$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31323a3a2f34382d3438203d3e203536303430.roa File: 323430313a373163303a31323a3a2f34382d3438203d3e203536303430.roa (raw, json) Hash identifier: XiwqRLKR9sKiu83ZEbZ2TPYO4yZID4j8S/i7bfLXm+s= Subject key identifier: E9:A7:9C:01:AA:77:93:21:2D:79:8C:46:1E:8B:46:4F:83:BE:92:FA Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 56F942008B1F02716FBD0A375A8092D2D8B04297 Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31323a3a2f34382d3438203d3e203536303430.roa Signing time: Fri 10 Apr 2026 03:00:34 +0000 ROA not before: Fri 10 Apr 2026 02:55:34 +0000 ROA not after: Fri 09 Apr 2027 03:00:34 +0000 asID: 56040 IP address blocks: 2401:71c0:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f9:42:00:8b:1f:02:71:6f:bd:0a:37:5a:80:92:d2:d8:b0:42:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 02:55:34 2026 GMT Not After : Apr 9 03:00:34 2027 GMT Subject: CN=E9A79C01AA7793212D798C461E8B464F83BE92FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:75:44:1c:1b:de:33:c0:7a:a4:02:8d:aa:29: ba:1c:2c:08:03:e7:c4:d2:3d:15:26:e1:8c:80:04: b3:9e:b0:1b:51:52:11:75:ca:f8:cb:24:dc:6a:95: b0:a4:f5:51:29:73:d5:c4:65:16:d1:c2:09:98:9f: de:85:c9:dd:6b:35:4d:df:3c:5b:cc:32:25:a2:f3: eb:ea:07:b6:42:c5:1e:7b:f1:ed:34:e1:68:35:ee: 54:90:75:b3:26:5f:cc:b2:a5:05:cf:0e:c8:17:4b: 63:8d:78:70:62:54:d8:99:98:c2:74:ad:54:01:c9: 59:a7:7e:2f:c7:bb:ed:aa:53:1a:b7:5f:6a:3c:c8: 1b:e9:bc:30:0d:dd:b4:d1:ba:0e:95:02:23:45:73: 78:63:ce:9d:a1:ab:19:20:96:fd:9e:e6:ee:18:ac: db:58:15:a6:8f:33:e5:70:e5:ba:84:53:6b:a1:46: 27:81:e4:94:f8:a6:8c:5e:a4:21:14:32:ee:5d:73: 7e:1f:41:81:56:05:67:c5:68:8c:77:da:c2:2a:82: a5:87:6b:19:a9:f9:bd:3c:c6:31:12:c4:5c:7e:e4: b5:92:f6:bb:a4:15:a4:41:a7:ec:62:14:67:be:8c: 0e:57:8a:8c:4c:7f:06:6b:4c:0c:13:05:9e:ae:88: 22:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:A7:9C:01:AA:77:93:21:2D:79:8C:46:1E:8B:46:4F:83:BE:92:FA X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31323a3a2f34382d3438203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0:12::/48 Signature Algorithm: sha256WithRSAEncryption 09:ca:a3:e5:d3:c6:19:27:c7:d7:65:a2:5d:e5:f0:36:d1:96: cd:0f:35:65:75:55:a9:5e:2c:9f:1a:6f:4d:bc:21:28:92:b7: 13:5a:3d:76:eb:92:ff:d1:f4:6f:7d:9d:15:aa:f7:ee:6f:64: 7a:e0:db:75:df:8e:0a:d1:b6:fe:64:75:d4:fd:24:d5:c9:60: 0e:6c:ab:1b:bd:de:f2:d5:70:5c:52:3f:47:05:3f:c8:11:84: 9b:7b:21:66:2b:98:da:8e:23:52:2a:30:23:14:24:2b:b1:58: e8:3e:e3:24:a4:7c:0f:4b:bd:5d:41:de:af:f9:35:ed:58:ee: 33:23:f6:ce:de:f6:b4:2f:67:da:15:84:d9:00:b9:56:cc:62: dc:0c:e0:2a:a7:30:4f:42:74:1d:b1:86:81:2f:ee:df:0c:c7: c9:c3:e4:6a:56:ac:fe:76:d4:95:96:40:62:b4:7e:3c:c8:e5: 2f:87:0a:36:9a:df:ce:09:ca:9e:17:39:16:81:da:24:45:03: f2:7f:3e:2d:cd:d0:a1:8a:9a:d5:8e:a4:96:8d:27:ec:6b:0f: e0:45:b4:30:14:88:75:a2:68:b8:2c:ea:06:5c:d3:5d:ee:5b: 0d:b9:09:96:3c:e0:e3:c8:4c:c5:18:ce:7f:ba:3d:6d:8f:83: 01:91:41:6c -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUVvlCAIsfAnFvvQo3WoCS0tiwQpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwMjU1MzRaFw0yNzA0MDkwMzAwMzRaMDMxMTAvBgNV BAMTKEU5QTc5QzAxQUE3NzkzMjEyRDc5OEM0NjFFOEI0NjRGODNCRTkyRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjdUQcG94zwHqkAo2qKbocLAgD 58TSPRUm4YyABLOesBtRUhF1yvjLJNxqlbCk9VEpc9XEZRbRwgmYn96Fyd1rNU3f PFvMMiWi8+vqB7ZCxR578e004Wg17lSQdbMmX8yypQXPDsgXS2ONeHBiVNiZmMJ0 rVQByVmnfi/Hu+2qUxq3X2o8yBvpvDAN3bTRug6VAiNFc3hjzp2hqxkglv2e5u4Y rNtYFaaPM+Vw5bqEU2uhRieB5JT4poxepCEUMu5dc34fQYFWBWfFaIx32sIqgqWH axmp+b08xjESxFx+5LWS9rukFaRBp+xiFGe+jA5XioxMfwZrTAwTBZ6uiCJVAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU6aecAap3kyEteYxGHotGT4O+kvowHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzIzNDMwMzEz YTM3MzE2MzMwM2EzMTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQBccAAEjANBgkqhkiG9w0BAQsFAAOCAQEACcqj5dPGGSfH 12WiXeXwNtGWzQ81ZXVVqV4snxpvTbwhKJK3E1o9duuS/9H0b32dFar37m9keuDb dd+OCtG2/mR11P0k1clgDmyrG73e8tVwXFI/RwU/yBGEm3shZiuY2o4jUiowIxQk K7FY6D7jJKR8D0u9XUHer/k17VjuMyP2zt72tC9n2hWE2QC5Vsxi3AzgKqcwT0J0 HbGGgS/u3wzHycPkalas/nbUlZZAYrR+PMjlL4cKNprfzgnKnhc5FoHaJEUD8n8+ Lc3QoYqa1Y6klo0n7GsP4EW0MBSIdaJouCzqBlzTXe5bDbkJljzg48hMxRjOf7o9 bY+DAZFBbA== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:54 2026 by rpki-client