$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a323a3a2f34382d3438203d3e203633363431.roa File: 323430353a3663303a323a3a2f34382d3438203d3e203633363431.roa (raw, json) Hash identifier: NL7i+iNC0/2mIXPDBCMsWTV8TOahF7CbKvlJIQpvZmk= Subject key identifier: 6D:08:5D:9D:77:92:4D:E7:3A:BE:55:B9:BE:B2:5E:1E:4C:B4:DD:0E Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 77784D20A96C03E99F7E99632505F9A286358D23 Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a323a3a2f34382d3438203d3e203633363431.roa Signing time: Wed 22 Apr 2026 14:23:08 +0000 ROA not before: Wed 22 Apr 2026 14:18:08 +0000 ROA not after: Wed 21 Apr 2027 14:23:08 +0000 asID: 63641 IP address blocks: 2405:6c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:78:4d:20:a9:6c:03:e9:9f:7e:99:63:25:05:f9:a2:86:35:8d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 14:18:08 2026 GMT Not After : Apr 21 14:23:08 2027 GMT Subject: CN=6D085D9D77924DE73ABE55B9BEB25E1E4CB4DD0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:ea:9c:13:f6:e6:e7:46:5e:9d:de:98:0f: 47:76:b7:ec:20:90:8e:ca:fd:66:dd:3a:c8:f9:b3: 7e:ad:75:c7:ef:72:1b:80:51:04:26:fc:02:b4:af: fd:96:a2:8a:5d:65:bb:65:dd:c6:1f:44:20:0f:5f: 65:ad:39:05:69:0b:89:a7:d6:a4:b0:a7:d4:09:c8: 08:cb:70:66:42:82:0b:9f:7b:f3:77:2d:08:b7:4a: 1c:8b:64:73:ad:01:29:19:aa:22:75:6e:5c:e6:f1: 30:92:bd:df:c7:2d:24:43:f6:ed:57:84:bb:97:65: fa:99:0b:19:cc:ea:f7:28:55:11:ef:02:a5:f6:98: be:79:f2:cd:a4:87:64:a9:9e:d2:46:2c:a1:db:d1: 42:d4:e5:60:85:c3:2c:7b:0b:00:bd:2b:d3:b7:16: 83:04:30:ff:f1:67:23:6c:4f:c1:87:04:98:89:ae: 0a:81:04:91:d2:ab:aa:c5:14:a3:3d:a1:8a:7d:97: c7:0d:00:3c:27:27:b0:bc:c1:b4:63:af:eb:d2:97: 1e:63:b9:6a:81:76:6c:c8:0f:2d:de:a4:2e:5b:09: 36:c7:33:56:18:e5:61:0e:87:70:f5:c1:d5:f2:83: 23:81:d3:f5:69:65:e9:cd:91:20:4e:05:82:85:c3: 0c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:08:5D:9D:77:92:4D:E7:3A:BE:55:B9:BE:B2:5E:1E:4C:B4:DD:0E X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a323a3a2f34382d3438203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6c0:2::/48 Signature Algorithm: sha256WithRSAEncryption ce:8c:1e:5d:3d:e3:6b:1f:9a:5b:2b:cf:72:ba:bc:7c:f9:1c: db:a5:42:93:18:6a:53:0b:e5:6e:d5:e3:c3:92:20:61:73:cc: 41:43:b4:82:2c:fc:28:fc:16:7b:ae:0b:14:e2:9b:d9:3c:64: 58:70:66:e8:66:be:87:34:7f:d3:53:cf:d4:e1:49:c4:c4:6c: 74:8d:b9:8d:14:0f:5f:02:d3:30:69:71:c6:1a:8f:cf:4a:e4: 4d:1e:80:6a:ef:fa:75:f3:58:c5:a8:56:96:b1:80:06:af:b8: ab:4d:aa:b8:0d:81:6b:f6:9f:f0:98:82:18:ea:8a:d6:f3:df: bf:85:87:2a:86:1e:db:8e:0b:81:56:c4:b9:dc:04:41:f2:28: 3f:f5:ba:62:ac:1e:a9:4b:f5:4a:ea:6e:84:a6:e7:fe:b8:03: 54:73:d1:32:03:f5:14:29:c1:c6:d3:cb:b1:fe:49:6c:a7:a4: 66:07:16:b7:a6:7b:a4:36:4c:8f:9e:61:56:3a:ca:4f:57:d5: 9d:83:87:aa:5f:2a:1d:e0:eb:3d:8a:ff:dc:3b:4f:e1:7e:fd: 2c:10:0a:c9:5f:a2:92:ac:9e:3f:32:9f:3f:19:1f:20:b2:9d: 52:dd:04:21:87:68:a3:df:6f:97:b2:4c:16:e1:7b:6d:c3:de: bb:19:58:8b -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUd3hNIKlsA+mffpljJQX5ooY1jSMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxNDE4MDhaFw0yNzA0MjExNDIzMDhaMDMxMTAvBgNV BAMTKDZEMDg1RDlENzc5MjRERTczQUJFNTVCOUJFQjI1RTFFNENCNEREMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixuqcE/bm50Zend6YD0d2t+wg kI7K/WbdOsj5s36tdcfvchuAUQQm/AK0r/2WoopdZbtl3cYfRCAPX2WtOQVpC4mn 1qSwp9QJyAjLcGZCggufe/N3LQi3ShyLZHOtASkZqiJ1blzm8TCSvd/HLSRD9u1X hLuXZfqZCxnM6vcoVRHvAqX2mL558s2kh2SpntJGLKHb0ULU5WCFwyx7CwC9K9O3 FoMEMP/xZyNsT8GHBJiJrgqBBJHSq6rFFKM9oYp9l8cNADwnJ7C8wbRjr+vSlx5j uWqBdmzIDy3epC5bCTbHM1YY5WEOh3D1wdXygyOB0/VpZenNkSBOBYKFwww1AgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUbQhdnXeSTec6vlW5vrJeHky03Q4wHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MjMzMDM0Njc5OTEwNS8wLzMyMzQzMDM1M2Ez NjYzMzAzYTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMzM2MzQzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQFBsAAAjANBgkqhkiG9w0BAQsFAAOCAQEAzoweXT3jax+aWyvPcrq8 fPkc26VCkxhqUwvlbtXjw5IgYXPMQUO0giz8KPwWe64LFOKb2TxkWHBm6Ga+hzR/ 01PP1OFJxMRsdI25jRQPXwLTMGlxxhqPz0rkTR6Aau/6dfNYxahWlrGABq+4q02q uA2Ba/af8JiCGOqK1vPfv4WHKoYe244LgVbEudwEQfIoP/W6YqweqUv1SupuhKbn /rgDVHPRMgP1FCnBxtPLsf5JbKekZgcWt6Z7pDZMj55hVjrKT1fVnYOHql8qHeDr PYr/3DtP4X79LBAKyV+ikqyePzKfPxkfILKdUt0EIYdoo99vl7JMFuF7bcPeuxlY iw== -----END CERTIFICATE-----Generated at Mon Apr 27 11:07:22 2026 by rpki-client