$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/323430313a636238303a3a2f33322d3332203d3e203633353831.roa File: 323430313a636238303a3a2f33322d3332203d3e203633353831.roa (raw, json) Hash identifier: dDeDR4e70AWOAUZvLS+xyFAYDyo4SmrjiX9iKV4mFSk= Subject key identifier: D4:7F:97:3B:43:7C:AB:1D:CE:6D:5C:16:BC:8D:8F:50:F1:4E:DF:4E Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Certificate serial: 6736D10555B1748870C9581C16ABA9DBEB906208 Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/323430313a636238303a3a2f33322d3332203d3e203633353831.roa Signing time: Fri 10 Apr 2026 07:45:48 +0000 ROA not before: Fri 10 Apr 2026 07:40:48 +0000 ROA not after: Fri 09 Apr 2027 07:45:48 +0000 asID: 63581 IP address blocks: 2401:cb80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 21:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:36:d1:05:55:b1:74:88:70:c9:58:1c:16:ab:a9:db:eb:90:62:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Validity Not Before: Apr 10 07:40:48 2026 GMT Not After : Apr 9 07:45:48 2027 GMT Subject: CN=D47F973B437CAB1DCE6D5C16BC8D8F50F14EDF4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5f:1d:82:de:c5:0f:4c:82:83:2d:43:7d:77: 9d:10:71:98:77:b7:24:6c:2d:b3:59:59:93:09:29: a8:8c:d5:e1:f5:6d:e4:d2:93:53:6c:1f:69:94:82: 5a:ef:ef:5d:cb:c4:9f:0b:fc:89:bf:d9:97:be:97: 86:42:7b:36:20:38:53:de:67:7a:35:5f:ee:6f:24: 54:65:90:34:e7:f8:cc:14:c8:96:15:8c:e0:84:34: d3:2d:2d:18:bc:07:a1:7f:2e:5b:ec:d3:00:96:ca: ae:4a:5d:23:43:6d:9a:c0:0a:c2:81:25:f9:fc:ba: 44:22:c9:5f:fe:f8:ce:a7:04:07:2d:74:52:c1:19: ee:62:56:5d:ae:64:7b:b6:b2:ee:76:44:0a:e0:61: bd:06:03:ab:a6:b5:6d:c7:db:c2:b9:31:82:e8:88: e6:ad:b5:2b:7a:88:70:54:fa:81:25:67:24:fd:4b: 7c:47:df:79:7d:81:69:56:8b:be:56:1c:d8:5f:bd: 3e:13:5a:67:62:0c:c8:ea:e5:da:f0:ff:8b:f2:f8: 20:81:a7:fa:2b:f3:f3:7b:b4:36:90:57:c6:59:5f: 18:b2:1d:c5:c6:7b:5d:78:af:c1:f4:f5:d5:24:4f: b7:f4:c2:40:25:ae:e8:38:73:66:90:14:9b:60:af: cb:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7F:97:3B:43:7C:AB:1D:CE:6D:5C:16:BC:8D:8F:50:F1:4E:DF:4E X509v3 Authority Key Identifier: keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/323430313a636238303a3a2f33322d3332203d3e203633353831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:cb80::/32 Signature Algorithm: sha256WithRSAEncryption 04:f3:84:18:e2:af:e1:e0:03:56:60:a1:40:e2:57:09:fa:20: fe:9d:9b:eb:63:64:3a:fc:1a:d1:91:8f:4c:a7:e7:86:46:33: 3d:f9:4f:40:91:89:06:a0:ca:6c:97:04:e1:11:e5:b2:c3:98: a4:7c:e0:c9:f2:6b:63:d6:f9:ea:cb:6b:da:ab:f6:51:92:89: d1:5b:25:78:f3:cd:91:7f:7c:91:4e:a0:74:b2:9a:0d:75:4f: 79:ae:57:da:91:f8:b6:da:f9:ab:87:48:78:9a:4a:27:35:f4: 4e:7b:d0:41:6e:ea:b3:4a:87:2a:0a:68:c8:31:8d:d1:43:f5: 46:86:a1:43:af:ad:f5:88:9d:54:56:c6:59:a3:ff:08:7b:f7: 1a:d8:32:8f:43:20:68:aa:53:c6:5e:9e:87:aa:10:8e:d6:32: f0:c1:3e:31:cb:b6:f3:d0:77:9c:7b:53:9a:5c:ab:8e:03:32: 0b:7c:4a:47:0c:02:d8:31:43:89:ca:f8:e0:1b:68:66:0b:d5: 9d:6b:e7:85:1a:5b:6a:6d:fa:23:a9:cd:2d:d3:bb:4b:17:6d: e6:a2:b4:a6:8d:83:37:b0:98:41:6c:53:49:b6:f4:4f:80:b1: af:fb:86:f6:ce:67:fe:1f:53:dd:d0:0e:08:3c:3f:d8:ab:86: 79:25:93:66 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUZzbRBVWxdIhwyVgcFqup2+uQYggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRC OUU5MUU5MzAeFw0yNjA0MTAwNzQwNDhaFw0yNzA0MDkwNzQ1NDhaMDMxMTAvBgNV BAMTKEQ0N0Y5NzNCNDM3Q0FCMURDRTZENUMxNkJDOEQ4RjUwRjE0RURGNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGXx2C3sUPTIKDLUN9d50QcZh3 tyRsLbNZWZMJKaiM1eH1beTSk1NsH2mUglrv713LxJ8L/Im/2Ze+l4ZCezYgOFPe Z3o1X+5vJFRlkDTn+MwUyJYVjOCENNMtLRi8B6F/Llvs0wCWyq5KXSNDbZrACsKB Jfn8ukQiyV/++M6nBActdFLBGe5iVl2uZHu2su52RArgYb0GA6umtW3H28K5MYLo iOattSt6iHBU+oElZyT9S3xH33l9gWlWi75WHNhfvT4TWmdiDMjq5drw/4vy+CCB p/or8/N7tDaQV8ZZXxiyHcXGe114r8H09dUkT7f0wkAlrug4c2aQFJtgr8t1AgMB AAGjggISMIICDjAdBgNVHQ4EFgQU1H+XO0N8qx3ObVwWvI2PUPFO304wHwYDVR0j BBgwFoAUXzTa2f8diwDJtoenHAkHlLnpHpMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3NDA5MDU4MzM1OTQ4OS8wLzVGMzREQUQ5RkYxRDhCMDBDOUI2ODdBNzFDMDkw Nzk0QjlFOTFFOTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRCOUU5MUU5My5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODc0MDkwNTgzMzU5NDg5LzAvMzIzNDMwMzEzYTYz NjIzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMzM1MzgzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBy4AwDQYJKoZIhvcNAQELBQADggEBAATzhBjir+HgA1ZgoUDiVwn6IP6d m+tjZDr8GtGRj0yn54ZGMz35T0CRiQagymyXBOER5bLDmKR84Mnya2PW+erLa9qr 9lGSidFbJXjzzZF/fJFOoHSymg11T3muV9qR+Lba+auHSHiaSic19E570EFu6rNK hyoKaMgxjdFD9UaGoUOvrfWInVRWxlmj/wh79xrYMo9DIGiqU8ZenoeqEI7WMvDB PjHLtvPQd5x7U5pcq44DMgt8SkcMAtgxQ4nK+OAbaGYL1Z1r54UaW2pt+iOpzS3T u0sXbeaitKaNgzewmEFsU0m29E+Asa/7hvbOZ/4fU93QDgg8P9irhnklk2Y= -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:13 2026 by rpki-client