$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a393a3a2f34382d3438203d3e203536303430.roa File: 323430313a373163303a393a3a2f34382d3438203d3e203536303430.roa (raw, json) Hash identifier: mYBV5yfdvFGoyceOoR7wiykMsuzE3YF6Wqdx8zx0TPA= Subject key identifier: 4E:40:6D:98:C5:D8:F3:C2:11:61:B1:AE:8D:94:62:B7:01:A8:CB:8A Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 40D39299B3BBA808FED080132864295B66459681 Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a393a3a2f34382d3438203d3e203536303430.roa Signing time: Fri 10 Apr 2026 03:00:34 +0000 ROA not before: Fri 10 Apr 2026 02:55:34 +0000 ROA not after: Fri 09 Apr 2027 03:00:34 +0000 asID: 56040 IP address blocks: 2401:71c0:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 10:05:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d3:92:99:b3:bb:a8:08:fe:d0:80:13:28:64:29:5b:66:45:96:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Apr 10 02:55:34 2026 GMT Not After : Apr 9 03:00:34 2027 GMT Subject: CN=4E406D98C5D8F3C21161B1AE8D9462B701A8CB8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:b5:ce:ae:94:06:a4:d8:4d:0d:90:ee:da: 7a:6d:d4:12:19:1a:3b:2c:29:96:c1:cf:fc:68:5f: a9:a7:41:51:f0:ed:68:43:05:7d:fd:b8:96:7f:bb: cb:e0:69:07:f2:20:d0:b6:73:d6:49:a6:a3:7f:f3: d5:56:a3:e2:f6:fa:3b:cd:13:dd:ef:64:d2:bb:50: 38:8c:4f:55:0e:1e:fa:9e:6d:55:be:61:8a:e6:79: c1:25:4b:45:b4:36:2d:8c:95:8d:5b:51:c9:d1:a9: 37:cf:51:15:91:41:c5:ef:f4:93:d1:f1:b0:4f:9b: c0:ea:7f:7d:51:04:e9:f9:17:0b:21:db:c3:a9:9c: 73:0c:3a:57:73:0f:3a:10:27:4f:5c:85:57:9c:3e: dd:59:54:72:76:c1:60:40:65:74:7c:e9:67:52:e3: a4:f6:23:32:df:b1:68:b6:1f:40:73:86:52:18:53: dc:0c:70:49:e3:c1:77:0d:c2:8d:fc:fa:ae:28:70: f0:33:5f:3f:5c:97:56:1e:ae:68:6b:67:18:86:c9: 7e:4d:7d:17:fa:8a:bf:55:60:35:33:7b:87:e5:97: bc:b4:2a:9c:cc:48:4c:33:06:6b:c5:29:5e:47:12: f3:7e:3c:1d:80:a0:57:c2:9b:c6:f3:3c:12:a5:d8: a8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:40:6D:98:C5:D8:F3:C2:11:61:B1:AE:8D:94:62:B7:01:A8:CB:8A X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a393a3a2f34382d3438203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0:9::/48 Signature Algorithm: sha256WithRSAEncryption c4:ad:16:c3:d6:4b:4c:49:e3:9a:bd:67:cc:2c:7b:5f:75:c0: 64:58:8f:c5:d4:d6:78:ad:ac:aa:bb:22:03:b8:33:b1:c9:0a: 10:2a:4e:53:03:70:d0:bb:24:b9:f4:8a:1f:9c:30:6d:90:eb: 13:3b:be:cc:67:20:d7:2b:4a:90:7a:6a:81:23:75:93:f8:43: fe:cc:f5:56:94:9b:f9:0e:52:5e:d0:64:0a:3b:c9:5c:b6:6f: 64:47:7a:5d:73:a7:b9:bc:56:30:6c:e4:64:a4:dd:0d:9e:eb: 1b:c4:9d:b0:9d:4f:57:77:6a:2f:74:52:e2:c6:c3:a8:27:f3: 96:e3:cf:bb:b1:11:39:89:64:47:92:4e:61:18:58:09:50:70: 36:d0:34:b1:3c:30:5d:9a:a1:98:c8:fa:fc:03:cc:2d:2f:b4: c1:43:68:10:24:54:ab:19:68:f7:ba:47:d5:4e:84:d2:8e:17: ff:5f:bc:16:3f:66:f8:58:6c:6e:ee:3d:3a:f8:d1:d0:21:f1: f5:e8:d9:54:dd:78:9c:30:71:fc:c6:1c:1f:e5:0a:42:23:33: 24:1e:8f:52:f2:da:08:3d:9d:ec:9e:70:9a:ef:fd:7d:fb:4a: 1c:e8:5c:1f:c3:7b:76:2c:79:55:bf:5c:1a:d1:92:0d:6b:60: 20:44:bc:e8 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUQNOSmbO7qAj+0IATKGQpW2ZFloEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA0MTAwMjU1MzRaFw0yNzA0MDkwMzAwMzRaMDMxMTAvBgNV BAMTKDRFNDA2RDk4QzVEOEYzQzIxMTYxQjFBRThEOTQ2MkI3MDFBOENCOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFlbXOrpQGpNhNDZDu2npt1BIZ GjssKZbBz/xoX6mnQVHw7WhDBX39uJZ/u8vgaQfyINC2c9ZJpqN/89VWo+L2+jvN E93vZNK7UDiMT1UOHvqebVW+YYrmecElS0W0Ni2MlY1bUcnRqTfPURWRQcXv9JPR 8bBPm8Dqf31RBOn5Fwsh28OpnHMMOldzDzoQJ09chVecPt1ZVHJ2wWBAZXR86WdS 46T2IzLfsWi2H0BzhlIYU9wMcEnjwXcNwo38+q4ocPAzXz9cl1YermhrZxiGyX5N fRf6ir9VYDUze4fll7y0KpzMSEwzBmvFKV5HEvN+PB2AoFfCm8bzPBKl2KilAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUTkBtmMXY88IRYbGujZRitwGoy4owHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4MDg0MDk0NDc4NTgxNzkvMC8zMjM0MzAzMTNh MzczMTYzMzAzYTM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBccAACTANBgkqhkiG9w0BAQsFAAOCAQEAxK0Ww9ZLTEnjmr1n zCx7X3XAZFiPxdTWeK2sqrsiA7gzsckKECpOUwNw0LskufSKH5wwbZDrEzu+zGcg 1ytKkHpqgSN1k/hD/sz1VpSb+Q5SXtBkCjvJXLZvZEd6XXOnubxWMGzkZKTdDZ7r G8SdsJ1PV3dqL3RS4sbDqCfzluPPu7EROYlkR5JOYRhYCVBwNtA0sTwwXZqhmMj6 /APMLS+0wUNoECRUqxlo97pH1U6E0o4X/1+8Fj9m+Fhsbu49OvjR0CHx9ejZVN14 nDBx/MYcH+UKQiMzJB6PUvLaCD2d7J5wmu/9fftKHOhcH8N7dix5Vb9cGtGSDWtg IES86A== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:11 2026 by rpki-client