$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa File: 323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa (raw, json) Hash identifier: Q97AWItuyEDBW/W/cEeAyonUwbdNoWZ8XW2O0o+rt28= Subject key identifier: 49:25:6A:FC:EB:99:8B:AF:5A:43:1F:E0:5A:82:89:0F:C5:21:60:9B Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 15EEBED37313827422A2EFCAE9E131450C1468A3 Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa Signing time: Thu 04 Jun 2026 02:25:02 +0000 ROA not before: Thu 04 Jun 2026 02:20:02 +0000 ROA not after: Thu 03 Jun 2027 02:25:02 +0000 asID: 151311 IP address blocks: 2401:71c0:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 02:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ee:be:d3:73:13:82:74:22:a2:ef:ca:e9:e1:31:45:0c:14:68:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Jun 4 02:20:02 2026 GMT Not After : Jun 3 02:25:02 2027 GMT Subject: CN=49256AFCEB998BAF5A431FE05A82890FC521609B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3e:ea:dc:c9:90:db:33:15:5b:90:a4:f6:1d: 0d:ec:ec:80:95:5d:d8:cc:af:6f:76:2c:a7:a8:e2: 5c:bb:00:32:50:91:70:05:ed:68:af:87:43:40:ec: 15:e5:01:b9:a0:da:e8:1a:23:de:dc:d9:52:5d:9b: bf:e5:5c:89:4d:97:15:c0:de:bc:b7:73:b3:19:9f: c0:ca:3c:1e:7b:e6:20:ce:b2:a2:ce:44:e0:c9:90: cb:24:cd:2c:36:6b:35:53:69:37:04:28:08:43:4a: d7:61:fd:29:3d:3d:de:45:9b:d2:99:7e:24:d6:51: b7:c0:ee:e7:5b:cf:e3:b3:ef:06:1f:4f:e9:a3:57: 5a:2e:22:20:8a:eb:e0:59:86:d4:c5:5b:58:3e:b7: 08:d6:52:c4:e0:3c:bf:3d:f5:e1:40:5e:f0:9a:9a: 03:d3:2c:4c:05:49:75:4a:65:ba:3a:ae:06:5c:08: ef:5b:5d:8d:2d:8e:e9:b7:cb:e4:86:e1:aa:fb:c6: 43:6a:56:1c:45:a1:74:a2:4c:7b:6a:16:0b:85:99: 23:f9:1d:12:7b:9d:f3:ed:86:b3:4f:8d:4d:12:0e: 06:52:03:4e:6a:c4:40:6e:80:1e:19:c0:d6:48:a6: 2a:c9:02:36:d2:36:af:15:d2:e7:7c:25:36:5c:4b: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:25:6A:FC:EB:99:8B:AF:5A:43:1F:E0:5A:82:89:0F:C5:21:60:9B X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31343a3a2f34382d3438203d3e20313531333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0:14::/48 Signature Algorithm: sha256WithRSAEncryption 98:b6:f5:05:42:bf:77:7d:d9:3d:b1:f0:d4:38:60:da:f6:c3: 47:2c:28:c8:c0:52:fb:17:2c:cc:41:56:62:c0:90:4c:85:f0: 35:19:fa:4b:03:b9:a1:50:27:84:1c:6d:6e:0c:bf:e2:81:f9: 25:1a:8a:1a:ef:6a:f2:09:db:d2:5c:7d:df:59:09:12:5c:fd: ca:8f:be:16:5f:ee:3b:60:e7:41:f0:02:70:c3:b4:11:7a:62: 79:b4:30:3d:3c:a9:1e:ef:6f:7a:0f:f6:9f:e3:6b:7d:59:fc: 84:4f:81:27:00:b3:36:25:a2:7c:1e:b9:69:0d:32:e8:0c:0c: 71:cf:d9:ca:8c:4e:62:b4:02:eb:37:28:80:92:6a:f2:3b:81: 94:5d:29:66:b0:2d:2b:17:f4:7d:f1:db:19:90:70:34:3f:50: 09:05:3d:8b:12:76:84:f6:c8:07:6c:ff:1a:29:2f:8a:47:16: 82:63:a5:63:30:a6:66:17:04:6e:55:29:4c:06:ea:47:cb:3d: 06:49:45:8e:74:a1:51:9c:e6:2b:2c:93:71:51:0d:15:9a:e6: 5b:43:31:8a:d7:85:bc:d5:b7:fd:48:01:a6:f5:e4:1e:24:5f: b6:66:35:7b:29:25:4f:77:5c:61:13:12:44:5a:89:04:da:38: eb:e1:bd:62 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUFe6+03MTgnQiou/K6eExRQwUaKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA2MDQwMjIwMDJaFw0yNzA2MDMwMjI1MDJaMDMxMTAvBgNV BAMTKDQ5MjU2QUZDRUI5OThCQUY1QTQzMUZFMDVBODI4OTBGQzUyMTYwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKPurcyZDbMxVbkKT2HQ3s7ICV XdjMr292LKeo4ly7ADJQkXAF7Wivh0NA7BXlAbmg2ugaI97c2VJdm7/lXIlNlxXA 3ry3c7MZn8DKPB575iDOsqLORODJkMskzSw2azVTaTcEKAhDStdh/Sk9Pd5Fm9KZ fiTWUbfA7udbz+Oz7wYfT+mjV1ouIiCK6+BZhtTFW1g+twjWUsTgPL899eFAXvCa mgPTLEwFSXVKZbo6rgZcCO9bXY0tjum3y+SG4ar7xkNqVhxFoXSiTHtqFguFmSP5 HRJ7nfPthrNPjU0SDgZSA05qxEBugB4ZwNZIpirJAjbSNq8V0ud8JTZcS3EJAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUSSVq/OuZi69aQx/gWoKJD8UhYJswHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzIzNDMwMzEz YTM3MzE2MzMwM2EzMTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNTMxMzMz MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJAFxwAAUMA0GCSqGSIb3DQEBCwUAA4IBAQCYtvUFQr93 fdk9sfDUOGDa9sNHLCjIwFL7FyzMQVZiwJBMhfA1GfpLA7mhUCeEHG1uDL/igfkl Gooa72ryCdvSXH3fWQkSXP3Kj74WX+47YOdB8AJww7QRemJ5tDA9PKke7296D/af 42t9WfyET4EnALM2JaJ8HrlpDTLoDAxxz9nKjE5itALrNyiAkmryO4GUXSlmsC0r F/R98dsZkHA0P1AJBT2LEnaE9sgHbP8aKS+KRxaCY6VjMKZmFwRuVSlMBupHyz0G SUWOdKFRnOYrLJNxUQ0VmuZbQzGK14W81bf9SAGm9eQeJF+2ZjV7KSVPd1xhExJE WokE2jjr4b1i -----END CERTIFICATE-----Generated at Fri Jun 12 06:45:15 2026 by rpki-client