$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e20313531333131.roa File: 323430313a373163303a3a2f34382d3438203d3e20313531333131.roa (raw, json) Hash identifier: t+OxcRQO77FSjKTFPYFJpci81soX5+RfXAwWkK64kb4= Subject key identifier: 3B:BD:C7:B8:B9:6B:AB:0F:B0:92:8C:FA:4E:FA:29:52:8C:76:49:2D Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 40CE29608E1AF43D6B7EAAFAF04C0E57B9D43387 Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e20313531333131.roa Signing time: Thu 04 Jun 2026 02:21:58 +0000 ROA not before: Thu 04 Jun 2026 02:16:58 +0000 ROA not after: Thu 03 Jun 2027 02:21:58 +0000 asID: 151311 IP address blocks: 2401:71c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 02:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:ce:29:60:8e:1a:f4:3d:6b:7e:aa:fa:f0:4c:0e:57:b9:d4:33:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Jun 4 02:16:58 2026 GMT Not After : Jun 3 02:21:58 2027 GMT Subject: CN=3BBDC7B8B96BAB0FB0928CFA4EFA29528C76492D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:bf:c5:59:cf:67:5c:ef:ae:78:f4:aa:9f:7d: d2:1b:43:f5:17:d2:ba:73:ad:f6:00:32:fb:93:90: 3e:1c:bf:42:d2:ad:85:48:e5:98:82:af:e2:3c:c3: f9:36:a8:7e:2c:80:92:87:08:bd:b3:82:f6:3c:3c: b5:c4:50:11:10:0d:f2:d1:16:0d:24:80:0c:88:82: 9d:07:72:b0:06:a1:13:f1:b4:6f:b8:d4:cf:39:a5: ca:9e:7a:02:7e:b8:44:dc:46:99:57:f2:4e:3b:91: bc:98:15:17:46:a4:f4:28:66:44:d1:03:83:00:49: 8a:f9:e4:fd:ab:18:14:80:8b:c6:45:65:b8:f5:fd: d8:b9:06:de:4a:15:dc:d7:df:d5:af:2a:11:1d:f6: 2b:c5:89:f6:e7:b9:bb:68:34:09:0b:e7:e9:ec:f1: 91:b1:d6:66:12:4d:e2:c3:8b:0f:28:af:cc:ab:c8: 68:20:e2:8c:ff:b6:9f:9b:56:76:b7:82:ab:73:88: 00:f9:bd:90:50:ca:51:d7:8b:20:8b:5b:92:a4:64: 1e:20:d0:10:e9:23:b2:78:19:f1:9e:db:4f:7e:6b: 07:96:f4:f9:52:24:e1:4a:60:84:ee:44:9a:f2:93: 60:92:6e:ba:87:4b:db:9c:24:71:20:01:d3:a0:d6: 11:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BD:C7:B8:B9:6B:AB:0F:B0:92:8C:FA:4E:FA:29:52:8C:76:49:2D X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a3a2f34382d3438203d3e20313531333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0::/48 Signature Algorithm: sha256WithRSAEncryption 9a:cc:c9:57:af:a3:ea:e6:56:de:db:21:eb:3f:5b:a1:22:af: d2:66:cc:84:8f:6b:c0:3d:4f:13:4a:2d:c2:11:3b:37:8d:1a: 7c:a6:12:fd:83:12:1a:87:97:3a:b6:85:49:45:10:9b:da:f8: 40:cf:aa:9e:cd:9e:19:7c:44:48:a1:ff:c3:13:ef:a7:85:05: 60:29:1f:23:5d:e3:45:59:20:8e:eb:c6:09:5c:6d:eb:14:72: 34:2e:eb:39:d8:46:18:40:f4:44:3d:c6:46:c4:89:f2:25:65: 7e:88:40:e2:96:9e:9b:01:33:e8:38:88:93:37:60:0a:bc:6e: c0:53:d6:3c:b1:59:76:b6:81:84:a4:2e:57:a1:21:e6:1a:08: 6e:6a:e0:81:b8:b8:55:22:27:4d:a1:3c:d2:3a:63:8f:f5:34: 64:c9:1a:3d:17:a2:5d:13:b7:9b:78:2f:09:6e:93:22:3c:19: 46:0a:9a:8c:1d:6e:b8:b2:83:c7:4b:4a:e6:73:3f:b6:15:69: fc:8f:07:24:0c:d9:93:97:dd:a5:7d:fe:e9:d0:1a:31:86:bf: 02:4d:b8:1b:b7:79:19:6c:c4:fa:ec:36:7e:b1:5e:29:1d:2f: 23:7f:c1:e2:6d:e1:1e:cf:0c:57:f8:e4:91:b8:02:db:04:b2: 4f:ce:8d:ca -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUQM4pYI4a9D1rfqr68EwOV7nUM4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA2MDQwMjE2NThaFw0yNzA2MDMwMjIxNThaMDMxMTAvBgNV BAMTKDNCQkRDN0I4Qjk2QkFCMEZCMDkyOENGQTRFRkEyOTUyOEM3NjQ5MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnv8VZz2dc76549KqffdIbQ/UX 0rpzrfYAMvuTkD4cv0LSrYVI5ZiCr+I8w/k2qH4sgJKHCL2zgvY8PLXEUBEQDfLR Fg0kgAyIgp0HcrAGoRPxtG+41M85pcqeegJ+uETcRplX8k47kbyYFRdGpPQoZkTR A4MASYr55P2rGBSAi8ZFZbj1/di5Bt5KFdzX39WvKhEd9ivFifbnubtoNAkL5+ns 8ZGx1mYSTeLDiw8or8yryGgg4oz/tp+bVna3gqtziAD5vZBQylHXiyCLW5KkZB4g 0BDpI7J4GfGe209+aweW9PlSJOFKYITuRJryk2CSbrqHS9ucJHEgAdOg1hEdAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUO73HuLlrqw+wkoz6TvopUox2SS0wHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NDgwODQwOTQ0Nzg1ODE3OS8wLzMyMzQzMDMxM2Ez NzMxNjMzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTMzMzEzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQBccAAADANBgkqhkiG9w0BAQsFAAOCAQEAmszJV6+j6uZW3tsh6z9b oSKv0mbMhI9rwD1PE0otwhE7N40afKYS/YMSGoeXOraFSUUQm9r4QM+qns2eGXxE SKH/wxPvp4UFYCkfI13jRVkgjuvGCVxt6xRyNC7rOdhGGED0RD3GRsSJ8iVlfohA 4paemwEz6DiIkzdgCrxuwFPWPLFZdraBhKQuV6Eh5hoIbmrggbi4VSInTaE80jpj j/U0ZMkaPReiXRO3m3gvCW6TIjwZRgqajB1uuLKDx0tK5nM/thVp/I8HJAzZk5fd pX3+6dAaMYa/Ak24G7d5GWzE+uw2frFeKR0vI3/B4m3hHs8MV/jkkbgC2wSyT86N yg== -----END CERTIFICATE-----Generated at Fri Jun 12 06:45:16 2026 by rpki-client