$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3230382e302f32322d3232203d3e2030.roa File: 3130332e38362e3230382e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: jCycyypzfUDCR82Y1gEmeVojr4JHjFh3S9IdBDLVHSM= Subject key identifier: 96:53:E2:C0:53:94:86:D4:06:A7:3B:FA:94:6B:58:B2:78:61:80:72 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 032A6D126A07D1947CB6B2622DB4C582D7F46E98 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3230382e302f32322d3232203d3e2030.roa Signing time: Thu 23 Apr 2026 07:54:10 +0000 ROA not before: Thu 23 Apr 2026 07:49:10 +0000 ROA not after: Thu 22 Apr 2027 07:54:10 +0000 asID: 0 IP address blocks: 103.86.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2a:6d:12:6a:07:d1:94:7c:b6:b2:62:2d:b4:c5:82:d7:f4:6e:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Apr 23 07:49:10 2026 GMT Not After : Apr 22 07:54:10 2027 GMT Subject: CN=9653E2C0539486D406A73BFA946B58B278618072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f6:55:91:28:17:fd:cd:7c:3e:26:85:9e:d2: 4e:03:20:57:49:74:b2:c8:f4:6e:64:6f:53:c5:ca: 50:a3:fa:68:cd:b7:63:66:e0:a3:9c:d5:e4:92:e6: e9:e4:74:27:31:5e:b6:50:33:91:a9:02:49:ba:97: f6:80:39:9a:41:7a:c3:f4:f9:51:13:bf:7c:4a:28: fd:4c:34:b6:d3:84:ef:a4:29:c5:20:ad:03:48:aa: 2a:fb:72:bc:3f:bd:07:08:0b:96:4c:ff:9f:a8:f2: cf:99:47:64:f8:c4:c6:00:db:b9:88:07:2f:fc:0e: 9e:ff:70:f2:77:4f:aa:4b:c3:d0:55:03:9f:1c:a8: a7:6c:ef:78:51:63:40:97:d5:65:1c:b7:7e:31:9b: 48:89:f0:01:8d:24:0c:22:ee:64:28:32:a8:ec:6d: c3:b5:21:79:ef:fa:64:0b:16:95:55:17:67:ea:47: dc:51:31:16:ad:18:33:a3:03:09:b6:56:64:99:e7: 6b:99:eb:1c:c3:7e:24:12:98:70:57:cc:b1:87:c6: 8a:e0:9f:c5:f8:3e:7e:66:9d:fb:de:7f:b0:06:af: 5c:66:3c:6a:4f:3f:57:c1:2d:e3:e0:68:43:99:ae: 84:72:38:ec:7e:bf:c1:8a:77:35:57:a9:5e:63:c8: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:53:E2:C0:53:94:86:D4:06:A7:3B:FA:94:6B:58:B2:78:61:80:72 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3230382e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.208.0/22 Signature Algorithm: sha256WithRSAEncryption b2:75:22:0c:3a:67:9a:5a:5f:8c:a9:d3:38:00:26:72:5b:6e: 5d:a7:f0:7e:c5:2a:11:29:48:95:d9:d5:4e:55:51:7f:10:48: 3f:d0:8d:63:d4:d6:d7:3f:94:db:a0:c7:e4:91:67:ce:52:20: 3d:70:75:be:94:1a:d8:58:31:49:60:46:cf:7f:cb:75:b5:e9: fb:92:7d:26:b4:b6:b7:69:3d:73:16:4e:5d:0e:b9:d2:2c:aa: 98:02:a4:92:52:cc:93:9e:e3:a7:7d:e5:9f:b3:cc:a3:fa:4d: c8:5b:23:ab:49:68:04:09:40:ff:b1:63:aa:f3:da:18:30:b6: b4:19:8f:ab:de:dd:f3:c8:2e:34:5e:66:df:ee:35:b6:5a:98: 14:6a:e8:a7:e9:48:c6:68:9e:c8:0f:7b:d8:44:82:be:1c:ee: 19:f5:d0:1d:42:aa:58:5c:63:d6:eb:ee:df:e5:a3:5c:37:7d: 84:54:f3:6b:1d:de:35:3d:0e:6e:fd:37:2f:ac:6c:c2:3d:2d: 3b:d0:91:57:d8:6d:fd:73:47:2d:19:2f:ed:a1:fc:ec:e8:07: f6:19:43:82:f3:38:28:77:00:f0:35:73:09:d2:58:3a:de:af: 8e:37:55:93:ee:7c:96:46:21:37:41:3b:4f:ef:7c:63:f6:4e: 3a:f3:37:cf -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUAyptEmoH0ZR8trJiLbTFgtf0bpgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA0MjMwNzQ5MTBaFw0yNzA0MjIwNzU0MTBaMDMxMTAvBgNV BAMTKDk2NTNFMkMwNTM5NDg2RDQwNkE3M0JGQTk0NkI1OEIyNzg2MTgwNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV9lWRKBf9zXw+JoWe0k4DIFdJ dLLI9G5kb1PFylCj+mjNt2Nm4KOc1eSS5unkdCcxXrZQM5GpAkm6l/aAOZpBesP0 +VETv3xKKP1MNLbThO+kKcUgrQNIqir7crw/vQcIC5ZM/5+o8s+ZR2T4xMYA27mI By/8Dp7/cPJ3T6pLw9BVA58cqKds73hRY0CX1WUct34xm0iJ8AGNJAwi7mQoMqjs bcO1IXnv+mQLFpVVF2fqR9xRMRatGDOjAwm2VmSZ52uZ6xzDfiQSmHBXzLGHxorg n8X4Pn5mnfvef7AGr1xmPGpPP1fBLePgaEOZroRyOOx+v8GKdzVXqV5jyLpLAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUllPiwFOUhtQGpzv6lGtYsnhhgHIwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzEzMDMzMmUzODM2 MmUzMjMwMzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdW 0DANBgkqhkiG9w0BAQsFAAOCAQEAsnUiDDpnmlpfjKnTOAAmcltuXafwfsUqESlI ldnVTlVRfxBIP9CNY9TW1z+U26DH5JFnzlIgPXB1vpQa2FgxSWBGz3/LdbXp+5J9 JrS2t2k9cxZOXQ650iyqmAKkklLMk57jp33ln7PMo/pNyFsjq0loBAlA/7FjqvPa GDC2tBmPq97d88guNF5m3+41tlqYFGrop+lIxmieyA972ESCvhzuGfXQHUKqWFxj 1uvu3+WjXDd9hFTzax3eNT0Obv03L6xswj0tO9CRV9ht/XNHLRkv7aH87OgH9hlD gvM4KHcA8DVzCdJYOt6vjjdVk+58lkYhN0E7T+98Y/ZOOvM3zw== -----END CERTIFICATE-----Generated at Wed May 13 05:37:57 2026 by rpki-client