$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a393a3a2f34382d3438203d3e20313336313935.roa File: 323430323a333665303a393a3a2f34382d3438203d3e20313336313935.roa (raw, json) Hash identifier: /PTOamNjvXHRVy5r9kuDLOf6jqHkXtW2o9DcO5BO7sI= Subject key identifier: AA:CD:3A:AF:2F:3C:C2:3D:02:C6:41:73:A3:42:B5:38:32:BA:F0:46 Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Certificate serial: 0B78DB45649D8A638F42BDFD446448E165514409 Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a393a3a2f34382d3438203d3e20313336313935.roa Signing time: Wed 01 Jul 2026 09:31:16 +0000 ROA not before: Wed 01 Jul 2026 09:26:16 +0000 ROA not after: Wed 30 Jun 2027 09:31:16 +0000 asID: 136195 IP address blocks: 2402:36e0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:78:db:45:64:9d:8a:63:8f:42:bd:fd:44:64:48:e1:65:51:44:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Validity Not Before: Jul 1 09:26:16 2026 GMT Not After : Jun 30 09:31:16 2027 GMT Subject: CN=AACD3AAF2F3CC23D02C64173A342B53832BAF046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:db:e3:5e:a4:fd:19:93:bc:c6:b9:c4:3a: 8a:79:0a:6d:29:d4:1d:75:24:09:16:0c:39:8a:81: 73:44:bd:8b:a6:bd:a2:c7:da:49:1d:7d:ea:9e:61: 3f:9e:b4:71:0a:5b:8c:a5:48:5d:b5:4a:5e:1f:1d: 7b:c4:c6:05:c6:57:d5:cd:26:f0:f0:4c:35:10:c0: 97:40:32:f7:67:e0:24:23:ff:05:7a:62:51:76:2f: 0f:91:ae:2f:6b:25:06:a7:f8:26:26:68:bf:51:77: b8:cc:f7:a4:4a:38:83:d8:41:0f:70:6f:f1:34:a4: e5:c8:45:13:c7:b8:06:7a:d9:56:96:1c:bb:a3:41: 0c:fb:be:a1:89:44:c6:5e:0b:4e:49:bb:87:d4:39: 0c:b3:c9:9c:ba:67:3f:b0:c0:95:c6:81:e3:de:8d: 29:d0:9c:d8:21:98:cc:ad:71:62:50:d2:45:26:db: 41:1a:01:8f:db:34:07:b0:0c:d5:81:88:b0:2b:9d: 71:b3:b2:77:73:eb:e9:9c:3c:88:5f:97:d6:cb:89: fe:66:56:b0:7a:15:13:bc:61:4d:aa:6e:2c:be:e0: 0a:d0:77:1f:b0:b0:c5:87:76:81:bc:97:a3:e0:eb: 04:b0:9c:0b:82:4d:b2:2b:04:69:00:e5:83:3e:bb: a0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:CD:3A:AF:2F:3C:C2:3D:02:C6:41:73:A3:42:B5:38:32:BA:F0:46 X509v3 Authority Key Identifier: keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a393a3a2f34382d3438203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:36e0:9::/48 Signature Algorithm: sha256WithRSAEncryption be:c5:25:15:36:1b:6b:ca:25:4c:99:71:48:f8:33:a2:65:34: 2d:fb:c5:e1:0d:72:9b:f7:95:7b:05:17:ce:12:6a:00:d8:7b: b0:2b:e5:88:16:96:6e:6e:23:fa:d6:5e:94:c8:a0:d2:b2:03: 0f:39:d1:0d:a1:cd:ad:3f:c5:f7:2f:72:8b:04:3b:14:d1:0c: f0:34:1a:e7:79:6e:30:7a:63:ec:60:e6:7d:4e:bf:7b:bd:b8: 8c:4b:34:65:95:78:1f:8b:30:2a:cb:24:e8:8e:c4:e1:41:19: a8:f2:37:35:0f:68:56:e5:65:f6:e7:ed:2a:70:5b:59:a1:91: 8b:cd:23:7f:fc:d1:b3:0b:7e:91:e5:89:e8:72:f7:2a:9f:8d: ec:d0:38:c5:12:d2:f5:1c:b2:e3:2f:34:75:c9:af:22:19:67: a2:21:69:d9:62:75:73:26:a0:cb:1e:7c:a5:0c:60:9a:a9:a7: c6:53:18:62:40:be:b5:b4:f3:5f:26:da:b0:0c:40:aa:7e:32: 4b:5f:09:a5:e6:08:55:58:98:31:a3:43:8c:52:54:c8:ee:c6: f9:32:cb:4c:d5:79:97:87:65:b9:99:05:20:08:89:c9:54:7c: f1:8a:aa:af:c1:f2:b8:9c:9d:20:5e:92:38:c9:18:b9:17:2a: 0a:fd:5d:a8 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUC3jbRWSdimOPQr39RGRI4WVRRAkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5 NTM1M0VDNjAeFw0yNjA3MDEwOTI2MTZaFw0yNzA2MzAwOTMxMTZaMDMxMTAvBgNV BAMTKEFBQ0QzQUFGMkYzQ0MyM0QwMkM2NDE3M0EzNDJCNTM4MzJCQUYwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnP9vjXqT9GZO8xrnEOop5Cm0p 1B11JAkWDDmKgXNEvYumvaLH2kkdfeqeYT+etHEKW4ylSF21Sl4fHXvExgXGV9XN JvDwTDUQwJdAMvdn4CQj/wV6YlF2Lw+Rri9rJQan+CYmaL9Rd7jM96RKOIPYQQ9w b/E0pOXIRRPHuAZ62VaWHLujQQz7vqGJRMZeC05Ju4fUOQyzyZy6Zz+wwJXGgePe jSnQnNghmMytcWJQ0kUm20EaAY/bNAewDNWBiLArnXGzsndz6+mcPIhfl9bLif5m VrB6FRO8YU2qbiy+4ArQdx+wsMWHdoG8l6Pg6wSwnAuCTbIrBGkA5YM+u6AJAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUqs06ry88wj0CxkFzo0K1ODK68EYwHwYDVR0j BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0 NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMjQwNTEzLzAvMzIzNDMwMzIz YTMzMzY2NTMwM2EzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMxMzkz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQCNuAACTANBgkqhkiG9w0BAQsFAAOCAQEAvsUlFTYba8ol TJlxSPgzomU0LfvF4Q1ym/eVewUXzhJqANh7sCvliBaWbm4j+tZelMig0rIDDznR DaHNrT/F9y9yiwQ7FNEM8DQa53luMHpj7GDmfU6/e724jEs0ZZV4H4swKssk6I7E 4UEZqPI3NQ9oVuVl9uftKnBbWaGRi80jf/zRswt+keWJ6HL3Kp+N7NA4xRLS9Ryy 4y80dcmvIhlnoiFp2WJ1cyagyx58pQxgmqmnxlMYYkC+tbTzXybasAxAqn4yS18J peYIVViYMaNDjFJUyO7G+TLLTNV5l4dluZkFIAiJyVR88Yqqr8HyuJydIF6SOMkY uRcqCv1dqA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:25 2026 by rpki-client