$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e2034383038.roa File: 323430333a346338303a3a2f34382d3438203d3e2034383038.roa (raw, json) Hash identifier: IvoN5KOxvoNe59IDfb24FFL6qpg8UBoTE/nVJ45csPk= Subject key identifier: 85:96:AC:11:00:48:13:7E:99:9F:7A:30:7A:54:10:3D:3B:46:97:70 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 7DECCEEC26C1E06158340FAA0926B1418C076EF0 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e2034383038.roa Signing time: Tue 02 Jun 2026 07:55:20 +0000 ROA not before: Tue 02 Jun 2026 07:50:20 +0000 ROA not after: Tue 01 Jun 2027 07:55:20 +0000 asID: 4808 IP address blocks: 2403:4c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 19:04:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:ec:ce:ec:26:c1:e0:61:58:34:0f:aa:09:26:b1:41:8c:07:6e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Jun 2 07:50:20 2026 GMT Not After : Jun 1 07:55:20 2027 GMT Subject: CN=8596AC110048137E999F7A307A54103D3B469770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:68:8c:45:9a:91:eb:43:73:2d:95:32:c8: 74:1f:57:1e:61:1f:7d:70:37:c9:bb:03:67:ad:93: bb:ff:44:ee:5d:48:1a:2f:34:f8:f5:d9:ef:64:0d: 50:60:81:34:1e:9b:e7:8a:63:7d:41:5c:85:6d:39: 40:fe:3a:1d:00:fe:64:a1:ea:e8:6b:cd:f2:c2:bc: 7a:3b:44:08:c3:00:fb:4d:b9:b9:2c:1c:25:45:b7: ba:61:98:12:d6:de:cb:22:42:c3:7d:ba:49:8f:73: 26:42:fd:d3:f9:c6:04:86:68:fd:0f:e2:50:0a:8b: 1d:2e:12:94:c5:ee:2d:58:50:4c:9c:58:d5:17:f5: 8a:32:39:f3:6f:6e:bb:42:b8:fc:ce:06:48:78:33: dd:6a:de:2b:a0:58:70:dd:3a:cf:98:e5:e9:e4:19: 43:3e:3a:50:3c:1f:e9:5a:f6:2d:bd:80:0e:1b:ea: 23:31:59:64:6a:14:bc:da:16:0b:79:f3:39:b3:dc: 24:95:fa:1a:08:e6:c9:68:31:1b:14:1a:a0:d6:52: ae:25:b6:bd:71:e1:e5:f0:9f:ad:ff:fa:ed:9d:c2: a4:ca:37:b5:67:d6:69:41:28:26:4c:54:34:9c:12: d0:24:0f:72:17:c7:59:98:f0:e7:d7:24:c0:53:44: 12:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:96:AC:11:00:48:13:7E:99:9F:7A:30:7A:54:10:3D:3B:46:97:70 X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:4c80::/48 Signature Algorithm: sha256WithRSAEncryption 0a:50:89:5a:e4:19:c6:e6:4f:31:53:62:47:d8:28:16:af:e8: a8:76:2c:61:89:65:ac:57:2b:ba:55:63:e8:46:c4:44:e9:c0: 16:c7:84:5e:e0:d4:42:18:dc:05:64:96:63:9e:79:d0:80:de: d3:9c:e5:bb:13:9d:45:f8:cf:4e:65:30:46:a7:8c:aa:3a:81: 3f:2d:31:8c:74:57:86:d1:e9:d2:f2:6b:56:9a:28:d9:29:02: 22:54:66:05:d8:e4:45:45:0b:ed:4e:b5:b7:36:15:0c:e3:48: 9e:d6:d6:74:98:ad:39:2d:ee:90:ae:20:48:30:6c:eb:f2:e7: 45:0f:52:d5:ba:6c:59:b7:73:71:26:d0:2a:f4:6c:6a:f3:11: 29:85:66:6a:20:c9:e1:ae:8e:1b:b5:25:75:71:42:0d:6c:27: 17:71:06:8e:e6:30:5a:a1:20:e7:15:f2:cf:04:d3:1e:a9:2f: 3d:a4:11:4b:63:bf:b2:54:fe:10:6d:1b:cd:dc:bd:a0:7d:c7: 66:25:96:0e:60:8b:1f:0e:18:55:53:52:d7:54:d3:24:7c:7d: e4:8b:b2:c7:dd:0e:37:cc:b7:94:42:dd:9b:b1:4e:08:2e:ef: bf:83:7a:13:f9:e5:5a:7a:2d:37:6a:6a:3a:89:2a:a7:28:7d: b5:c7:2c:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUfezO7CbB4GFYNA+qCSaxQYwHbvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA2MDIwNzUwMjBaFw0yNzA2MDEwNzU1MjBaMDMxMTAvBgNV BAMTKDg1OTZBQzExMDA0ODEzN0U5OTlGN0EzMDdBNTQxMDNEM0I0Njk3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4miMRZqR60NzLZUyyHQfVx5h H31wN8m7A2etk7v/RO5dSBovNPj12e9kDVBggTQem+eKY31BXIVtOUD+Oh0A/mSh 6uhrzfLCvHo7RAjDAPtNubksHCVFt7phmBLW3ssiQsN9ukmPcyZC/dP5xgSGaP0P 4lAKix0uEpTF7i1YUEycWNUX9YoyOfNvbrtCuPzOBkh4M91q3iugWHDdOs+Y5enk GUM+OlA8H+la9i29gA4b6iMxWWRqFLzaFgt58zmz3CSV+hoI5sloMRsUGqDWUq4l tr1x4eXwn63/+u2dwqTKN7Vn1mlBKCZMVDScEtAkD3IXx1mY8OfXJMBTRBL9AgMB AAGjggISMIICDjAdBgNVHQ4EFgQUhZasEQBIE36Zn3owelQQPTtGl3AwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NjYyNDY2LzAvMzIzNDMwMzMzYTM0 NjMzODMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkD BwAkA0yAAAAwDQYJKoZIhvcNAQELBQADggEBAApQiVrkGcbmTzFTYkfYKBav6Kh2 LGGJZaxXK7pVY+hGxETpwBbHhF7g1EIY3AVklmOeedCA3tOc5bsTnUX4z05lMEan jKo6gT8tMYx0V4bR6dLya1aaKNkpAiJUZgXY5EVFC+1Otbc2FQzjSJ7W1nSYrTkt 7pCuIEgwbOvy50UPUtW6bFm3c3Em0Cr0bGrzESmFZmogyeGujhu1JXVxQg1sJxdx Bo7mMFqhIOcV8s8E0x6pLz2kEUtjv7JU/hBtG83cvaB9x2Yllg5gix8OGFVTUtdU 0yR8feSLssfdDjfMt5RC3ZuxTggu77+DehP55Vp6LTdqajqJKqcofbXHLCE= -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:23 2026 by rpki-client