$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430303a333230303a3a2f33322d3438203d3e203435313032.roa File: 323430303a333230303a3a2f33322d3438203d3e203435313032.roa (raw, json) Hash identifier: rnmpn56rTSpYiyX9o7XGPnB1rDzD2AbOGCKpGYqzHY4= Subject key identifier: DA:AE:C0:FF:B7:F6:C7:C9:1D:0D:80:05:12:B4:71:F4:B3:56:E5:3F Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 44728A99E08621C7352CAB7EE2157B32559D5B Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430303a333230303a3a2f33322d3438203d3e203435313032.roa Signing time: Thu 14 May 2026 02:15:42 +0000 ROA not before: Thu 14 May 2026 02:10:42 +0000 ROA not after: Thu 13 May 2027 02:15:42 +0000 asID: 45102 IP address blocks: 2400:3200::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 23:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:72:8a:99:e0:86:21:c7:35:2c:ab:7e:e2:15:7b:32:55:9d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: May 14 02:10:42 2026 GMT Not After : May 13 02:15:42 2027 GMT Subject: CN=DAAEC0FFB7F6C7C91D0D800512B471F4B356E53F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:d4:1f:bd:6b:23:a5:45:75:5f:6e:06:ac: 62:a7:6f:a4:1e:bb:ff:7a:c5:dc:9f:e5:c9:1a:34: 68:e9:2b:72:5e:35:07:1a:ea:c6:b8:93:51:20:bf: d2:b0:01:7b:2c:e4:d4:14:e1:5b:b6:cc:4c:1f:90: 27:19:30:48:9d:13:98:48:44:a1:19:8e:a2:b8:a9: e8:56:ad:1f:28:27:64:1f:64:9e:7c:a4:f6:2c:5c: 73:2c:2b:f8:04:02:5e:c3:c7:d1:4f:3b:0f:27:ed: c5:52:85:0b:3d:e7:b0:ec:72:e3:37:15:96:71:3d: 72:49:83:e5:0b:84:0f:76:19:0d:f5:8e:47:c2:47: cb:dd:48:2a:0e:46:25:9d:17:59:30:73:52:c6:2f: 06:05:b2:7d:56:a8:81:3f:2a:27:3a:a3:e4:a5:3c: 80:e7:c9:23:ba:e5:34:e3:28:05:ee:77:d3:af:5e: 37:7a:ea:a1:28:d8:5d:4d:77:8c:41:fc:dd:be:4f: 70:12:be:83:db:cb:61:7c:c4:ee:a2:aa:8b:88:d7: 88:45:29:f2:58:fd:e4:18:03:84:a1:5d:35:74:a2: b2:82:c4:3f:b4:09:a9:f9:02:ab:20:c1:d8:c3:91: 74:ca:34:33:76:6b:ee:09:2c:82:b3:ca:b7:5e:cb: b0:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:AE:C0:FF:B7:F6:C7:C9:1D:0D:80:05:12:B4:71:F4:B3:56:E5:3F X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430303a333230303a3a2f33322d3438203d3e203435313032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:3200::/32 Signature Algorithm: sha256WithRSAEncryption 61:3e:62:92:68:ed:77:7a:26:dd:ba:e3:26:f2:93:e6:45:9a: be:75:a2:1b:5e:50:9a:42:6d:19:31:d5:9c:53:19:50:0c:ea: 36:21:2c:c6:9b:c1:7a:cd:a2:97:5a:46:65:c9:d4:f7:90:bb: 1f:1b:e1:43:4b:12:c2:94:e9:28:b9:7d:ee:b9:97:00:c6:ab: ee:09:9f:ae:c3:1c:64:64:88:27:2d:9b:18:01:72:90:c9:3c: 51:81:50:a2:5b:0c:3b:1a:b8:f4:8d:1f:88:da:d6:53:d1:51: 7d:ad:38:a0:68:ea:09:3b:7d:10:d2:fc:31:e2:26:01:e9:95: 62:c9:03:c6:fc:6e:65:18:1f:fd:88:96:0b:9e:1c:25:34:5f: 1a:38:d0:30:68:e2:42:de:82:3f:e8:05:42:2d:3f:c3:a1:e9: 5e:dd:e7:8c:e2:98:4f:da:2f:87:c2:47:fc:09:1f:d3:e9:c0: 3e:7a:05:2c:a6:14:2f:a1:c3:32:91:5e:24:2b:23:9b:da:6c: 5d:9e:45:be:df:17:52:0b:38:08:ed:6c:68:01:17:99:09:1a: 19:02:29:fb:71:82:95:0e:6c:5b:3d:d2:a6:6a:61:21:61:74: 8e:7b:91:10:c7:06:01:8b:11:a9:d0:71:e9:6b:61:a1:2e:dd: d8:c9:f5:e5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgITRHKKmeCGIcc1LKt+4hV7MlWdWzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCM0NBRkI1OUYxMEIwM0FEMjEwNkU4MjE1REJCOTAzRjE1 N0QwQzhFMB4XDTI2MDUxNDAyMTA0MloXDTI3MDUxMzAyMTU0MlowMzExMC8GA1UE AxMoREFBRUMwRkZCN0Y2QzdDOTFEMEQ4MDA1MTJCNDcxRjRCMzU2RTUzRjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALnq1B+9ayOlRXVfbgasYqdvpB67 /3rF3J/lyRo0aOkrcl41BxrqxriTUSC/0rABeyzk1BThW7bMTB+QJxkwSJ0TmEhE oRmOorip6FatHygnZB9knnyk9ixccywr+AQCXsPH0U87DyftxVKFCz3nsOxy4zcV lnE9ckmD5QuED3YZDfWOR8JHy91IKg5GJZ0XWTBzUsYvBgWyfVaogT8qJzqj5KU8 gOfJI7rlNOMoBe53069eN3rqoSjYXU13jEH83b5PcBK+g9vLYXzE7qKqi4jXiEUp 8lj95BgDhKFdNXSisoLEP7QJqfkCqyDB2MORdMo0M3Zr7gksgrPKt17LsA0CAwEA AaOCAhIwggIOMB0GA1UdDgQWBBTarsD/t/bHyR0NgAUStHH0s1blPzAfBgNVHSME GDAWgBSzyvtZ8QsDrSEG6CFdu5A/FX0MjjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 ODg3NjQ0MDkwNjMwMTQ1LzAvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkw M0YxNTdEMEM4RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS9CM0NBRkI1OUYxMEIwM0FEMjEwNkU4MjE1REJCOTAzRjE1N0QwQzhFLmNlcjCB igYIKwYBBQUHAQsEfjB8MHoGCCsGAQUFBzALhm5yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwNjU4ODc2NDQwOTA2MzAxNDUvMC8zMjM0MzAzMDNhMzMz MjMwMzAzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzNDM1MzEzMDMyLnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAH AwUAJAAyADANBgkqhkiG9w0BAQsFAAOCAQEAYT5ikmjtd3om3brjJvKT5kWavnWi G15QmkJtGTHVnFMZUAzqNiEsxpvBes2il1pGZcnU95C7HxvhQ0sSwpTpKLl97rmX AMar7gmfrsMcZGSIJy2bGAFykMk8UYFQolsMOxq49I0fiNrWU9FRfa04oGjqCTt9 ENL8MeImAemVYskDxvxuZRgf/YiWC54cJTRfGjjQMGjiQt6CP+gFQi0/w6HpXt3n jOKYT9ovh8JH/Akf0+nAPnoFLKYUL6HDMpFeJCsjm9psXZ5Fvt8XUgs4CO1saAEX mQkaGQIp+3GClQ5sWz3SpmphIWF0jnuREMcGAYsRqdBx6WthoS7d2Mn15Q== -----END CERTIFICATE-----Generated at Sat Jun 6 13:18:26 2026 by rpki-client