$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3232302e302f32322d3232203d3e2030.roa File: 3130332e38362e3232302e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: 5fPzq4sMw6eJ05TJS4e+2lWEdXgYy8ynARItP03SgKs= Subject key identifier: E0:D9:07:20:D6:58:5F:A6:40:07:D0:26:B8:E1:E3:86:93:AC:62:D9 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 692762FD726F32807498270EDB7196FEB49D8D3F Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3232302e302f32322d3232203d3e2030.roa Signing time: Thu 23 Apr 2026 07:54:10 +0000 ROA not before: Thu 23 Apr 2026 07:49:10 +0000 ROA not after: Thu 22 Apr 2027 07:54:10 +0000 asID: 0 IP address blocks: 103.86.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:39:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:27:62:fd:72:6f:32:80:74:98:27:0e:db:71:96:fe:b4:9d:8d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Apr 23 07:49:10 2026 GMT Not After : Apr 22 07:54:10 2027 GMT Subject: CN=E0D90720D6585FA64007D026B8E1E38693AC62D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f2:1c:d2:14:47:4a:73:4d:b1:ca:7b:c0:9c: b7:21:d3:e9:29:49:fe:71:88:c3:84:29:e1:69:c3: 1b:6d:b8:6e:37:77:8c:13:45:0c:c1:2f:df:72:8c: 36:95:e2:a6:15:41:fa:be:d7:a7:f6:01:9e:c9:ee: 89:e2:0a:9f:ed:50:b8:c5:b9:1a:53:20:64:a7:64: 2f:c9:04:ec:d0:aa:cc:c5:e2:91:fb:ec:c2:11:23: 72:57:94:db:d4:4b:b9:a0:ca:25:2e:6c:ff:85:69: ed:47:2a:aa:1f:13:0e:a8:c3:e8:59:d6:7e:49:92: 0a:a9:88:17:f7:6f:b7:c7:dd:34:e9:58:b1:d8:8b: a7:9d:30:fd:38:b9:38:0f:1a:44:39:29:aa:07:ec: 7d:55:76:76:09:b5:6b:97:cc:49:f6:7d:65:73:33: d6:38:d7:9d:69:22:3b:ea:3f:27:08:6d:9f:be:7b: f3:b5:6e:e8:5f:c8:9a:9e:57:46:5a:70:3e:82:69: c8:87:b2:f3:5c:e4:61:3b:9f:c9:c5:23:94:bc:36: b1:f9:5e:71:a1:da:9e:82:1b:02:2a:7d:16:9e:ef: 72:49:21:5e:46:00:7b:93:43:ea:47:b2:d3:a0:e5: 89:7b:af:87:64:92:1e:b7:20:cb:cd:63:db:39:2f: 6f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D9:07:20:D6:58:5F:A6:40:07:D0:26:B8:E1:E3:86:93:AC:62:D9 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3130332e38362e3232302e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 103.86.220.0/22 Signature Algorithm: sha256WithRSAEncryption 24:8c:dd:8b:ba:61:69:9f:a1:36:26:27:6a:94:d7:17:51:0f: 9f:4d:ed:4b:36:44:b0:e4:19:ba:d0:59:bb:55:be:cf:11:7b: 3d:36:0c:f6:bb:fe:e6:c6:df:1c:10:fe:5e:59:90:00:b3:de: 59:e6:19:9d:f4:3b:c5:2b:5e:ab:64:a2:89:a7:61:63:c3:4f: 4f:c5:4f:ab:a5:b9:6f:77:f3:3c:02:e0:2d:c8:54:c5:9e:b2: 5e:d5:cf:a8:61:5e:73:9a:61:06:b2:8a:f8:22:83:b4:d6:83: 80:cd:ad:0b:09:07:2d:8c:59:6a:d5:c5:08:81:20:0f:31:71: 04:ec:56:33:63:e9:d7:a5:c9:ce:10:b3:c6:dc:c9:73:49:bd: 3f:5d:3e:c7:48:ab:07:18:ac:e1:b1:67:d6:ee:d9:fb:dc:0a: 22:a5:df:f3:d6:54:51:1b:b3:37:6f:03:ab:d7:b4:a4:03:f7: 74:90:10:49:b4:6c:30:6d:24:95:c8:3e:0a:86:de:ff:80:54: 07:80:5f:53:8b:52:92:64:40:b2:1b:18:a5:a9:51:22:9b:34: eb:fc:c5:c4:af:d9:e4:d4:82:08:90:33:6b:ee:f4:74:2e:d2: 0c:d1:ac:ae:d7:ba:54:c3:ce:77:78:19:0c:0f:e8:70:5a:ea: 99:81:b7:c1 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUaSdi/XJvMoB0mCcO23GW/rSdjT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA0MjMwNzQ5MTBaFw0yNzA0MjIwNzU0MTBaMDMxMTAvBgNV BAMTKEUwRDkwNzIwRDY1ODVGQTY0MDA3RDAyNkI4RTFFMzg2OTNBQzYyRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC18hzSFEdKc02xynvAnLch0+kp Sf5xiMOEKeFpwxttuG43d4wTRQzBL99yjDaV4qYVQfq+16f2AZ7J7oniCp/tULjF uRpTIGSnZC/JBOzQqszF4pH77MIRI3JXlNvUS7mgyiUubP+Fae1HKqofEw6ow+hZ 1n5JkgqpiBf3b7fH3TTpWLHYi6edMP04uTgPGkQ5KaoH7H1VdnYJtWuXzEn2fWVz M9Y4151pIjvqPycIbZ++e/O1buhfyJqeV0ZacD6CaciHsvNc5GE7n8nFI5S8NrH5 XnGh2p6CGwIqfRae73JJIV5GAHuTQ+pHstOg5Yl7r4dkkh63IMvNY9s5L29lAgMB AAGjggILMIICBzAdBgNVHQ4EFgQU4NkHINZYX6ZAB9AmuOHjhpOsYtkwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzEzMDMzMmUzODM2 MmUzMjMyMzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdW 3DANBgkqhkiG9w0BAQsFAAOCAQEAJIzdi7phaZ+hNiYnapTXF1EPn03tSzZEsOQZ utBZu1W+zxF7PTYM9rv+5sbfHBD+XlmQALPeWeYZnfQ7xSteq2SiiadhY8NPT8VP q6W5b3fzPALgLchUxZ6yXtXPqGFec5phBrKK+CKDtNaDgM2tCwkHLYxZatXFCIEg DzFxBOxWM2Pp16XJzhCzxtzJc0m9P10+x0irBxis4bFn1u7Z+9wKIqXf89ZUURuz N28Dq9e0pAP3dJAQSbRsMG0klcg+Cobe/4BUB4BfU4tSkmRAshsYpalRIps06/zF xK/Z5NSCCJAza+70dC7SDNGsrte6VMPOd3gZDA/ocFrqmYG3wQ== -----END CERTIFICATE-----Generated at Tue May 12 21:48:03 2026 by rpki-client