$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3231322e302f32322d3232203d3e2030.roa File: 3130332e38362e3231322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: Vda6jURwVfxvH2XgFbaQEmAnD/iG9431t4m5YzjJgPA= Subject key identifier: D5:30:3A:2C:B4:6E:0B:34:D8:28:7E:CC:BC:BA:3A:D5:CF:11:D7:32 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 732B8B57084BB6AACFAF5C538024DE8F88500C23 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3231322e302f32322d3232203d3e2030.roa Signing time: Thu 23 Apr 2026 07:54:11 +0000 ROA not before: Thu 23 Apr 2026 07:49:11 +0000 ROA not after: Thu 22 Apr 2027 07:54:11 +0000 asID: 0 IP address blocks: 103.86.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:2b:8b:57:08:4b:b6:aa:cf:af:5c:53:80:24:de:8f:88:50:0c:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Apr 23 07:49:11 2026 GMT Not After : Apr 22 07:54:11 2027 GMT Subject: CN=D5303A2CB46E0B34D8287ECCBCBA3AD5CF11D732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:6a:4a:42:51:bc:8e:13:a6:b7:a3:f5:db:99: 8b:59:23:95:1a:96:a7:60:71:94:c1:4b:fd:27:48: 4e:cd:eb:5b:0b:60:10:55:3d:ad:80:68:6e:28:3f: f6:6e:7f:65:27:ac:25:ec:5a:31:58:d0:36:db:08: 87:4b:c2:fe:78:50:9b:02:9d:ab:f9:b9:64:b3:58: 4d:51:89:61:38:1c:f0:0c:e9:90:57:d9:eb:9d:55: fd:00:95:ff:2c:8a:6d:b9:13:29:a9:02:39:f4:78: c5:0f:50:e5:00:1a:c7:ca:58:52:32:58:09:3a:fe: 48:eb:30:e8:21:ca:29:7d:25:27:b1:18:40:38:60: b5:c7:b7:18:51:5e:57:e4:34:87:bc:9d:e4:58:59: 22:81:10:91:d4:a7:e7:d0:50:c3:60:95:70:18:e3: 40:1c:7d:c0:cb:a8:1d:2d:c4:d8:84:ca:c2:b5:4c: e4:f4:61:dc:cd:d0:e5:26:f9:75:c2:fd:af:ee:56: 7b:36:eb:0a:97:27:59:41:ad:67:1b:41:67:32:6e: ea:ae:71:68:97:fc:ae:1a:e3:5a:62:f9:8b:b3:35: c4:98:2f:f4:85:43:3d:c0:b1:ec:06:06:fe:34:c4: e4:39:2d:3b:a9:f0:e1:38:ea:12:f0:fc:58:ac:f6: a9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:30:3A:2C:B4:6E:0B:34:D8:28:7E:CC:BC:BA:3A:D5:CF:11:D7:32 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3231322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.212.0/22 Signature Algorithm: sha256WithRSAEncryption e7:68:58:cc:f2:c2:0d:90:8e:cf:b5:c0:5a:fc:d0:9c:7f:ce: ef:db:eb:97:98:a0:ab:ed:75:0d:21:8d:d6:a6:45:01:9b:4a: 57:82:58:b3:70:24:03:92:9c:6e:90:ca:80:88:42:c6:a4:40: 14:24:1c:d0:bd:95:44:ac:1a:15:8e:20:2f:e6:f5:d4:61:df: ae:00:bd:bf:fa:9e:b6:2d:3d:11:87:8c:f2:1e:f7:50:28:77: 8b:e9:d1:79:8e:d9:95:0d:fa:c7:ef:05:41:bc:58:99:54:db: dd:ad:a7:f3:2a:e0:2c:58:39:ea:24:d2:85:95:05:b7:1b:f0: ed:2c:0e:30:a7:1b:b0:e2:35:d0:c1:7f:16:49:ad:62:de:4b: 86:f3:03:b1:46:5f:b3:38:5b:32:e4:e6:7e:b0:65:fa:2f:bc: 69:05:28:08:86:34:a5:e7:94:2f:85:f9:b5:50:40:96:e8:cf: 45:9c:a8:94:93:ed:fe:37:d4:d5:c4:67:00:41:ef:23:5a:d6: 47:cd:ef:f1:fb:c2:57:94:b7:8f:ef:32:0c:6a:7c:91:58:2c: 34:dc:81:4b:67:e2:a1:8e:0b:3a:0e:d7:07:e4:27:2d:80:fe: 7a:6d:75:1d:99:e2:4c:54:3b:cb:21:50:27:ed:ae:0d:f5:51: 81:49:bc:f4 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUcyuLVwhLtqrPr1xTgCTej4hQDCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA0MjMwNzQ5MTFaFw0yNzA0MjIwNzU0MTFaMDMxMTAvBgNV BAMTKEQ1MzAzQTJDQjQ2RTBCMzREODI4N0VDQ0JDQkEzQUQ1Q0YxMUQ3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZakpCUbyOE6a3o/XbmYtZI5Ua lqdgcZTBS/0nSE7N61sLYBBVPa2AaG4oP/Zuf2UnrCXsWjFY0DbbCIdLwv54UJsC nav5uWSzWE1RiWE4HPAM6ZBX2eudVf0Alf8sim25EympAjn0eMUPUOUAGsfKWFIy WAk6/kjrMOghyil9JSexGEA4YLXHtxhRXlfkNIe8neRYWSKBEJHUp+fQUMNglXAY 40AcfcDLqB0txNiEysK1TOT0YdzN0OUm+XXC/a/uVns26wqXJ1lBrWcbQWcybuqu cWiX/K4a41pi+YuzNcSYL/SFQz3AsewGBv40xOQ5LTup8OE46hLw/Fis9qkzAgMB AAGjggILMIICBzAdBgNVHQ4EFgQU1TA6LLRuCzTYKH7MvLo61c8R1zIwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzEzMDMzMmUzODM2 MmUzMjMxMzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdW 1DANBgkqhkiG9w0BAQsFAAOCAQEA52hYzPLCDZCOz7XAWvzQnH/O79vrl5igq+11 DSGN1qZFAZtKV4JYs3AkA5KcbpDKgIhCxqRAFCQc0L2VRKwaFY4gL+b11GHfrgC9 v/qeti09EYeM8h73UCh3i+nReY7ZlQ36x+8FQbxYmVTb3a2n8yrgLFg56iTShZUF txvw7SwOMKcbsOI10MF/FkmtYt5LhvMDsUZfszhbMuTmfrBl+i+8aQUoCIY0peeU L4X5tVBAlujPRZyolJPt/jfU1cRnAEHvI1rWR83v8fvCV5S3j+8yDGp8kVgsNNyB S2fioY4LOg7XB+QnLYD+em11HZniTFQ7yyFQJ+2uDfVRgUm89A== -----END CERTIFICATE-----Generated at Wed May 13 06:48:46 2026 by rpki-client