3231392e38372e302f32342d3234203d3e20313436373732.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.219.87.0/24 Signature Algorithm: sha256WithRSAEncryption 70:e6:68:bc:bd:02:af:11:57:cb:a5:5d:47:c8:75:5a:4f:bc: 6a:e0:14:a3:34:25:dc:f6:43:00:ba:28:6d:49:2a:27:8d:96: a3:b6:c3:a2:88:97:94:6b:93:11:44:a2:2e:4b:fd:f7:31:64: ac:f5:02:13:3f:68:ef:d4:cf:fd:1e:c5:dc:a8:ba:99:85:13: 93:80:cd:75:a9:90:ef:42:c3:60:27:4b:af:67:6a:80:3b:4f: 19:e2:55:5d:11:9c:53:ac:e3:2c:9a:89:ca:47:ec:77:89:ad: 76:65:d0:e7:6d:0b:ac:cb:bb:c6:a8:f1:3d:4b:e2:27:73:74: 63:64:af:d5:aa:73:1a:7d:24:1a:3f:05:15:b5:d0:4b:60:83: 6f:55:31:f9:32:be:94:a9:83:46:b9:2b:0e:b7:fb:88:93:9e: 9a:e9:83:d1:67:9d:94:b4:6b:23:85:68:e8:26:1b:c9:ba:a6: 8a:9f:df:60:9c:24:d6:dc:b0:df:d8:6c:02:09:b2:b0:56:d7: 0d:ff:86:67:15:68:31:9d:4c:a7:e5:aa:fb:3a:b3:c4:82:d7: 26:ba:24:d4:96:b0:c6:31:46:4a:eb:71:fe:2d:5b:e8:b8:42: 93:86:17:4c:c7:89:f4:d2:a3:d1:9d:2a:5e:d6:65:3b:68:ca: f8:cc:c6:80 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUV1HT50BTsJ048tgNMPNFcGOMlPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0Qzcy RjFBMTJCODAeFw0yNjA0MjQwNzI5NTRaFw0yNzA0MjMwNzM0NTRaMDMxMTAvBgNV BAMTKDk5ODU2MjFDODUwM0NDM0EyODkyNjA2QzZFMUVDNEI0NjIzQ0VCNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3bJUxi6g4k6WpT0/BDe0zMnq3 B0zRamxJ8u87MuR/sZ4+Mhonym0NDePGVeHOJph21cqLDRJi/r3xjC1tHj0hskbw EvXDqakTwmKbQJ0TVUlctgCNDECxxfMfDQOk/WtOs7SS9E2Gz9qy1ZwgoGYk9ZQT ERPNgXCZA/M0tqCzcp3S9/s4XfR0LRyzI2YMx3v/p8fhw+JyZeWGrKW/d5uRlqpY RtY24iv3Vd4H60KBiF1rFTQM2HnU4ElLdM3g30UTidH0qzRHGbGe2/NmvRbm2ARv GVdIEbt4WlPz7M997tqTt6dewJTX0JIwtUMHJ6Ouy8s4fCpYlG1nwG3CzKI5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUmYViHIUDzDookmBsbh7EtGI863QwHwYDVR0j BBgwFoAUPQHNaSjd6NJqyWJl8fkExy8aErgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTM4OTI2NTQyMDI4OS8wLzNEMDFDRDY5MjhEREU4RDI2QUM5NjI2NUYxRjkw NEM3MkYxQTEyQjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0QwMUNENjkyOERERThEMjZBQzk2MjY1RjFGOTA0QzcyRjFBMTJCOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjU0MjAyODkvMC8zMTMwMzMyZTMy MzEzOTJlMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzczMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGfbVzANBgkqhkiG9w0BAQsFAAOCAQEAcOZovL0CrxFXy6VdR8h1 Wk+8auAUozQl3PZDALoobUkqJ42Wo7bDooiXlGuTEUSiLkv99zFkrPUCEz9o79TP /R7F3Ki6mYUTk4DNdamQ70LDYCdLr2dqgDtPGeJVXRGcU6zjLJqJykfsd4mtdmXQ 520LrMu7xqjxPUviJ3N0Y2Sv1apzGn0kGj8FFbXQS2CDb1Ux+TK+lKmDRrkrDrf7 iJOemumD0WedlLRrI4Vo6CYbybqmip/fYJwk1tyw39hsAgmysFbXDf+GZxVoMZ1M p+Wq+zqzxILXJrok1JawxjFGSutx/i1b6LhCk4YXTMeJ9NKj0Z0qXtZlO2jK+MzG gA== -----END CERTIFICATE-----Generated at Wed May 13 15:07:36 2026 by rpki-client