$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a333a3a2f34382d3438203d3e203338333435.roa File: 323430313a386430303a333a3a2f34382d3438203d3e203338333435.roa (raw, json) Hash identifier: n7qNCsuz7Fjup4eopSd8uD+ayfG2ljHPI69++aXVmcI= Subject key identifier: 87:BD:B7:B8:31:E7:37:56:C0:D1:BE:69:A3:1B:C2:3B:D6:2F:58:84 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 28259BC4419EF25C78CF3153A8F3A3889B474DAA Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a333a3a2f34382d3438203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:13:08 +0000 ROA not before: Fri 10 Apr 2026 08:08:08 +0000 ROA not after: Fri 09 Apr 2027 08:13:08 +0000 asID: 38345 IP address blocks: 2401:8d00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:25:9b:c4:41:9e:f2:5c:78:cf:31:53:a8:f3:a3:88:9b:47:4d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:08:08 2026 GMT Not After : Apr 9 08:13:08 2027 GMT Subject: CN=87BDB7B831E73756C0D1BE69A31BC23BD62F5884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:f9:ee:c4:04:a7:b2:23:b7:ec:f5:d8:5d:30: 79:32:48:4f:8e:cd:7e:74:c0:82:31:52:37:1e:38: 3c:70:cc:1e:ba:38:af:87:fc:de:00:fd:04:fe:29: 33:9f:6e:37:86:37:70:7f:97:e0:73:d3:c7:82:fc: a2:71:ba:3a:bb:c8:21:af:ed:7d:6a:bb:49:4b:d5: 78:56:22:a7:e3:a7:ce:84:98:7a:53:4b:8e:2d:82: 79:99:1f:25:0e:87:ba:fe:37:ff:5d:9c:e0:f5:ae: f9:33:7a:07:ec:c2:d2:6a:d9:65:fc:7b:ac:24:55: 38:92:7f:19:1c:1c:10:a8:3a:1b:f8:d8:29:54:f4: 7e:5c:58:47:a1:75:13:f9:68:b0:05:ac:71:16:c4: 35:f1:9e:4a:dd:ed:e2:fd:70:de:7c:65:e9:3c:96: ad:24:96:54:42:a0:39:09:84:21:03:2b:e6:06:14: 02:c7:76:1f:49:5e:c0:b2:d3:49:ba:58:03:98:6b: e5:b9:09:67:ee:06:d9:65:7e:a5:2b:71:4e:3c:81: 77:be:ed:e7:2e:ef:24:e7:90:7a:af:6f:72:3b:95: 05:38:bf:75:66:c2:34:77:4b:98:ae:4b:a6:29:bf: 5a:cf:23:e7:6b:60:5c:6c:2c:36:85:69:04:b9:e8: 72:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BD:B7:B8:31:E7:37:56:C0:D1:BE:69:A3:1B:C2:3B:D6:2F:58:84 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a333a3a2f34382d3438203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8d00:3::/48 Signature Algorithm: sha256WithRSAEncryption 56:5c:87:18:d4:90:47:07:f7:a8:de:45:d6:7f:01:d7:d7:ef: ad:5f:71:81:a9:a4:32:40:b4:6a:3f:6b:05:a7:d3:0a:ca:1c: 84:ec:4e:42:89:ff:97:25:ab:25:ae:7d:a6:e5:e8:fd:2a:c9: ea:3e:ec:df:da:4c:6a:97:6d:2b:77:3a:fb:a8:50:a2:07:8d: 35:45:59:f9:ea:25:ff:c1:22:e3:ab:b8:09:de:5e:ef:9a:ac: bd:c6:9e:7d:ff:e9:df:60:22:8c:39:96:ee:67:14:07:d3:81: 4a:96:c8:31:49:4f:b9:1a:25:9d:de:88:b7:59:30:ad:4d:7d: 77:1e:63:09:b3:d5:95:0a:3e:f9:a9:2d:e0:06:5c:d4:21:2c: e4:35:77:93:69:ae:18:8c:ff:c4:cb:71:1b:79:ce:d2:4c:19: 65:b4:22:6f:87:0a:4f:fd:48:30:cc:7f:14:94:80:46:72:ac: f7:29:0a:84:f0:99:2e:5d:3a:83:23:a3:53:80:4e:6b:ff:ea: 08:1f:8d:f6:71:31:bf:d5:b6:92:c7:2c:c2:05:89:1c:10:80: c8:52:2e:ab:eb:92:ed:10:7d:76:c6:10:8d:2a:4b:a1:84:e0: 88:44:47:1a:35:1c:d7:07:56:bc:b3:57:de:5e:52:63:ba:63: d1:1f:1a:1a -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUKCWbxEGe8lx4zzFTqPOjiJtHTaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODA4MDhaFw0yNzA0MDkwODEzMDhaMDMxMTAvBgNV BAMTKDg3QkRCN0I4MzFFNzM3NTZDMEQxQkU2OUEzMUJDMjNCRDYyRjU4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm+e7EBKeyI7fs9dhdMHkySE+O zX50wIIxUjceODxwzB66OK+H/N4A/QT+KTOfbjeGN3B/l+Bz08eC/KJxujq7yCGv 7X1qu0lL1XhWIqfjp86EmHpTS44tgnmZHyUOh7r+N/9dnOD1rvkzegfswtJq2WX8 e6wkVTiSfxkcHBCoOhv42ClU9H5cWEehdRP5aLAFrHEWxDXxnkrd7eL9cN58Zek8 lq0kllRCoDkJhCEDK+YGFALHdh9JXsCy00m6WAOYa+W5CWfuBtllfqUrcU48gXe+ 7ecu7yTnkHqvb3I7lQU4v3VmwjR3S5iuS6Ypv1rPI+drYFxsLDaFaQS56HLfAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUh723uDHnN1bA0b5poxvCO9YvWIQwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0ODI5NDcvMC8zMjM0MzAzMTNh Mzg2NDMwMzAzYTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODMzMzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBjQAAAzANBgkqhkiG9w0BAQsFAAOCAQEAVlyHGNSQRwf3qN5F 1n8B19fvrV9xgamkMkC0aj9rBafTCsochOxOQon/lyWrJa59puXo/SrJ6j7s39pM apdtK3c6+6hQogeNNUVZ+eol/8Ei46u4Cd5e75qsvcaeff/p32AijDmW7mcUB9OB SpbIMUlPuRolnd6It1kwrU19dx5jCbPVlQo++akt4AZc1CEs5DV3k2muGIz/xMtx G3nO0kwZZbQib4cKT/1IMMx/FJSARnKs9ykKhPCZLl06gyOjU4BOa//qCB+N9nEx v9W2kscswgWJHBCAyFIuq+uS7RB9dsYQjSpLoYTgiERHGjUc1wdWvLNX3l5SY7pj 0R8aGg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:34 2026 by rpki-client