$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343030303a3a2f32322d3438203d3e203337393633.roa File: 323430383a343030303a3a2f32322d3438203d3e203337393633.roa (raw, json) Hash identifier: LJauZzAFAEFduHwM9uyvlOAaH+zsJ1+VziWSHCGhyTU= Subject key identifier: B8:EB:FD:BD:81:09:52:BB:DC:A2:17:88:D2:73:98:CF:CC:06:68:22 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 43D2D5BFEE71AA12DADF99337843FE5C4802A111 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343030303a3a2f32322d3438203d3e203337393633.roa Signing time: Thu 14 May 2026 06:23:01 +0000 ROA not before: Thu 14 May 2026 06:18:01 +0000 ROA not after: Thu 13 May 2027 06:23:01 +0000 asID: 37963 IP address blocks: 2408:4000::/22 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 23:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:d2:d5:bf:ee:71:aa:12:da:df:99:33:78:43:fe:5c:48:02:a1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: May 14 06:18:01 2026 GMT Not After : May 13 06:23:01 2027 GMT Subject: CN=B8EBFDBD810952BBDCA21788D27398CFCC066822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:94:72:6e:e4:a2:54:b4:a9:ae:95:3d:cb:57: c5:50:40:f5:0b:50:6e:4e:0b:fd:5c:16:71:4d:96: 4f:99:45:3d:8d:70:e2:61:c5:4e:cd:40:15:2e:56: ac:90:1d:f9:5a:bb:39:cd:56:a8:40:91:2e:83:fe: 21:53:4a:8d:8f:b7:8a:a4:9f:32:b4:73:ed:04:c9: 87:a1:df:6d:5e:7d:01:0d:81:03:2c:d5:79:87:b3: 64:f1:f3:d6:fc:62:08:ce:12:db:df:a8:0e:14:bc: b0:cf:d3:6f:94:cc:7c:82:ea:19:9b:0e:b3:3b:45: 19:94:22:14:05:fb:80:82:a7:5e:75:f2:fd:f4:32: ba:9a:e2:c8:6f:92:be:00:1f:d2:f2:ef:c9:a1:ee: ff:f2:32:1d:c3:13:af:35:c6:55:22:21:2d:10:3c: b2:78:b8:aa:68:2f:47:bc:20:c3:80:7b:15:f2:7c: ad:2f:5d:95:c4:c7:1e:0d:b8:b8:d6:6a:19:90:48: 78:40:59:e4:3b:97:35:be:54:30:3b:be:c7:33:d1: a8:8d:47:77:70:9d:15:72:19:12:d0:fc:fd:59:2e: dc:fb:ed:08:36:9d:4b:2b:a7:be:4c:ce:75:20:75: 6f:1f:c7:43:27:02:f8:41:a8:5f:6f:41:38:c1:fe: 00:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:EB:FD:BD:81:09:52:BB:DC:A2:17:88:D2:73:98:CF:CC:06:68:22 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343030303a3a2f32322d3438203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2408:4000::/22 Signature Algorithm: sha256WithRSAEncryption 47:2f:1a:02:a1:ec:e3:d6:a8:aa:df:0d:8b:e8:8a:6b:68:30: 36:b3:02:c6:af:3a:67:77:2c:86:ee:26:9a:0d:54:7e:88:3f: 0a:2b:da:9a:f9:07:39:80:7a:af:b4:55:d5:7b:65:69:a3:55: 99:d3:b5:f7:8f:48:91:6b:41:22:89:6e:5a:49:6a:2f:d6:da: 23:1c:3f:98:50:bd:d5:ad:86:0b:6f:b0:c8:2d:20:80:5a:e7: d2:9c:47:94:0e:9c:6c:ed:8f:02:b0:17:f6:98:3f:a0:86:f2: 57:e5:a1:5a:2d:36:8c:ec:50:68:e0:e5:c2:b6:ec:ca:b2:89: ce:6d:b5:10:4d:42:de:c2:6c:91:79:ac:04:eb:f9:66:57:be: 1b:63:23:35:52:32:8c:43:a3:7f:36:77:61:79:88:eb:d8:bc: 14:09:9e:fc:b4:59:f7:83:b1:9c:42:95:9c:2c:60:28:55:ff: 62:e2:6a:d9:fb:cb:dd:0b:f5:94:36:7f:59:52:60:4a:a4:75: c2:5c:f7:f5:8b:52:4f:1a:56:16:82:0b:4d:bd:e9:fe:d3:3d: d0:04:fe:cd:3e:c3:c2:f5:a8:bf:e2:b7:95:ff:b2:da:b1:10: 77:60:d1:cf:76:be:01:ce:90:f0:3b:a0:ce:c0:a2:ff:22:82: 53:05:a0:4d -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUQ9LVv+5xqhLa35kzeEP+XEgCoREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA1MTQwNjE4MDFaFw0yNzA1MTMwNjIzMDFaMDMxMTAvBgNV BAMTKEI4RUJGREJEODEwOTUyQkJEQ0EyMTc4OEQyNzM5OENGQ0MwNjY4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0lHJu5KJUtKmulT3LV8VQQPUL UG5OC/1cFnFNlk+ZRT2NcOJhxU7NQBUuVqyQHflauznNVqhAkS6D/iFTSo2Pt4qk nzK0c+0EyYeh321efQENgQMs1XmHs2Tx89b8YgjOEtvfqA4UvLDP02+UzHyC6hmb DrM7RRmUIhQF+4CCp1518v30Mrqa4shvkr4AH9Ly78mh7v/yMh3DE681xlUiIS0Q PLJ4uKpoL0e8IMOAexXyfK0vXZXExx4NuLjWahmQSHhAWeQ7lzW+VDA7vscz0aiN R3dwnRVyGRLQ/P1ZLtz77Qg2nUsrp75MznUgdW8fx0MnAvhBqF9vQTjB/gBNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUuOv9vYEJUrvcoheI0nOYz8wGaCIwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzIzNDMwMzgzYTM0 MzAzMDMwM2EzYTJmMzIzMjJkMzQzODIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAIw BgMEAiQIQDANBgkqhkiG9w0BAQsFAAOCAQEARy8aAqHs49aoqt8Ni+iKa2gwNrMC xq86Z3cshu4mmg1Ufog/CivamvkHOYB6r7RV1XtlaaNVmdO1949IkWtBIoluWklq L9baIxw/mFC91a2GC2+wyC0ggFrn0pxHlA6cbO2PArAX9pg/oIbyV+WhWi02jOxQ aODlwrbsyrKJzm21EE1C3sJskXmsBOv5Zle+G2MjNVIyjEOjfzZ3YXmI69i8FAme /LRZ94OxnEKVnCxgKFX/YuJq2fvL3Qv1lDZ/WVJgSqR1wlz39YtSTxpWFoILTb3p /tM90AT+zT7DwvWov+K3lf+y2rEQd2DRz3a+Ac6Q8DugzsCi/yKCUwWgTQ== -----END CERTIFICATE-----Generated at Sat Jun 6 13:17:17 2026 by rpki-client