$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/323430333a3630303a3a2f33322d3438203d3e2037363431.roa File: 323430333a3630303a3a2f33322d3438203d3e2037363431.roa (raw, json) Hash identifier: fbTnTDvW+EDyWIAHqX4Qx/o9LHURt5A0vNu5O7hG7BY= Subject key identifier: 8E:E8:D9:09:2A:63:2E:5F:C6:06:46:4C:9C:B1:7B:DE:2F:76:FB:75 Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Certificate serial: 5CABAD6CE552F43CA66EA18706F93960A4FA36B3 Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/323430333a3630303a3a2f33322d3438203d3e2037363431.roa Signing time: Wed 27 May 2026 07:34:53 +0000 ROA not before: Wed 27 May 2026 07:29:53 +0000 ROA not after: Wed 26 May 2027 07:34:53 +0000 asID: 7641 IP address blocks: 2403:600::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 14:42:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:ab:ad:6c:e5:52:f4:3c:a6:6e:a1:87:06:f9:39:60:a4:fa:36:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7 Validity Not Before: May 27 07:29:53 2026 GMT Not After : May 26 07:34:53 2027 GMT Subject: CN=8EE8D9092A632E5FC606464C9CB17BDE2F76FB75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:89:ab:86:98:a8:d7:4d:b8:e7:b6:eb:94:51: 9e:51:a2:24:74:80:c3:0a:8c:da:0f:c0:8f:03:c5: 47:36:02:55:fe:0d:e3:ae:87:0c:22:4f:e5:38:19: ce:a4:3d:7a:b3:e7:72:2b:fd:7d:a8:b8:6c:b3:88: 94:f7:c2:9e:5c:26:42:17:dc:5d:0a:cc:3a:f6:52: 08:ff:5a:23:0c:62:30:52:0f:84:32:b5:1a:0a:22: ec:73:8d:b0:bd:8d:16:96:90:29:3e:54:17:9f:67: ce:df:01:d5:5e:d3:42:cc:01:94:d2:27:de:32:23: a2:1c:62:81:04:bc:56:dd:c3:05:a9:f8:2d:fd:e8: ff:49:a3:32:a5:85:82:ec:01:a0:34:0f:3d:c4:64: 54:fe:41:d1:53:2c:64:f7:d7:63:8d:82:f9:89:c3: 87:bd:ff:03:eb:f1:32:6c:5b:94:c1:88:4b:07:87: 6d:5f:4f:13:2e:1f:4c:b1:25:d7:f6:d1:cd:b9:d8: f8:bb:e6:04:05:71:d9:e4:1b:5e:6b:75:65:97:47: 75:17:a6:33:9a:9e:b1:fc:a5:da:ed:25:34:17:b8: 03:3f:40:ee:cf:e9:8d:21:ff:77:fa:a6:82:08:d2: 01:4b:3d:39:5d:a0:3e:9e:4f:cf:ae:6f:55:e6:46: 1c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E8:D9:09:2A:63:2E:5F:C6:06:46:4C:9C:B1:7B:DE:2F:76:FB:75 X509v3 Authority Key Identifier: keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/323430333a3630303a3a2f33322d3438203d3e2037363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:600::/32 Signature Algorithm: sha256WithRSAEncryption 65:a9:a3:d9:08:6d:9a:27:44:31:7b:92:63:a7:90:5e:bb:d6: 37:d3:c5:8f:e4:f4:da:24:96:74:ee:7a:bf:a4:03:eb:9b:85: 69:60:a0:f2:df:fc:e8:90:24:96:ee:ac:90:c3:26:6e:16:d7: 0c:70:e0:cd:73:2a:1c:21:11:a2:2e:4c:e9:44:8a:55:1f:49: 07:8c:b2:53:a0:77:e3:11:7b:dd:dc:5b:6e:9c:66:20:93:4c: 06:89:c3:4e:70:29:ab:f5:0e:ab:28:7a:c3:f6:d2:01:84:ac: 8a:6f:81:ac:a8:a6:1a:65:61:95:1e:cd:ba:b4:6d:07:cb:70: c7:1a:fa:17:29:89:13:de:2f:53:8f:40:c0:37:de:7e:48:b2: e4:3c:e9:37:56:37:16:61:60:7d:27:9a:1e:5a:d9:36:76:4f: d0:38:d3:47:7e:49:b3:3c:c9:92:48:0e:f1:47:ee:28:4c:0e: 60:d2:8e:4b:da:d2:65:72:8b:2c:99:98:0c:e6:31:94:ca:4e: de:7b:ce:68:28:df:f2:12:fe:01:1c:aa:ca:02:61:08:9a:8e: 11:60:d1:a2:a5:7e:28:c8:d9:e9:e0:14:39:3f:d2:f1:49:fc: c4:a9:62:e3:bf:cb:a6:09:30:f1:6e:b3:be:df:d2:82:1e:7c: 76:7c:aa:db -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUXKutbOVS9DymbqGHBvk5YKT6NrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFB NUVCRUVCNzAeFw0yNjA1MjcwNzI5NTNaFw0yNzA1MjYwNzM0NTNaMDMxMTAvBgNV BAMTKDhFRThEOTA5MkE2MzJFNUZDNjA2NDY0QzlDQjE3QkRFMkY3NkZCNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmiauGmKjXTbjntuuUUZ5RoiR0 gMMKjNoPwI8DxUc2AlX+DeOuhwwiT+U4Gc6kPXqz53Ir/X2ouGyziJT3wp5cJkIX 3F0KzDr2Ugj/WiMMYjBSD4QytRoKIuxzjbC9jRaWkCk+VBefZ87fAdVe00LMAZTS J94yI6IcYoEEvFbdwwWp+C396P9JozKlhYLsAaA0Dz3EZFT+QdFTLGT312ONgvmJ w4e9/wPr8TJsW5TBiEsHh21fTxMuH0yxJdf20c252Pi75gQFcdnkG15rdWWXR3UX pjOanrH8pdrtJTQXuAM/QO7P6Y0h/3f6poII0gFLPTldoD6eT8+ub1XmRhwDAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUjujZCSpjLl/GBkZMnLF73i92+3UwHwYDVR0j BBgwFoAUzdVfPXj8dXU/+cbIJqfYGqXr7rcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NDU2MDE0Mjc4NjU2MS8wL0NERDU1RjNENzhGQzc1NzUzRkY5QzZDODI2QTdE ODFBQTVFQkVFQjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0RENTVGM0Q3OEZDNzU3NTNGRjlDNkM4MjZBN0Q4MUFBNUVCRUVCNy5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc0NTYwMTQyNzg2NTYxLzAvMzIzNDMwMzMzYTM2 MzAzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDM3MzYzNDMxLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUA JAMGADANBgkqhkiG9w0BAQsFAAOCAQEAZamj2QhtmidEMXuSY6eQXrvWN9PFj+T0 2iSWdO56v6QD65uFaWCg8t/86JAklu6skMMmbhbXDHDgzXMqHCERoi5M6USKVR9J B4yyU6B34xF73dxbbpxmIJNMBonDTnApq/UOqyh6w/bSAYSsim+BrKimGmVhlR7N urRtB8twxxr6FymJE94vU49AwDfefkiy5DzpN1Y3FmFgfSeaHlrZNnZP0DjTR35J szzJkkgO8UfuKEwOYNKOS9rSZXKLLJmYDOYxlMpO3nvOaCjf8hL+ARyqygJhCJqO EWDRoqV+KMjZ6eAUOT/S8Un8xKli47/Lpgkw8W6zvt/Sgh58dnyq2w== -----END CERTIFICATE-----Generated at Sat May 30 00:02:40 2026 by rpki-client