$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430373a333763303a3a2f33322d3634203d3e203633373031.roa File: 323430373a333763303a3a2f33322d3634203d3e203633373031.roa (raw, json) Hash identifier: CuuyXA+IJwrsdMG9YeKOw9FnS+PivOHbUtLiBmIwuXM= Subject key identifier: A0:8B:82:A1:2F:CE:12:72:92:D4:80:5E:8B:B8:CB:0B:8A:22:0B:13 Certificate issuer: /CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Certificate serial: 31A45FD4242D849F98DD4617E9255A56AD92B59B Authority key identifier: 50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430373a333763303a3a2f33322d3634203d3e203633373031.roa Signing time: Fri 10 Apr 2026 08:17:04 +0000 ROA not before: Fri 10 Apr 2026 08:12:04 +0000 ROA not after: Fri 09 Apr 2027 08:17:04 +0000 asID: 63701 IP address blocks: 2407:37c0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 07:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:a4:5f:d4:24:2d:84:9f:98:dd:46:17:e9:25:5a:56:ad:92:b5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=509BC9E75E44DB40D6912BC3F75971CFDCB96357 Validity Not Before: Apr 10 08:12:04 2026 GMT Not After : Apr 9 08:17:04 2027 GMT Subject: CN=A08B82A12FCE127292D4805E8BB8CB0B8A220B13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:e0:10:3c:1f:b6:c5:2d:ad:62:79:b1:bb: db:11:b1:8e:92:f7:14:cd:ca:90:d1:22:23:76:a0: 17:60:e0:43:e1:87:05:a6:93:5c:c8:95:97:c3:f2: 41:b3:30:69:26:26:a6:f3:13:fe:89:4b:0c:0d:5f: 7a:00:5c:5d:8d:e4:71:9f:33:63:1c:33:11:70:45: d7:c5:ea:bd:64:f7:8c:da:39:fa:1b:55:fd:b3:28: 63:6a:7c:bf:da:01:57:2c:90:f3:2c:5c:2e:c6:f0: 59:76:7b:7c:a3:d7:aa:14:a5:c1:e5:05:61:88:af: 03:57:3b:a5:0b:e2:f9:a0:bb:9a:95:d1:7b:99:da: eb:aa:e9:ef:30:41:53:ba:cf:90:8e:28:51:db:87: c1:8b:c6:cc:56:44:d7:47:a6:2c:b0:17:c2:05:ee: fb:f9:c2:18:bf:b0:69:73:c9:6c:9d:b1:9e:18:8f: a4:db:d2:34:8a:47:8a:69:30:d2:c0:29:d7:31:b5: 77:37:d8:ce:93:c8:6e:2c:4e:be:de:42:12:4f:64: c8:97:1a:64:95:1b:d5:79:f6:85:02:50:9a:74:f8: 38:2a:04:cf:44:00:1d:7d:9e:12:cb:35:12:78:c5: a9:4d:7a:b2:a5:3e:9c:1d:df:8b:06:74:d2:d6:b3: 6e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8B:82:A1:2F:CE:12:72:92:D4:80:5E:8B:B8:CB:0B:8A:22:0B:13 X509v3 Authority Key Identifier: keyid:50:9B:C9:E7:5E:44:DB:40:D6:91:2B:C3:F7:59:71:CF:DC:B9:63:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/509BC9E75E44DB40D6912BC3F75971CFDCB96357.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/509BC9E75E44DB40D6912BC3F75971CFDCB96357.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714684417/0/323430373a333763303a3a2f33322d3634203d3e203633373031.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:37c0::/32 Signature Algorithm: sha256WithRSAEncryption 10:1d:af:08:10:4f:3a:1c:1a:95:5c:8d:c9:0f:c9:e6:92:c4: 2b:96:cc:19:cb:9e:1e:76:1a:c1:ba:ee:2c:59:c7:d8:bd:d6: ba:9e:db:6c:fd:01:9c:ed:1a:36:13:bc:99:32:08:35:df:19: 20:e9:95:e8:1b:d9:aa:77:86:bc:b7:c3:80:a9:ce:16:dd:06: 29:94:bd:55:99:b8:1f:68:16:8e:97:66:ff:2d:db:e5:fa:06: 1e:13:90:71:a0:66:99:db:41:46:45:40:bc:4a:ed:3c:99:e0: da:17:b9:40:5c:4b:0a:e9:f5:8e:22:bb:ea:8d:00:02:ec:a5: be:62:be:bc:d3:d7:57:3c:90:c4:60:0a:7f:64:69:38:3c:b4: 1b:e1:f8:2a:7d:43:08:03:1c:d0:15:41:7e:ae:6b:b0:07:ee: 57:74:67:c1:ba:dc:94:da:cc:74:f5:00:d0:23:92:08:3a:c6: 02:c3:ff:b7:68:e8:2c:0c:79:1d:fa:34:2c:1b:21:73:ac:1f: 6c:57:cc:a1:6a:46:4f:a8:76:ec:45:1e:8a:79:4b:67:60:78: 4b:5c:8e:1f:04:14:25:39:33:16:dd:d4:47:c4:71:93:cb:49: f5:6a:1d:bf:ff:2a:52:60:d1:d9:e7:df:43:62:31:c0:02:c3: fc:17:22:7d -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUMaRf1CQthJ+Y3UYX6SVaVq2StZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZE Q0I5NjM1NzAeFw0yNjA0MTAwODEyMDRaFw0yNzA0MDkwODE3MDRaMDMxMTAvBgNV BAMTKEEwOEI4MkExMkZDRTEyNzI5MkQ0ODA1RThCQjhDQjBCOEEyMjBCMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFuAQPB+2xS2tYnmxu9sRsY6S 9xTNypDRIiN2oBdg4EPhhwWmk1zIlZfD8kGzMGkmJqbzE/6JSwwNX3oAXF2N5HGf M2McMxFwRdfF6r1k94zaOfobVf2zKGNqfL/aAVcskPMsXC7G8Fl2e3yj16oUpcHl BWGIrwNXO6UL4vmgu5qV0XuZ2uuq6e8wQVO6z5COKFHbh8GLxsxWRNdHpiywF8IF 7vv5whi/sGlzyWydsZ4Yj6Tb0jSKR4ppMNLAKdcxtXc32M6TyG4sTr7eQhJPZMiX GmSVG9V59oUCUJp0+DgqBM9EAB19nhLLNRJ4xalNerKlPpwd34sGdNLWs24xAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUoIuCoS/OEnKS1IBei7jLC4oiCxMwHwYDVR0j BBgwFoAUUJvJ515E20DWkSvD91lxz9y5Y1cwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDY4NDQxNy8wLzUwOUJDOUU3NUU0NERCNDBENjkxMkJDM0Y3NTk3 MUNGRENCOTYzNTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTA5QkM5RTc1RTQ0REI0MEQ2OTEyQkMzRjc1OTcxQ0ZEQ0I5NjM1Ny5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0Njg0NDE3LzAvMzIzNDMwMzczYTMz Mzc2MzMwM2EzYTJmMzMzMjJkMzYzNDIwM2QzZTIwMzYzMzM3MzAzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHN8AwDQYJKoZIhvcNAQELBQADggEBABAdrwgQTzocGpVcjckPyeaSxCuW zBnLnh52GsG67ixZx9i91rqe22z9AZztGjYTvJkyCDXfGSDplegb2ap3hry3w4Cp zhbdBimUvVWZuB9oFo6XZv8t2+X6Bh4TkHGgZpnbQUZFQLxK7TyZ4NoXuUBcSwrp 9Y4iu+qNAALspb5ivrzT11c8kMRgCn9kaTg8tBvh+Cp9QwgDHNAVQX6ua7AH7ld0 Z8G63JTazHT1ANAjkgg6xgLD/7do6CwMeR36NCwbIXOsH2xXzKFqRk+oduxFHop5 S2dgeEtcjh8EFCU5Mxbd1EfEcZPLSfVqHb//KlJg0dnn30NiMcACw/wXIn0= -----END CERTIFICATE-----Generated at Mon Apr 13 12:24:32 2026 by rpki-client