$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430323a396138303a3a2f33322d3438203d3e20313334383130.roa File: 323430323a396138303a3a2f33322d3438203d3e20313334383130.roa (raw, json) Hash identifier: neAH0hkwEVNAasatgS8ORO4dbxpU7nc7wayFUL20f+M= Subject key identifier: 26:83:C9:1D:76:1B:9C:FF:1C:51:51:7F:1B:46:E5:65:F4:08:40:43 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 5A16CE7E76E6D85F3A61ABD6AB9CA533118CF0CF Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430323a396138303a3a2f33322d3438203d3e20313334383130.roa Signing time: Thu 28 May 2026 08:00:08 +0000 ROA not before: Thu 28 May 2026 07:55:08 +0000 ROA not after: Thu 27 May 2027 08:00:08 +0000 asID: 134810 IP address blocks: 2402:9a80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 07:36:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:16:ce:7e:76:e6:d8:5f:3a:61:ab:d6:ab:9c:a5:33:11:8c:f0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: May 28 07:55:08 2026 GMT Not After : May 27 08:00:08 2027 GMT Subject: CN=2683C91D761B9CFF1C51517F1B46E565F4084043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:de:bb:55:3f:84:87:bf:92:4f:6d:7c:1c:ee: 6c:4f:d8:f5:4b:9a:c2:10:f0:1f:28:2f:b8:0d:95: 2a:3d:2c:47:9e:0b:9d:5f:16:7b:b1:d9:77:a2:ed: 33:a2:21:93:aa:14:50:bd:a6:1e:fd:e5:56:42:cd: 27:ae:06:60:8a:7b:a9:07:45:26:12:85:8a:04:37: b3:dd:fe:24:42:5d:a7:58:f9:d4:d6:11:2d:c3:01: a9:1f:b2:16:17:9d:77:65:d8:ab:89:77:a3:02:1d: 34:cd:a8:9a:04:91:0c:2b:4e:14:9e:80:4c:62:85: f8:1a:d3:fe:eb:1b:bd:c1:8f:20:b0:f0:6a:4d:a3: 0a:1c:2b:04:1b:20:41:0e:72:b6:93:6c:c5:6b:32: 87:b0:e3:f3:e0:6a:2f:de:b6:5f:dd:88:89:de:b5: ff:54:e4:12:5a:30:7d:a7:75:1b:a2:c6:f2:7d:97: 6e:68:93:b9:ac:1f:40:3e:4b:64:82:92:55:11:2a: d0:d0:d9:d2:c6:e7:e0:e3:25:58:c6:5c:3c:b8:ac: 54:16:c1:a9:e3:57:23:4d:b2:05:1a:79:cf:57:85: 5d:79:b3:1e:c7:bb:48:73:63:d2:51:81:14:98:a5: 5d:c8:ce:94:3e:5f:e1:f9:8e:e8:43:7a:88:74:84: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:83:C9:1D:76:1B:9C:FF:1C:51:51:7F:1B:46:E5:65:F4:08:40:43 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430323a396138303a3a2f33322d3438203d3e20313334383130.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9a80::/32 Signature Algorithm: sha256WithRSAEncryption 6a:84:de:9b:4e:59:e3:51:34:ca:44:1d:b4:70:37:cb:50:1b: a6:11:2e:52:d0:41:8a:d4:ec:cd:55:f0:36:33:4c:02:e5:06: f2:db:f2:e6:da:ba:a3:f0:50:c3:03:2f:33:d5:f7:09:e2:d7: 77:d6:d5:99:3f:a6:4c:b9:1b:9f:5e:71:97:2f:d0:f6:62:f9: a9:c9:03:84:7d:b2:e4:8b:16:15:3c:f0:7d:37:7a:5f:31:f1: 93:ef:51:f8:77:af:81:2c:7a:15:f6:cd:f5:65:46:a2:57:4a: a4:c2:b7:b8:f9:8a:68:05:81:1f:4d:04:9e:09:6d:af:9f:50: 52:6f:30:60:d4:40:a2:d8:dd:55:a9:cd:cb:9e:15:67:48:2c: 22:f1:ce:dc:c0:7d:63:eb:9a:c1:6b:1a:ae:b2:12:d1:a7:04: 32:d3:11:d5:b8:e0:07:b5:31:cc:5e:8a:5b:ed:e3:c7:c5:0b: 1b:c6:14:04:4d:03:4d:67:9f:ee:41:76:0a:72:7a:7e:cb:06: 40:37:33:17:ed:12:58:de:fe:5c:e0:ad:37:c8:1f:99:c2:ac: bb:11:fd:b0:c4:1d:ed:6b:eb:c9:de:a2:7f:c3:4f:f8:18:1f: 9f:63:16:bf:d7:16:2b:46:07:30:ff:86:01:4b:a6:1d:c5:0e: dd:30:6f:f6 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUWhbOfnbm2F86YavWq5ylMxGM8M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjA1MjgwNzU1MDhaFw0yNzA1MjcwODAwMDhaMDMxMTAvBgNV BAMTKDI2ODNDOTFENzYxQjlDRkYxQzUxNTE3RjFCNDZFNTY1RjQwODQwNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA3rtVP4SHv5JPbXwc7mxP2PVL msIQ8B8oL7gNlSo9LEeeC51fFnux2Xei7TOiIZOqFFC9ph795VZCzSeuBmCKe6kH RSYShYoEN7Pd/iRCXadY+dTWES3DAakfshYXnXdl2KuJd6MCHTTNqJoEkQwrThSe gExihfga0/7rG73BjyCw8GpNowocKwQbIEEOcraTbMVrMoew4/Pgai/etl/diIne tf9U5BJaMH2ndRuixvJ9l25ok7msH0A+S2SCklURKtDQ2dLG5+DjJVjGXDy4rFQW wanjVyNNsgUaec9XhV15sx7Hu0hzY9JRgRSYpV3IzpQ+X+H5juhDeoh0hL2tAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUJoPJHXYbnP8cUVF/G0blZfQIQEMwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDY4NDQxNy8wLzMyMzQzMDMyM2Ez OTYxMzgzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzMzNDM4MzEzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQCmoAwDQYJKoZIhvcNAQELBQADggEBAGqE3ptOWeNRNMpEHbRwN8tQ G6YRLlLQQYrU7M1V8DYzTALlBvLb8ubauqPwUMMDLzPV9wni13fW1Zk/pky5G59e cZcv0PZi+anJA4R9suSLFhU88H03el8x8ZPvUfh3r4EsehX2zfVlRqJXSqTCt7j5 imgFgR9NBJ4Jba+fUFJvMGDUQKLY3VWpzcueFWdILCLxztzAfWPrmsFrGq6yEtGn BDLTEdW44Ae1Mcxeilvt48fFCxvGFARNA01nn+5Bdgpyen7LBkA3MxftElje/lzg rTfIH5nCrLsR/bDEHe1r68neon/DT/gYH59jFr/XFitGBzD/hgFLph3FDt0wb/Y= -----END CERTIFICATE-----Generated at Fri May 29 23:57:05 2026 by rpki-client