$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa File: 3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa (raw, json) Hash identifier: ra0icXJ5xGSOzhteNAmtCBMHWBmiCd3UoFJwQ8sQDb0= Subject key identifier: 68:77:4E:6F:44:92:D0:D3:6F:1C:51:3B:C6:51:7C:04:A4:58:9E:01 Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 7D5C8BA1534FE0254DEE535FA77973F4E8A69DE4 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa Signing time: Tue 21 Apr 2026 11:24:57 +0000 ROA not before: Tue 21 Apr 2026 11:19:57 +0000 ROA not after: Tue 20 Apr 2027 11:24:57 +0000 asID: 152092 IP address blocks: 103.139.92.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5c:8b:a1:53:4f:e0:25:4d:ee:53:5f:a7:79:73:f4:e8:a6:9d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Apr 21 11:19:57 2026 GMT Not After : Apr 20 11:24:57 2027 GMT Subject: CN=68774E6F4492D0D36F1C513BC6517C04A4589E01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:6c:e5:63:12:86:57:21:6e:23:ea:bb:e7: d4:80:cf:a6:9e:66:6c:52:a7:da:91:e0:71:6c:91: 55:e3:49:d1:91:44:d1:7f:8e:00:5c:8b:a8:b5:c6: f4:fe:29:4b:50:e0:16:d7:65:23:d4:21:d6:ae:be: f7:cd:90:ef:b8:5c:2c:de:7f:7e:6a:76:ca:61:87: 68:74:0b:78:3f:7d:e0:97:01:6f:d8:b2:62:a8:f0: b1:aa:e1:8c:8c:7d:f8:56:01:70:90:4b:36:03:55: 3f:e6:5f:4a:ab:7e:45:0f:f9:c6:5f:5e:e5:4b:33: 17:c6:fd:d3:82:bb:c8:11:6f:59:38:ca:50:14:0e: 98:38:32:93:31:d9:6e:c3:ff:cd:5b:78:96:c7:24: 50:e0:1d:b6:02:69:3b:f9:c0:d5:1d:89:e6:cc:bc: c2:1c:4e:a6:cb:ce:b4:64:60:cd:ff:5a:9a:5c:2f: a3:28:fe:7c:cc:ce:32:46:cc:26:8b:a0:29:83:4b: 9d:f5:99:26:90:8d:03:b1:a3:18:47:f0:6b:04:de: 8a:f4:1d:c3:61:fa:d8:ed:85:f5:c5:90:bd:ca:98: 48:c9:da:80:73:13:21:a3:cf:57:0b:65:4f:6c:88: 7b:93:7b:85:a9:c1:a1:01:6b:1d:7e:b1:34:89:f5: fa:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:77:4E:6F:44:92:D0:D3:6F:1C:51:3B:C6:51:7C:04:A4:58:9E:01 X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3133392e39322e302f32332d3234203d3e20313532303932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.139.92.0/23 Signature Algorithm: sha256WithRSAEncryption 82:0e:ae:3c:60:64:c6:dd:bc:64:84:dc:9e:07:da:9d:5c:35: f3:3f:cc:54:e1:cb:fc:5f:43:03:1b:91:31:f9:e8:97:51:ee: 58:4b:7f:64:75:3b:1f:a7:1b:c7:f2:3a:8c:d3:14:76:ce:24: db:50:ee:10:0a:9d:89:3b:a8:d5:07:d9:f9:ec:07:fb:c8:25: 54:90:ca:e3:98:db:98:56:6e:f0:94:83:c4:64:11:5e:c3:cc: fb:b2:bd:7f:52:38:87:7e:66:dc:19:91:27:82:f6:be:64:40: ab:29:ea:e4:be:c9:a2:2a:1c:c3:1d:57:86:8e:35:48:0e:77: 65:31:05:74:dc:ff:41:b1:9d:cc:d2:53:9a:a7:1d:12:5b:cf: dd:04:1d:a9:a2:27:d4:ea:19:93:9d:98:a6:e8:c4:eb:c9:59: bd:58:7f:b9:40:60:bd:12:57:04:d7:ef:13:1b:91:00:fc:b7: df:16:5f:98:a9:1d:16:3d:e3:ad:c3:7e:83:75:c1:30:bb:ed: 7d:bd:f7:9f:35:9e:99:34:b0:18:c8:fa:aa:19:d0:c6:3a:dd: e2:75:5d:33:d7:98:5e:29:6f:9d:7e:98:58:68:92:cd:f9:de: 9d:e6:ae:5a:31:4b:88:1f:a2:31:79:d6:11:b6:7b:2a:41:c0: ae:ef:fd:67 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfVyLoVNP4CVN7lNfp3lz9OimneQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjA0MjExMTE5NTdaFw0yNzA0MjAxMTI0NTdaMDMxMTAvBgNV BAMTKDY4Nzc0RTZGNDQ5MkQwRDM2RjFDNTEzQkM2NTE3QzA0QTQ1ODlFMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7UGzlYxKGVyFuI+q759SAz6ae ZmxSp9qR4HFskVXjSdGRRNF/jgBci6i1xvT+KUtQ4BbXZSPUIdauvvfNkO+4XCze f35qdsphh2h0C3g/feCXAW/YsmKo8LGq4YyMffhWAXCQSzYDVT/mX0qrfkUP+cZf XuVLMxfG/dOCu8gRb1k4ylAUDpg4MpMx2W7D/81beJbHJFDgHbYCaTv5wNUdiebM vMIcTqbLzrRkYM3/WppcL6Mo/nzMzjJGzCaLoCmDS531mSaQjQOxoxhH8GsE3or0 HcNh+tjthfXFkL3KmEjJ2oBzEyGjz1cLZU9siHuTe4WpwaEBax1+sTSJ9fo7AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUaHdOb0SS0NNvHFE7xlF8BKRYngEwHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8zMTMwMzMyZTMx MzMzOTJlMzkzMjJlMzAyZjMyMzMyZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAWeLXDANBgkqhkiG9w0BAQsFAAOCAQEAgg6uPGBkxt28ZITcngfa nVw18z/MVOHL/F9DAxuRMfnol1HuWEt/ZHU7H6cbx/I6jNMUds4k21DuEAqdiTuo 1QfZ+ewH+8glVJDK45jbmFZu8JSDxGQRXsPM+7K9f1I4h35m3BmRJ4L2vmRAqynq 5L7Joiocwx1Xho41SA53ZTEFdNz/QbGdzNJTmqcdElvP3QQdqaIn1OoZk52YpujE 68lZvVh/uUBgvRJXBNfvExuRAPy33xZfmKkdFj3jrcN+g3XBMLvtfb33nzWemTSw GMj6qhnQxjrd4nVdM9eYXilvnX6YWGiSzfneneauWjFLiB+iMXnWEbZ7KkHAru/9 Zw== -----END CERTIFICATE-----Generated at Wed May 13 20:57:44 2026 by rpki-client