$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa File: 3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa (raw, json) Hash identifier: 7PdhqnV2l2jKzSZE5Z7yfjdf74Fm6//1bWgJ6GsNP0w= Subject key identifier: 93:85:65:48:EB:13:B1:C0:F7:51:7F:9B:92:1B:F0:1E:74:CF:05:DA Certificate issuer: /CN=09F7B3237C248B53A3ADBB771E63C783610963AB Certificate serial: 68D8E5091DED7708338B0784391FA30975D5E5B1 Authority key identifier: 09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa Signing time: Tue 21 Apr 2026 11:24:57 +0000 ROA not before: Tue 21 Apr 2026 11:19:57 +0000 ROA not after: Tue 20 Apr 2027 11:24:57 +0000 asID: 152092 IP address blocks: 103.218.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d8:e5:09:1d:ed:77:08:33:8b:07:84:39:1f:a3:09:75:d5:e5:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F7B3237C248B53A3ADBB771E63C783610963AB Validity Not Before: Apr 21 11:19:57 2026 GMT Not After : Apr 20 11:24:57 2027 GMT Subject: CN=93856548EB13B1C0F7517F9B921BF01E74CF05DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:2e:39:6e:d6:16:c0:90:95:16:39:17:08:a2: ca:22:9b:c2:37:59:e6:eb:17:f6:db:28:85:10:64: 58:e2:ed:ff:80:9a:2f:bb:43:44:84:c6:0a:5e:49: ad:09:fb:08:70:a6:b5:ff:39:ed:db:58:d7:54:b0: 69:8e:fd:f7:59:d1:67:51:b0:d8:ea:49:cc:f3:6b: b9:ca:65:27:03:c9:69:56:47:ac:da:e4:c2:30:b1: f7:ac:4d:eb:51:d0:8b:01:2d:df:19:90:eb:17:e9: eb:51:d3:5b:c7:be:b3:fe:7e:f1:82:d6:27:a9:fb: ce:31:4b:6a:60:0e:7a:d2:01:34:1c:85:b0:8f:48: 96:41:a5:ec:44:fb:1e:b0:b4:53:dc:4c:55:04:a2: ec:9a:11:0c:83:74:b0:3d:89:70:ab:a6:e7:d2:75: 30:e8:e7:29:a1:1c:99:25:e5:14:ed:17:1e:46:ed: bd:1f:ec:99:e4:09:15:a0:27:32:a8:d2:b9:17:fb: 68:96:e9:84:8f:76:c1:a6:5a:79:d9:bf:3b:4a:5f: 12:38:27:aa:4d:73:03:58:15:79:9a:01:e4:64:b9: 87:2a:b3:67:ad:fc:0d:a4:2a:e6:7d:75:6f:3d:08: 42:ac:ef:e3:8e:0d:97:de:9a:e9:ab:53:d7:3a:c5: bb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:85:65:48:EB:13:B1:C0:F7:51:7F:9B:92:1B:F0:1E:74:CF:05:DA X509v3 Authority Key Identifier: keyid:09:F7:B3:23:7C:24:8B:53:A3:AD:BB:77:1E:63:C7:83:61:09:63:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/09F7B3237C248B53A3ADBB771E63C783610963AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/09F7B3237C248B53A3ADBB771E63C783610963AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065591683061776386/0/3130332e3231382e39322e302f32322d3234203d3e20313532303932.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.218.92.0/22 Signature Algorithm: sha256WithRSAEncryption 35:10:6f:f6:7e:64:39:53:9d:6c:8a:60:40:0c:84:c2:ef:fd: d9:78:b3:d8:5a:bf:be:cc:2c:5b:6b:be:86:1f:a4:6b:59:86: 13:34:42:df:a1:8e:dc:6c:b0:4d:4e:19:0d:60:45:6d:27:c1: d0:fd:e7:75:0a:51:57:fd:bf:15:fa:2b:c1:a0:54:bc:57:b4: 92:17:a0:4d:3f:c1:44:6d:69:09:02:8f:bb:a7:dd:6c:ce:74: 59:1b:65:96:7d:b7:8f:16:b7:ba:80:2d:e5:5f:db:4a:9a:28: 61:d8:91:63:f8:a3:45:9a:a1:1a:1c:31:70:20:19:29:cd:5f: 26:22:59:fe:cf:5a:5c:96:9d:6c:86:c6:b6:bb:28:a8:6a:18: 63:8e:cb:55:70:cd:18:d4:f9:d5:1e:6f:da:4f:76:e5:69:9a: a1:0e:2e:f1:64:1b:90:6d:6c:85:a2:fa:74:a4:19:14:ce:fd: b5:58:8a:b4:4e:d3:f8:1b:5c:28:07:27:11:d1:d8:0f:5a:65: 98:91:27:34:fe:8f:7f:61:c8:b4:c1:7a:a0:65:b8:66:c5:a7: 62:7d:07:43:ac:ca:6b:77:b8:92:e9:4d:42:5f:24:c5:17:27: f3:3e:50:e4:56:2d:e2:e2:83:41:a9:07:a0:29:b6:86:f2:cd: e5:25:7c:d4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUaNjlCR3tdwgziweEOR+jCXXV5bEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2 MTA5NjNBQjAeFw0yNjA0MjExMTE5NTdaFw0yNzA0MjAxMTI0NTdaMDMxMTAvBgNV BAMTKDkzODU2NTQ4RUIxM0IxQzBGNzUxN0Y5QjkyMUJGMDFFNzRDRjA1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCLjlu1hbAkJUWORcIosoim8I3 WebrF/bbKIUQZFji7f+Ami+7Q0SExgpeSa0J+whwprX/Oe3bWNdUsGmO/fdZ0WdR sNjqSczza7nKZScDyWlWR6za5MIwsfesTetR0IsBLd8ZkOsX6etR01vHvrP+fvGC 1iep+84xS2pgDnrSATQchbCPSJZBpexE+x6wtFPcTFUEouyaEQyDdLA9iXCrpufS dTDo5ymhHJkl5RTtFx5G7b0f7JnkCRWgJzKo0rkX+2iW6YSPdsGmWnnZvztKXxI4 J6pNcwNYFXmaAeRkuYcqs2et/A2kKuZ9dW89CEKs7+OODZfemumrU9c6xbu5AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUk4VlSOsTscD3UX+bkhvwHnTPBdowHwYDVR0j BBgwFoAUCfezI3wki1Ojrbt3HmPHg2EJY6swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU5MTY4MzA2MTc3NjM4Ni8wLzA5RjdCMzIzN0MyNDhCNTNBM0FEQkI3NzFFNjND NzgzNjEwOTYzQUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDlGN0IzMjM3QzI0OEI1M0EzQURCQjc3MUU2M0M3ODM2MTA5NjNBQi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1OTE2ODMwNjE3NzYzODYvMC8zMTMwMzMyZTMy MzEzODJlMzkzMjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMjMwMzkzMi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAmfaXDANBgkqhkiG9w0BAQsFAAOCAQEANRBv9n5kOVOdbIpgQAyE wu/92Xiz2Fq/vswsW2u+hh+ka1mGEzRC36GO3GywTU4ZDWBFbSfB0P3ndQpRV/2/ FforwaBUvFe0khegTT/BRG1pCQKPu6fdbM50WRtlln23jxa3uoAt5V/bSpooYdiR Y/ijRZqhGhwxcCAZKc1fJiJZ/s9aXJadbIbGtrsoqGoYY47LVXDNGNT51R5v2k92 5WmaoQ4u8WQbkG1shaL6dKQZFM79tViKtE7T+BtcKAcnEdHYD1plmJEnNP6Pf2HI tMF6oGW4ZsWnYn0HQ6zKa3e4kulNQl8kxRcn8z5Q5FYt4uKDQakHoCm2hvLN5SV8 1A== -----END CERTIFICATE-----Generated at Wed May 13 20:57:42 2026 by rpki-client