$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34342e302f32342d3234203d3e20313334373030.roa File: 3130332e32302e34342e302f32342d3234203d3e20313334373030.roa (raw, json) Hash identifier: X2zulMdAN7rsvwTgL+Vh9cmDskH+HpHFJbGbdH5qCL8= Subject key identifier: B1:4F:6A:C4:64:E8:41:45:B6:23:A5:99:B0:6E:7F:7B:9F:FE:AB:4C Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 0B12B943F80CF62154FA88D3609C4240D845D436 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34342e302f32342d3234203d3e20313334373030.roa Signing time: Mon 27 Apr 2026 10:24:23 +0000 ROA not before: Mon 27 Apr 2026 10:19:23 +0000 ROA not after: Mon 26 Apr 2027 10:24:23 +0000 asID: 134700 IP address blocks: 103.20.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:12:b9:43:f8:0c:f6:21:54:fa:88:d3:60:9c:42:40:d8:45:d4:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Apr 27 10:19:23 2026 GMT Not After : Apr 26 10:24:23 2027 GMT Subject: CN=B14F6AC464E84145B623A599B06E7F7B9FFEAB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c5:ac:24:1b:f9:16:7c:6f:ab:8b:d5:39:2c: 1a:63:fd:32:8e:08:07:ad:36:13:f4:b2:5a:ed:b0: c4:0d:b6:fe:ff:4e:04:5f:53:0b:47:b2:fc:48:be: a7:64:20:84:be:7c:b9:0e:c4:7b:64:6f:22:3a:43: a2:24:96:44:b8:a3:70:c7:6f:d3:0f:b3:d5:31:da: 77:56:dd:2f:6b:06:8d:e9:3c:2d:24:4d:d5:7b:60: a7:c8:1b:d7:7d:17:c6:44:c9:a3:53:44:e9:ec:81: e5:84:d5:da:bf:60:5c:ff:e7:83:cc:89:3b:53:52: ca:6b:02:e3:83:5c:56:f3:fb:79:df:7f:0f:76:ce: c4:a8:97:5c:4e:e1:ab:2b:87:3c:ed:b9:16:b1:fd: f6:2e:34:88:92:ef:56:02:6a:f3:1e:9d:a2:3d:41: 91:c0:dc:2d:64:d1:4f:3e:bf:21:c2:12:97:30:0f: 41:88:42:6f:97:9c:d6:e2:1d:56:57:13:46:1f:3f: aa:93:17:96:95:77:18:95:1e:d6:43:10:86:d7:79: cb:8f:5c:15:e1:7d:43:2f:4e:5d:67:db:1d:ca:74: 37:71:81:1a:27:d6:d1:e3:a2:e2:7f:e0:c9:ec:40: 05:bb:c1:15:e8:88:ec:84:97:26:56:d5:47:67:cb: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:4F:6A:C4:64:E8:41:45:B6:23:A5:99:B0:6E:7F:7B:9F:FE:AB:4C X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34342e302f32342d3234203d3e20313334373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.44.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:3e:53:d4:c3:41:8a:0a:c6:6a:40:45:6f:08:54:8e:a0:1e: 2e:66:cb:ca:ed:86:5f:ee:8f:4a:ad:06:48:cc:31:88:bc:83: 28:da:11:d1:aa:88:08:93:4e:58:d8:ae:ee:9b:cb:92:03:6b: 45:17:56:e4:31:e9:76:5f:9d:7e:dc:ff:dc:e1:f2:65:c0:65: 54:f9:ab:30:71:a7:80:c1:95:67:4d:45:cb:38:d4:57:b2:30: 8d:59:fa:c1:cb:6a:96:a4:ab:78:ae:2a:09:4a:d3:2c:27:18: 46:2e:c6:f0:4e:3c:ae:f0:63:2a:d7:7a:8d:6b:f6:8a:3b:a6: ad:f3:68:7e:c0:ca:c0:bd:6e:cc:d5:94:66:a0:28:fe:be:59: 48:94:74:37:15:c2:81:1f:76:c2:53:b1:ed:2d:b6:62:27:f9: 32:4a:ff:16:d1:ea:bc:b5:d8:2a:37:c1:94:8a:ae:91:ae:04: be:15:76:df:4d:7c:f0:5e:e0:dd:4e:fb:3a:6b:9d:ac:5d:c3: ad:02:25:64:e2:9c:fa:29:2e:84:f1:10:3b:f7:85:90:2d:a9: ea:e4:29:62:58:f7:4b:7f:96:cb:75:06:f1:f2:6a:d3:df:91: 5e:00:9a:cf:d8:2a:b6:a1:13:f4:28:18:b6:b2:5c:db:5b:2d: ed:2c:76:73 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCxK5Q/gM9iFU+ojTYJxCQNhF1DYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjA0MjcxMDE5MjNaFw0yNzA0MjYxMDI0MjNaMDMxMTAvBgNV BAMTKEIxNEY2QUM0NjRFODQxNDVCNjIzQTU5OUIwNkU3RjdCOUZGRUFCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzxawkG/kWfG+ri9U5LBpj/TKO CAetNhP0slrtsMQNtv7/TgRfUwtHsvxIvqdkIIS+fLkOxHtkbyI6Q6IklkS4o3DH b9MPs9Ux2ndW3S9rBo3pPC0kTdV7YKfIG9d9F8ZEyaNTROnsgeWE1dq/YFz/54PM iTtTUsprAuODXFbz+3nffw92zsSol1xO4asrhzztuRax/fYuNIiS71YCavMenaI9 QZHA3C1k0U8+vyHCEpcwD0GIQm+XnNbiHVZXE0YfP6qTF5aVdxiVHtZDEIbXecuP XBXhfUMvTl1n2x3KdDdxgRon1tHjouJ/4MnsQAW7wRXoiOyElyZW1Udny5XLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUsU9qxGToQUW2I6WZsG5/e5/+q0wwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTU5MDc4Ny8wLzMxMzAzMzJlMzIz MDJlMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzAzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGcULDANBgkqhkiG9w0BAQsFAAOCAQEAWj5T1MNBigrGakBFbwhUjqAe LmbLyu2GX+6PSq0GSMwxiLyDKNoR0aqICJNOWNiu7pvLkgNrRRdW5DHpdl+dftz/ 3OHyZcBlVPmrMHGngMGVZ01FyzjUV7IwjVn6wctqlqSreK4qCUrTLCcYRi7G8E48 rvBjKtd6jWv2ijumrfNofsDKwL1uzNWUZqAo/r5ZSJR0NxXCgR92wlOx7S22Yif5 Mkr/FtHqvLXYKjfBlIquka4EvhV230188F7g3U77OmudrF3DrQIlZOKc+ikuhPEQ O/eFkC2p6uQpYlj3S3+Wy3UG8fJq09+RXgCaz9gqtqET9CgYtrJc21st7Sx2cw== -----END CERTIFICATE-----Generated at Wed May 13 15:56:58 2026 by rpki-client