$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa File: 323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa (raw, json) Hash identifier: 856O+AcoFcqZP+P1QXXMt4hVTdCsnidf/KmN6T09JhU= Subject key identifier: D2:7D:A0:A1:84:4E:8D:C5:AC:B9:D3:52:00:01:22:3B:2A:19:16:D9 Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF Certificate serial: 675E7C35D238BEB20CF55548AB54F40C6C1B7697 Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa Signing time: Thu 04 Jun 2026 02:23:55 +0000 ROA not before: Thu 04 Jun 2026 02:18:55 +0000 ROA not after: Thu 03 Jun 2027 02:23:55 +0000 asID: 151311 IP address blocks: 2401:71c0:b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 02:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5e:7c:35:d2:38:be:b2:0c:f5:55:48:ab:54:f4:0c:6c:1b:76:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF Validity Not Before: Jun 4 02:18:55 2026 GMT Not After : Jun 3 02:23:55 2027 GMT Subject: CN=D27DA0A1844E8DC5ACB9D3520001223B2A1916D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:75:9a:a6:2a:6e:f6:88:34:fa:50:8f:6d:b3: d2:a3:ef:cb:fc:e8:5d:d2:2f:98:f3:1b:84:9b:25: 95:1c:b3:e9:00:e6:df:67:d7:19:2b:7d:05:68:cf: b2:82:cd:e0:2e:74:25:cd:3a:d2:92:70:45:48:31: be:ac:70:27:21:fc:6e:f3:61:58:f0:da:ba:a9:03: 89:3a:cb:6f:47:3b:85:31:78:c0:47:02:42:55:a3: 6c:af:1f:84:f6:19:17:ab:1b:ca:b0:53:25:95:83: 1c:97:d8:a8:94:08:bf:36:94:4b:e6:a6:e7:0a:57: 7c:66:b4:27:45:fc:52:24:e4:b6:07:0c:e6:28:1b: 71:8b:d3:9c:36:41:dd:07:68:37:77:91:0c:58:b4: 06:7f:ef:38:d9:5a:c2:1a:71:1d:35:cb:b0:3b:3a: de:5f:a0:5b:9a:30:d1:9e:66:e7:69:20:3a:4b:da: 9b:bb:a7:23:e2:b9:c4:44:fd:7c:07:4a:c4:46:8a: a4:c4:b6:e1:ad:6f:d5:cf:ee:fc:a6:f4:06:c8:3d: b6:71:27:ac:81:7f:1b:e9:f1:66:24:c6:5c:26:61: 1e:52:2f:d1:25:e6:ef:93:77:e5:6e:a1:0b:c8:30: f0:62:a6:6e:4c:74:67:3e:b0:95:d5:04:ac:ba:39: 96:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7D:A0:A1:84:4E:8D:C5:AC:B9:D3:52:00:01:22:3B:2A:19:16:D9 X509v3 Authority Key Identifier: keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/323430313a373163303a623a3a2f34382d3438203d3e20313531333131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:71c0:b::/48 Signature Algorithm: sha256WithRSAEncryption 33:a4:00:c7:7a:fc:9b:8f:59:8c:26:fd:14:47:74:19:b4:d9: c5:8c:1c:88:da:f5:21:22:e5:3e:3b:88:1a:37:76:ca:5f:cc: 8a:c9:89:51:81:d9:d9:7c:65:18:21:8f:eb:85:53:50:06:2b: c8:50:3d:1d:c1:46:17:b0:7c:6f:3f:34:9f:ab:4f:6f:a3:c2: 12:57:ac:08:3a:5d:62:e1:34:85:42:08:37:d7:f1:95:59:0e: 7c:fe:a4:d5:f2:f6:7c:94:14:20:92:46:18:91:e2:3c:3e:7d: 7d:34:41:64:62:a0:eb:d7:f3:bd:f2:50:ea:f2:2e:7c:a9:ee: 2d:1b:2c:06:33:0a:10:7f:96:6b:f9:de:2e:bf:38:dc:48:27: 58:25:79:f3:56:c8:e4:1a:6b:b8:fa:1c:ef:aa:94:a1:07:97: ce:dc:51:b5:26:ce:53:ed:69:8d:37:f9:6d:77:bf:83:d6:87: 63:b8:05:e4:21:2b:e4:4a:2f:1a:be:7c:08:a5:3d:e1:e5:c9: 6c:f4:08:61:f6:7d:83:d2:46:c2:35:4e:db:c2:6c:39:98:71: 70:ca:4f:31:27:a7:c9:f8:7f:f3:4a:76:d4:37:4d:54:81:25: 36:6f:01:f7:8d:83:18:88:1f:30:c2:e5:61:5e:a4:b3:95:aa: 1b:62:a0:a9 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUZ158NdI4vrIM9VVIq1T0DGwbdpcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0 NDU4RkJFRjAeFw0yNjA2MDQwMjE4NTVaFw0yNzA2MDMwMjIzNTVaMDMxMTAvBgNV BAMTKEQyN0RBMEExODQ0RThEQzVBQ0I5RDM1MjAwMDEyMjNCMkExOTE2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAdZqmKm72iDT6UI9ts9Kj78v8 6F3SL5jzG4SbJZUcs+kA5t9n1xkrfQVoz7KCzeAudCXNOtKScEVIMb6scCch/G7z YVjw2rqpA4k6y29HO4UxeMBHAkJVo2yvH4T2GRerG8qwUyWVgxyX2KiUCL82lEvm pucKV3xmtCdF/FIk5LYHDOYoG3GL05w2Qd0HaDd3kQxYtAZ/7zjZWsIacR01y7A7 Ot5foFuaMNGeZudpIDpL2pu7pyPiucRE/XwHSsRGiqTEtuGtb9XP7vym9AbIPbZx J6yBfxvp8WYkxlwmYR5SL9El5u+Td+VuoQvIMPBipm5MdGc+sJXVBKy6OZbjAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU0n2goYROjcWsudNSAAEiOyoZFtkwHwYDVR0j BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzIzNDMwMzEz YTM3MzE2MzMwM2E2MjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzUzMTMzMzEz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQBccAACzANBgkqhkiG9w0BAQsFAAOCAQEAM6QAx3r8m49Z jCb9FEd0GbTZxYwciNr1ISLlPjuIGjd2yl/MismJUYHZ2XxlGCGP64VTUAYryFA9 HcFGF7B8bz80n6tPb6PCElesCDpdYuE0hUIIN9fxlVkOfP6k1fL2fJQUIJJGGJHi PD59fTRBZGKg69fzvfJQ6vIufKnuLRssBjMKEH+Wa/neLr843EgnWCV581bI5Bpr uPoc76qUoQeXztxRtSbOU+1pjTf5bXe/g9aHY7gF5CEr5EovGr58CKU94eXJbPQI YfZ9g9JGwjVO28JsOZhxcMpPMSenyfh/80p21DdNVIElNm8B942DGIgfMMLlYV6k s5WqG2KgqQ== -----END CERTIFICATE-----Generated at Fri Jun 12 06:45:17 2026 by rpki-client