$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030303a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a313030303a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: 0G9RVvaIom4sn5n+1JeIr4zkw6DnsTsMdljZA2+D+l8= Subject key identifier: 4F:29:DF:19:50:ED:44:D7:C4:DC:E2:B0:25:0D:BF:21:68:2F:6F:FB Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 03C9671603821ADDEEBE899C533D1ADF3E903CEA Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030303a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:07:35 +0000 ROA not before: Mon 13 Apr 2026 03:02:35 +0000 ROA not after: Mon 12 Apr 2027 03:07:35 +0000 asID: 24141 IP address blocks: 2400:9600:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c9:67:16:03:82:1a:dd:ee:be:89:9c:53:3d:1a:df:3e:90:3c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:02:35 2026 GMT Not After : Apr 12 03:07:35 2027 GMT Subject: CN=4F29DF1950ED44D7C4DCE2B0250DBF21682F6FFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d3:2f:08:cc:34:a1:97:b7:71:d6:82:ea:13: e9:1a:42:b6:ff:3f:1f:b1:c1:e3:48:0f:be:ab:26: 10:84:8b:5e:b8:aa:1d:46:3f:9c:83:d8:85:6b:37: 6b:e0:7a:d1:c1:e4:fa:72:46:86:2f:fd:a8:fe:d6: fe:38:3c:40:a6:42:74:ff:db:ab:8a:7c:b1:a1:99: d2:a7:74:65:9c:e6:ed:eb:5f:bc:09:e3:f4:a2:c6: 8f:5b:a5:70:3b:52:6d:1c:d3:87:1e:f8:bf:0f:e4: 3f:45:d6:e4:e9:b3:43:f0:9b:3b:ba:4a:d9:c5:76: 66:1a:ec:af:ea:45:e8:6a:8b:21:c2:7c:19:b2:fc: c5:cc:e3:44:a8:95:09:81:40:1e:d1:fc:8b:01:af: c0:7d:87:2a:03:b9:5c:30:6c:f8:27:bf:89:55:23: 11:97:ba:9c:19:cc:bc:bc:a4:bd:c8:0a:47:82:ee: 68:a4:dd:5e:bb:29:17:96:92:5a:f6:68:23:91:c1: fa:0a:03:64:9c:74:b1:f4:4b:d8:33:55:ac:de:a1: 8d:e8:a6:38:a9:3f:88:b7:95:ed:83:16:43:75:7a: c8:c1:be:9a:75:79:e7:87:ac:ff:6f:38:de:23:eb: 2e:4c:aa:14:13:99:c3:0b:8b:18:53:3a:0c:57:59: 8c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:29:DF:19:50:ED:44:D7:C4:DC:E2:B0:25:0D:BF:21:68:2F:6F:FB X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030303a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:1000::/48 Signature Algorithm: sha256WithRSAEncryption 2f:37:07:db:fc:ff:54:c7:ca:c4:5f:6b:ee:64:01:01:88:9d: 6c:e0:5d:5c:31:ac:b4:ab:80:f9:75:93:29:9c:63:68:2b:45: 51:4d:4c:75:1b:93:79:e8:9d:e1:64:f8:28:93:0b:7c:2c:5d: 30:a7:68:f0:a7:11:3c:d6:f9:e9:99:40:e4:73:30:64:a9:33: 96:f5:15:bc:72:d9:e8:13:2b:14:be:e5:2c:d6:a4:bc:3b:ff: 4e:fb:45:4a:82:d3:9d:79:39:ad:48:85:d5:46:6a:38:de:2c: 4e:c6:ed:d1:7e:3c:ba:26:b3:56:cd:0d:bd:2f:64:26:ad:38: aa:2c:33:25:2e:09:87:ef:80:0a:fd:5c:9c:b4:7e:3f:37:ef: 6f:ab:25:3a:bc:99:e1:ff:56:6d:52:ad:8b:02:e5:e6:14:dc: 05:6f:cc:2a:5d:bc:85:1a:d8:13:c4:e7:ad:14:69:2c:d9:c5: 22:fe:28:87:e4:bb:3a:f1:90:e0:2e:ca:94:7d:d9:c1:af:8a: 3f:1d:ac:a6:dd:45:43:f0:14:55:83:6c:0c:ba:cf:f7:f4:6f: 84:f0:f8:98:43:eb:b6:49:7e:f0:ac:33:e9:69:25:c1:07:02: 5b:58:90:2b:96:b7:b1:1c:bf:95:47:ef:23:77:ce:78:56:4e: 64:da:4e:9b -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUA8lnFgOCGt3uvomcUz0a3z6QPOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAyMzVaFw0yNzA0MTIwMzA3MzVaMDMxMTAvBgNV BAMTKDRGMjlERjE5NTBFRDQ0RDdDNERDRTJCMDI1MERCRjIxNjgyRjZGRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC20y8IzDShl7dx1oLqE+kaQrb/ Px+xweNID76rJhCEi164qh1GP5yD2IVrN2vgetHB5PpyRoYv/aj+1v44PECmQnT/ 26uKfLGhmdKndGWc5u3rX7wJ4/Sixo9bpXA7Um0c04ce+L8P5D9F1uTps0Pwmzu6 StnFdmYa7K/qRehqiyHCfBmy/MXM40SolQmBQB7R/IsBr8B9hyoDuVwwbPgnv4lV IxGXupwZzLy8pL3ICkeC7mik3V67KReWklr2aCORwfoKA2ScdLH0S9gzVazeoY3o pjipP4i3le2DFkN1esjBvpp1eeeHrP9vON4j6y5MqhQTmcMLixhTOgxXWYz7AgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUTynfGVDtRNfE3OKwJQ2/IWgvb/swHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzMTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAEAAwDQYJKoZIhvcNAQELBQADggEBAC83B9v8 /1THysRfa+5kAQGInWzgXVwxrLSrgPl1kymcY2grRVFNTHUbk3noneFk+CiTC3ws XTCnaPCnETzW+emZQORzMGSpM5b1Fbxy2egTKxS+5SzWpLw7/077RUqC0515Oa1I hdVGajjeLE7G7dF+PLoms1bNDb0vZCatOKosMyUuCYfvgAr9XJy0fj8372+rJTq8 meH/Vm1SrYsC5eYU3AVvzCpdvIUa2BPE560UaSzZxSL+KIfkuzrxkOAuypR92cGv ij8drKbdRUPwFFWDbAy6z/f0b4Tw+JhD67ZJfvCsM+lpJcEHAltYkCuWt7Ecv5VH 7yN3znhWTmTaTps= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:54 2026 by rpki-client