$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a313a3a2f34382d3438203d3e2034353135.roa File: 323430353a3663303a313a3a2f34382d3438203d3e2034353135.roa (raw, json) Hash identifier: YWQxE3dlKmh8AHSW5uYbdfgoVSC6/SVmbyyJm7wVsIw= Subject key identifier: CF:8B:9B:A8:77:6C:0A:3F:35:C0:CC:24:E4:A2:1F:50:41:FB:80:30 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 11898A570E987702C1B9A49EF071C458196CE976 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a313a3a2f34382d3438203d3e2034353135.roa Signing time: Wed 22 Apr 2026 13:50:38 +0000 ROA not before: Wed 22 Apr 2026 13:45:38 +0000 ROA not after: Wed 21 Apr 2027 13:50:38 +0000 asID: 4515 IP address blocks: 2405:6c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:89:8a:57:0e:98:77:02:c1:b9:a4:9e:f0:71:c4:58:19:6c:e9:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 13:45:38 2026 GMT Not After : Apr 21 13:50:38 2027 GMT Subject: CN=CF8B9BA8776C0A3F35C0CC24E4A21F5041FB8030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:a8:16:ea:43:ca:16:b9:0e:61:17:b1:03: dd:88:b7:40:ef:76:a8:b1:08:a4:b9:66:85:2d:82: 2a:09:4f:df:84:b0:d5:20:5d:e1:53:59:38:79:e8: 28:42:68:7b:40:b7:cc:de:6b:e6:07:cd:b4:cd:b8: 2c:2d:e4:f5:c3:50:c4:8a:f5:e1:8f:e9:e0:09:f9: 72:70:c4:9d:d4:02:85:48:6f:0b:d2:5a:0a:69:d3: 73:0a:43:8d:94:a9:b1:9f:da:56:b1:76:cc:6a:ff: 6d:a0:2a:09:c4:3e:39:dd:af:cf:ea:c6:ff:a1:c2: 98:cd:26:4e:ef:e0:4d:c0:8d:c8:c3:bc:6c:a8:ab: c9:30:b5:aa:4f:a4:fb:36:6f:77:f2:4d:fd:3e:ba: 29:04:a1:57:fa:1e:89:09:91:4f:a9:8a:4d:3a:4b: 02:f8:a3:1d:60:03:ae:1b:c4:81:e7:65:b5:d6:cb: 48:83:4b:df:8b:2a:4a:5f:5c:2b:cd:8d:86:5c:c7: a7:8f:89:30:5a:47:a8:83:85:b5:3c:39:c9:26:c3: 9d:a5:03:83:e0:eb:76:ff:35:16:ac:2d:de:aa:3d: 92:10:e8:fa:df:70:77:06:84:f1:e9:b2:c0:62:6c: 7e:1f:29:8c:bc:bd:6c:83:c6:59:b6:93:e0:77:ff: 40:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8B:9B:A8:77:6C:0A:3F:35:C0:CC:24:E4:A2:1F:50:41:FB:80:30 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a313a3a2f34382d3438203d3e2034353135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 78:fa:45:7d:ca:39:1b:3b:35:c3:f5:4d:64:ce:99:e6:3d:8b: 69:6f:73:c2:67:62:dd:23:83:41:fb:7f:fc:12:bb:f0:7a:d5: 9f:35:86:4c:87:65:6c:1b:d2:d7:4e:e4:87:ff:4c:4f:3e:cb: 30:ed:3e:05:c0:4d:c9:eb:26:86:c2:aa:68:da:3f:8e:9a:be: 38:0e:e1:e6:e0:35:00:6a:57:87:11:93:95:fd:64:17:b6:9d: bb:c3:50:dc:27:52:54:c6:24:56:3f:97:52:d2:75:77:d7:0c: a9:8d:0a:cf:47:62:3b:f6:16:ee:83:53:cf:c6:25:8f:c8:de: 12:07:aa:c5:ce:b7:a0:0f:dc:e8:64:40:3b:91:9e:aa:da:d3: 4e:a2:84:9e:38:c8:d2:9c:e7:91:af:f2:33:4b:bd:03:17:9f: e9:2a:e7:50:f2:09:be:53:dc:bd:88:10:e6:e9:d0:38:14:3a: 4f:03:1f:02:ea:2f:97:3b:22:f0:36:33:bd:27:88:d9:d3:ba: 88:d1:a4:58:fa:81:eb:fd:8e:dc:7d:35:f1:8c:15:cf:04:e9: 2a:d9:2d:c3:32:a8:af:e0:67:d4:74:10:43:ac:60:ad:2b:35: 2b:1e:bf:a9:bd:7a:6a:a6:98:5c:50:ef:01:03:8e:0c:84:6d: d3:5c:02:d1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUEYmKVw6YdwLBuaSe8HHEWBls6XYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxMzQ1MzhaFw0yNzA0MjExMzUwMzhaMDMxMTAvBgNV BAMTKENGOEI5QkE4Nzc2QzBBM0YzNUMwQ0MyNEU0QTIxRjUwNDFGQjgwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC68qgW6kPKFrkOYRexA92It0Dv dqixCKS5ZoUtgioJT9+EsNUgXeFTWTh56ChCaHtAt8zea+YHzbTNuCwt5PXDUMSK 9eGP6eAJ+XJwxJ3UAoVIbwvSWgpp03MKQ42UqbGf2laxdsxq/22gKgnEPjndr8/q xv+hwpjNJk7v4E3AjcjDvGyoq8kwtapPpPs2b3fyTf0+uikEoVf6HokJkU+pik06 SwL4ox1gA64bxIHnZbXWy0iDS9+LKkpfXCvNjYZcx6ePiTBaR6iDhbU8Ockmw52l A4Pg63b/NRasLd6qPZIQ6PrfcHcGhPHpssBibH4fKYy8vWyDxlm2k+B3/0AnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUz4ubqHdsCj81wMwk5KIfUEH7gDAwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzIzNDMwMzUzYTM2 NjMzMDNhMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM1MzEzNS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQFBsAAATANBgkqhkiG9w0BAQsFAAOCAQEAePpFfco5Gzs1w/VNZM6Z5j2L aW9zwmdi3SODQft//BK78HrVnzWGTIdlbBvS107kh/9MTz7LMO0+BcBNyesmhsKq aNo/jpq+OA7h5uA1AGpXhxGTlf1kF7adu8NQ3CdSVMYkVj+XUtJ1d9cMqY0Kz0di O/YW7oNTz8Ylj8jeEgeqxc63oA/c6GRAO5GeqtrTTqKEnjjI0pznka/yM0u9Axef 6SrnUPIJvlPcvYgQ5unQOBQ6TwMfAuovlzsi8DYzvSeI2dO6iNGkWPqB6/2O3H01 8YwVzwTpKtktwzKor+Bn1HQQQ6xgrSs1Kx6/qb16aqaYXFDvAQOODIRt01wC0Q== -----END CERTIFICATE-----Generated at Mon Apr 27 11:07:22 2026 by rpki-client