$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/323430313a623561303a3a2f33322d3536203d3e203233363530.roa File: 323430313a623561303a3a2f33322d3536203d3e203233363530.roa (raw, json) Hash identifier: I+IKkE3lfTy91n7rHTDB9dRMtROn12nnhGec+l8/5eE= Subject key identifier: D8:18:16:37:23:48:1F:2B:E1:07:A3:AD:17:CA:A2:B3:F4:8C:2E:98 Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 7987E2B573D5E33921FE264FBB88DEFB4BD5154D Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/323430313a623561303a3a2f33322d3536203d3e203233363530.roa Signing time: Mon 15 Jun 2026 09:21:09 +0000 ROA not before: Mon 15 Jun 2026 09:16:09 +0000 ROA not after: Mon 14 Jun 2027 09:21:09 +0000 asID: 23650 IP address blocks: 2401:b5a0::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:87:e2:b5:73:d5:e3:39:21:fe:26:4f:bb:88:de:fb:4b:d5:15:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Jun 15 09:16:09 2026 GMT Not After : Jun 14 09:21:09 2027 GMT Subject: CN=D818163723481F2BE107A3AD17CAA2B3F48C2E98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a4:5a:c9:2f:45:6c:8d:5a:25:66:a2:34:66: e8:cf:35:25:57:cb:d1:3f:09:84:05:68:df:6a:2d: 03:30:57:50:f4:76:4c:f1:3b:94:cc:49:49:cd:c0: f0:d7:3b:d6:79:cd:b7:9c:41:77:a4:ed:bc:d8:ec: c8:22:d4:aa:c6:bd:fc:79:14:4e:41:5d:53:4a:de: 17:e2:b6:79:48:3d:b7:91:d9:ee:19:65:9d:89:f3: b4:e1:f4:27:4d:45:96:4f:3e:c8:b6:bb:91:54:2d: a2:be:d2:1b:71:cb:4f:a0:9e:e6:44:da:c9:3c:a4: ef:1a:02:90:c7:5c:47:54:bd:4c:f3:91:e2:e0:99: 10:56:54:7f:c1:ee:b4:c3:26:fe:72:39:f8:cb:b3: e9:4d:4d:0a:e9:27:89:c4:b1:b4:f2:aa:54:af:9e: c6:c0:24:09:f1:85:3d:05:6c:ea:92:ca:98:16:93: 1c:ef:2f:ed:c0:d7:36:a0:dc:03:93:bd:17:b8:fe: f2:d9:39:9e:cf:24:d3:d2:cf:38:32:3f:a7:ff:dc: 61:4a:47:cb:43:2e:30:f0:32:35:eb:8d:ce:20:b8: b0:59:f2:b5:4d:01:32:50:23:61:da:81:7c:4b:38: ad:34:ee:1b:fd:d4:2e:eb:d1:8c:e0:f6:f5:5c:37: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:18:16:37:23:48:1F:2B:E1:07:A3:AD:17:CA:A2:B3:F4:8C:2E:98 X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/323430313a623561303a3a2f33322d3536203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:b5a0::/32 Signature Algorithm: sha256WithRSAEncryption 9b:9e:95:a3:82:ff:82:95:10:63:ac:91:6e:ee:90:f0:03:6f: 8c:30:7d:b2:1a:74:72:dc:e3:9b:54:e1:cd:cd:7b:53:6e:bd: fe:4c:11:ea:1d:3c:00:99:c4:d9:09:7e:f5:e1:91:4b:5a:c7: 87:b7:52:e7:24:16:83:bf:96:a9:30:3e:76:4d:2f:69:d2:d2: cd:5c:ce:86:55:68:e3:47:d6:29:8f:b9:19:38:a4:68:49:bd: da:2b:88:75:ca:7b:1c:88:af:fd:af:b1:f8:e9:9b:fa:5f:9f: 96:03:95:ad:b8:22:07:7e:fb:04:60:e5:fa:5f:7b:8d:b6:fc: b9:40:5e:63:81:6d:22:80:09:62:4e:a9:4a:50:34:f3:03:c6: e6:ee:af:50:6b:4c:0b:6a:ba:d5:32:09:54:f1:8b:bc:20:66: ee:ce:d0:db:ec:af:92:87:71:20:11:69:5f:29:42:5e:f6:4f: 71:b2:6d:8e:6c:57:c6:3f:12:d6:9f:3b:02:c7:3c:e8:3e:74: bd:05:e4:09:86:1b:5c:1a:03:c0:e4:b5:b0:09:f1:a0:33:6a: 00:2d:c5:57:d8:6e:6e:37:32:06:82:a7:0d:6e:dc:ed:25:d4: c1:cb:47:54:4d:5a:69:72:7f:c0:d4:17:01:cb:99:9c:3e:a8: 73:a0:1f:f6 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUeYfitXPV4zkh/iZPu4je+0vVFU0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA2MTUwOTE2MDlaFw0yNzA2MTQwOTIxMDlaMDMxMTAvBgNV BAMTKEQ4MTgxNjM3MjM0ODFGMkJFMTA3QTNBRDE3Q0FBMkIzRjQ4QzJFOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCapFrJL0VsjVolZqI0ZujPNSVX y9E/CYQFaN9qLQMwV1D0dkzxO5TMSUnNwPDXO9Z5zbecQXek7bzY7Mgi1KrGvfx5 FE5BXVNK3hfitnlIPbeR2e4ZZZ2J87Th9CdNRZZPPsi2u5FULaK+0htxy0+gnuZE 2sk8pO8aApDHXEdUvUzzkeLgmRBWVH/B7rTDJv5yOfjLs+lNTQrpJ4nEsbTyqlSv nsbAJAnxhT0FbOqSypgWkxzvL+3A1zag3AOTvRe4/vLZOZ7PJNPSzzgyP6f/3GFK R8tDLjDwMjXrjc4guLBZ8rVNATJQI2HagXxLOK007hv91C7r0Yzg9vVcN9BRAgMB AAGjggISMIICDjAdBgNVHQ4EFgQU2BgWNyNIHyvhB6OtF8qis/SMLpgwHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MjUxMjE1NTE3Mzg0NzA1LzAvMzIzNDMwMzEzYTYy MzU2MTMwM2EzYTJmMzMzMjJkMzUzNjIwM2QzZTIwMzIzMzM2MzUzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBtaAwDQYJKoZIhvcNAQELBQADggEBAJuelaOC/4KVEGOskW7ukPADb4ww fbIadHLc45tU4c3Ne1Nuvf5MEeodPACZxNkJfvXhkUtax4e3UuckFoO/lqkwPnZN L2nS0s1czoZVaONH1imPuRk4pGhJvdoriHXKexyIr/2vsfjpm/pfn5YDla24Igd+ +wRg5fpfe422/LlAXmOBbSKACWJOqUpQNPMDxubur1BrTAtqutUyCVTxi7wgZu7O 0Nvsr5KHcSARaV8pQl72T3GybY5sV8Y/EtafOwLHPOg+dL0F5AmGG1waA8DktbAJ 8aAzagAtxVfYbm43MgaCpw1u3O0l1MHLR1RNWmlyf8DUFwHLmZw+qHOgH/Y= -----END CERTIFICATE-----Generated at Wed Jul 22 03:33:12 2026 by rpki-client