$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a313a3a2f34382d3438203d3e20313336313935.roa File: 323430323a333665303a313a3a2f34382d3438203d3e20313336313935.roa (raw, json) Hash identifier: 8szobwvJ5EdMnOx1y0Q4azCWGnDWO6Hr5pUqWU476mQ= Subject key identifier: AF:04:57:A8:6D:BA:D6:18:FF:7D:8C:D4:73:65:21:7B:91:B5:74:E6 Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Certificate serial: 038A8E7F1BD266E598FF511460109DBB729D2BF9 Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a313a3a2f34382d3438203d3e20313336313935.roa Signing time: Wed 01 Jul 2026 09:31:16 +0000 ROA not before: Wed 01 Jul 2026 09:26:16 +0000 ROA not after: Wed 30 Jun 2027 09:31:16 +0000 asID: 136195 IP address blocks: 2402:36e0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8a:8e:7f:1b:d2:66:e5:98:ff:51:14:60:10:9d:bb:72:9d:2b:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Validity Not Before: Jul 1 09:26:16 2026 GMT Not After : Jun 30 09:31:16 2027 GMT Subject: CN=AF0457A86DBAD618FF7D8CD47365217B91B574E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e9:e0:ac:b9:2e:ea:ed:7c:e9:ca:5c:1d:11: 17:e4:cd:2f:e5:ae:25:03:a5:29:c4:39:28:3e:66: 69:63:72:6f:5e:1d:45:76:84:9e:1c:ca:fc:ea:ed: c1:64:78:0a:96:1b:a5:b1:c8:d5:59:47:07:87:6d: c5:89:96:8b:0d:dd:8f:42:74:66:6b:76:3e:0d:08: 17:42:a5:b4:ae:c7:13:64:89:2e:4c:3a:f4:9a:5f: 2c:bf:45:22:9f:c6:ef:1f:72:99:a0:66:75:c1:da: 75:a9:2a:41:fe:71:50:3e:5f:97:c2:96:c8:0e:24: df:22:df:7d:32:16:d1:e3:57:7a:ee:7c:46:b2:8a: 1c:7c:61:0c:7a:d1:7a:2c:0a:43:2b:67:93:ac:92: 02:9e:4e:9e:67:43:ec:4c:68:5a:59:b7:49:98:35: 44:78:13:95:4a:af:4e:95:84:b1:be:45:2c:2f:95: c4:78:78:31:a5:24:5e:d1:f1:2a:7b:00:73:52:33: 2e:f6:2f:82:50:de:9a:da:ce:f6:84:44:42:01:be: 82:1f:08:82:bf:95:35:53:f8:f8:c8:d5:27:8a:e0: da:63:05:d2:41:d5:13:d4:0b:c9:73:78:e3:36:50: 0d:7d:c3:c6:41:c5:4e:15:12:37:34:b8:1f:01:15: b9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:04:57:A8:6D:BA:D6:18:FF:7D:8C:D4:73:65:21:7B:91:B5:74:E6 X509v3 Authority Key Identifier: keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a313a3a2f34382d3438203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:36e0:1::/48 Signature Algorithm: sha256WithRSAEncryption 92:0a:72:ef:57:46:82:bb:53:41:89:5b:7c:3f:eb:32:39:d2: 61:9d:d9:00:6f:07:a2:cb:7c:e5:e9:62:10:6c:7f:b5:1b:8a: 39:6f:79:37:31:c4:ae:6f:cb:29:aa:ec:43:14:90:ed:67:02: d2:ae:a4:67:39:a1:67:f7:2d:58:78:9e:e0:7b:0a:be:68:cd: 48:4e:90:8e:7c:d9:57:e3:34:aa:d5:4a:72:f3:81:6c:d0:ae: 6e:72:47:22:4a:ed:7f:85:3b:e4:5c:82:f7:eb:5d:dd:b4:c9: ef:b5:68:cc:af:bf:5c:1a:75:f5:fe:3e:2f:1c:38:bb:b5:eb: 53:fc:2a:f0:8d:6b:59:42:2a:18:7b:37:3e:17:ce:93:ec:c5: f5:23:0b:e3:03:ce:75:c2:4a:b3:31:57:a6:d1:13:39:13:b3: 2b:2e:68:9d:42:23:6a:c6:13:0e:7f:82:f3:c5:6f:92:ba:a0: 70:39:9c:67:d9:06:63:42:4b:02:1f:fd:c6:2f:d4:89:e5:e3: d8:52:eb:04:98:17:ab:3f:af:eb:16:53:4c:ca:da:0b:e1:06: fa:d7:8d:00:4c:f2:4f:c8:6e:fe:aa:50:d9:fb:00:be:7b:0c: b5:4c:2f:07:85:e0:d8:7c:1c:51:28:9d:18:4d:60:90:90:ef: 99:4a:b4:4f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA4qOfxvSZuWY/1EUYBCdu3KdK/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5 NTM1M0VDNjAeFw0yNjA3MDEwOTI2MTZaFw0yNzA2MzAwOTMxMTZaMDMxMTAvBgNV BAMTKEFGMDQ1N0E4NkRCQUQ2MThGRjdEOENENDczNjUyMTdCOTFCNTc0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6eCsuS7q7XzpylwdERfkzS/l riUDpSnEOSg+Zmljcm9eHUV2hJ4cyvzq7cFkeAqWG6WxyNVZRweHbcWJlosN3Y9C dGZrdj4NCBdCpbSuxxNkiS5MOvSaXyy/RSKfxu8fcpmgZnXB2nWpKkH+cVA+X5fC lsgOJN8i330yFtHjV3rufEayihx8YQx60XosCkMrZ5OskgKeTp5nQ+xMaFpZt0mY NUR4E5VKr06VhLG+RSwvlcR4eDGlJF7R8Sp7AHNSMy72L4JQ3prazvaEREIBvoIf CIK/lTVT+PjI1SeK4NpjBdJB1RPUC8lzeOM2UA19w8ZBxU4VEjc0uB8BFblxAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUrwRXqG261hj/fYzUc2Uhe5G1dOYwHwYDVR0j BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0 NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMjQwNTEzLzAvMzIzNDMwMzIz YTMzMzY2NTMwM2EzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMxMzkz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQCNuAAATANBgkqhkiG9w0BAQsFAAOCAQEAkgpy71dGgrtT QYlbfD/rMjnSYZ3ZAG8Host85eliEGx/tRuKOW95NzHErm/LKarsQxSQ7WcC0q6k ZzmhZ/ctWHie4HsKvmjNSE6QjnzZV+M0qtVKcvOBbNCubnJHIkrtf4U75FyC9+td 3bTJ77VozK+/XBp19f4+Lxw4u7XrU/wq8I1rWUIqGHs3PhfOk+zF9SML4wPOdcJK szFXptETOROzKy5onUIjasYTDn+C88VvkrqgcDmcZ9kGY0JLAh/9xi/UieXj2FLr BJgXqz+v6xZTTMraC+EG+teNAEzyT8hu/qpQ2fsAvnsMtUwvB4Xg2HwcUSidGE1g kJDvmUq0Tw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:26 2026 by rpki-client