$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34372e302f32342d3234203d3e20313334373030.roa File: 3130332e32302e34372e302f32342d3234203d3e20313334373030.roa (raw, json) Hash identifier: +O7jCarcVhvkxjOG9WOSwYElZHlomMQOH8c2i2+MVfc= Subject key identifier: 10:3F:1D:96:A4:3D:74:B0:66:15:7B:12:02:38:C8:C5:13:E3:C1:91 Certificate issuer: /CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Certificate serial: 158BA2F55C5A268F03BFEBAB180483A0CF591F97 Authority key identifier: FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34372e302f32342d3234203d3e20313334373030.roa Signing time: Mon 27 Apr 2026 10:24:24 +0000 ROA not before: Mon 27 Apr 2026 10:19:24 +0000 ROA not after: Mon 26 Apr 2027 10:24:24 +0000 asID: 134700 IP address blocks: 103.20.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:8b:a2:f5:5c:5a:26:8f:03:bf:eb:ab:18:04:83:a0:cf:59:1f:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FF4E68ED10AAB07D8F4EEC05FD03457953F937E1 Validity Not Before: Apr 27 10:19:24 2026 GMT Not After : Apr 26 10:24:24 2027 GMT Subject: CN=103F1D96A43D74B066157B120238C8C513E3C191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5d:9c:46:6d:d5:a4:7b:27:f0:50:52:18:68: 9d:99:7c:f1:f2:ca:04:e2:e6:28:63:39:a8:4e:f2: 74:66:8e:5d:11:61:60:bf:39:3e:59:1d:f2:a7:d2: 56:7c:ce:5e:df:13:d6:96:d6:4b:d5:3d:9c:aa:e4: 89:ba:3c:a3:43:ee:69:61:35:96:0b:df:67:a4:ef: a8:f4:b5:a7:5c:3b:79:bc:af:c0:29:68:fc:66:75: a2:2b:99:7f:84:7b:75:fe:bb:9b:16:d8:1f:2e:e2: a6:69:0b:e2:7a:9d:24:51:fe:de:83:e6:32:24:44: 26:11:74:db:12:c0:6b:59:97:9e:29:37:62:c2:35: 77:25:3b:e6:8b:c4:ae:85:5b:c6:29:6e:e2:e3:1a: 9f:b3:2d:f6:cb:7d:d9:e0:9e:04:43:38:8e:e7:b2: 03:7c:0c:b1:a1:26:16:43:29:33:91:2a:a9:50:51: 4b:c7:55:de:9e:9b:eb:cc:27:07:89:79:25:62:a0: 20:fd:70:02:e7:18:92:c4:c9:cc:14:f8:99:da:54: 64:fd:fc:fc:41:4f:02:cd:d7:b9:9b:8f:24:6a:ce: 47:59:ae:81:cb:a9:1c:8c:1d:93:4f:20:c2:48:8f: 36:47:0d:f8:ed:9c:9b:2c:55:10:23:7a:10:d9:4a: ca:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3F:1D:96:A4:3D:74:B0:66:15:7B:12:02:38:C8:C5:13:E3:C1:91 X509v3 Authority Key Identifier: keyid:FF:4E:68:ED:10:AA:B0:7D:8F:4E:EC:05:FD:03:45:79:53:F9:37:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FF4E68ED10AAB07D8F4EEC05FD03457953F937E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129590787/0/3130332e32302e34372e302f32342d3234203d3e20313334373030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.20.47.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:8e:ef:6e:87:70:4d:31:48:d8:3f:29:60:62:d6:22:18:0e: 99:ae:ff:9e:a0:35:7f:2c:3c:bb:38:62:2a:92:38:7c:ba:27: e7:c8:b3:50:40:7b:ab:a8:e3:d2:de:75:2e:78:57:e4:af:a7: c3:67:cc:c3:a6:b3:dc:ac:cb:44:a3:d8:8d:0f:05:72:2a:0f: ea:d0:cf:54:fb:a4:5a:1f:83:71:6e:f8:2d:3b:03:94:13:d9: 45:b5:95:95:7b:32:31:14:bc:d8:23:51:fb:74:5a:e9:91:e6: fe:dc:25:1f:89:b3:40:f5:0f:5d:a3:d3:0e:aa:8b:7b:0c:f6: 28:cf:7d:de:cf:f4:90:f7:92:d8:2b:7b:e4:02:5b:48:6d:44: ab:ed:c7:ba:ec:e1:69:1a:bb:00:c7:5f:24:44:39:9b:4a:fb: bb:65:2e:c1:26:41:9e:05:cd:2e:e1:de:65:b4:df:d8:75:23: 5c:d5:9d:70:ad:4d:11:6a:b9:70:27:3a:02:2f:2e:e0:e5:b1: 35:a0:cc:84:5a:6c:d7:38:53:46:1c:55:3c:8e:93:89:e7:38: 14:fd:a3:72:2f:87:91:68:a3:c4:89:15:2a:f2:2f:2a:d4:25: 8c:31:03:23:1f:b3:04:55:ff:d8:c8:a3:8b:33:3f:bb:4c:b0: 9c:df:1e:70 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUFYui9VxaJo8Dv+urGASDoM9ZH5cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1 M0Y5MzdFMTAeFw0yNjA0MjcxMDE5MjRaFw0yNzA0MjYxMDI0MjRaMDMxMTAvBgNV BAMTKDEwM0YxRDk2QTQzRDc0QjA2NjE1N0IxMjAyMzhDOEM1MTNFM0MxOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoXZxGbdWkeyfwUFIYaJ2ZfPHy ygTi5ihjOahO8nRmjl0RYWC/OT5ZHfKn0lZ8zl7fE9aW1kvVPZyq5Im6PKND7mlh NZYL32ek76j0tadcO3m8r8ApaPxmdaIrmX+Ee3X+u5sW2B8u4qZpC+J6nSRR/t6D 5jIkRCYRdNsSwGtZl54pN2LCNXclO+aLxK6FW8YpbuLjGp+zLfbLfdngngRDOI7n sgN8DLGhJhZDKTORKqlQUUvHVd6em+vMJweJeSVioCD9cALnGJLEycwU+JnaVGT9 /PxBTwLN17mbjyRqzkdZroHLqRyMHZNPIMJIjzZHDfjtnJssVRAjehDZSsphAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUED8dlqQ9dLBmFXsSAjjIxRPjwZEwHwYDVR0j BBgwFoAU/05o7RCqsH2PTuwF/QNFeVP5N+EwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4ODU1MzEyOTU5MDc4Ny8wL0ZGNEU2OEVEMTBBQUIwN0Q4RjRFRUMwNUZEMDM0 NTc5NTNGOTM3RTEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkY0RTY4RUQxMEFBQjA3RDhGNEVFQzA1RkQwMzQ1Nzk1M0Y5MzdFMS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4ODU1MzEyOTU5MDc4Ny8wLzMxMzAzMzJlMzIz MDJlMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzAzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAGcULzANBgkqhkiG9w0BAQsFAAOCAQEAG47vbodwTTFI2D8pYGLWIhgO ma7/nqA1fyw8uzhiKpI4fLon58izUEB7q6jj0t51LnhX5K+nw2fMw6az3KzLRKPY jQ8FcioP6tDPVPukWh+DcW74LTsDlBPZRbWVlXsyMRS82CNR+3Ra6ZHm/twlH4mz QPUPXaPTDqqLewz2KM993s/0kPeS2Ct75AJbSG1Eq+3HuuzhaRq7AMdfJEQ5m0r7 u2UuwSZBngXNLuHeZbTf2HUjXNWdcK1NEWq5cCc6Ai8u4OWxNaDMhFps1zhTRhxV PI6Tiec4FP2jci+HkWijxIkVKvIvKtQljDEDIx+zBFX/2MijizM/u0ywnN8ecA== -----END CERTIFICATE-----Generated at Wed May 13 15:56:59 2026 by rpki-client