$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31343a3a2f34382d3438203d3e203536303430.roa File: 323430313a373163303a31343a3a2f34382d3438203d3e203536303430.roa (raw, json) Hash identifier: yTM+1LqbhmntxQdQu1uu0UkmKP1vHFK/Jrbf9D5hUMs= Subject key identifier: 96:24:46:AB:BD:09:1C:89:05:91:73:C6:A9:89:91:E5:EE:EC:5C:3F Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 5305E16B63395D62F74746C5F817AB7A300F645C Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31343a3a2f34382d3438203d3e203536303430.roa Signing time: Fri 10 Apr 2026 03:00:51 +0000 ROA not before: Fri 10 Apr 2026 02:55:51 +0000 ROA not after: Fri 09 Apr 2027 03:00:51 +0000 asID: 56040 IP address blocks: 2401:71c0:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:05:e1:6b:63:39:5d:62:f7:47:46:c5:f8:17:ab:7a:30:0f:64:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 02:55:51 2026 GMT Not After : Apr 9 03:00:51 2027 GMT Subject: CN=962446ABBD091C89059173C6A98991E5EEEC5C3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:64:ac:81:25:32:9e:1f:51:de:ce:5d:6a:b9: 82:f3:f5:ab:a4:19:04:0b:c8:dc:0c:18:4d:04:5a: 6d:18:f7:47:c4:db:4d:94:39:9f:79:f2:17:c8:68: c1:40:f9:80:c5:fd:c2:22:ab:af:2a:81:a8:b7:d9: b7:26:76:46:86:ca:c9:8a:18:f5:46:3d:fb:89:a5: 8f:87:df:e5:66:64:24:e3:74:e5:45:55:da:03:d1: d7:8b:51:39:95:1f:2c:7d:7d:aa:96:b5:29:e9:b3: 51:87:73:9b:95:22:4c:f2:26:74:cc:3b:ec:9f:db: 35:c8:2e:7d:3c:c8:41:a5:fa:e7:23:13:61:0e:18: 68:87:07:07:65:40:46:9c:f1:a6:71:69:65:c9:f8: f1:06:42:22:b5:95:8d:ca:a6:1b:e7:d4:23:41:29: 07:97:e2:98:51:49:d2:34:e9:50:1e:ba:72:bf:d8: 68:bd:42:54:78:d2:e5:18:b5:29:a0:80:65:21:74: 31:c8:31:74:b0:7b:16:f9:a2:47:7e:45:f3:ec:4d: a7:34:e0:ac:83:fc:35:db:52:bc:72:97:aa:e5:82: 47:56:90:56:c5:46:5e:25:db:4d:01:e1:25:01:63: 04:b0:3e:54:a6:33:1c:59:e8:9e:ed:38:15:6d:7f: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:24:46:AB:BD:09:1C:89:05:91:73:C6:A9:89:91:E5:EE:EC:5C:3F X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a31343a3a2f34382d3438203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0:14::/48 Signature Algorithm: sha256WithRSAEncryption d2:57:b5:a1:2f:61:22:15:7d:4c:32:c6:59:a8:45:0c:fa:d8: 88:4e:b3:15:44:d6:9a:c5:e0:16:c5:7d:87:ad:a7:c1:e3:6b: 1e:12:13:e6:54:ba:38:48:1b:c3:64:00:7e:a0:a3:3a:bf:86: ab:ea:72:ca:fe:79:77:85:b9:ef:d9:ab:7c:df:57:86:d6:b6: db:31:1d:f1:33:b5:2e:ab:e4:b3:3c:95:47:28:95:77:1f:0b: 60:23:2a:0d:b9:21:b7:15:bb:f2:f0:47:7a:5e:d0:d3:7b:f2: a0:54:9d:1d:f8:7d:b0:11:b2:08:ce:2a:f0:35:9a:94:6e:2a: 0a:5b:b1:cf:48:dc:2c:cd:08:09:f0:fd:5e:4b:b0:9c:ec:b8: 9e:94:fe:a5:88:3e:08:44:22:79:52:0b:44:7a:71:ba:f6:58: b6:ca:5e:10:82:ce:07:9c:2f:95:47:bb:c5:80:b0:f8:02:3d: eb:7a:5f:f2:e4:74:74:1c:43:c9:9b:f4:cd:a3:a5:76:b3:b1: e3:e7:6d:12:28:2f:21:05:5c:bd:92:76:76:bb:ae:c7:fd:f1: d3:0f:df:45:86:83:08:8a:d9:28:83:35:73:f6:dc:18:a2:0b: dc:74:d7:84:8d:b4:20:a0:fc:b1:d5:a5:79:bf:3a:5f:11:87: 7a:14:d0:d0 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUUwXha2M5XWL3R0bF+BerejAPZFwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwMjU1NTFaFw0yNzA0MDkwMzAwNTFaMDMxMTAvBgNV BAMTKDk2MjQ0NkFCQkQwOTFDODkwNTkxNzNDNkE5ODk5MUU1RUVFQzVDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZKyBJTKeH1Hezl1quYLz9auk GQQLyNwMGE0EWm0Y90fE202UOZ958hfIaMFA+YDF/cIiq68qgai32bcmdkaGysmK GPVGPfuJpY+H3+VmZCTjdOVFVdoD0deLUTmVHyx9faqWtSnps1GHc5uVIkzyJnTM O+yf2zXILn08yEGl+ucjE2EOGGiHBwdlQEac8aZxaWXJ+PEGQiK1lY3Kphvn1CNB KQeX4phRSdI06VAeunK/2Gi9QlR40uUYtSmggGUhdDHIMXSwexb5okd+RfPsTac0 4KyD/DXbUrxyl6rlgkdWkFbFRl4l200B4SUBYwSwPlSmMxxZ6J7tOBVtf3GFAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUliRGq70JHIkFkXPGqYmR5e7sXD8wHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzIzNDMwMzEz YTM3MzE2MzMwM2EzMTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQz MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQBccAAFDANBgkqhkiG9w0BAQsFAAOCAQEA0le1oS9hIhV9 TDLGWahFDPrYiE6zFUTWmsXgFsV9h62nweNrHhIT5lS6OEgbw2QAfqCjOr+Gq+py yv55d4W579mrfN9Xhta22zEd8TO1LqvkszyVRyiVdx8LYCMqDbkhtxW78vBHel7Q 03vyoFSdHfh9sBGyCM4q8DWalG4qCluxz0jcLM0ICfD9XkuwnOy4npT+pYg+CEQi eVILRHpxuvZYtspeEILOB5wvlUe7xYCw+AI963pf8uR0dBxDyZv0zaOldrOx4+dt EigvIQVcvZJ2druux/3x0w/fRYaDCIrZKIM1c/bcGKIL3HTXhI20IKD8sdWleb86 XxGHehTQ0A== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:34 2026 by rpki-client