$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a333a3a2f34382d3438203d3e203536303430.roa File: 323430313a373163303a333a3a2f34382d3438203d3e203536303430.roa (raw, json) Hash identifier: agd5o34u0yHgl5NHtrOaUSVUO5n0IZPoEWqOR4tkyMU= Subject key identifier: 88:39:40:B3:E9:EC:97:0C:25:99:67:B4:A8:6E:03:F8:42:ED:7A:4F Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 494C12914D27E236F81DD2965242D119CF92C7D7 Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a333a3a2f34382d3438203d3e203536303430.roa Signing time: Fri 10 Apr 2026 03:00:33 +0000 ROA not before: Fri 10 Apr 2026 02:55:33 +0000 ROA not after: Fri 09 Apr 2027 03:00:33 +0000 asID: 56040 IP address blocks: 2401:71c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:4c:12:91:4d:27:e2:36:f8:1d:d2:96:52:42:d1:19:cf:92:c7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 02:55:33 2026 GMT Not After : Apr 9 03:00:33 2027 GMT Subject: CN=883940B3E9EC970C259967B4A86E03F842ED7A4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:5f:1c:ba:df:89:70:26:f2:64:ac:bb:54:b0: aa:0f:ab:88:05:a1:04:5a:ee:b5:14:dc:4b:3d:97: d2:68:69:e4:de:bc:1a:aa:7e:ad:d6:e1:cf:a2:3a: 56:d3:7c:0c:87:fb:ca:41:29:a3:00:9b:58:0c:12: fc:41:6d:57:a2:90:e7:35:10:ab:68:6e:58:b7:69: 58:37:f5:5a:fd:2e:a0:25:f1:89:b5:b4:90:75:2c: 2e:28:da:00:83:ae:2f:88:85:a3:22:67:ba:40:4e: b5:bc:a5:4c:32:9b:59:5b:68:85:31:e4:9b:d1:fa: 35:2f:a7:75:2a:21:11:34:18:8c:82:62:02:5c:84: b0:6e:d6:18:df:83:5f:e7:0f:4a:04:c2:44:75:f6: 6d:ed:f0:35:5d:d2:ce:53:2f:09:20:dc:3c:81:57: 23:79:8b:5b:a8:38:73:44:af:6a:57:18:26:d9:70: a4:f3:35:37:02:af:7a:02:ec:42:11:93:dd:c2:8c: f3:c4:1b:f5:cc:33:d7:85:fb:5e:9b:5f:b2:e9:58: e4:e0:76:b4:1d:71:96:77:94:c8:82:27:24:d4:83: a4:a8:bf:55:b2:69:a2:4f:02:e9:d3:a2:40:56:11: a1:7c:7d:36:bf:c8:32:5a:d2:5d:8a:73:d0:0f:fd: 08:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:39:40:B3:E9:EC:97:0C:25:99:67:B4:A8:6E:03:F8:42:ED:7A:4F X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a333a3a2f34382d3438203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0:3::/48 Signature Algorithm: sha256WithRSAEncryption 0a:fa:d9:55:42:c0:88:6b:30:41:6d:03:f0:d7:d8:b5:35:bf: 80:48:a4:2d:8d:49:77:0a:52:52:8a:89:14:ed:74:57:77:3d: a9:bb:ab:b0:22:3a:d6:57:5e:d1:c0:6e:55:76:bb:6d:58:c6: 44:cb:bd:63:7d:e7:7d:28:bc:99:ab:ec:ab:2a:62:6a:d7:c5: cd:24:5e:2f:a3:10:6c:bc:4d:34:8b:e5:ef:85:db:4e:a6:4e: 43:5b:a0:56:26:77:98:34:9d:a5:9d:a0:05:3f:1b:44:24:28: a0:90:80:2b:59:b6:9f:79:69:38:98:c6:e4:12:d8:e3:4c:e6: 7d:13:f0:04:43:50:3f:06:12:27:ac:61:51:94:bc:f8:c2:74: da:bc:8c:5a:04:63:c7:7e:75:bc:5b:a3:9c:9f:f0:a7:91:23: 32:58:93:af:92:ee:5e:2d:77:7e:e8:19:60:e4:c6:32:fe:7f: 27:4a:49:99:30:e8:c4:27:b8:00:11:99:95:cf:59:a0:5c:cb: 2f:84:3c:d8:d4:f2:77:42:26:ab:05:13:fc:3e:6f:38:a8:1b: f8:f4:bd:f1:75:31:ac:8a:58:e8:91:26:bd:69:2e:5b:67:94: 8e:7f:b0:a2:b6:45:79:82:67:5d:00:e2:e7:6b:01:49:0d:15: 98:fa:63:85 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUSUwSkU0n4jb4HdKWUkLRGc+Sx9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwMjU1MzNaFw0yNzA0MDkwMzAwMzNaMDMxMTAvBgNV BAMTKDg4Mzk0MEIzRTlFQzk3MEMyNTk5NjdCNEE4NkUwM0Y4NDJFRDdBNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtXxy634lwJvJkrLtUsKoPq4gF oQRa7rUU3Es9l9JoaeTevBqqfq3W4c+iOlbTfAyH+8pBKaMAm1gMEvxBbVeikOc1 EKtobli3aVg39Vr9LqAl8Ym1tJB1LC4o2gCDri+IhaMiZ7pATrW8pUwym1lbaIUx 5JvR+jUvp3UqIRE0GIyCYgJchLBu1hjfg1/nD0oEwkR19m3t8DVd0s5TLwkg3DyB VyN5i1uoOHNEr2pXGCbZcKTzNTcCr3oC7EIRk93CjPPEG/XMM9eF+16bX7LpWOTg drQdcZZ3lMiCJyTUg6Sov1WyaaJPAunTokBWEaF8fTa/yDJa0l2Kc9AP/QipAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUiDlAs+nslwwlmWe0qG4D+ELtek8wHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc4NTgxNzkvMC8zMjM0MzAzMTNh MzczMTYzMzAzYTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBccAAAzANBgkqhkiG9w0BAQsFAAOCAQEACvrZVULAiGswQW0D 8NfYtTW/gEikLY1JdwpSUoqJFO10V3c9qbursCI61lde0cBuVXa7bVjGRMu9Y33n fSi8mavsqypiatfFzSReL6MQbLxNNIvl74XbTqZOQ1ugViZ3mDSdpZ2gBT8bRCQo oJCAK1m2n3lpOJjG5BLY40zmfRPwBENQPwYSJ6xhUZS8+MJ02ryMWgRjx351vFuj nJ/wp5EjMliTr5LuXi13fugZYOTGMv5/J0pJmTDoxCe4ABGZlc9ZoFzLL4Q82NTy d0ImqwUT/D5vOKgb+PS98XUxrIpY6JEmvWkuW2eUjn+worZFeYJnXQDi52sBSQ0V mPpjhQ== -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:35 2026 by rpki-client