$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/3130332e3135392e3133342e302f32332d3233203d3e2030.roa File: 3130332e3135392e3133342e302f32332d3233203d3e2030.roa (raw, json) Hash identifier: NsCWtPvZZPd11fxDgtHFGg5jBBb8km/B001wul3DeR4= Subject key identifier: 2B:BA:78:81:8E:12:34:1F:42:58:7D:02:84:E1:29:06:C5:75:E5:4B Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 0D4C35C56A4F7ED485EB12780C71D1A15BFD84D6 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/3130332e3135392e3133342e302f32332d3233203d3e2030.roa Signing time: Tue 21 Apr 2026 05:04:12 +0000 ROA not before: Tue 21 Apr 2026 04:59:12 +0000 ROA not after: Tue 20 Apr 2027 05:04:12 +0000 asID: 0 IP address blocks: 103.159.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 13:31:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:4c:35:c5:6a:4f:7e:d4:85:eb:12:78:0c:71:d1:a1:5b:fd:84:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Apr 21 04:59:12 2026 GMT Not After : Apr 20 05:04:12 2027 GMT Subject: CN=2BBA78818E12341F42587D0284E12906C575E54B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:38:fc:15:c9:94:62:74:59:8a:eb:38:3f:73: 94:61:90:af:b0:e8:51:23:19:07:ad:84:be:e1:32: 92:a4:4c:9e:88:98:1a:6b:0b:79:40:6e:c6:36:e6: b7:ee:21:63:36:23:6a:7b:8d:3a:c8:a1:14:23:f2: ed:89:87:29:64:b1:68:ca:93:9f:6e:c8:17:9d:b4: d9:7d:b3:40:7a:a4:1a:5c:35:7e:93:af:09:0b:c1: 41:de:b3:cb:23:3f:6f:d4:33:bb:a8:2c:26:9a:50: df:f1:78:94:13:14:83:ac:5f:37:97:41:63:33:d9: b7:d9:c9:7c:f6:cb:d7:9d:25:17:ec:dc:fd:a1:1b: 7c:67:99:90:48:4a:d6:78:9b:fc:d1:64:95:49:ec: 80:e1:b3:d8:f2:2e:8a:44:e1:65:80:da:40:40:c5: ea:56:a8:d4:da:22:13:06:2b:d4:89:31:ea:d5:6e: 41:18:ad:07:58:c8:db:c4:d2:25:64:e3:99:a3:74: be:5b:63:50:c1:1d:a2:23:fb:f4:a2:4f:66:70:0e: b6:48:98:94:3a:b3:84:ce:70:07:59:b8:51:ad:a4: cd:70:1d:d1:ef:1c:8c:f1:bd:61:0d:57:45:aa:17: d1:96:88:2c:10:d5:09:df:48:11:77:34:fb:f0:f0: 66:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:BA:78:81:8E:12:34:1F:42:58:7D:02:84:E1:29:06:C5:75:E5:4B X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/3130332e3135392e3133342e302f32332d3233203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.159.134.0/23 Signature Algorithm: sha256WithRSAEncryption 69:5a:29:81:98:d2:42:e3:77:a3:54:40:44:d4:39:76:76:53: ce:96:62:51:5b:e4:46:72:88:7b:31:0d:04:50:3c:78:24:de: 0e:46:8d:ff:9b:54:4d:12:a9:1c:bf:02:72:af:78:fe:b7:84: 70:52:bd:9a:b0:5a:1d:c2:de:92:4a:74:f7:5d:2a:ca:05:71: 1f:73:61:37:2e:ca:d6:4b:6d:9a:af:5f:b6:06:7c:9e:f2:a4: 81:8d:7b:3b:ac:92:ea:95:f5:14:f8:03:5d:a0:d4:e4:a6:0f: b5:dd:34:45:f1:9f:42:37:70:4f:d6:d1:8b:4a:93:0f:99:3c: 27:6c:e3:a9:e8:a8:50:b3:11:26:08:71:1e:0f:13:c5:df:b4: 83:f7:2a:c9:5f:5a:54:dc:26:9b:ff:1e:a6:55:c7:58:cd:83: 3d:c9:c7:27:3e:94:d2:57:90:73:2a:a0:cf:58:42:86:68:ec: 90:4d:36:d9:d7:f8:88:b6:c1:99:c4:d2:8d:91:01:d5:59:98: 17:96:54:7e:a9:86:53:45:35:37:ef:d5:fb:b2:53:6d:be:5d: 1d:6e:3b:78:f4:77:5f:cf:a3:af:bb:bd:fd:5b:01:de:b0:aa: ed:26:d2:ca:9e:7b:bb:2b:40:13:51:99:02:31:3c:77:29:53: 6e:e3:31:8b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUDUw1xWpPftSF6xJ4DHHRoVv9hNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA0MjEwNDU5MTJaFw0yNzA0MjAwNTA0MTJaMDMxMTAvBgNV BAMTKDJCQkE3ODgxOEUxMjM0MUY0MjU4N0QwMjg0RTEyOTA2QzU3NUU1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFOPwVyZRidFmK6zg/c5RhkK+w 6FEjGQethL7hMpKkTJ6ImBprC3lAbsY25rfuIWM2I2p7jTrIoRQj8u2JhylksWjK k59uyBedtNl9s0B6pBpcNX6TrwkLwUHes8sjP2/UM7uoLCaaUN/xeJQTFIOsXzeX QWMz2bfZyXz2y9edJRfs3P2hG3xnmZBIStZ4m/zRZJVJ7IDhs9jyLopE4WWA2kBA xepWqNTaIhMGK9SJMerVbkEYrQdYyNvE0iVk45mjdL5bY1DBHaIj+/SiT2ZwDrZI mJQ6s4TOcAdZuFGtpM1wHdHvHIzxvWENV0WqF9GWiCwQ1QnfSBF3NPvw8GZBAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUK7p4gY4SNB9CWH0ChOEpBsV15UswHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4ODM0ODI0NzY1ODk4NzU0LzAvMzEzMDMzMmUzMTM1 MzkyZTMxMzMzNDJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB Z5+GMA0GCSqGSIb3DQEBCwUAA4IBAQBpWimBmNJC43ejVEBE1Dl2dlPOlmJRW+RG coh7MQ0EUDx4JN4ORo3/m1RNEqkcvwJyr3j+t4RwUr2asFodwt6SSnT3XSrKBXEf c2E3LsrWS22ar1+2Bnye8qSBjXs7rJLqlfUU+ANdoNTkpg+13TRF8Z9CN3BP1tGL SpMPmTwnbOOp6KhQsxEmCHEeDxPF37SD9yrJX1pU3Cab/x6mVcdYzYM9yccnPpTS V5BzKqDPWEKGaOyQTTbZ1/iItsGZxNKNkQHVWZgXllR+qYZTRTU379X7slNtvl0d bjt49Hdfz6Ovu739WwHesKrtJtLKnnu7K0ATUZkCMTx3KVNu4zGL -----END CERTIFICATE-----Generated at Tue May 12 21:38:32 2026 by rpki-client