$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a363a3a2f34382d3438203d3e203536303430.roa File: 323430313a373163303a363a3a2f34382d3438203d3e203536303430.roa (raw, json) Hash identifier: neZRC/PaTSmwfdGFI34mzZLwMyWoAIBSn/45jQ4Uk4U= Subject key identifier: 46:20:65:C2:23:0C:11:53:B9:83:8B:B9:E6:78:34:55:2C:69:D5:AD Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 3125CDA291B0074DB4242C62FAC0BB2BCCC4E15B Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a363a3a2f34382d3438203d3e203536303430.roa Signing time: Fri 10 Apr 2026 03:00:34 +0000 ROA not before: Fri 10 Apr 2026 02:55:34 +0000 ROA not after: Fri 09 Apr 2027 03:00:34 +0000 asID: 56040 IP address blocks: 2401:71c0:6::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:25:cd:a2:91:b0:07:4d:b4:24:2c:62:fa:c0:bb:2b:cc:c4:e1:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 02:55:34 2026 GMT Not After : Apr 9 03:00:34 2027 GMT Subject: CN=462065C2230C1153B9838BB9E67834552C69D5AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:79:b9:ba:85:1e:55:25:25:fa:ec:33:4e:f0: c7:27:a4:1c:a0:5e:49:50:f8:4c:73:a7:d4:a1:2e: 6e:c9:46:6e:bf:ec:2d:63:ec:52:83:59:a3:58:b6: f8:9b:ce:2a:9c:20:64:b1:58:7c:10:be:a9:89:34: 27:82:30:8a:e6:a8:e5:ec:5f:df:93:1d:d6:b6:73: 18:86:01:6e:83:43:06:91:4e:14:b2:cf:79:b4:ce: 96:e9:f6:cf:ec:61:ab:74:c0:3e:1c:95:b2:a7:ff: ba:52:f9:98:08:5e:ae:15:d1:27:79:af:8d:54:47: 26:f5:c6:75:00:85:d4:6d:ad:1c:1f:91:ac:74:36: b6:bd:c5:26:e8:32:f7:55:47:9e:cd:5a:af:6d:fd: 0e:90:44:17:83:c7:fe:c1:50:fe:33:28:5b:c0:3a: ec:43:08:2d:a3:c3:36:a1:e2:84:0a:a0:59:ca:19: 1d:88:d4:70:9c:10:f2:1b:22:07:03:ea:ff:14:c8: 09:ec:a3:67:98:ac:3e:5b:3c:68:44:c2:7a:fc:57: 18:fd:e1:13:c3:d9:2f:0b:6b:d5:a6:cf:82:4b:d2: bd:bf:34:7b:fc:e8:5e:6a:0c:f1:62:28:f9:5b:68: 46:03:b7:a7:78:7d:b0:a8:1c:5c:8e:11:a8:14:52: 91:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:20:65:C2:23:0C:11:53:B9:83:8B:B9:E6:78:34:55:2C:69:D5:AD X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a363a3a2f34382d3438203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0:6::/48 Signature Algorithm: sha256WithRSAEncryption 5d:1a:cb:0b:a0:3b:5d:d0:0d:b3:32:1e:e4:c1:c0:9b:64:b6: 07:ba:8f:89:79:be:e3:72:61:1e:7e:28:24:1a:10:b2:5b:28: 15:95:73:9d:3a:98:c7:a7:02:82:70:04:19:d8:cc:e1:fa:1d: a5:7e:17:72:c8:6f:de:05:1c:42:63:da:2a:fa:a8:80:c4:3e: eb:ee:a6:cf:d6:0c:ca:09:d6:d3:e2:13:fc:30:44:fa:8f:97: 18:06:a5:32:0e:c8:9b:3c:c5:d2:88:40:3d:c6:29:eb:2c:95: 0b:a1:8f:b5:9c:bb:74:e3:c0:6f:a9:12:fc:be:d0:5c:46:da: f8:c4:32:56:77:c2:82:3b:03:33:c6:ba:c3:28:81:d5:45:90: 49:a2:57:9d:d8:a4:07:ca:60:41:06:df:4b:8a:ee:46:99:94: a6:1c:4a:d3:c0:39:af:9f:f2:0a:0b:b7:d7:8c:77:fc:8d:a9: 60:c3:ef:83:74:c4:1a:4b:80:b1:44:85:ab:7a:b1:45:83:7c: 9f:8e:7f:f8:04:1a:c5:8a:5c:12:54:0c:09:71:c4:b3:dc:df: 9c:74:4a:c3:13:c4:ab:4e:82:3b:97:e6:33:55:83:ae:21:b0: fd:35:a5:59:1c:d2:73:e8:08:fa:4e:41:29:f6:55:b2:4f:b9: 36:bd:f1:18 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUMSXNopGwB020JCxi+sC7K8zE4VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwMjU1MzRaFw0yNzA0MDkwMzAwMzRaMDMxMTAvBgNV BAMTKDQ2MjA2NUMyMjMwQzExNTNCOTgzOEJCOUU2NzgzNDU1MkM2OUQ1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpebm6hR5VJSX67DNO8McnpByg XklQ+Exzp9ShLm7JRm6/7C1j7FKDWaNYtvibziqcIGSxWHwQvqmJNCeCMIrmqOXs X9+THda2cxiGAW6DQwaRThSyz3m0zpbp9s/sYat0wD4clbKn/7pS+ZgIXq4V0Sd5 r41URyb1xnUAhdRtrRwfkax0Nra9xSboMvdVR57NWq9t/Q6QRBeDx/7BUP4zKFvA OuxDCC2jwzah4oQKoFnKGR2I1HCcEPIbIgcD6v8UyAnso2eYrD5bPGhEwnr8Vxj9 4RPD2S8La9Wmz4JL0r2/NHv86F5qDPFiKPlbaEYDt6d4fbCoHFyOEagUUpFjAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQURiBlwiMMEVO5g4u55ng0VSxp1a0wHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc4NTgxNzkvMC8zMjM0MzAzMTNh MzczMTYzMzAzYTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBccAABjANBgkqhkiG9w0BAQsFAAOCAQEAXRrLC6A7XdANszIe 5MHAm2S2B7qPiXm+43JhHn4oJBoQslsoFZVznTqYx6cCgnAEGdjM4fodpX4Xcshv 3gUcQmPaKvqogMQ+6+6mz9YMygnW0+IT/DBE+o+XGAalMg7ImzzF0ohAPcYp6yyV C6GPtZy7dOPAb6kS/L7QXEba+MQyVnfCgjsDM8a6wyiB1UWQSaJXndikB8pgQQbf S4ruRpmUphxK08A5r5/yCgu314x3/I2pYMPvg3TEGkuAsUSFq3qxRYN8n45/+AQa xYpcElQMCXHEs9zfnHRKwxPEq06CO5fmM1WDriGw/TWlWRzSc+gI+k5BKfZVsk+5 Nr3xGA== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:20 2026 by rpki-client