$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a31343a3a2f34382d3438203d3e203234313439.roa File: 323430313a386430303a31343a3a2f34382d3438203d3e203234313439.roa (raw, json) Hash identifier: Fq/j7UBtIxJBXntYpXE4IMxdpbBRo8UkymGOfj2hJN0= Subject key identifier: 92:98:AE:6A:03:7E:0A:AF:38:6E:B1:E3:9D:31:3D:41:34:80:C1:13 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 25AAA49910CF6A7B32D69E86E009437B96A50A70 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a31343a3a2f34382d3438203d3e203234313439.roa Signing time: Fri 10 Apr 2026 08:13:07 +0000 ROA not before: Fri 10 Apr 2026 08:08:07 +0000 ROA not after: Fri 09 Apr 2027 08:13:07 +0000 asID: 24149 IP address blocks: 2401:8d00:14::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:aa:a4:99:10:cf:6a:7b:32:d6:9e:86:e0:09:43:7b:96:a5:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:08:07 2026 GMT Not After : Apr 9 08:13:07 2027 GMT Subject: CN=9298AE6A037E0AAF386EB1E39D313D413480C113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:61:8a:22:19:d1:13:0d:bc:c5:a3:ed:d6:8a: e3:2d:3e:38:a4:f8:ed:83:12:00:8b:28:7a:49:89: a4:17:31:e8:52:82:98:cd:90:c2:0e:40:d4:c5:37: ac:3f:1f:b8:72:77:a0:96:92:40:b3:d8:ff:ca:c4: 3c:cc:4e:22:e8:f9:6e:41:9c:d6:f2:5e:32:c4:4e: af:36:1b:1d:e2:c4:ec:5d:29:07:12:16:db:77:6f: b8:85:c9:ef:de:7c:42:d2:1c:62:99:ca:67:e4:52: bf:49:67:8f:1e:85:3e:06:5a:9a:50:c2:ba:4b:c9: 20:e9:d6:41:a4:12:b7:14:46:c0:ed:ff:6b:68:27: be:e4:ee:43:26:3b:cc:04:fa:d9:01:e6:38:5e:95: 07:69:6c:48:26:8b:75:9a:a6:82:db:c0:18:b7:e9: 49:bd:a8:c6:c8:a3:c8:de:04:7c:a2:d2:47:20:75: d4:12:31:5e:38:03:88:78:a8:3b:5c:3f:9d:ba:58: 8d:9a:97:22:c5:76:dc:25:b7:7f:18:7f:81:1c:00: 99:9a:d5:8f:48:21:72:8b:fa:49:f3:40:54:6c:13: 8a:1b:2c:d6:3e:90:83:fe:6b:d1:76:97:c8:ec:8f: 2d:bc:ea:aa:f3:71:15:c5:a5:07:79:42:03:39:f4: 57:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:98:AE:6A:03:7E:0A:AF:38:6E:B1:E3:9D:31:3D:41:34:80:C1:13 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a31343a3a2f34382d3438203d3e203234313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8d00:14::/48 Signature Algorithm: sha256WithRSAEncryption 17:70:37:c1:81:d0:5a:a8:e5:a1:a4:da:b5:be:54:1c:22:bf: 1f:ac:67:1c:d5:e1:ac:42:42:3c:2e:4f:1b:5f:fb:a6:ad:5b: 18:ca:81:7c:b7:b1:3e:d9:39:f0:51:4d:8a:d9:2e:e5:76:8d: 03:a2:cd:77:6b:7c:7a:01:02:12:d4:64:42:24:7d:06:12:fd: f5:02:83:7f:c0:6a:fe:1a:bd:a8:a2:09:7e:91:cd:d4:e0:ad: 59:3e:8b:b1:a6:26:b3:84:c3:e6:cb:ef:36:05:91:27:c2:41: a0:f9:01:48:00:0e:e6:30:95:f8:e0:c6:11:58:2d:87:23:5c: 3f:05:9c:40:b0:4c:81:cb:23:b1:80:12:1e:24:47:6e:25:93: ca:12:61:12:12:bc:b9:f2:f1:2c:aa:80:c0:61:db:6d:03:49: 26:a4:13:bf:7c:a9:99:c6:43:8a:0c:e4:02:90:50:15:8d:5b: 1c:d1:db:e0:bd:75:23:83:08:6d:8f:3c:fd:20:78:c6:36:e4: f8:7c:40:9b:b7:f2:2e:e2:1e:8d:da:be:ea:1b:d1:44:72:e2: 9f:70:74:d4:fc:71:67:ee:65:15:07:cc:e9:f6:fb:cb:39:93: 24:77:14:9f:92:da:50:2e:7c:03:0f:9f:dd:3e:6f:28:00:8b: 94:95:bc:5a -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUJaqkmRDPansy1p6G4AlDe5alCnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODA4MDdaFw0yNzA0MDkwODEzMDdaMDMxMTAvBgNV BAMTKDkyOThBRTZBMDM3RTBBQUYzODZFQjFFMzlEMzEzRDQxMzQ4MEMxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVYYoiGdETDbzFo+3WiuMtPjik +O2DEgCLKHpJiaQXMehSgpjNkMIOQNTFN6w/H7hyd6CWkkCz2P/KxDzMTiLo+W5B nNbyXjLETq82Gx3ixOxdKQcSFtt3b7iFye/efELSHGKZymfkUr9JZ48ehT4GWppQ wrpLySDp1kGkErcURsDt/2toJ77k7kMmO8wE+tkB5jhelQdpbEgmi3WapoLbwBi3 6Um9qMbIo8jeBHyi0kcgddQSMV44A4h4qDtcP526WI2alyLFdtwlt38Yf4EcAJma 1Y9IIXKL+knzQFRsE4obLNY+kIP+a9F2l8jsjy286qrzcRXFpQd5QgM59FdXAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUkpiuagN+Cq84brHjnTE9QTSAwRMwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzNDMwMzEz YTM4NjQzMDMwM2EzMTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNDMxMzQz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQBjQAAFDANBgkqhkiG9w0BAQsFAAOCAQEAF3A3wYHQWqjl oaTatb5UHCK/H6xnHNXhrEJCPC5PG1/7pq1bGMqBfLexPtk58FFNitku5XaNA6LN d2t8egECEtRkQiR9BhL99QKDf8Bq/hq9qKIJfpHN1OCtWT6LsaYms4TD5svvNgWR J8JBoPkBSAAO5jCV+ODGEVgthyNcPwWcQLBMgcsjsYASHiRHbiWTyhJhEhK8ufLx LKqAwGHbbQNJJqQTv3ypmcZDigzkApBQFY1bHNHb4L11I4MIbY88/SB4xjbk+HxA m7fyLuIejdq+6hvRRHLin3B01PxxZ+5lFQfM6fb7yzmTJHcUn5LaUC58Aw+f3T5v KACLlJW8Wg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:19 2026 by rpki-client