$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a383a3a2f34382d3438203d3e203338333435.roa File: 323430313a386430303a383a3a2f34382d3438203d3e203338333435.roa (raw, json) Hash identifier: SMlt57VcdfhEvvcuN+wvcWhQojtAJe3kS/7lkN8+fCY= Subject key identifier: 32:66:70:59:77:7F:ED:58:16:25:20:3F:8C:E8:7E:5F:35:E9:8D:82 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 17C5FD0A3084BAAF6D801A6DA7EEE38679102098 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a383a3a2f34382d3438203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:13:07 +0000 ROA not before: Fri 10 Apr 2026 08:08:07 +0000 ROA not after: Fri 09 Apr 2027 08:13:07 +0000 asID: 38345 IP address blocks: 2401:8d00:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c5:fd:0a:30:84:ba:af:6d:80:1a:6d:a7:ee:e3:86:79:10:20:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:08:07 2026 GMT Not After : Apr 9 08:13:07 2027 GMT Subject: CN=32667059777FED581625203F8CE87E5F35E98D82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:c3:72:3f:6a:51:2c:6a:af:6c:c9:81:0b: 4b:f9:91:2c:37:84:68:c6:c3:0f:9e:eb:7e:d0:e9: 06:43:ea:aa:26:ed:06:1e:e5:e2:b3:07:72:a8:95: 96:65:b0:ad:94:c7:e1:96:0d:b3:80:e9:a7:0b:85: d4:cc:bc:63:8e:cf:65:11:9f:6a:c7:21:2c:ed:b4: 96:7c:61:89:0c:fc:e0:4d:82:c5:02:ae:c1:ea:74: 4f:c5:67:f9:e0:b5:0b:3e:cb:91:e2:0e:89:2a:4d: 29:6f:f5:a3:f2:25:5c:4e:9e:35:e0:92:eb:02:6a: 33:c3:78:07:83:02:71:60:90:79:4e:3d:1e:4b:50: 07:6a:31:03:8f:f2:dd:bb:5e:2b:10:87:70:5a:8d: ee:26:31:c2:df:59:a1:5c:e5:69:1e:c8:05:4f:e7: 2f:63:58:86:3e:53:32:1f:e0:15:29:98:4a:51:78: f1:be:8c:ff:77:f9:b3:62:65:50:68:84:8d:bc:21: bc:04:9c:ec:a6:19:ac:48:c9:7e:1e:3e:2b:62:50: 74:05:60:ec:05:c0:90:4d:3a:13:3b:3c:03:12:18: c3:cd:a0:c4:4c:6c:42:23:14:f8:08:22:47:fa:83: e1:ec:ba:ce:98:51:0c:24:42:f1:d7:8e:b8:c2:3c: 3e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:66:70:59:77:7F:ED:58:16:25:20:3F:8C:E8:7E:5F:35:E9:8D:82 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a383a3a2f34382d3438203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8d00:8::/48 Signature Algorithm: sha256WithRSAEncryption 2e:19:a9:12:ae:20:33:6e:87:d4:5f:9f:c6:18:54:f7:19:ae: 3e:60:7f:8c:ad:8c:b0:63:a7:8d:c6:a0:8f:b3:0c:22:f7:fd: 5b:c7:43:bc:75:de:6d:cf:ec:a9:8b:05:7b:7d:b8:60:d8:9c: a4:df:1b:d5:9b:1a:6b:3d:aa:42:96:05:88:98:99:ab:18:f1: 8a:be:f3:f0:3e:f4:8b:f9:d0:53:20:d7:b5:27:d0:d0:ea:43: 17:14:ad:90:f3:c3:74:ab:c6:94:f4:7e:ac:11:be:7b:8d:bb: 30:ab:75:eb:e6:ee:8a:97:71:3c:60:1e:bf:49:de:18:41:2c: b1:25:59:73:21:e7:14:66:56:8a:7c:6e:da:aa:fc:4c:2a:2c: 1b:02:54:fd:28:d5:2a:fa:fe:af:21:41:8f:57:04:9b:55:03: 6f:ed:bf:1f:fb:6f:6a:4d:b9:53:a3:cf:cc:be:bf:10:e5:b2: f2:89:c6:a3:12:1e:12:df:8e:bc:ea:f4:88:48:19:eb:69:4f: c8:34:19:b3:ce:5a:57:f6:cc:4d:4b:b7:69:41:4a:7b:5a:b0: 1c:69:10:f4:76:d6:76:8c:29:8c:e1:c4:d7:67:7b:7a:0c:7d: 00:72:b1:86:5e:ae:a3:0d:5f:ea:82:6c:f0:ca:8b:a8:e3:58: 3a:7c:e5:59 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUF8X9CjCEuq9tgBptp+7jhnkQIJgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODA4MDdaFw0yNzA0MDkwODEzMDdaMDMxMTAvBgNV BAMTKDMyNjY3MDU5Nzc3RkVENTgxNjI1MjAzRjhDRTg3RTVGMzVFOThEODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIMNyP2pRLGqvbMmBC0v5kSw3 hGjGww+e637Q6QZD6qom7QYe5eKzB3KolZZlsK2Ux+GWDbOA6acLhdTMvGOOz2UR n2rHISzttJZ8YYkM/OBNgsUCrsHqdE/FZ/ngtQs+y5HiDokqTSlv9aPyJVxOnjXg kusCajPDeAeDAnFgkHlOPR5LUAdqMQOP8t27XisQh3Baje4mMcLfWaFc5WkeyAVP 5y9jWIY+UzIf4BUpmEpRePG+jP93+bNiZVBohI28IbwEnOymGaxIyX4ePitiUHQF YOwFwJBNOhM7PAMSGMPNoMRMbEIjFPgIIkf6g+Hsus6YUQwkQvHXjrjCPD6fAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUMmZwWXd/7VgWJSA/jOh+XzXpjYIwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0ODI5NDcvMC8zMjM0MzAzMTNh Mzg2NDMwMzAzYTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODMzMzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBjQAACDANBgkqhkiG9w0BAQsFAAOCAQEALhmpEq4gM26H1F+f xhhU9xmuPmB/jK2MsGOnjcagj7MMIvf9W8dDvHXebc/sqYsFe324YNicpN8b1Zsa az2qQpYFiJiZqxjxir7z8D70i/nQUyDXtSfQ0OpDFxStkPPDdKvGlPR+rBG+e427 MKt16+buipdxPGAev0neGEEssSVZcyHnFGZWinxu2qr8TCosGwJU/SjVKvr+ryFB j1cEm1UDb+2/H/tvak25U6PPzL6/EOWy8onGoxIeEt+OvOr0iEgZ62lPyDQZs85a V/bMTUu3aUFKe1qwHGkQ9HbWdowpjOHE12d7egx9AHKxhl6uow1f6oJs8MqLqONY OnzlWQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:36 2026 by rpki-client