$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a343a3a2f34382d3438203d3e203536303430.roa File: 323430313a373163303a343a3a2f34382d3438203d3e203536303430.roa (raw, json) Hash identifier: KVh79S8ip/fjB9psUC8gIMB8sASXrOKNWoKVxtSVvR0= Subject key identifier: B7:F3:2A:63:73:7C:59:A5:22:2E:40:74:37:6E:44:50:4A:C3:1B:A6 Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 4222922D590935D19A26BF6B80A956F9095C535C Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a343a3a2f34382d3438203d3e203536303430.roa Signing time: Fri 10 Apr 2026 03:00:33 +0000 ROA not before: Fri 10 Apr 2026 02:55:33 +0000 ROA not after: Fri 09 Apr 2027 03:00:33 +0000 asID: 56040 IP address blocks: 2401:71c0:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:22:92:2d:59:09:35:d1:9a:26:bf:6b:80:a9:56:f9:09:5c:53:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 02:55:33 2026 GMT Not After : Apr 9 03:00:33 2027 GMT Subject: CN=B7F32A63737C59A5222E4074376E44504AC31BA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:be:bc:28:8a:0e:b2:c7:bf:f3:46:1b:d3:c5: 98:62:0c:df:36:c5:25:82:af:65:65:35:0e:cd:66: 1e:f0:d2:05:c6:49:e3:bc:69:fb:c6:88:04:79:8b: e4:23:bc:1e:ba:c9:10:3b:f5:55:65:df:0b:44:86: 33:81:12:2b:8d:8e:cc:a9:a7:a7:e9:ff:95:67:92: 21:85:df:bd:17:70:d0:bd:62:a9:7c:cd:51:ec:07: 67:94:64:5e:dd:41:84:41:df:a8:9d:b2:18:57:0d: 1c:ae:8c:52:d2:ee:0e:b1:c9:b8:5e:51:05:34:cc: 04:2a:f2:ad:83:4d:4a:83:5d:cc:ac:4b:b0:3f:25: b5:1f:eb:c0:a7:23:f4:8a:31:61:27:04:c6:4a:2c: a2:cd:25:91:6b:f2:2b:c1:68:6b:4f:ac:b9:a9:d1: b5:5c:4f:4a:63:65:32:c5:84:18:89:10:64:14:16: 6b:20:99:a3:d0:8f:a9:42:c7:7b:c9:42:62:fb:03: cf:c2:73:1c:98:e7:2d:bf:a8:13:15:0f:71:fd:c6: 49:1b:e1:03:52:0e:63:6f:59:7a:c1:9b:dc:4f:5c: 65:9a:ce:12:f1:3a:fd:f7:15:7e:78:a0:0e:4d:e8: 5d:2f:2d:8b:1f:35:11:9d:24:80:44:27:01:a1:72: 65:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F3:2A:63:73:7C:59:A5:22:2E:40:74:37:6E:44:50:4A:C3:1B:A6 X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a343a3a2f34382d3438203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0:4::/48 Signature Algorithm: sha256WithRSAEncryption 76:b0:1f:61:c4:5d:e3:dc:dc:32:fa:65:44:3c:cb:5a:fe:e4: 18:e7:48:eb:7b:d2:51:e6:17:8a:03:63:f9:b4:cd:09:10:5f: ee:2f:8c:92:f3:af:f5:17:0b:84:f5:c3:58:c2:c0:2a:ca:17: 2e:1d:fd:2d:d2:1f:87:0a:67:08:fb:07:3a:57:26:ba:3f:53: 7c:37:a7:f3:8f:bf:e6:a0:b1:72:99:fc:38:ab:33:01:21:6d: e7:8a:5e:2d:51:75:84:90:ca:a2:96:ba:56:18:c1:ba:5c:25: 56:a5:0b:2c:22:fb:67:57:51:cd:4f:c5:3c:22:1d:fe:6b:94: 75:e4:cb:5c:4b:8f:eb:ef:7e:45:28:3e:ab:31:60:44:67:2a: 79:f4:ca:d7:38:f4:fb:8e:be:ad:ea:d3:1d:28:c4:7b:a3:17: ec:9c:ab:ac:28:a9:36:ea:1c:06:8a:e3:27:3c:a3:c7:1b:91: 17:9f:67:d7:c8:9d:23:c5:06:c9:da:0d:70:28:c2:ba:59:53: ad:54:1b:51:02:8c:c5:91:88:02:fd:f2:ad:69:7f:d5:c4:34: 2e:46:67:91:2f:34:1c:e2:21:ee:a4:ab:91:48:9d:d5:60:dc: 68:5c:58:13:b7:39:97:5b:60:f0:95:c9:97:3e:fb:81:84:bc: b0:a2:95:20 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUQiKSLVkJNdGaJr9rgKlW+QlcU1wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwMjU1MzNaFw0yNzA0MDkwMzAwMzNaMDMxMTAvBgNV BAMTKEI3RjMyQTYzNzM3QzU5QTUyMjJFNDA3NDM3NkU0NDUwNEFDMzFCQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdvrwoig6yx7/zRhvTxZhiDN82 xSWCr2VlNQ7NZh7w0gXGSeO8afvGiAR5i+QjvB66yRA79VVl3wtEhjOBEiuNjsyp p6fp/5VnkiGF370XcNC9Yql8zVHsB2eUZF7dQYRB36idshhXDRyujFLS7g6xybhe UQU0zAQq8q2DTUqDXcysS7A/JbUf68CnI/SKMWEnBMZKLKLNJZFr8ivBaGtPrLmp 0bVcT0pjZTLFhBiJEGQUFmsgmaPQj6lCx3vJQmL7A8/CcxyY5y2/qBMVD3H9xkkb 4QNSDmNvWXrBm9xPXGWazhLxOv33FX54oA5N6F0vLYsfNRGdJIBEJwGhcmWJAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUt/MqY3N8WaUiLkB0N25EUErDG6YwHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc4NTgxNzkvMC8zMjM0MzAzMTNh MzczMTYzMzAzYTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBccAABDANBgkqhkiG9w0BAQsFAAOCAQEAdrAfYcRd49zcMvpl RDzLWv7kGOdI63vSUeYXigNj+bTNCRBf7i+MkvOv9RcLhPXDWMLAKsoXLh39LdIf hwpnCPsHOlcmuj9TfDen84+/5qCxcpn8OKszASFt54peLVF1hJDKopa6VhjBulwl VqULLCL7Z1dRzU/FPCId/muUdeTLXEuP6+9+RSg+qzFgRGcqefTK1zj0+46+rerT HSjEe6MX7JyrrCipNuocBorjJzyjxxuRF59n18idI8UGydoNcCjCullTrVQbUQKM xZGIAv3yrWl/1cQ0LkZnkS80HOIh7qSrkUid1WDcaFxYE7c5l1tg8JXJlz77gYS8 sKKVIA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:18 2026 by rpki-client