$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a633a3a2f34382d3438203d3e203338333435.roa File: 323430313a386430303a633a3a2f34382d3438203d3e203338333435.roa (raw, json) Hash identifier: bXXenysVBzDKuX/vUTQgDrfWPg/bkniB+Z5MePp8nV4= Subject key identifier: C6:56:E4:0B:7C:E6:CF:44:C7:40:AB:47:AB:9C:B0:61:C4:CA:68:C5 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 702F3CB0F310EFF8A51A9827454A76195034674E Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a633a3a2f34382d3438203d3e203338333435.roa Signing time: Fri 10 Apr 2026 08:13:07 +0000 ROA not before: Fri 10 Apr 2026 08:08:07 +0000 ROA not after: Fri 09 Apr 2027 08:13:07 +0000 asID: 38345 IP address blocks: 2401:8d00:c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:2f:3c:b0:f3:10:ef:f8:a5:1a:98:27:45:4a:76:19:50:34:67:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: Apr 10 08:08:07 2026 GMT Not After : Apr 9 08:13:07 2027 GMT Subject: CN=C656E40B7CE6CF44C740AB47AB9CB061C4CA68C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:83:d3:9e:d1:7c:04:1d:de:bb:1d:a0:1a:42: e2:e0:aa:60:3a:28:2c:b3:5b:4b:43:b9:3a:3a:48: 7a:a6:ba:fc:0e:2a:ac:ad:25:df:9a:49:ed:b9:c0: 84:9c:0b:04:46:5c:3a:57:60:f0:6f:7e:1e:a2:f4: a5:b5:d7:1e:90:b4:7b:9d:15:94:1c:e7:6a:24:73: 1a:ca:fc:47:d5:72:f9:a3:1a:a5:80:4f:17:15:0d: 23:e7:9d:55:21:db:f0:ee:06:a0:88:be:ff:4d:d2: f9:85:10:0b:0f:8d:a5:8b:4c:92:4b:49:df:c9:4f: 48:0f:9f:ff:7d:28:e3:5f:0c:de:eb:49:12:7c:cf: 6c:30:0c:12:0a:dc:df:c2:6d:3d:a6:88:dd:3a:37: a8:21:2a:2d:5b:e3:c7:c0:ea:75:34:69:57:a6:64: 1b:42:bc:f2:03:da:da:fe:79:c6:3b:8a:95:9d:52: b1:b6:d4:c6:18:fd:ff:c2:83:70:a3:d1:e3:c1:aa: ef:b2:bc:77:19:d0:e7:5c:b1:8d:04:af:e7:ee:d1: 91:44:20:1a:0f:4a:b1:f0:15:6f:63:12:92:eb:03: 6c:c7:bd:51:0c:92:84:44:e4:71:35:e5:83:7c:6c: 86:1a:43:1d:10:40:9d:8f:15:79:b6:68:9f:d8:e9: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:E4:0B:7C:E6:CF:44:C7:40:AB:47:AB:9C:B0:61:C4:CA:68:C5 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a633a3a2f34382d3438203d3e203338333435.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8d00:c::/48 Signature Algorithm: sha256WithRSAEncryption 48:83:6a:ac:25:ca:fa:2c:2e:57:b7:da:c1:c5:27:b7:e2:3e: fb:cd:96:80:c0:cb:9c:d0:28:6d:e7:e3:ba:2a:37:d6:c2:f9: 36:5f:98:af:cd:57:7f:82:82:76:f3:4b:d5:e4:29:58:db:6d: 74:15:dc:e5:e0:c1:e8:5c:61:90:05:a9:86:a3:bf:05:57:00: 7b:a5:52:37:2e:6b:10:a2:92:88:26:be:9e:7a:f8:f6:2e:d7: a4:c7:17:e5:8d:c2:19:84:93:bf:89:51:b1:be:9a:94:13:1b: c1:b0:dc:1f:ce:3c:d3:5c:2a:3e:c5:99:13:58:76:c4:bf:6a: 45:af:17:de:ff:5b:84:96:6e:2d:e4:ab:23:69:bd:68:08:ae: 2d:5e:60:cf:f4:45:66:c1:33:25:28:66:8a:3f:8f:3c:b4:5f: 1d:c7:99:0e:f8:14:f6:91:f1:a7:0c:98:a5:bc:ac:a6:5d:0c: dc:b3:20:41:0c:b6:a2:51:20:64:c0:9b:ef:9f:1d:11:fc:13: 76:e6:89:02:59:81:9e:bd:1d:92:53:a6:94:98:91:97:30:03: 0e:1b:ba:2a:2d:46:1d:9f:ae:af:4a:7e:c7:76:69:6b:fe:fc: 7e:86:9c:36:6e:10:87:14:48:e2:10:a0:d6:30:5b:d6:88:00: 97:24:3c:ee -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUcC88sPMQ7/ilGpgnRUp2GVA0Z04wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA0MTAwODA4MDdaFw0yNzA0MDkwODEzMDdaMDMxMTAvBgNV BAMTKEM2NTZFNDBCN0NFNkNGNDRDNzQwQUI0N0FCOUNCMDYxQzRDQTY4QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWg9Oe0XwEHd67HaAaQuLgqmA6 KCyzW0tDuTo6SHqmuvwOKqytJd+aSe25wIScCwRGXDpXYPBvfh6i9KW11x6QtHud FZQc52okcxrK/EfVcvmjGqWATxcVDSPnnVUh2/DuBqCIvv9N0vmFEAsPjaWLTJJL Sd/JT0gPn/99KONfDN7rSRJ8z2wwDBIK3N/CbT2miN06N6ghKi1b48fA6nU0aVem ZBtCvPID2tr+ecY7ipWdUrG21MYY/f/Cg3Cj0ePBqu+yvHcZ0OdcsY0Er+fu0ZFE IBoPSrHwFW9jEpLrA2zHvVEMkoRE5HE15YN8bIYaQx0QQJ2PFXm2aJ/Y6bW9AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUxlbkC3zmz0THQKtHq5ywYcTKaMUwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4ODQ3MjcyNTQ0ODI5NDcvMC8zMjM0MzAzMTNh Mzg2NDMwMzAzYTYzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODMzMzQzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBjQAADDANBgkqhkiG9w0BAQsFAAOCAQEASINqrCXK+iwuV7fa wcUnt+I++82WgMDLnNAobefjuio31sL5Nl+Yr81Xf4KCdvNL1eQpWNttdBXc5eDB 6FxhkAWphqO/BVcAe6VSNy5rEKKSiCa+nnr49i7XpMcX5Y3CGYSTv4lRsb6alBMb wbDcH84801wqPsWZE1h2xL9qRa8X3v9bhJZuLeSrI2m9aAiuLV5gz/RFZsEzJShm ij+PPLRfHceZDvgU9pHxpwyYpbyspl0M3LMgQQy2olEgZMCb758dEfwTduaJAlmB nr0dklOmlJiRlzADDhu6Ki1GHZ+ur0p+x3Zpa/78foacNm4QhxRI4hCg1jBb1ogA lyQ87g== -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:41 2026 by rpki-client