$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a3a2f34382d3438203d3e203633363431.roa File: 323430353a3663303a3a2f34382d3438203d3e203633363431.roa (raw, json) Hash identifier: hoGgLJYA/LocWNQsohd+NclD9XS1PtMWgcaUBw6HegA= Subject key identifier: 79:87:4C:06:D8:74:AF:A4:24:40:E2:E3:73:82:B3:73:3B:AB:7C:E1 Certificate issuer: /CN=909D556251A0BE5F9234514028EBD37CE8E1280A Certificate serial: 20F287DC0A6026B36FD1786623A2F06952C823DC Authority key identifier: 90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a3a2f34382d3438203d3e203633363431.roa Signing time: Wed 22 Apr 2026 13:49:56 +0000 ROA not before: Wed 22 Apr 2026 13:44:56 +0000 ROA not after: Wed 21 Apr 2027 13:49:56 +0000 asID: 63641 IP address blocks: 2405:6c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 10:43:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:f2:87:dc:0a:60:26:b3:6f:d1:78:66:23:a2:f0:69:52:c8:23:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=909D556251A0BE5F9234514028EBD37CE8E1280A Validity Not Before: Apr 22 13:44:56 2026 GMT Not After : Apr 21 13:49:56 2027 GMT Subject: CN=79874C06D874AFA42440E2E37382B3733BAB7CE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f8:84:1a:22:0a:7a:b2:b5:2b:19:ee:2c:38: 95:9f:ad:5a:a5:57:f0:6d:b9:39:95:ee:6a:82:c5: fb:7e:8f:bb:f6:67:e3:e8:97:10:48:76:de:9a:85: e1:9a:7f:93:e7:e5:a2:aa:6e:65:88:09:86:55:96: 1c:43:ca:e8:2c:3c:ac:04:c4:ff:14:c1:9b:a1:01: 7d:92:97:2f:09:8e:85:cb:99:c2:3c:04:0b:d4:a2: 82:12:29:31:92:16:3b:2b:d0:d9:0b:4f:13:44:ac: 72:47:18:7f:67:13:7e:22:7a:d3:b0:16:3a:72:d7: e8:64:bf:c4:3e:fd:ec:8e:ca:7b:d2:a9:8b:2b:f2: 85:b2:ba:b0:d3:49:0c:45:bf:3c:a8:53:16:a5:c7: 31:9a:0d:4d:97:66:bf:fc:99:6b:2d:e6:9b:12:cd: 34:7d:53:f1:27:c7:84:91:d9:03:9e:1a:8b:d2:17: 54:7f:88:2c:1b:6d:2c:45:df:ce:e2:16:61:f4:dc: 17:35:01:1d:79:85:25:bd:72:65:de:51:77:2d:bd: ae:64:34:00:e3:64:86:6f:08:98:4e:d1:d9:d7:8c: 99:e2:9a:d2:30:6c:3b:eb:fb:4d:f1:98:5d:e4:de: 09:2c:58:0d:6a:8a:5e:24:8d:33:8c:fc:06:b9:41: c6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:87:4C:06:D8:74:AF:A4:24:40:E2:E3:73:82:B3:73:3B:AB:7C:E1 X509v3 Authority Key Identifier: keyid:90:9D:55:62:51:A0:BE:5F:92:34:51:40:28:EB:D3:7C:E8:E1:28:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/909D556251A0BE5F9234514028EBD37CE8E1280A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/909D556251A0BE5F9234514028EBD37CE8E1280A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346799105/0/323430353a3663303a3a2f34382d3438203d3e203633363431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:6c0::/48 Signature Algorithm: sha256WithRSAEncryption af:21:dd:ea:f7:a5:64:12:f1:3b:dd:25:be:32:18:75:10:4a: d9:91:78:5f:df:d0:ed:e5:ed:e5:e5:19:86:35:d8:2a:ae:ca: 45:a0:ee:65:35:38:ee:ac:15:d7:b1:07:f9:11:e5:01:18:4f: 9d:2a:20:7e:41:f5:60:af:66:1f:1c:d4:e3:18:e3:d9:00:28: 08:30:ba:d2:aa:8d:bb:31:9f:e2:e2:c0:df:36:65:dd:e8:fb: 33:5b:ae:4d:9d:62:e4:fe:8d:f9:85:4e:72:11:86:8f:05:a2: 72:d6:51:db:91:4c:76:0c:df:91:44:4f:81:b4:8d:b7:17:89: 42:c9:01:37:31:9f:0d:58:f5:0c:2b:8e:7f:b1:83:53:3f:20: e7:cf:d2:2e:c1:59:b5:e8:e4:3d:86:9f:7f:ab:12:39:0c:4a: e1:99:8e:23:a1:36:fa:57:ab:c6:63:5e:9c:dd:5c:9a:1f:a8: 8a:1f:ef:c3:27:b4:22:eb:12:12:dc:08:63:42:c1:2f:84:5a: c0:8b:b4:f5:8e:99:a9:e3:c6:ba:36:1b:5c:aa:e4:fa:a6:e6: 65:ad:1f:ca:ca:6b:f9:fe:e2:07:6a:e0:45:dd:8e:e8:f8:67: 2c:f4:d9:7a:9c:89:94:18:c8:3d:d0:35:a1:fb:d3:52:5b:b8: ac:05:a1:74 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUIPKH3ApgJrNv0XhmI6LwaVLII9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NF OEUxMjgwQTAeFw0yNjA0MjIxMzQ0NTZaFw0yNzA0MjExMzQ5NTZaMDMxMTAvBgNV BAMTKDc5ODc0QzA2RDg3NEFGQTQyNDQwRTJFMzczODJCMzczM0JBQjdDRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm+IQaIgp6srUrGe4sOJWfrVql V/BtuTmV7mqCxft+j7v2Z+PolxBIdt6aheGaf5Pn5aKqbmWICYZVlhxDyugsPKwE xP8UwZuhAX2Sly8JjoXLmcI8BAvUooISKTGSFjsr0NkLTxNErHJHGH9nE34ietOw Fjpy1+hkv8Q+/eyOynvSqYsr8oWyurDTSQxFvzyoUxalxzGaDU2XZr/8mWst5psS zTR9U/Enx4SR2QOeGovSF1R/iCwbbSxF387iFmH03Bc1AR15hSW9cmXeUXctva5k NADjZIZvCJhO0dnXjJnimtIwbDvr+03xmF3k3gksWA1qil4kjTOM/Aa5QcZnAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUeYdMBth0r6QkQOLjc4KzczurfOEwHwYDVR0j BBgwFoAUkJ1VYlGgvl+SNFFAKOvTfOjhKAowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0Njc5OTEwNS8wLzkwOUQ1NTYyNTFBMEJFNUY5MjM0NTE0MDI4RUJE MzdDRThFMTI4MEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTA5RDU1NjI1MUEwQkU1RjkyMzQ1MTQwMjhFQkQzN0NFOEUxMjgwQS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ2Nzk5MTA1LzAvMzIzNDMwMzUzYTM2 NjMzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM2MzMzNjM0MzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkBQbAAAAwDQYJKoZIhvcNAQELBQADggEBAK8h3er3pWQS8TvdJb4yGHUQStmR eF/f0O3l7eXlGYY12CquykWg7mU1OO6sFdexB/kR5QEYT50qIH5B9WCvZh8c1OMY 49kAKAgwutKqjbsxn+LiwN82Zd3o+zNbrk2dYuT+jfmFTnIRho8FonLWUduRTHYM 35FET4G0jbcXiULJATcxnw1Y9Qwrjn+xg1M/IOfP0i7BWbXo5D2Gn3+rEjkMSuGZ jiOhNvpXq8ZjXpzdXJofqIof78MntCLrEhLcCGNCwS+EWsCLtPWOmanjxro2G1yq 5Pqm5mWtH8rKa/n+4gdq4EXdjuj4Zyz02XqciZQYyD3QNaH701JbuKwFoXQ= -----END CERTIFICATE-----Generated at Mon Apr 27 11:06:38 2026 by rpki-client