$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343031363a3a2f33322d3438203d3e203234343239.roa File: 323430383a343031363a3a2f33322d3438203d3e203234343239.roa (raw, json) Hash identifier: bU6CXdnjxxUaG6Co1U7WAzLcOx4GLdJ4bMMfVNvdrMI= Subject key identifier: 60:8B:46:14:B5:E0:92:0F:AE:AD:2F:BD:7A:54:C2:8E:22:DC:C7:BB Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 1B345DF397E7879D63C22E6765A924B251B8021D Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343031363a3a2f33322d3438203d3e203234343239.roa Signing time: Thu 14 May 2026 06:23:02 +0000 ROA not before: Thu 14 May 2026 06:18:02 +0000 ROA not after: Thu 13 May 2027 06:23:02 +0000 asID: 24429 IP address blocks: 2408:4016::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 23:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:34:5d:f3:97:e7:87:9d:63:c2:2e:67:65:a9:24:b2:51:b8:02:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: May 14 06:18:02 2026 GMT Not After : May 13 06:23:02 2027 GMT Subject: CN=608B4614B5E0920FAEAD2FBD7A54C28E22DCC7BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a8:e5:ca:b6:ca:56:87:31:31:78:ba:2c:e6: 8f:91:53:40:4f:bd:e1:64:5d:98:c3:e4:34:b7:cd: 85:c2:66:df:f6:04:d7:95:b9:b3:3c:28:87:4d:d6: cb:8d:ae:54:a8:b7:21:ab:98:32:c2:dd:34:9f:6c: cb:92:d1:73:4c:92:bc:08:11:e2:26:a8:fb:ef:01: 9c:d6:eb:e8:a1:14:6a:c0:08:58:8b:75:df:3b:6d: 4f:3a:90:28:bb:fd:28:47:49:71:e7:3a:78:6e:ec: e0:0d:2e:7f:af:b2:36:e5:d0:15:c3:73:38:ac:8b: 5d:62:54:0b:ca:4c:ba:44:36:48:b8:0a:4c:a8:27: b7:26:11:e1:eb:bc:b2:3d:dd:6f:35:fe:81:22:63: fe:d0:1a:27:a4:f2:fa:3e:d9:a2:bb:1d:43:41:7a: 47:e3:9a:53:c3:76:78:10:18:e0:ec:93:19:71:c3: f8:f2:39:7e:0a:3d:64:db:55:c2:8a:86:b7:df:ff: 6c:bb:b0:c8:36:cc:77:32:48:90:0f:28:c9:a5:05: 14:bf:cf:e4:0b:7a:c2:ce:e7:99:53:08:fc:87:75: 03:6f:84:16:7b:35:71:a6:fd:fe:92:8e:4e:b0:4c: 9c:59:4f:fc:76:0a:ba:f0:ff:7d:98:db:f8:18:ee: d1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:8B:46:14:B5:E0:92:0F:AE:AD:2F:BD:7A:54:C2:8E:22:DC:C7:BB X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430383a343031363a3a2f33322d3438203d3e203234343239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2408:4016::/32 Signature Algorithm: sha256WithRSAEncryption 6d:c7:67:dd:81:8d:d0:f5:fb:a4:2f:b3:c7:b7:8f:26:d8:29: c4:d1:8b:df:fd:c4:07:db:78:4a:7e:18:0d:06:fc:f3:26:85: af:8c:b7:10:22:3d:e8:65:d0:a1:23:fb:f5:38:e1:51:b8:07: da:79:a4:c8:c8:cf:45:f3:13:fe:f8:a4:18:aa:b3:b2:ec:27: be:7a:a4:2b:ea:48:83:6b:7e:ad:fb:a2:ff:1b:20:0b:d5:8b: d0:52:a3:d3:fc:fe:9d:1d:a3:d4:29:b8:bf:2e:59:27:80:0b: a2:8d:45:29:94:34:2c:c3:95:35:0f:6b:34:7e:3a:9b:51:73: dd:25:c5:71:c5:9b:34:61:23:f9:45:30:fb:02:97:23:76:a5: 4d:6b:1c:96:8b:0d:a3:79:15:ea:af:7f:ac:6b:14:ac:14:15: 25:48:d8:ca:f8:db:7c:aa:a3:89:89:43:80:77:a5:3e:5e:1f: 97:32:99:07:9a:81:a8:79:a9:6a:aa:46:c1:c5:a4:d4:6a:6d: 3a:b7:fc:f9:e1:90:51:e6:80:ed:ac:18:39:43:1c:80:ab:84: f3:42:d3:b4:2d:a8:05:d2:5d:9e:38:41:d7:82:9a:ad:1c:f6: c5:24:06:5f:47:86:fc:e5:7f:9f:37:8c:6a:be:8e:a4:b6:d0: fd:a0:e4:0b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUGzRd85fnh51jwi5nZakkslG4Ah0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA1MTQwNjE4MDJaFw0yNzA1MTMwNjIzMDJaMDMxMTAvBgNV BAMTKDYwOEI0NjE0QjVFMDkyMEZBRUFEMkZCRDdBNTRDMjhFMjJEQ0M3QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qOXKtspWhzExeLos5o+RU0BP veFkXZjD5DS3zYXCZt/2BNeVubM8KIdN1suNrlSotyGrmDLC3TSfbMuS0XNMkrwI EeImqPvvAZzW6+ihFGrACFiLdd87bU86kCi7/ShHSXHnOnhu7OANLn+vsjbl0BXD czisi11iVAvKTLpENki4CkyoJ7cmEeHrvLI93W81/oEiY/7QGiek8vo+2aK7HUNB ekfjmlPDdngQGODskxlxw/jyOX4KPWTbVcKKhrff/2y7sMg2zHcySJAPKMmlBRS/ z+QLesLO55lTCPyHdQNvhBZ7NXGm/f6Sjk6wTJxZT/x2Crrw/32Y2/gY7tHDAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUYItGFLXgkg+urS+9elTCjiLcx7swHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzIzNDMwMzgzYTM0 MzAzMTM2M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNDM0MzIzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQIQBYwDQYJKoZIhvcNAQELBQADggEBAG3HZ92BjdD1+6Qvs8e3jybYKcTR i9/9xAfbeEp+GA0G/PMmha+MtxAiPehl0KEj+/U44VG4B9p5pMjIz0XzE/74pBiq s7LsJ756pCvqSINrfq37ov8bIAvVi9BSo9P8/p0do9QpuL8uWSeAC6KNRSmUNCzD lTUPazR+OptRc90lxXHFmzRhI/lFMPsClyN2pU1rHJaLDaN5Feqvf6xrFKwUFSVI 2Mr423yqo4mJQ4B3pT5eH5cymQeagah5qWqqRsHFpNRqbTq3/PnhkFHmgO2sGDlD HICrhPNC07QtqAXSXZ44QdeCmq0c9sUkBl9Hhvzlf583jGq+jqS20P2g5As= -----END CERTIFICATE-----Generated at Sat Jun 6 10:49:09 2026 by rpki-client