$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa File: 323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa (raw, json) Hash identifier: a46XeE7JCQgBGygvokf0jLxCvds8A2lRxfsGr9yqiQI= Subject key identifier: A4:53:83:91:4C:BD:EE:73:3F:4D:6B:01:AA:8E:9E:0B:6D:57:38:78 Certificate issuer: /CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Certificate serial: 1B4BEA7B07B24DF2DC76406411C3495069C55808 Authority key identifier: CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa Signing time: Fri 21 Aug 2026 03:01:37 +0000 ROA not before: Fri 21 Aug 2026 02:56:37 +0000 ROA not after: Fri 20 Aug 2027 03:01:37 +0000 asID: 17623 IP address blocks: 2407:8f40:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 31 Aug 2026 07:32:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:4b:ea:7b:07:b2:4d:f2:dc:76:40:64:11:c3:49:50:69:c5:58:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE20AD60B5FF206D53409236A11F47FD4F31ACE7 Validity Not Before: Aug 21 02:56:37 2026 GMT Not After : Aug 20 03:01:37 2027 GMT Subject: CN=A45383914CBDEE733F4D6B01AA8E9E0B6D573878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:83:c9:ae:43:be:57:04:88:4e:36:f2:d9:82: 5c:fe:70:a0:8f:ee:95:88:53:76:95:ce:e6:8a:2e: 80:87:3a:e3:72:35:17:32:12:b2:00:8c:e8:ac:cc: ab:9c:e0:99:bf:f1:31:1c:8e:89:3e:3e:06:52:ba: 94:c1:08:2c:11:18:d1:9f:f4:70:ad:cf:79:56:b8: c3:ab:21:9b:8f:1e:a0:55:3c:40:a8:df:2d:a8:2f: 7b:62:4f:a9:e6:46:a8:32:13:79:b4:db:f6:be:81: cf:da:a5:73:72:aa:49:0c:b1:23:2f:07:a8:2d:b8: 17:f4:fa:4c:5c:8f:0f:d1:3c:24:f4:18:23:7b:ba: e1:8a:9b:5e:b9:cc:b9:f8:1f:a7:4b:ed:5f:57:63: 5d:8a:8b:62:34:91:04:5f:e4:8d:fb:59:99:81:86: 7a:bc:bb:f6:c1:c7:37:7c:f9:da:28:9c:59:21:5e: a4:14:c5:24:f4:03:9b:e2:d9:6e:55:ab:26:01:66: 48:94:4a:6e:03:52:b2:56:93:fb:28:ff:c0:5c:8b: 83:95:96:fe:f9:bc:ad:8b:5b:1a:6d:f4:49:1e:36: aa:9f:1a:cf:e4:0f:1c:f0:ef:f6:bb:1d:c5:ec:bc: 2c:d4:0e:6a:16:06:47:54:c8:66:04:58:de:e6:d0: f3:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:53:83:91:4C:BD:EE:73:3F:4D:6B:01:AA:8E:9E:0B:6D:57:38:78 X509v3 Authority Key Identifier: keyid:CE:20:AD:60:B5:FF:20:6D:53:40:92:36:A1:1F:47:FD:4F:31:AC:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CE20AD60B5FF206D53409236A11F47FD4F31ACE7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217192963/0/323430373a386634303a323a3a2f34382d3634203d3e203137363233.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:8f40:2::/48 Signature Algorithm: sha256WithRSAEncryption 91:5f:51:d4:0d:c6:3b:4c:64:8f:8c:46:44:aa:6d:ec:f9:3a: 85:57:83:3a:c3:3f:96:d2:47:e2:7e:8c:be:da:b5:fb:e2:52: 3f:26:cd:e2:bd:49:8a:ef:8d:7e:9c:93:2d:4a:56:59:16:1c: b1:5b:b3:79:6e:76:d6:69:4d:63:08:8c:d2:8d:0b:92:b7:22: 30:08:18:a2:a6:c7:a4:2b:de:57:4d:13:e3:b7:c0:4c:5f:0c: dc:79:9a:cb:ab:40:fd:3c:70:a3:7f:ec:f4:38:08:d4:4b:fd: 68:4e:ea:3b:6c:ea:bf:ff:53:a6:e8:4d:19:0c:25:fe:a2:57: 5d:3b:a0:35:0b:d1:3b:b2:13:72:2e:d8:1b:96:37:dd:75:67: 58:12:d6:8d:2f:90:56:3a:c9:74:64:84:26:6f:9f:8e:fc:e2: f0:3b:21:27:12:b0:a1:9f:ae:45:2f:df:7e:6e:a0:d7:84:84: 75:c2:d2:c3:21:73:9a:c4:71:13:36:f6:39:37:b5:e2:03:54: 85:e2:05:ec:bc:8f:da:9f:f0:77:8e:da:17:58:cd:dd:c4:f1: f3:3e:af:ca:df:72:51:93:1c:1e:1a:bc:49:dc:d1:ce:c8:ef: df:c0:ef:cd:86:42:92:e9:26:0d:0a:b4:b8:05:8d:81:bf:c8: 61:a4:d8:fd -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUG0vqeweyTfLcdkBkEcNJUGnFWAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0 RjMxQUNFNzAeFw0yNjA4MjEwMjU2MzdaFw0yNzA4MjAwMzAxMzdaMDMxMTAvBgNV BAMTKEE0NTM4MzkxNENCREVFNzMzRjRENkIwMUFBOEU5RTBCNkQ1NzM4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPg8muQ75XBIhONvLZglz+cKCP 7pWIU3aVzuaKLoCHOuNyNRcyErIAjOiszKuc4Jm/8TEcjok+PgZSupTBCCwRGNGf 9HCtz3lWuMOrIZuPHqBVPECo3y2oL3tiT6nmRqgyE3m02/a+gc/apXNyqkkMsSMv B6gtuBf0+kxcjw/RPCT0GCN7uuGKm165zLn4H6dL7V9XY12Ki2I0kQRf5I37WZmB hnq8u/bBxzd8+doonFkhXqQUxST0A5vi2W5VqyYBZkiUSm4DUrJWk/so/8Bci4OV lv75vK2LWxpt9EkeNqqfGs/kDxzw7/a7HcXsvCzUDmoWBkdUyGYEWN7m0POZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUpFODkUy97nM/TWsBqo6eC21XOHgwHwYDVR0j BBgwFoAUziCtYLX/IG1TQJI2oR9H/U8xrOcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNzE5Mjk2My8wL0NFMjBBRDYwQjVGRjIwNkQ1MzQwOTIzNkExMUY0 N0ZENEYzMUFDRTcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0UyMEFENjBCNUZGMjA2RDUzNDA5MjM2QTExRjQ3RkQ0RjMxQUNFNy5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1ODU5MTEyMTcxOTI5NjMvMC8zMjM0MzAzNzNh Mzg2NjM0MzAzYTMyM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzEzNzM2MzIzMy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQHj0AAAjANBgkqhkiG9w0BAQsFAAOCAQEAkV9R1A3GO0xkj4xG RKpt7Pk6hVeDOsM/ltJH4n6Mvtq1++JSPybN4r1Jiu+NfpyTLUpWWRYcsVuzeW52 1mlNYwiM0o0LkrciMAgYoqbHpCveV00T47fATF8M3Hmay6tA/Txwo3/s9DgI1Ev9 aE7qO2zqv/9TpuhNGQwl/qJXXTugNQvRO7ITci7YG5Y33XVnWBLWjS+QVjrJdGSE Jm+fjvzi8DshJxKwoZ+uRS/ffm6g14SEdcLSwyFzmsRxEzb2OTe14gNUheIF7LyP 2p/wd47aF1jN3cTx8z6vyt9yUZMcHhq8SdzRzsjv38DvzYZCkukmDQq0uAWNgb/I YaTY/Q== -----END CERTIFICATE-----Generated at Sat Aug 29 06:46:58 2026 by rpki-client