$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e203536303438.roa File: 323430333a346338303a3a2f34382d3438203d3e203536303438.roa (raw, json) Hash identifier: 7/ltQtz2n5DqjAYwYbdRZYTje+izuD33MFyhCzobykM= Subject key identifier: 43:D6:F2:93:D5:09:04:A2:EF:B6:AD:08:D8:A5:B2:31:3F:7C:A6:50 Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289 Certificate serial: 38749B98EBE425ACB8D25CC5A2AC445D96323CD4 Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e203536303438.roa Signing time: Tue 02 Jun 2026 07:55:20 +0000 ROA not before: Tue 02 Jun 2026 07:50:20 +0000 ROA not after: Tue 01 Jun 2027 07:55:20 +0000 asID: 56048 IP address blocks: 2403:4c80::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 01:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:74:9b:98:eb:e4:25:ac:b8:d2:5c:c5:a2:ac:44:5d:96:32:3c:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289 Validity Not Before: Jun 2 07:50:20 2026 GMT Not After : Jun 1 07:55:20 2027 GMT Subject: CN=43D6F293D50904A2EFB6AD08D8A5B2313F7CA650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:db:8c:55:68:c8:26:42:1e:f6:dd:f4:d0:4f: bb:f9:b1:25:8d:13:24:1c:6f:c6:70:b6:d5:9b:ab: 7f:df:2c:f5:30:ad:58:7f:fe:b5:b0:1a:21:a4:39: 49:4b:76:c2:12:8a:e8:95:b7:7c:c0:4c:a8:0e:8c: 46:bb:92:04:20:b3:9d:e2:ab:1a:fe:85:a5:1b:cb: 4d:e9:f4:63:a7:98:66:ef:95:10:b3:8d:99:b9:8e: f8:60:78:8f:21:7f:46:9c:c9:ba:a5:24:8b:ce:6d: d7:98:ff:00:2c:55:bf:9c:26:d5:78:55:34:3c:d2: 21:a1:d1:09:4d:f1:79:64:54:14:06:3b:89:64:94: 14:3d:03:e2:e9:b3:fd:37:b8:3b:0e:fd:cb:01:b5: 2f:1c:29:65:83:25:b3:22:29:2c:b3:a0:0a:77:2b: 60:42:f8:46:f4:17:62:41:34:a5:84:f0:df:51:02: 46:c8:54:a1:dc:65:47:26:9e:d2:f1:44:f1:c1:98: 2a:a9:c3:f7:e8:0b:dd:23:a5:ed:ab:7b:8b:13:8e: f0:a1:7b:e7:47:02:89:60:60:70:09:6d:fd:9a:84: cd:72:c7:d9:fc:6d:5a:b9:96:bf:02:80:ab:16:b4: 9e:ec:7c:9d:67:5a:28:d6:28:86:db:52:a0:84:fa: 62:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:D6:F2:93:D5:09:04:A2:EF:B6:AD:08:D8:A5:B2:31:3F:7C:A6:50 X509v3 Authority Key Identifier: keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/323430333a346338303a3a2f34382d3438203d3e203536303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:4c80::/48 Signature Algorithm: sha256WithRSAEncryption 46:cb:63:aa:e6:9d:3f:2f:c2:cf:bd:bd:87:85:c0:20:0f:e1: 1b:aa:2b:30:01:0c:f2:c6:5d:8d:94:1a:5c:92:40:85:26:bc: cb:40:18:10:fc:da:f7:68:6b:48:c2:71:93:6c:e0:0d:55:26: b3:a8:5a:bf:47:b6:44:f6:61:04:5b:9f:bb:f7:26:7e:c4:87: c5:35:e2:f3:cb:6f:58:50:cf:65:1d:fe:47:30:52:49:07:2b: 5a:86:ea:be:e8:0a:a5:c6:0a:30:a5:96:a5:a2:9f:bd:ff:f1: 80:0c:6f:2e:58:27:27:c4:4a:95:c0:fa:38:48:97:ec:0b:4d: c0:e7:8b:19:f2:ae:9a:58:c9:7f:69:ff:c7:68:17:cc:6b:c5: 8b:5a:13:64:3a:af:8a:56:4f:12:22:2c:5d:c7:a7:7f:76:83: 14:f8:db:f7:82:e7:1f:3b:4f:b6:37:e4:b1:49:b0:38:da:2e: ed:0f:19:6e:5c:3a:b4:ae:85:b1:42:1d:08:41:b0:65:6e:92: f9:47:b1:07:29:15:73:95:f3:3a:24:ad:30:a9:50:97:e2:e9: c5:09:ed:b8:3d:96:5b:18:ed:5c:36:50:e9:1a:f0:d6:ee:9a: ca:c8:e5:ad:a4:1e:76:70:64:20:14:96:f7:1a:7f:ce:7c:75: a3:43:bb:2e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOHSbmOvkJay40lzFoqxEXZYyPNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4 Mjg5MzI4OTAeFw0yNjA2MDIwNzUwMjBaFw0yNzA2MDEwNzU1MjBaMDMxMTAvBgNV BAMTKDQzRDZGMjkzRDUwOTA0QTJFRkI2QUQwOEQ4QTVCMjMxM0Y3Q0E2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd24xVaMgmQh723fTQT7v5sSWN EyQcb8ZwttWbq3/fLPUwrVh//rWwGiGkOUlLdsISiuiVt3zATKgOjEa7kgQgs53i qxr+haUby03p9GOnmGbvlRCzjZm5jvhgeI8hf0acybqlJIvObdeY/wAsVb+cJtV4 VTQ80iGh0QlN8XlkVBQGO4lklBQ9A+Lps/03uDsO/csBtS8cKWWDJbMiKSyzoAp3 K2BC+Eb0F2JBNKWE8N9RAkbIVKHcZUcmntLxRPHBmCqpw/foC90jpe2re4sTjvCh e+dHAolgYHAJbf2ahM1yx9n8bVq5lr8CgKsWtJ7sfJ1nWijWKIbbUqCE+mKnAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUQ9byk9UJBKLvtq0I2KWyMT98plAwHwYDVR0j BBgwFoAUCY1CHLRvKS8TznHfPWhdXoKJMokwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4Mjc0MTU3NzY2MjQ2Ni8wLzA5OEQ0MjFDQjQ2RjI5MkYxM0NFNzFERjNENjg1 RDVFODI4OTMyODkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDk4RDQyMUNCNDZGMjkyRjEzQ0U3MURGM0Q2ODVENUU4Mjg5MzI4OS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgyNzQxNTc3NjYyNDY2LzAvMzIzNDMwMzMzYTM0 NjMzODMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIw CQMHACQDTIAAADANBgkqhkiG9w0BAQsFAAOCAQEARstjquadPy/Cz729h4XAIA/h G6orMAEM8sZdjZQaXJJAhSa8y0AYEPza92hrSMJxk2zgDVUms6hav0e2RPZhBFuf u/cmfsSHxTXi88tvWFDPZR3+RzBSSQcrWobqvugKpcYKMKWWpaKfvf/xgAxvLlgn J8RKlcD6OEiX7AtNwOeLGfKumljJf2n/x2gXzGvFi1oTZDqvilZPEiIsXcenf3aD FPjb94LnHztPtjfksUmwONou7Q8Zblw6tK6FsUIdCEGwZW6S+UexBykVc5XzOiSt MKlQl+LpxQntuD2WWxjtXDZQ6Rrw1u6aysjlraQednBkIBSW9xp/znx1o0O7Lg== -----END CERTIFICATE-----Generated at Fri Jun 12 06:45:01 2026 by rpki-client