$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a613a3a2f34382d3438203d3e20313336313935.roa File: 323430323a333665303a613a3a2f34382d3438203d3e20313336313935.roa (raw, json) Hash identifier: IS9J7CTGNPQca38W5utkBa//1+iclYKFrZgndP2muYQ= Subject key identifier: 34:17:BA:96:DE:48:5D:78:77:7F:10:3B:D7:17:A9:D0:39:4B:B0:5E Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Certificate serial: 037C4CE67A5218886C9B528DB86CF82958619D84 Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a613a3a2f34382d3438203d3e20313336313935.roa Signing time: Wed 01 Jul 2026 09:31:17 +0000 ROA not before: Wed 01 Jul 2026 09:26:17 +0000 ROA not after: Wed 30 Jun 2027 09:31:17 +0000 asID: 136195 IP address blocks: 2402:36e0:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:7c:4c:e6:7a:52:18:88:6c:9b:52:8d:b8:6c:f8:29:58:61:9d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6 Validity Not Before: Jul 1 09:26:17 2026 GMT Not After : Jun 30 09:31:17 2027 GMT Subject: CN=3417BA96DE485D78777F103BD717A9D0394BB05E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:62:c0:18:37:9c:13:c0:aa:34:2e:a8:83:eb: 35:7b:28:0f:97:29:ce:2d:e9:0c:32:5d:82:0d:54: ec:ed:c2:4f:bd:46:aa:7c:40:5c:9e:c8:5d:ed:df: 27:45:e1:91:0e:c3:92:e4:9b:c6:3a:55:4b:f4:1b: 58:db:e0:f1:7f:6c:63:d2:ef:d1:43:c7:7b:86:07: d4:a5:38:ee:ab:9d:5f:d3:81:de:16:94:4c:8c:0b: d1:cf:90:8b:9d:4a:83:99:a8:e2:80:e9:94:e0:69: ca:97:76:5a:87:be:db:3a:c7:de:63:9c:b2:d6:9e: f1:1b:58:a2:fe:ed:68:e6:aa:53:09:62:10:ae:f5: b5:77:2d:28:5a:50:25:75:cf:8a:6c:69:20:a5:2f: 94:36:30:23:5d:10:34:26:f6:d5:4a:bf:7e:83:51: 93:bc:5e:53:74:60:bc:5f:10:44:f1:18:c2:35:12: cd:95:95:e1:35:24:5f:6f:44:c0:0c:78:f9:57:1d: 29:51:55:01:1f:35:e7:43:a2:e9:d8:96:41:bb:75: e9:47:85:2f:4b:64:8a:2e:65:10:43:72:05:e7:47: 27:ce:39:91:79:e3:26:75:ed:23:25:24:99:d6:fd: 79:38:45:3c:47:33:b4:76:d3:47:df:83:93:77:ba: 9f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:17:BA:96:DE:48:5D:78:77:7F:10:3B:D7:17:A9:D0:39:4B:B0:5E X509v3 Authority Key Identifier: keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/323430323a333665303a613a3a2f34382d3438203d3e20313336313935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:36e0:a::/48 Signature Algorithm: sha256WithRSAEncryption 34:52:d8:90:b3:7e:21:af:b2:7a:8e:64:b1:ee:a1:98:29:2e: 4f:a2:1b:75:fd:72:5c:b5:62:0a:af:e1:9c:d9:76:d8:19:db: 1f:ba:c2:84:a2:d2:68:c9:52:e4:49:1e:85:c2:13:81:ed:5c: 67:cf:33:6d:95:a7:e1:e9:7e:ea:08:89:75:0e:fb:08:67:3a: 05:f8:7a:37:a7:33:50:d1:aa:81:9d:5a:27:83:7a:bc:6d:c0: 0d:72:b1:4d:aa:7f:61:ac:fe:a2:aa:4a:9a:e2:52:72:5d:6e: 4a:e1:5c:e7:66:eb:09:16:da:b8:9b:63:05:aa:66:9e:94:83: a9:ca:0b:a8:02:4d:c2:07:2e:ab:bf:41:40:fe:7f:89:51:91: 09:02:09:76:46:15:2d:89:82:8e:c5:27:31:69:4b:1d:d2:cf: ac:a6:83:90:3a:e9:9c:22:16:05:5f:3f:15:d5:43:dc:d0:e7: 91:8b:da:f9:7b:15:a5:8e:b2:77:7b:80:0a:c5:2a:ce:a2:1e: 27:60:b4:04:48:14:86:26:21:c5:70:92:ac:37:89:f4:29:c3: 1c:13:2e:c6:37:51:4c:52:72:9c:45:65:a9:da:09:2f:17:d1: 2b:8b:dd:12:ae:b3:9d:69:c8:4c:6b:75:59:c4:75:44:5f:6b: f3:d5:b3:3a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUA3xM5npSGIhsm1KNuGz4KVhhnYQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5 NTM1M0VDNjAeFw0yNjA3MDEwOTI2MTdaFw0yNzA2MzAwOTMxMTdaMDMxMTAvBgNV BAMTKDM0MTdCQTk2REU0ODVENzg3NzdGMTAzQkQ3MTdBOUQwMzk0QkIwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnYsAYN5wTwKo0LqiD6zV7KA+X Kc4t6QwyXYINVOztwk+9Rqp8QFyeyF3t3ydF4ZEOw5Lkm8Y6VUv0G1jb4PF/bGPS 79FDx3uGB9SlOO6rnV/Tgd4WlEyMC9HPkIudSoOZqOKA6ZTgacqXdlqHvts6x95j nLLWnvEbWKL+7WjmqlMJYhCu9bV3LShaUCV1z4psaSClL5Q2MCNdEDQm9tVKv36D UZO8XlN0YLxfEETxGMI1Es2VleE1JF9vRMAMePlXHSlRVQEfNedDounYlkG7delH hS9LZIouZRBDcgXnRyfOOZF54yZ17SMlJJnW/Xk4RTxHM7R200ffg5N3up8FAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUNBe6lt5IXXh3fxA71xep0DlLsF4wHwYDVR0j BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0 NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMjQwNTEzLzAvMzIzNDMwMzIz YTMzMzY2NTMwM2E2MTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNjMxMzkz NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQCNuAACjANBgkqhkiG9w0BAQsFAAOCAQEANFLYkLN+Ia+y eo5kse6hmCkuT6Ibdf1yXLViCq/hnNl22BnbH7rChKLSaMlS5EkehcITge1cZ88z bZWn4el+6giJdQ77CGc6Bfh6N6czUNGqgZ1aJ4N6vG3ADXKxTap/Yaz+oqpKmuJS cl1uSuFc52brCRbauJtjBapmnpSDqcoLqAJNwgcuq79BQP5/iVGRCQIJdkYVLYmC jsUnMWlLHdLPrKaDkDrpnCIWBV8/FdVD3NDnkYva+XsVpY6yd3uACsUqzqIeJ2C0 BEgUhiYhxXCSrDeJ9CnDHBMuxjdRTFJynEVlqdoJLxfRK4vdEq6znWnITGt1WcR1 RF9r89WzOg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:25 2026 by rpki-client