$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030353a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a313030353a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: phm6x8YdjQIJw63tq9RmPrvlQm9WYsQDJVr8qqvizvk= Subject key identifier: 35:3C:31:6F:3D:EE:F2:4A:AD:CB:1E:56:8F:66:08:4C:C7:15:19:0C Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 24740EAA2EAFD6F575BD1E3B501B6DA188E2F84A Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030353a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:07:35 +0000 ROA not before: Mon 13 Apr 2026 03:02:35 +0000 ROA not after: Mon 12 Apr 2027 03:07:35 +0000 asID: 24141 IP address blocks: 2400:9600:1005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Apr 2026 20:14:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:74:0e:aa:2e:af:d6:f5:75:bd:1e:3b:50:1b:6d:a1:88:e2:f8:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:02:35 2026 GMT Not After : Apr 12 03:07:35 2027 GMT Subject: CN=353C316F3DEEF24AADCB1E568F66084CC715190C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:63:a0:b2:cb:c9:6c:ca:7f:8a:75:00:36:81: 3b:16:e6:06:ff:f9:35:06:3b:11:9e:aa:7a:34:37: d9:c5:fa:2f:11:87:c6:0c:a0:99:63:36:7c:d5:5e: 13:d5:1b:de:47:e0:2e:6a:a6:67:0e:78:03:ed:35: fe:dd:5b:2b:e7:da:9e:71:57:0b:f5:46:db:0c:a8: 55:9e:16:b5:91:3e:56:9f:c1:3f:6d:4f:24:f0:dd: 4e:8d:8c:01:b9:f0:12:b1:02:67:c5:f7:46:64:52: c2:f3:2f:5d:d6:b2:a1:27:87:aa:b7:ed:00:44:06: 70:19:aa:da:d6:5d:ae:1f:30:f9:16:91:30:e9:b6: d3:60:05:aa:8e:31:40:0d:c6:89:f9:c7:6d:95:66: 2f:de:95:42:af:80:78:ec:4d:2d:2a:cc:01:fe:8f: ab:ee:88:ae:b2:31:49:f8:e9:71:67:25:04:0a:4b: 2b:b3:2c:28:6e:aa:14:98:cb:4b:9b:4c:27:e2:5c: f7:a0:18:e6:61:eb:0c:3d:c4:91:5c:11:7d:01:e8: 64:b0:f3:a9:31:09:70:11:06:be:83:28:5e:2a:e1: d0:68:e8:0d:80:b5:50:4a:ad:93:be:9f:66:3a:33: 62:bd:f3:ec:76:96:9f:51:57:2c:94:ef:45:b6:13: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3C:31:6F:3D:EE:F2:4A:AD:CB:1E:56:8F:66:08:4C:C7:15:19:0C X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030353a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:1005::/48 Signature Algorithm: sha256WithRSAEncryption 88:32:3d:5c:e1:16:40:7b:c5:15:c0:e8:4c:03:a2:3c:47:3c: 1d:af:f2:bc:75:2b:32:08:f1:71:5b:a0:0b:9f:a5:f3:e1:94: fd:af:dc:a6:18:ef:82:cf:bd:ce:5a:8e:fd:99:18:9b:32:ab: 82:ba:2d:c6:33:2a:0e:13:c6:03:24:3c:2c:da:31:d9:60:3f: bd:1a:04:e3:d8:6d:d1:6c:98:00:6e:86:57:57:7a:7c:11:8b: b1:ea:5c:94:2c:24:ee:12:f6:e3:4a:8a:2a:53:1c:71:fb:5c: 21:88:30:f3:ff:03:c4:f1:6c:79:c4:05:a2:22:e6:20:1f:b2: 17:66:53:15:dc:4d:a2:93:28:34:53:1e:00:36:83:f7:d2:ff: ba:f2:ec:51:29:1a:37:97:7e:9e:c9:c3:2e:6c:cd:4a:b4:75: 84:1e:80:aa:6c:9f:b5:e7:65:30:7b:e3:d8:30:96:26:7a:3e: ee:ec:1e:da:7c:0b:cf:bd:2c:14:05:d1:eb:18:0b:db:72:2b: a4:3b:1b:82:0d:5f:04:33:6b:3c:11:64:0a:ee:91:a8:7e:dd: e8:fc:dd:f7:02:a3:bd:88:fb:ae:cd:46:59:5b:39:05:9c:1a: 7b:c9:b8:b0:fb:ff:58:5f:1b:a9:70:9f:db:37:4e:82:88:7f: 6f:9b:41:8c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUJHQOqi6v1vV1vR47UBttoYji+EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAyMzVaFw0yNzA0MTIwMzA3MzVaMDMxMTAvBgNV BAMTKDM1M0MzMTZGM0RFRUYyNEFBRENCMUU1NjhGNjYwODRDQzcxNTE5MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAY6Cyy8lsyn+KdQA2gTsW5gb/ +TUGOxGeqno0N9nF+i8Rh8YMoJljNnzVXhPVG95H4C5qpmcOeAPtNf7dWyvn2p5x Vwv1RtsMqFWeFrWRPlafwT9tTyTw3U6NjAG58BKxAmfF90ZkUsLzL13WsqEnh6q3 7QBEBnAZqtrWXa4fMPkWkTDpttNgBaqOMUANxon5x22VZi/elUKvgHjsTS0qzAH+ j6vuiK6yMUn46XFnJQQKSyuzLChuqhSYy0ubTCfiXPegGOZh6ww9xJFcEX0B6GSw 86kxCXARBr6DKF4q4dBo6A2AtVBKrZO+n2Y6M2K98+x2lp9RVyyU70W2E6exAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUNTwxbz3u8kqtyx5Wj2YITMcVGQwwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzMTMwMzAzNTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAEAUwDQYJKoZIhvcNAQELBQADggEBAIgyPVzh FkB7xRXA6EwDojxHPB2v8rx1KzII8XFboAufpfPhlP2v3KYY74LPvc5ajv2ZGJsy q4K6LcYzKg4TxgMkPCzaMdlgP70aBOPYbdFsmABuhldXenwRi7HqXJQsJO4S9uNK iipTHHH7XCGIMPP/A8TxbHnEBaIi5iAfshdmUxXcTaKTKDRTHgA2g/fS/7ry7FEp GjeXfp7Jwy5szUq0dYQegKpsn7XnZTB749gwliZ6Pu7sHtp8C8+9LBQF0esYC9ty K6Q7G4INXwQzazwRZArukah+3ej83fcCo72I+67NRllbOQWcGnvJuLD7/1hfG6lw n9s3ToKIf2+bQYw= -----END CERTIFICATE-----Generated at Wed Apr 15 08:35:41 2026 by rpki-client