$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030333a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a313030333a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: 4RELVaQBHWP/dXABhV4tGRtulOuL7CQOs3FQTvMUDjo= Subject key identifier: CA:B4:E4:BC:80:5D:D0:A9:EE:4C:A1:25:D4:D3:CA:AC:06:6F:09:50 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 6471C1C6F844B5A107DB057BCB3DCB47CAEE7DF4 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030333a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:07:35 +0000 ROA not before: Mon 13 Apr 2026 03:02:35 +0000 ROA not after: Mon 12 Apr 2027 03:07:35 +0000 asID: 24141 IP address blocks: 2400:9600:1003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:71:c1:c6:f8:44:b5:a1:07:db:05:7b:cb:3d:cb:47:ca:ee:7d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:02:35 2026 GMT Not After : Apr 12 03:07:35 2027 GMT Subject: CN=CAB4E4BC805DD0A9EE4CA125D4D3CAAC066F0950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e2:81:7f:b3:a0:56:df:82:c8:e8:50:f7:82: 91:de:f2:2f:fc:68:51:59:7d:2e:0e:70:3b:6c:16: 44:6d:2f:26:f0:35:29:b6:5f:5f:37:c7:4f:8d:b5: 04:1e:23:b2:d6:0a:a4:1c:1e:48:95:53:34:84:86: cd:bc:31:15:12:d2:6c:d6:f6:f7:7d:51:f4:e9:d7: 6d:95:b0:13:e0:8d:89:6d:9e:52:a1:f9:e9:2f:4e: f1:2e:08:93:17:63:0b:37:26:42:4d:89:1b:66:54: 87:26:32:aa:c3:c8:64:95:e7:93:b6:9c:9e:0f:a4: 4d:84:97:cc:91:a3:a9:22:23:0f:67:af:1a:6e:b5: 1c:ea:b0:4b:80:3a:7b:39:87:7d:12:e3:c0:90:2c: b3:cf:a8:e7:12:2c:44:9c:e3:f9:05:22:44:fe:34: f8:63:9d:df:fa:1d:69:09:ba:8f:09:d4:be:f0:9e: 9b:fc:2f:34:e8:b3:87:3e:38:eb:d1:89:16:5d:f3: 2d:26:13:ca:06:34:4a:5f:26:97:a0:ae:02:c5:76: 14:77:35:d9:a9:6e:7e:fa:7e:a1:90:f7:df:96:37: a9:8c:8b:40:6b:b2:97:0b:fb:2c:ff:fe:82:b0:33: 18:9e:e1:af:f0:81:6c:b3:95:c0:e1:be:45:e2:32: 1e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B4:E4:BC:80:5D:D0:A9:EE:4C:A1:25:D4:D3:CA:AC:06:6F:09:50 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030333a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:1003::/48 Signature Algorithm: sha256WithRSAEncryption a0:c1:93:9a:79:2a:de:79:40:e0:13:b7:bd:02:80:09:7f:ed: d1:4e:bc:52:de:b4:17:bd:01:1f:ff:c4:90:86:a9:04:eb:4d: 44:e3:26:a7:c5:36:cb:db:b6:af:e7:c5:ee:73:b3:c6:4e:20: 17:27:8e:c8:0d:ab:f5:45:68:f7:40:15:56:e4:c5:9e:9d:f2: 06:76:40:16:48:14:d9:3d:65:13:e5:96:6c:af:95:15:0f:19: 52:cb:76:d5:f4:00:c4:57:ca:b0:61:59:c7:c0:eb:69:2b:d1: a2:99:ee:21:9e:7f:96:95:c4:e3:0f:ea:e7:6e:7e:7a:00:a5: 3c:69:fe:90:1e:2e:86:2e:a7:cb:c8:a7:6d:58:a8:a4:3e:f2: 7e:8b:7e:1b:65:20:fe:80:38:62:f3:db:9d:e3:aa:d2:23:a8: ab:d8:93:68:3b:5d:53:8e:6e:7f:c6:c9:15:c5:1d:6d:55:88: b2:d9:89:32:b9:a7:f7:df:02:5d:4c:91:fd:d6:48:39:be:b6: 17:d6:66:52:f4:a0:dd:4e:81:60:18:b5:62:bb:a8:81:fd:13: ac:8a:1b:e6:44:22:18:58:00:03:10:08:dd:c9:e2:70:e9:ba: 90:24:be:68:5d:fb:20:1e:e0:b2:a6:80:f1:d4:70:57:83:0e: 00:d5:bf:f5 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUZHHBxvhEtaEH2wV7yz3LR8ruffQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAyMzVaFw0yNzA0MTIwMzA3MzVaMDMxMTAvBgNV BAMTKENBQjRFNEJDODA1REQwQTlFRTRDQTEyNUQ0RDNDQUFDMDY2RjA5NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn4oF/s6BW34LI6FD3gpHe8i/8 aFFZfS4OcDtsFkRtLybwNSm2X183x0+NtQQeI7LWCqQcHkiVUzSEhs28MRUS0mzW 9vd9UfTp122VsBPgjYltnlKh+ekvTvEuCJMXYws3JkJNiRtmVIcmMqrDyGSV55O2 nJ4PpE2El8yRo6kiIw9nrxputRzqsEuAOns5h30S48CQLLPPqOcSLESc4/kFIkT+ NPhjnd/6HWkJuo8J1L7wnpv8LzTos4c+OOvRiRZd8y0mE8oGNEpfJpegrgLFdhR3 Ndmpbn76fqGQ99+WN6mMi0BrspcL+yz//oKwMxie4a/wgWyzlcDhvkXiMh73AgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUyrTkvIBd0KnuTKEl1NPKrAZvCVAwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzMTMwMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAEAMwDQYJKoZIhvcNAQELBQADggEBAKDBk5p5 Kt55QOATt70CgAl/7dFOvFLetBe9AR//xJCGqQTrTUTjJqfFNsvbtq/nxe5zs8ZO IBcnjsgNq/VFaPdAFVbkxZ6d8gZ2QBZIFNk9ZRPllmyvlRUPGVLLdtX0AMRXyrBh WcfA62kr0aKZ7iGef5aVxOMP6udufnoApTxp/pAeLoYup8vIp21YqKQ+8n6Lfhtl IP6AOGLz253jqtIjqKvYk2g7XVOObn/GyRXFHW1ViLLZiTK5p/ffAl1Mkf3WSDm+ thfWZlL0oN1OgWAYtWK7qIH9E6yKG+ZEIhhYAAMQCN3J4nDpupAkvmhd+yAe4LKm gPHUcFeDDgDVv/U= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:55 2026 by rpki-client