$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094547655956103169/0/323430313a36303a3a2f33322d3332203d3e2030.roa File: 323430313a36303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: 71m86gm6yxnGiaqfSvrzEvHzssQUJiLPa3d4KKP4Eyw= Subject key identifier: FD:0E:21:66:EE:A0:57:13:38:FD:6F:8A:41:87:0D:4F:C5:1C:2A:CF Certificate issuer: /CN=6F998E710C20D2A9D256034668026243E86F9239 Certificate serial: 642C9753E075ABB8EB57D5CD267522DFD559914F Authority key identifier: 6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/323430313a36303a3a2f33322d3332203d3e2030.roa Signing time: Thu 09 Apr 2026 09:13:01 +0000 ROA not before: Thu 09 Apr 2026 09:08:01 +0000 ROA not after: Thu 08 Apr 2027 09:13:01 +0000 asID: 0 IP address blocks: 2401:60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 23:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:2c:97:53:e0:75:ab:b8:eb:57:d5:cd:26:75:22:df:d5:59:91:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6F998E710C20D2A9D256034668026243E86F9239 Validity Not Before: Apr 9 09:08:01 2026 GMT Not After : Apr 8 09:13:01 2027 GMT Subject: CN=FD0E2166EEA0571338FD6F8A41870D4FC51C2ACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:81:bf:ff:2d:aa:61:65:5d:8b:fe:f4:20:23: bd:b8:a2:bd:83:35:7e:dc:8e:93:f3:8c:4c:3b:d4: e4:c5:5a:db:44:d3:1c:48:40:c6:dc:45:35:0b:c8: b0:cf:d3:36:70:0a:f2:8e:eb:cb:a7:92:5f:e5:49: af:1a:f2:87:48:a7:ad:a2:8b:01:a8:81:c6:9f:69: c5:af:d4:d7:27:9a:53:c2:4d:2c:00:e0:a5:d4:24: 24:a5:93:a5:4e:d4:52:dc:4e:74:32:3f:05:cc:40: b5:35:4d:a7:02:08:b2:1d:8b:9e:f2:72:0f:2f:65: b5:da:ba:7f:21:35:5f:5a:4d:79:2a:35:12:79:7b: 0c:cd:4d:f6:fa:d7:b7:29:ab:3e:87:7a:7a:ed:22: 19:d1:31:13:7c:96:43:ff:43:65:d0:60:69:3a:9c: cd:43:20:2b:d5:94:37:bc:d0:68:33:66:a0:c6:e8: 21:ee:87:96:c1:ac:84:78:58:21:4c:de:21:4d:1c: 8f:d6:ef:17:89:9a:6e:74:ed:ed:56:c7:a6:8b:10: 47:22:b0:f8:d6:f4:af:aa:00:fe:f1:a2:cb:a6:33: c7:dd:a1:6a:59:f5:60:d0:66:56:fc:a4:01:7e:a5: 9f:de:73:fd:93:d7:11:47:8e:c8:73:47:ad:e9:61: 3c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0E:21:66:EE:A0:57:13:38:FD:6F:8A:41:87:0D:4F:C5:1C:2A:CF X509v3 Authority Key Identifier: keyid:6F:99:8E:71:0C:20:D2:A9:D2:56:03:46:68:02:62:43:E8:6F:92:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/6F998E710C20D2A9D256034668026243E86F9239.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F998E710C20D2A9D256034668026243E86F9239.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094547655956103169/0/323430313a36303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:60::/32 Signature Algorithm: sha256WithRSAEncryption 0d:d0:7d:07:bc:8d:62:78:1a:c7:b2:bb:62:1a:2d:4c:96:3c: 10:6a:b6:68:0c:a3:0a:ac:c3:50:fa:00:63:76:98:6e:81:23: f4:34:27:c1:2f:52:ea:c2:0f:29:f9:e2:97:b2:a6:71:96:da: 1e:b1:e0:bd:63:2c:71:81:7b:56:79:56:3b:36:7d:d9:5d:9b: ff:e8:f8:a1:38:81:95:d8:7a:d2:6f:4c:af:ea:9b:51:9f:1e: 20:c5:3c:38:0a:c2:fe:70:14:cb:02:31:b7:07:43:a4:3e:74: 8f:5c:9d:6b:cc:b2:1b:bb:17:25:ce:cd:2c:d3:fc:2d:a2:e1: 89:5b:1f:93:3c:00:00:d2:5e:6b:fd:c0:75:78:97:27:3e:62: 2f:d3:10:5f:7c:85:8e:32:48:89:5e:bc:7a:2d:b0:68:fc:0a: 99:71:1e:d5:89:66:f3:47:a8:e6:27:eb:ec:d9:56:f7:0b:08: 0b:64:9c:8a:be:02:b1:22:f8:af:48:da:a2:42:78:22:21:09: 4c:10:87:93:7e:ad:5f:94:4f:e3:45:72:43:31:54:7a:60:d9: c3:a3:1b:1c:ac:d2:0d:9a:ce:2e:b8:70:ba:8a:74:8a:e0:48: e8:0d:63:f5:f2:ef:1d:2a:fb:d3:d5:53:ad:ee:b1:89:05:cf: fc:6e:d4:b0 -----BEGIN CERTIFICATE----- MIIE+zCCA+OgAwIBAgIUZCyXU+B1q7jrV9XNJnUi39VZkU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNF ODZGOTIzOTAeFw0yNjA0MDkwOTA4MDFaFw0yNzA0MDgwOTEzMDFaMDMxMTAvBgNV BAMTKEZEMEUyMTY2RUVBMDU3MTMzOEZENkY4QTQxODcwRDRGQzUxQzJBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCegb//LaphZV2L/vQgI724or2D NX7cjpPzjEw71OTFWttE0xxIQMbcRTULyLDP0zZwCvKO68unkl/lSa8a8odIp62i iwGogcafacWv1NcnmlPCTSwA4KXUJCSlk6VO1FLcTnQyPwXMQLU1TacCCLIdi57y cg8vZbXaun8hNV9aTXkqNRJ5ewzNTfb617cpqz6HenrtIhnRMRN8lkP/Q2XQYGk6 nM1DICvVlDe80GgzZqDG6CHuh5bBrIR4WCFM3iFNHI/W7xeJmm507e1Wx6aLEEci sPjW9K+qAP7xosumM8fdoWpZ9WDQZlb8pAF+pZ/ec/2T1xFHjshzR63pYTx/AgMB AAGjggIFMIICATAdBgNVHQ4EFgQU/Q4hZu6gVxM4/W+KQYcNT8UcKs8wHwYDVR0j BBgwFoAUb5mOcQwg0qnSVgNGaAJiQ+hvkjkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDU0NzY1NTk1NjEwMzE2OS8wLzZGOTk4RTcxMEMyMEQyQTlEMjU2MDM0NjY4MDI2 MjQzRTg2RjkyMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkY5OThFNzEwQzIwRDJBOUQyNTYwMzQ2NjgwMjYyNDNFODZGOTIzOS5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTQ1NDc2NTU5NTYxMDMxNjkvMC8zMjM0MzAzMTNhMzYz MDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAEAYDANBgkq hkiG9w0BAQsFAAOCAQEADdB9B7yNYngax7K7YhotTJY8EGq2aAyjCqzDUPoAY3aY boEj9DQnwS9S6sIPKfnil7KmcZbaHrHgvWMscYF7VnlWOzZ92V2b/+j4oTiBldh6 0m9Mr+qbUZ8eIMU8OArC/nAUywIxtwdDpD50j1yda8yyG7sXJc7NLNP8LaLhiVsf kzwAANJea/3AdXiXJz5iL9MQX3yFjjJIiV68ei2waPwKmXEe1Ylm80eo5ifr7NlW 9wsIC2Scir4CsSL4r0jaokJ4IiEJTBCHk36tX5RP40VyQzFUemDZw6MbHKzSDZrO Lrhwuop0iuBI6A1j9fLvHSr709VTre6xiQXP/G7UsA== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:30 2026 by rpki-client