$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/323430333a6338303a3a2f33322d3634203d3e203435303632.roa File: 323430333a6338303a3a2f33322d3634203d3e203435303632.roa (raw, json) Hash identifier: 0Bli9xoPwFILSxNm0qbBStHKaa2C4loLmfRYj4Ke3oQ= Subject key identifier: F1:A2:E8:6B:25:87:16:C0:A7:14:79:14:B1:6A:D9:FF:00:40:04:38 Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Certificate serial: 487822C9C081B03671C71A0B7423CAC8B514CEC4 Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/323430333a6338303a3a2f33322d3634203d3e203435303632.roa Signing time: Fri 10 Apr 2026 06:04:07 +0000 ROA not before: Fri 10 Apr 2026 05:59:07 +0000 ROA not after: Fri 09 Apr 2027 06:04:07 +0000 asID: 45062 IP address blocks: 2403:c80::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:78:22:c9:c0:81:b0:36:71:c7:1a:0b:74:23:ca:c8:b5:14:ce:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6 Validity Not Before: Apr 10 05:59:07 2026 GMT Not After : Apr 9 06:04:07 2027 GMT Subject: CN=F1A2E86B258716C0A7147914B16AD9FF00400438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:58:e1:2f:ab:d1:9e:a0:6c:01:a4:29:6b: c9:2c:0c:03:2b:d5:49:40:9e:86:f1:1a:81:78:45: d8:1f:a4:4f:b2:d0:d9:de:8b:88:56:ae:ed:93:c6: 14:3b:f4:75:7a:6f:76:25:19:14:8f:d8:21:00:12: ec:25:ef:b7:82:ff:86:0c:e5:04:ca:41:59:d6:9d: 13:e9:8c:da:83:16:a8:b8:a2:3b:80:57:c5:ff:89: 28:d7:e0:c2:24:c3:6e:ec:70:40:cf:12:72:ff:f9: b8:c6:8a:16:c5:de:5c:41:9a:08:b1:74:97:00:36: f8:4e:b7:00:93:26:02:a6:3d:4d:73:0d:cd:c9:60: 49:28:ef:7c:b6:47:14:09:f2:4d:70:7e:46:01:45: 1e:16:b1:5d:b3:01:78:05:67:a3:ec:a5:bd:2b:9c: f8:30:b8:f0:b2:fd:8d:fc:4c:47:5a:e4:ef:a0:b2: 7a:4d:6c:e8:e3:0a:3f:a8:86:74:07:91:d7:e8:67: ef:22:35:5e:cc:5b:f0:9b:ba:70:c1:5f:f0:bc:f7: d3:4e:fa:02:8d:5b:9e:49:3e:67:d9:c0:0a:a9:e9: 76:00:77:06:a0:ff:8c:9d:b7:63:8f:fc:e4:b3:93: b4:8e:33:04:47:bb:0e:63:77:f0:c3:7a:ea:b4:65: f6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A2:E8:6B:25:87:16:C0:A7:14:79:14:B1:6A:D9:FF:00:40:04:38 X509v3 Authority Key Identifier: keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/323430333a6338303a3a2f33322d3634203d3e203435303632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:c80::/32 Signature Algorithm: sha256WithRSAEncryption 83:ef:bd:4d:20:26:fc:74:d9:6c:d1:37:f5:45:26:b6:01:f3: 94:dd:cd:5c:72:e2:82:74:a4:1b:01:d6:b0:e4:3c:53:1f:f7: 77:7b:aa:0c:99:1c:d2:29:e4:41:f4:f3:95:27:e0:da:11:73: 80:f2:be:9c:2d:44:7a:56:8e:bd:94:59:a5:37:4f:9c:20:db: 6e:61:f6:3a:87:b1:80:18:08:65:65:9a:2d:43:2a:53:90:69: cb:63:8f:42:ff:6e:ce:06:41:2c:d2:dc:e3:bd:35:03:e0:09: 3b:95:b9:d6:c5:31:8c:b6:0a:f7:cc:0b:dc:ac:76:5a:d6:4a: 8d:e8:c2:b9:75:bb:cf:d3:ce:4e:10:80:06:4d:3c:98:e3:92: ba:77:82:8f:e9:ac:2a:05:c1:fe:a8:5e:4a:06:5e:61:f3:7a: 7d:53:0e:71:2c:6f:9c:f6:4f:e5:03:b7:5e:91:e4:c6:de:f1: 47:ff:e9:75:43:6c:3b:bc:1c:6c:8b:83:81:40:dc:77:70:11: fe:81:4c:2e:b1:11:83:44:1a:45:0f:5f:af:de:85:59:ff:0d: 2a:bc:69:2f:a0:70:eb:41:98:e9:ef:5e:c2:2e:a2:02:25:0a: 05:46:b8:05:71:91:9b:12:54:6e:82:69:5d:ed:32:bb:26:3f: f3:e5:6c:16 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUSHgiycCBsDZxxxoLdCPKyLUUzsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0 MkNFMDBFNjAeFw0yNjA0MTAwNTU5MDdaFw0yNzA0MDkwNjA0MDdaMDMxMTAvBgNV BAMTKEYxQTJFODZCMjU4NzE2QzBBNzE0NzkxNEIxNkFEOUZGMDA0MDA0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdFjhL6vRnqBsAaQpa8ksDAMr 1UlAnobxGoF4RdgfpE+y0Nnei4hWru2TxhQ79HV6b3YlGRSP2CEAEuwl77eC/4YM 5QTKQVnWnRPpjNqDFqi4ojuAV8X/iSjX4MIkw27scEDPEnL/+bjGihbF3lxBmgix dJcANvhOtwCTJgKmPU1zDc3JYEko73y2RxQJ8k1wfkYBRR4WsV2zAXgFZ6Pspb0r nPgwuPCy/Y38TEda5O+gsnpNbOjjCj+ohnQHkdfoZ+8iNV7MW/CbunDBX/C899NO +gKNW55JPmfZwAqp6XYAdwag/4ydt2OP/OSzk7SOMwRHuw5jd/DDeuq0ZfYfAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU8aLoayWHFsCnFHkUsWrZ/wBABDgwHwYDVR0j BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0 RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODE5NTI3OTEwMjI3OTcxLzAvMzIzNDMwMzMzYTYz MzgzMDNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDM0MzUzMDM2MzIucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAwyAMA0GCSqGSIb3DQEBCwUAA4IBAQCD771NICb8dNls0Tf1RSa2AfOU3c1c cuKCdKQbAdaw5DxTH/d3e6oMmRzSKeRB9POVJ+DaEXOA8r6cLUR6Vo69lFmlN0+c INtuYfY6h7GAGAhlZZotQypTkGnLY49C/27OBkEs0tzjvTUD4Ak7lbnWxTGMtgr3 zAvcrHZa1kqN6MK5dbvP085OEIAGTTyY45K6d4KP6awqBcH+qF5KBl5h83p9Uw5x LG+c9k/lA7dekeTG3vFH/+l1Q2w7vBxsi4OBQNx3cBH+gUwusRGDRBpFD1+v3oVZ /w0qvGkvoHDrQZjp717CLqICJQoFRrgFcZGbElRugmld7TK7Jj/z5WwW -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:27 2026 by rpki-client