$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3234203d3e20313531323633.roa File: 3130332e34352e3132392e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: ub8G/vIQ6sjWWQA0HypxoESQRNKjR52rh9WTwJO8tf8= Subject key identifier: 62:75:4E:B8:1A:8F:E1:E4:90:8C:03:DE:44:66:1C:3E:C2:A7:06:AC Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 4B33CF4C26EC291DC2782111AE728DE42CD9DA78 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3234203d3e20313531323633.roa Signing time: Wed 23 Sep 2026 02:04:20 +0000 ROA not before: Wed 23 Sep 2026 01:59:20 +0000 ROA not after: Wed 22 Sep 2027 02:04:20 +0000 asID: 151263 IP address blocks: 103.45.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:33:cf:4c:26:ec:29:1d:c2:78:21:11:ae:72:8d:e4:2c:d9:da:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Sep 23 01:59:20 2026 GMT Not After : Sep 22 02:04:20 2027 GMT Subject: CN=62754EB81A8FE1E4908C03DE44661C3EC2A706AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b2:f7:58:af:a2:42:53:f8:6a:71:b2:3d:1e: 2d:c0:a7:7b:1c:40:61:7e:59:08:38:23:fb:e8:e7: 1b:f7:7f:46:82:44:ca:d4:64:4f:ba:49:58:1a:23: 5e:e3:10:c6:13:9e:3f:cd:c5:d0:ca:90:c7:bd:c8: 82:9f:06:59:a3:b9:3e:17:08:42:4e:f2:0e:87:cf: 65:b9:f8:83:d5:0e:99:0b:78:17:eb:b9:a1:f8:93: 54:33:cd:aa:dc:82:9a:d0:f9:d7:bb:c2:61:72:4f: c0:c2:db:9c:9a:3e:3b:cd:65:ff:0c:4e:cc:0a:ad: bf:58:20:0d:e9:ab:af:9b:01:3e:41:24:d5:52:30: f5:91:cf:63:78:42:dd:ac:46:35:db:40:e4:66:37: fb:0e:84:7b:e6:79:48:02:21:4e:70:e6:ec:d7:7b: e3:c9:9a:cb:40:cf:88:7b:32:e5:8b:9a:1a:fc:44: 2f:8f:3b:74:c4:6b:09:01:fc:2c:7e:ea:a6:a0:b7: 48:95:ed:bb:0b:6b:8d:56:7b:5b:87:20:63:05:95: 66:76:56:ef:fa:f5:25:a5:ee:68:9f:06:b0:52:05: f6:83:c8:1b:1d:31:0d:eb:7a:d0:ba:b4:b2:00:2b: 59:4b:e0:cf:5f:45:ca:ae:45:eb:cd:35:f4:f8:73: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:75:4E:B8:1A:8F:E1:E4:90:8C:03:DE:44:66:1C:3E:C2:A7:06:AC X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/3130332e34352e3132392e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.45.129.0/24 Signature Algorithm: sha256WithRSAEncryption 33:b8:d8:34:2c:43:19:c5:e5:bc:ff:8f:8f:a1:dd:15:83:75: a9:67:2b:c2:1a:cf:7b:ea:a5:15:4a:00:ee:21:6b:3e:bc:54: e0:78:b6:c1:2b:8a:19:f2:68:5a:08:40:3e:c8:5e:9a:d9:a1: ec:09:4f:5e:36:5c:ed:51:c4:80:d9:db:bd:dd:3c:70:19:84: 8e:3d:95:11:6c:d9:4e:2f:0a:e8:d9:e3:2a:97:31:33:82:34: be:be:f8:52:5d:4a:35:ec:f9:fa:ce:d8:21:28:ea:4f:86:fd: 8b:c0:76:75:11:17:3f:79:4a:cf:eb:66:97:4f:71:cd:20:57: 8c:f2:09:b1:a6:7f:69:53:37:5a:6f:c8:1d:db:5e:0c:50:c8: 57:6c:f1:fd:59:da:5e:d6:e6:5e:d2:59:a5:5c:0c:12:b8:cf: 01:0e:26:5e:c2:55:bd:06:39:7d:73:cd:a8:f4:c3:6c:fe:85: 84:46:23:19:2d:80:fb:0d:90:56:fb:c4:a0:98:f4:b7:9a:33: c5:54:ee:2b:8e:4f:4b:b1:03:1d:e2:22:cd:cf:bc:e4:c3:0c: 13:7c:0b:f1:96:f1:93:01:3e:a6:e4:3e:ef:dd:f2:3c:fa:d2: fd:d4:f7:80:24:55:3c:53:5b:d3:b6:02:15:95:ab:e0:23:93: 54:58:fa:82 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSzPPTCbsKR3CeCERrnKN5CzZ2ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA5MjMwMTU5MjBaFw0yNzA5MjIwMjA0MjBaMDMxMTAvBgNV BAMTKDYyNzU0RUI4MUE4RkUxRTQ5MDhDMDNERTQ0NjYxQzNFQzJBNzA2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCssvdYr6JCU/hqcbI9Hi3Ap3sc QGF+WQg4I/vo5xv3f0aCRMrUZE+6SVgaI17jEMYTnj/NxdDKkMe9yIKfBlmjuT4X CEJO8g6Hz2W5+IPVDpkLeBfruaH4k1QzzarcgprQ+de7wmFyT8DC25yaPjvNZf8M TswKrb9YIA3pq6+bAT5BJNVSMPWRz2N4Qt2sRjXbQORmN/sOhHvmeUgCIU5w5uzX e+PJmstAz4h7MuWLmhr8RC+PO3TEawkB/Cx+6qagt0iV7bsLa41We1uHIGMFlWZ2 Vu/69SWl7mifBrBSBfaDyBsdMQ3retC6tLIAK1lL4M9fRcquRevNNfT4c9RfAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUYnVOuBqP4eSQjAPeRGYcPsKnBqwwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU2NDkzNDU4MjI3MjIvMC8zMTMwMzMyZTM0 MzUyZTMxMzIzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAGctgTANBgkqhkiG9w0BAQsFAAOCAQEAM7jYNCxDGcXlvP+Pj6Hd FYN1qWcrwhrPe+qlFUoA7iFrPrxU4Hi2wSuKGfJoWghAPshemtmh7AlPXjZc7VHE gNnbvd08cBmEjj2VEWzZTi8K6NnjKpcxM4I0vr74Ul1KNez5+s7YISjqT4b9i8B2 dREXP3lKz+tml09xzSBXjPIJsaZ/aVM3Wm/IHdteDFDIV2zx/VnaXtbmXtJZpVwM ErjPAQ4mXsJVvQY5fXPNqPTDbP6FhEYjGS2A+w2QVvvEoJj0t5ozxVTuK45PS7ED HeIizc+85MMME3wL8ZbxkwE+puQ+793yPPrS/dT3gCRVPFNb07YCFZWr4COTVFj6 gg== -----END CERTIFICATE-----Generated at Wed Sep 30 05:04:46 2026 by rpki-client