$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069148939556487169/0/323430303a393565303a3a2f33322d3438203d3e20313436373731.roa File: 323430303a393565303a3a2f33322d3438203d3e20313436373731.roa (raw, json) Hash identifier: oiFeA5HCtr2Fpw6iWNSFO+M1S+ANQ/Wm7HsdABpTV6Y= Subject key identifier: 07:0B:8D:8D:DF:41:DB:1A:D3:9C:03:A6:3C:0B:FF:52:B5:7F:40:E1 Certificate issuer: /CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Certificate serial: 5FB6C37F8540843FF4EB8A6423F7803A460BA13F Authority key identifier: E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/323430303a393565303a3a2f33322d3438203d3e20313436373731.roa Signing time: Thu 29 Jan 2026 07:05:27 +0000 ROA not before: Thu 29 Jan 2026 07:00:27 +0000 ROA not after: Thu 28 Jan 2027 07:05:27 +0000 asID: 146771 IP address blocks: 2400:95e0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Feb 2026 12:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:b6:c3:7f:85:40:84:3f:f4:eb:8a:64:23:f7:80:3a:46:0b:a1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E19DAC7A5282AF0B446E1C964F7F4509A96177D3 Validity Not Before: Jan 29 07:00:27 2026 GMT Not After : Jan 28 07:05:27 2027 GMT Subject: CN=070B8D8DDF41DB1AD39C03A63C0BFF52B57F40E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a2:74:fe:04:4d:d8:b0:09:c8:70:0d:02:04: 2a:e2:84:2c:11:50:7d:e9:10:8f:a0:af:55:67:f4: e6:72:33:77:6d:68:25:70:e5:6b:4e:42:c2:35:3b: 46:12:89:c6:e4:65:ce:ea:9b:25:de:78:35:c7:4a: c7:6b:65:f4:32:13:c2:4e:b7:2f:11:3d:24:da:22: 50:86:5c:03:44:59:df:5f:fc:3b:f2:9a:23:e4:f4: 4d:05:66:a4:1d:0d:56:f1:f3:10:a1:ff:d4:c0:83: a8:b8:4a:b6:b3:69:cf:77:8a:13:f8:62:3c:b0:0d: ed:e4:c4:d0:13:18:ae:37:ee:57:65:05:1e:7b:c0: 49:ad:6d:1a:be:7e:53:39:2d:99:95:d5:9d:66:0e: cc:c1:2c:c2:42:e3:68:7f:fc:e8:fc:3c:64:c8:eb: 5d:5e:e2:71:69:8a:03:ba:cd:7a:7a:0c:8b:b5:43: b4:b8:cd:59:fb:1e:94:f6:0d:7a:77:bd:5c:f3:bd: 1b:53:be:c1:28:6c:7b:47:3f:a4:08:f5:7d:c4:e6: f0:7f:b2:8a:df:90:67:ba:5e:63:5b:6f:a5:4d:df: 9e:d9:cc:02:0c:fd:e7:c7:56:8e:c3:53:ed:c2:51: 48:06:61:d6:df:73:ec:49:de:8f:0c:79:07:a8:d4: cf:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:0B:8D:8D:DF:41:DB:1A:D3:9C:03:A6:3C:0B:FF:52:B5:7F:40:E1 X509v3 Authority Key Identifier: keyid:E1:9D:AC:7A:52:82:AF:0B:44:6E:1C:96:4F:7F:45:09:A9:61:77:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E19DAC7A5282AF0B446E1C964F7F4509A96177D3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069148939556487169/0/323430303a393565303a3a2f33322d3438203d3e20313436373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:95e0::/32 Signature Algorithm: sha256WithRSAEncryption 9f:04:b2:f8:f2:c9:62:7e:d0:fb:e7:08:46:11:56:de:c1:75: be:78:14:fc:46:17:c9:1c:c9:21:fb:3e:14:8b:18:99:5a:1c: 52:a7:a6:ff:fe:5c:cb:2c:54:a3:74:c1:0a:96:63:71:4f:79: fb:34:02:d5:88:d4:f9:09:3c:31:e0:59:ba:f5:7b:5c:cc:cf: 69:4c:7f:31:4d:b3:02:da:ac:bf:0b:cc:ee:19:ff:55:5e:87: d8:dd:75:36:09:db:b8:64:46:fe:cb:a0:0b:02:a0:4e:df:3d: 94:1d:bf:c7:67:f0:76:8d:cd:f5:da:b0:33:14:dd:23:c2:c7: 87:e9:ec:14:11:13:25:91:91:6b:e6:eb:d1:35:b9:34:05:75: ad:03:a4:2a:33:19:9d:d3:8f:97:7e:fb:1d:be:0a:93:5f:3b: 35:08:dd:b8:95:57:8a:c2:f8:76:b1:43:58:fd:7f:b6:f4:d9: 63:ec:6d:44:27:35:54:30:a6:3b:f3:de:b2:d8:27:08:c9:41: c1:b4:dc:94:6a:13:f0:58:d6:f5:5b:54:55:2a:f4:73:5c:b5: a5:8e:e7:69:67:fd:f9:0e:3f:29:6b:a8:65:ba:12:54:43:d2: 6d:d8:7b:73:1e:d2:03:ca:9d:20:f8:99:c9:e4:43:0e:f7:d3: c3:1c:a2:b8 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUX7bDf4VAhD/064pkI/eAOkYLoT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlB OTYxNzdEMzAeFw0yNjAxMjkwNzAwMjdaFw0yNzAxMjgwNzA1MjdaMDMxMTAvBgNV BAMTKDA3MEI4RDhEREY0MURCMUFEMzlDMDNBNjNDMEJGRjUyQjU3RjQwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVonT+BE3YsAnIcA0CBCrihCwR UH3pEI+gr1Vn9OZyM3dtaCVw5WtOQsI1O0YSicbkZc7qmyXeeDXHSsdrZfQyE8JO ty8RPSTaIlCGXANEWd9f/DvymiPk9E0FZqQdDVbx8xCh/9TAg6i4Srazac93ihP4 YjywDe3kxNATGK437ldlBR57wEmtbRq+flM5LZmV1Z1mDszBLMJC42h//Oj8PGTI 611e4nFpigO6zXp6DIu1Q7S4zVn7HpT2DXp3vVzzvRtTvsEobHtHP6QI9X3E5vB/ sorfkGe6XmNbb6VN357ZzAIM/efHVo7DU+3CUUgGYdbfc+xJ3o8MeQeo1M9vAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUBwuNjd9B2xrTnAOmPAv/UrV/QOEwHwYDVR0j BBgwFoAU4Z2selKCrwtEbhyWT39FCalhd9MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 OTE0ODkzOTU1NjQ4NzE2OS8wL0UxOURBQzdBNTI4MkFGMEI0NDZFMUM5NjRGN0Y0 NTA5QTk2MTc3RDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRTE5REFDN0E1MjgyQUYwQjQ0NkUxQzk2NEY3RjQ1MDlBOTYxNzdEMy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2OTE0ODkzOTU1NjQ4NzE2OS8wLzMyMzQzMDMwM2Ez OTM1NjUzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzQzNjM3MzczMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQAleAwDQYJKoZIhvcNAQELBQADggEBAJ8EsvjyyWJ+0PvnCEYRVt7B db54FPxGF8kcySH7PhSLGJlaHFKnpv/+XMssVKN0wQqWY3FPefs0AtWI1PkJPDHg Wbr1e1zMz2lMfzFNswLarL8LzO4Z/1Veh9jddTYJ27hkRv7LoAsCoE7fPZQdv8dn 8HaNzfXasDMU3SPCx4fp7BQREyWRkWvm69E1uTQFda0DpCozGZ3Tj5d++x2+CpNf OzUI3biVV4rC+HaxQ1j9f7b02WPsbUQnNVQwpjvz3rLYJwjJQcG03JRqE/BY1vVb VFUq9HNctaWO52ln/fkOPylrqGW6ElRD0m3Ye3Me0gPKnSD4mcnkQw7308Mcorg= -----END CERTIFICATE-----Generated at Mon Feb 23 03:23:31 2026 by rpki-client