$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a383a3a2f34382d3438203d3e20313336313935.roa File: 323430323a333665303a383a3a2f34382d3438203d3e20313336313935.roa (raw, json) Hash identifier: 3Kvipx4zttMzRpr+4OGApfM6aFoUSos+CFUTRH0wlGo= Subject key identifier: F1:3D:A5:C2:D1:EC:09:DF:00:88:63:C7:88:55:15:16:96:E9:22:3B Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Certificate serial: 6EF2B2A5466B1A1FB2EC4688DBACB78F89FE9297 Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a383a3a2f34382d3438203d3e20313336313935.roa Signing time: Wed 01 Jul 2026 09:31:16 +0000 ROA not before: Wed 01 Jul 2026 09:26:16 +0000 ROA not after: Wed 30 Jun 2027 09:31:16 +0000 asID: 136195 IP address blocks: 2402:36e0:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:f2:b2:a5:46:6b:1a:1f:b2:ec:46:88:db:ac:b7:8f:89:fe:92:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Validity Not Before: Jul 1 09:26:16 2026 GMT Not After : Jun 30 09:31:16 2027 GMT Subject: CN=F13DA5C2D1EC09DF008863C78855151696E9223B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4d:94:ef:4e:34:f8:39:bb:e5:f6:bb:b9:f6: 29:c1:f7:dd:db:98:aa:a5:88:75:e1:15:dc:26:24: 6b:69:1c:09:74:65:ee:c9:a3:de:62:95:5e:3f:6f: 9f:b9:fb:ec:6a:ae:ec:f5:fa:e4:3a:1a:c0:d9:7e: 6a:85:89:d8:cb:d3:96:62:70:ea:e4:35:5e:8f:68: 80:dd:ca:2d:36:e1:c5:d1:6d:b5:9d:16:8a:d2:1a: 1f:f2:51:06:6f:50:93:0c:dd:86:02:d3:6e:08:3b: 8e:b1:fe:b2:33:a3:b5:57:fb:5b:f0:22:7e:d1:6f: 11:09:48:43:a1:bc:ae:1e:2f:cc:25:06:dc:dc:fa: 87:95:c5:4d:23:44:e1:a8:42:03:35:c1:ef:e2:34: 76:61:b2:11:9d:e7:a2:b4:5a:49:14:f3:59:19:75: 86:fd:37:a0:ac:ed:83:39:9a:81:2f:91:cd:8f:ee: 2a:07:e0:c6:3e:06:24:71:d6:a2:a3:12:82:df:59: 3d:d4:e2:33:fe:2d:bd:a1:d7:5b:b3:63:2f:89:03: 9f:23:79:b4:7e:44:31:b9:9d:44:b6:6f:62:63:b3: 84:c1:95:49:20:d5:ab:a9:a3:74:ab:0c:54:c7:52: bf:49:c1:47:dc:3d:ce:01:af:8c:76:53:ed:90:9d: 6a:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3D:A5:C2:D1:EC:09:DF:00:88:63:C7:88:55:15:16:96:E9:22:3B X509v3 Authority Key Identifier: keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a383a3a2f34382d3438203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:36e0:8::/48 Signature Algorithm: sha256WithRSAEncryption 83:47:43:8f:98:80:3f:4a:91:d0:b9:05:67:7a:35:e5:01:ef: 0e:ac:c7:e9:7c:09:0b:f9:93:2c:c8:47:9f:c8:eb:ea:e4:3d: fe:5d:cc:7c:b6:3c:33:5c:a7:ab:25:89:ab:fd:bb:c7:b3:c2: 0b:e4:59:b7:17:56:4b:07:69:35:22:d1:63:16:c4:fb:0e:a4: 38:72:71:1c:c8:ca:fb:74:92:10:70:06:66:ec:ba:f1:54:a9: 07:2d:15:fe:6c:4b:1f:45:a8:40:58:bf:07:7a:9b:fb:83:43: 05:19:96:04:7a:c4:c1:d0:d1:e8:1a:34:fd:04:37:f6:b6:d8: c9:4f:b0:c1:c6:60:23:74:c6:98:ab:67:4c:33:17:13:d8:72: f0:b5:1c:30:90:78:a2:13:cd:e7:36:d3:41:d2:53:56:1d:4b: 8d:32:73:df:99:43:58:ba:2a:17:74:e3:8a:1d:5e:3b:d4:95: cd:2b:39:52:6e:ab:3a:de:b9:04:f0:8f:d4:d3:e0:d6:22:08: e7:ab:0e:3e:52:36:21:73:f4:41:b5:31:8b:85:13:7a:d3:a2: 24:c8:c8:92:fa:97:d4:32:76:a8:d5:e7:30:b4:50:d5:63:a0: 51:23:06:b1:89:0c:4e:ec:96:b4:a1:b4:90:33:69:42:d7:5c: c8:a7:18:df -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUbvKypUZrGh+y7EaI26y3j4n+kpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5 NTM1M0VDNjAeFw0yNjA3MDEwOTI2MTZaFw0yNzA2MzAwOTMxMTZaMDMxMTAvBgNV BAMTKEYxM0RBNUMyRDFFQzA5REYwMDg4NjNDNzg4NTUxNTE2OTZFOTIyM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaTZTvTjT4Obvl9ru59inB993b mKqliHXhFdwmJGtpHAl0Ze7Jo95ilV4/b5+5++xqruz1+uQ6GsDZfmqFidjL05Zi cOrkNV6PaIDdyi024cXRbbWdForSGh/yUQZvUJMM3YYC024IO46x/rIzo7VX+1vw In7RbxEJSEOhvK4eL8wlBtzc+oeVxU0jROGoQgM1we/iNHZhshGd56K0WkkU81kZ dYb9N6Cs7YM5moEvkc2P7ioH4MY+BiRx1qKjEoLfWT3U4jP+Lb2h11uzYy+JA58j ebR+RDG5nUS2b2Jjs4TBlUkg1aupo3SrDFTHUr9JwUfcPc4Br4x2U+2QnWopAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU8T2lwtHsCd8AiGPHiFUVFpbpIjswHwYDVR0j BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0 NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMjQwNTEzLzAvMzIzNDMwMzIz YTMzMzY2NTMwM2EzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMxMzkz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQCNuAACDANBgkqhkiG9w0BAQsFAAOCAQEAg0dDj5iAP0qR 0LkFZ3o15QHvDqzH6XwJC/mTLMhHn8jr6uQ9/l3MfLY8M1ynqyWJq/27x7PCC+RZ txdWSwdpNSLRYxbE+w6kOHJxHMjK+3SSEHAGZuy68VSpBy0V/mxLH0WoQFi/B3qb +4NDBRmWBHrEwdDR6Bo0/QQ39rbYyU+wwcZgI3TGmKtnTDMXE9hy8LUcMJB4ohPN 5zbTQdJTVh1LjTJz35lDWLoqF3Tjih1eO9SVzSs5Um6rOt65BPCP1NPg1iII56sO PlI2IXP0QbUxi4UTetOiJMjIkvqX1DJ2qNXnMLRQ1WOgUSMGsYkMTuyWtKG0kDNp QtdcyKcY3w== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:23 2026 by rpki-client