$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa File: 323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa (raw, json) Hash identifier: R/QVyQyKR3yYI09RNSrUigu/nryj32Qez0+4TGC1Cnk= Subject key identifier: 73:BC:E3:01:43:26:73:C9:2E:2E:CA:A4:6F:B9:9D:92:34:05:F9:98 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 141B5136469B7AA22C9A57BAAFEBF87F83B54F89 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa Signing time: Thu 25 Jun 2026 07:12:25 +0000 ROA not before: Thu 25 Jun 2026 07:07:25 +0000 ROA not after: Thu 24 Jun 2027 07:12:25 +0000 asID: 151185 IP address blocks: 2401:5c20:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:1b:51:36:46:9b:7a:a2:2c:9a:57:ba:af:eb:f8:7f:83:b5:4f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:07:25 2026 GMT Not After : Jun 24 07:12:25 2027 GMT Subject: CN=73BCE301432673C92E2ECAA46FB99D923405F998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a7:55:79:00:3a:28:4f:8f:41:5a:7c:0e:a9: 1c:23:83:99:28:5f:c5:17:98:d3:d3:46:79:70:14: e6:f7:2d:05:0b:5c:31:83:2c:43:af:84:8b:7f:71: 40:28:3e:79:de:e6:56:da:89:80:66:3a:7c:7f:7f: 19:f1:d6:10:2a:b3:0a:d4:49:25:46:3f:7c:fc:30: 4a:ac:a3:93:83:d6:94:33:68:be:50:ee:cd:0a:4a: af:ff:52:4a:29:ea:26:a7:b8:83:68:8c:3d:8e:65: 96:e2:75:92:4f:12:82:5e:a5:8e:8e:34:33:c6:9c: cc:f1:dc:49:66:b4:10:8c:c2:31:38:85:78:94:be: 74:75:6c:02:bd:c5:0e:72:5c:c1:d9:67:f8:8b:11: c3:4c:bc:2c:a6:7c:63:e3:3b:f9:21:bd:f0:b0:09: bf:cc:ec:00:29:26:b4:62:bd:13:c3:ab:76:e9:54: 1e:00:73:83:70:54:12:6f:c6:62:dc:51:a9:1a:58: ea:86:22:e7:76:c5:0d:97:da:5b:3b:ae:17:ed:ad: be:e7:bc:61:c1:ea:48:4c:72:9c:89:0b:af:36:40: 08:db:ca:11:fa:2f:2e:49:9a:fa:2b:4c:e5:60:a2: bb:64:68:a3:39:00:a9:b3:2e:98:f2:5c:92:80:50: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:BC:E3:01:43:26:73:C9:2E:2E:CA:A4:6F:B9:9D:92:34:05:F9:98 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/323430313a356332303a31303a3a2f34382d3438203d3e20313531313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:5c20:10::/48 Signature Algorithm: sha256WithRSAEncryption f2:d1:35:86:d3:02:63:f4:51:59:8a:36:e6:04:c9:a6:ba:be: 92:86:a5:91:10:17:c8:0c:ff:91:cb:99:e1:ab:11:dc:09:a9: fa:6f:6f:b6:bc:19:a1:3e:9c:5c:ec:99:78:a7:d5:e2:ee:27: aa:3e:14:4b:7e:60:91:71:21:bd:48:67:69:57:03:22:09:0e: 45:c7:93:13:9e:2b:27:b3:dd:a2:f4:29:f5:a7:74:10:e5:db: d3:6d:5e:55:d3:f6:d4:cd:5b:91:7d:d7:2c:d9:ac:eb:23:b5: 8f:84:13:bc:a9:5c:8d:00:df:65:11:fe:10:85:e9:0a:b3:35: 0f:71:8f:1d:e0:6f:de:1d:91:3c:f1:9f:ca:13:66:b0:76:6c: 9c:b3:c9:f4:44:3e:3d:18:6e:7b:8a:96:07:38:8d:54:5a:10: 47:16:ca:55:fa:23:b7:3d:a4:c5:20:b7:44:c4:65:92:ae:08: e1:2c:38:dc:09:12:57:94:3a:81:0e:e6:0d:37:cb:cb:f5:17: 35:76:0c:9b:a7:e5:88:a6:39:a7:88:19:b4:88:56:3b:29:4f: dd:d0:26:78:6f:29:54:8b:f5:1b:45:a2:b8:c8:40:fc:ac:62: 35:b5:a8:0b:91:26:4f:fc:19:56:a1:29:46:27:9f:49:ed:01: 43:27:75:4f -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUFBtRNkabeqIsmle6r+v4f4O1T4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzA3MjVaFw0yNzA2MjQwNzEyMjVaMDMxMTAvBgNV BAMTKDczQkNFMzAxNDMyNjczQzkyRTJFQ0FBNDZGQjk5RDkyMzQwNUY5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdp1V5ADooT49BWnwOqRwjg5ko X8UXmNPTRnlwFOb3LQULXDGDLEOvhIt/cUAoPnne5lbaiYBmOnx/fxnx1hAqswrU SSVGP3z8MEqso5OD1pQzaL5Q7s0KSq//Ukop6ianuINojD2OZZbidZJPEoJepY6O NDPGnMzx3ElmtBCMwjE4hXiUvnR1bAK9xQ5yXMHZZ/iLEcNMvCymfGPjO/khvfCw Cb/M7AApJrRivRPDq3bpVB4Ac4NwVBJvxmLcUakaWOqGIud2xQ2X2ls7rhftrb7n vGHB6khMcpyJC682QAjbyhH6Ly5JmvorTOVgortkaKM5AKmzLpjyXJKAUA6jAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUc7zjAUMmc8kuLsqkb7mdkjQF+ZgwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1NjQ5MzQ1ODIyNzIyLzAvMzIzNDMwMzEz YTM1NjMzMjMwM2EzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzEz ODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJAFcIAAQMA0GCSqGSIb3DQEBCwUAA4IBAQDy0TWG0wJj 9FFZijbmBMmmur6ShqWREBfIDP+Ry5nhqxHcCan6b2+2vBmhPpxc7Jl4p9Xi7ieq PhRLfmCRcSG9SGdpVwMiCQ5Fx5MTnisns92i9Cn1p3QQ5dvTbV5V0/bUzVuRfdcs 2azrI7WPhBO8qVyNAN9lEf4QhekKszUPcY8d4G/eHZE88Z/KE2awdmycs8n0RD49 GG57ipYHOI1UWhBHFspV+iO3PaTFILdExGWSrgjhLDjcCRJXlDqBDuYNN8vL9Rc1 dgybp+WIpjmniBm0iFY7KU/d0CZ4bylUi/UbRaK4yED8rGI1tagLkSZP/BlWoSlG J59J7QFDJ3VP -----END CERTIFICATE-----Generated at Tue Jul 14 20:54:17 2026 by rpki-client