$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/323430373a396630303a343038303a3a2f34382d3438203d3e203538383334.roa File: 323430373a396630303a343038303a3a2f34382d3438203d3e203538383334.roa (raw, json) Hash identifier: hQ+SQbZo0M1Zn+Xq7RyQNzNqQDG/F6G75cz87Q6s4sU= Subject key identifier: 49:03:60:34:E2:31:FC:1C:6C:E4:81:84:FB:7D:5E:6D:94:38:E9:B2 Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E Certificate serial: 3D3258A0951FAFB88ADB670DBA3E30188970734E Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/323430373a396630303a343038303a3a2f34382d3438203d3e203538383334.roa Signing time: Mon 13 Apr 2026 01:27:50 +0000 ROA not before: Mon 13 Apr 2026 01:22:50 +0000 ROA not after: Mon 12 Apr 2027 01:27:50 +0000 asID: 58834 IP address blocks: 2407:9f00:4080::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:57:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:32:58:a0:95:1f:af:b8:8a:db:67:0d:ba:3e:30:18:89:70:73:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E Validity Not Before: Apr 13 01:22:50 2026 GMT Not After : Apr 12 01:27:50 2027 GMT Subject: CN=49036034E231FC1C6CE48184FB7D5E6D9438E9B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:68:c3:4b:34:51:eb:ec:28:27:dc:00:d4: 74:19:33:6d:1a:85:73:73:05:3a:d2:d8:7d:33:7b: c1:26:41:8c:23:c1:f1:57:1f:34:35:e9:d1:7b:50: 7c:2d:75:31:3b:96:bd:24:53:64:9f:08:81:de:0f: f6:79:6d:46:1b:51:f7:be:d1:77:03:d2:d1:06:e7: 25:33:e1:60:0a:ae:bd:f8:c4:da:99:78:c4:30:c7: 4f:08:0c:1e:4b:98:cf:82:49:17:f6:ec:38:d0:14: 4c:b5:e9:e5:83:26:97:fb:81:fb:39:2e:17:d3:31: df:fd:4d:3c:a4:c3:d7:47:b7:09:22:1f:ca:8f:3b: c9:8c:b3:9a:28:12:41:93:50:65:de:a9:87:d8:83: 5c:f5:26:ba:42:75:40:e7:9f:e6:f5:21:dd:4b:d8: 2a:8d:40:b6:cc:08:30:41:9b:e3:bc:52:d9:cc:49: c6:a3:4d:29:74:f7:e5:11:ca:b4:ab:8d:f0:3a:a4: ff:e7:79:7f:05:8b:2f:a7:cb:c6:ef:2f:e0:b1:f0: d3:df:90:1e:3d:30:06:0d:65:18:cc:fe:d0:82:9e: 15:53:51:0f:27:0c:5a:ce:93:29:e9:03:ef:39:c0: 9f:9f:c9:4d:9b:b9:e4:e3:07:b5:9c:32:c1:c8:a6: e5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:03:60:34:E2:31:FC:1C:6C:E4:81:84:FB:7D:5E:6D:94:38:E9:B2 X509v3 Authority Key Identifier: keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/323430373a396630303a343038303a3a2f34382d3438203d3e203538383334.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9f00:4080::/48 Signature Algorithm: sha256WithRSAEncryption 88:61:13:08:67:08:bb:ff:11:eb:dd:3c:3d:e1:85:b8:4c:b8: 10:21:8b:3a:a2:68:c4:d3:0a:65:86:97:41:e4:60:fd:51:7f: 2c:a9:1b:12:96:d7:c4:67:71:6b:2c:33:94:52:75:a7:c7:54: a5:cd:56:28:cb:c8:8b:81:24:5f:55:b2:81:28:71:3c:60:1e: 06:e2:93:a1:d4:60:73:bf:c3:bc:6c:b7:bd:7d:a6:3c:11:ff: 96:39:91:1e:ad:05:19:3f:21:63:14:a3:4c:99:46:df:f4:a9: 15:4c:ec:18:7e:a6:0b:9b:47:27:b5:df:d1:a5:17:99:85:f2: f1:76:8c:19:a4:3a:49:d0:98:98:22:7d:40:7b:33:47:07:76: 82:a9:79:ed:13:59:c7:bd:ba:77:5b:97:27:f8:4b:4e:15:2c: 4d:bf:fd:03:ed:c8:e3:16:63:b7:8d:04:7e:3d:e2:52:d3:dd: 6e:67:2a:01:a2:cc:78:1d:41:a5:ab:30:47:21:c8:27:ec:91: 05:8e:66:fa:ea:a8:99:4f:f5:1b:e2:54:ff:8f:0c:44:95:88: a4:86:70:dc:63:8d:a5:c2:27:f4:dc:5c:26:ee:1e:28:13:17: c7:3a:f1:08:93:ac:37:47:87:07:f6:54:98:4b:67:dc:9d:de: e3:34:b2:f4 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUPTJYoJUfr7iK22cNuj4wGIlwc04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3 OTBBOUUwRTAeFw0yNjA0MTMwMTIyNTBaFw0yNzA0MTIwMTI3NTBaMDMxMTAvBgNV BAMTKDQ5MDM2MDM0RTIzMUZDMUM2Q0U0ODE4NEZCN0Q1RTZEOTQzOEU5QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBGmjDSzRR6+woJ9wA1HQZM20a hXNzBTrS2H0ze8EmQYwjwfFXHzQ16dF7UHwtdTE7lr0kU2SfCIHeD/Z5bUYbUfe+ 0XcD0tEG5yUz4WAKrr34xNqZeMQwx08IDB5LmM+CSRf27DjQFEy16eWDJpf7gfs5 LhfTMd/9TTykw9dHtwkiH8qPO8mMs5ooEkGTUGXeqYfYg1z1JrpCdUDnn+b1Id1L 2CqNQLbMCDBBm+O8UtnMScajTSl09+URyrSrjfA6pP/neX8Fiy+ny8bvL+Cx8NPf kB49MAYNZRjM/tCCnhVTUQ8nDFrOkynpA+85wJ+fyU2bueTjB7WcMsHIpuWHAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUSQNgNOIx/Bxs5IGE+31ebZQ46bIwHwYDVR0j BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzIzNDMwMzcz YTM5NjYzMDMwM2EzNDMwMzgzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1Mzgz ODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkB58AQIAwDQYJKoZIhvcNAQELBQADggEBAIhhEwhn CLv/EevdPD3hhbhMuBAhizqiaMTTCmWGl0HkYP1RfyypGxKW18RncWssM5RSdafH VKXNVijLyIuBJF9VsoEocTxgHgbik6HUYHO/w7xst719pjwR/5Y5kR6tBRk/IWMU o0yZRt/0qRVM7Bh+pgubRye139GlF5mF8vF2jBmkOknQmJgifUB7M0cHdoKpee0T Wce9undblyf4S04VLE2//QPtyOMWY7eNBH494lLT3W5nKgGizHgdQaWrMEchyCfs kQWOZvrqqJlP9RviVP+PDESViKSGcNxjjaXCJ/TcXCbuHigTF8c68QiTrDdHhwf2 VJhLZ9yd3uM0svQ= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:42 2026 by rpki-client