$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/3130332e3233352e3134302e302f32322d3232203d3e2030.roa File: 3130332e3233352e3134302e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: KOOIm9R0YCCCAFgvNV64BXvgP060l23D5hOwzFbW7o0= Subject key identifier: CB:35:96:C7:CA:E9:F0:B9:85:A8:8B:D9:D1:22:A8:1B:F6:69:56:C3 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 4EC251281258661F9AD405060D6C72930FE89692 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/3130332e3233352e3134302e302f32322d3232203d3e2030.roa Signing time: Tue 21 Apr 2026 05:04:43 +0000 ROA not before: Tue 21 Apr 2026 04:59:43 +0000 ROA not after: Tue 20 Apr 2027 05:04:43 +0000 asID: 0 IP address blocks: 103.235.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c2:51:28:12:58:66:1f:9a:d4:05:06:0d:6c:72:93:0f:e8:96:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Apr 21 04:59:43 2026 GMT Not After : Apr 20 05:04:43 2027 GMT Subject: CN=CB3596C7CAE9F0B985A88BD9D122A81BF66956C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:8c:b0:da:dc:b8:32:bc:47:9f:ed:0d:6b:59: d1:b3:9e:e9:18:51:39:6e:b1:25:c2:ed:3d:f3:f0: 2d:9f:cb:a2:66:61:d6:a3:fc:1d:cb:69:48:ee:84: 6b:9c:e0:a4:d6:e1:78:83:e7:c9:fb:aa:3d:32:b6: c8:2b:21:42:a7:5e:43:c8:ec:6d:ca:5c:17:7d:1f: 09:7d:bc:62:c8:2a:ab:99:fa:6c:8f:f8:ad:58:81: b8:21:ae:d2:28:70:b1:00:83:2c:c8:9c:37:d0:99: e7:d2:f9:f0:ac:33:5a:d3:cc:a7:07:e2:71:b1:e7: 1e:5e:2f:1a:15:09:16:fe:9f:01:28:7c:2c:5a:0f: f8:91:32:2f:a5:1f:2c:ad:f7:28:59:d0:f9:f0:5b: 5a:5d:b2:6f:1c:e6:89:f7:e8:9d:71:d4:92:96:b8: fe:61:a2:05:cf:29:9e:94:82:e9:c3:dd:d9:3a:77: 0a:4e:a0:88:6a:fe:d4:08:a4:b2:37:d3:e5:b9:02: 86:9f:d8:a7:04:72:d1:72:55:12:49:2d:6b:13:17: 29:e6:5f:67:d2:2a:92:b4:d3:9e:a3:90:f9:a7:ee: fc:56:63:5b:a9:c5:a2:65:63:12:f5:6e:55:14:c4: 33:36:cb:11:4f:7f:e0:2b:2f:2b:a7:21:d0:91:40: 08:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:35:96:C7:CA:E9:F0:B9:85:A8:8B:D9:D1:22:A8:1B:F6:69:56:C3 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/3130332e3233352e3134302e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.235.140.0/22 Signature Algorithm: sha256WithRSAEncryption 5f:9b:74:89:58:90:24:0e:0b:8e:75:c3:c7:2a:36:b1:ec:eb: 37:5f:c1:a6:16:cb:a1:f9:0b:f7:9c:53:55:d4:c2:1a:ba:76: da:59:a8:b6:2b:f3:ac:6f:f4:0f:79:a8:49:43:00:c1:d9:00: 0c:9c:1d:e7:a0:29:39:b8:78:52:07:cc:41:ea:7c:d5:9d:aa: f1:32:17:f7:cf:6b:9a:0f:4e:52:0c:f6:10:5a:44:15:71:b2: cf:7f:c4:7e:56:bf:ab:cb:9a:9e:3b:7c:f5:31:cc:21:7a:6e: b0:79:69:fc:f0:2c:11:2b:6a:90:bf:6c:44:0b:59:0a:80:12: 3a:60:88:1a:20:39:95:b5:61:cd:d5:70:04:64:8e:32:f7:b7: eb:58:e2:88:f5:4d:1d:96:81:f3:31:1b:03:59:67:64:5f:52: 28:e3:10:1d:86:47:e6:db:08:a5:80:8c:b9:e1:67:41:69:ec: ad:90:12:3a:4f:71:08:ae:0b:a1:56:71:af:62:8b:32:3a:d1: 53:42:3d:87:09:0c:5f:0f:c7:f1:a3:fa:f6:37:67:e3:07:33: 58:1f:71:94:68:f3:fc:b0:3d:71:c5:46:7f:2f:05:84:b7:91: d9:0e:00:b5:00:b6:51:94:3a:55:02:b8:40:fc:ea:3a:7b:0f: a7:6e:2f:78 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUTsJRKBJYZh+a1AUGDWxykw/olpIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA0MjEwNDU5NDNaFw0yNzA0MjAwNTA0NDNaMDMxMTAvBgNV BAMTKENCMzU5NkM3Q0FFOUYwQjk4NUE4OEJEOUQxMjJBODFCRjY2OTU2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNjLDa3LgyvEef7Q1rWdGznukY UTlusSXC7T3z8C2fy6JmYdaj/B3LaUjuhGuc4KTW4XiD58n7qj0ytsgrIUKnXkPI 7G3KXBd9Hwl9vGLIKquZ+myP+K1YgbghrtIocLEAgyzInDfQmefS+fCsM1rTzKcH 4nGx5x5eLxoVCRb+nwEofCxaD/iRMi+lHyyt9yhZ0PnwW1pdsm8c5on36J1x1JKW uP5hogXPKZ6UgunD3dk6dwpOoIhq/tQIpLI30+W5Aoaf2KcEctFyVRJJLWsTFynm X2fSKpK0056jkPmn7vxWY1upxaJlYxL1blUUxDM2yxFPf+ArLyunIdCRQAgzAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUyzWWx8rp8LmFqIvZ0SKoG/ZpVsMwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4ODM0ODI0NzY1ODk4NzU0LzAvMzEzMDMzMmUzMjMz MzUyZTMxMzQzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC Z+uMMA0GCSqGSIb3DQEBCwUAA4IBAQBfm3SJWJAkDguOdcPHKjax7Os3X8GmFsuh +Qv3nFNV1MIaunbaWai2K/Osb/QPeahJQwDB2QAMnB3noCk5uHhSB8xB6nzVnarx Mhf3z2uaD05SDPYQWkQVcbLPf8R+Vr+ry5qeO3z1Mcwhem6weWn88CwRK2qQv2xE C1kKgBI6YIgaIDmVtWHN1XAEZI4y97frWOKI9U0dloHzMRsDWWdkX1Io4xAdhkfm 2wilgIy54WdBaeytkBI6T3EIrguhVnGvYosyOtFTQj2HCQxfD8fxo/r2N2fjBzNY H3GUaPP8sD1xxUZ/LwWEt5HZDgC1ALZRlDpVArhA/Oo6ew+nbi94 -----END CERTIFICATE-----Generated at Wed May 13 08:51:49 2026 by rpki-client