$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030363a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a313030363a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: DpyElPFY2EPzqbEVA2xMSUVGc51wiMdd068wy/8MtVk= Subject key identifier: C1:C3:9F:9F:E4:43:95:62:1D:30:9E:20:BF:37:DA:93:73:12:AE:86 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 3A994ACF16C3AF9FDFF9709944E386BCBF02D564 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030363a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:07:35 +0000 ROA not before: Mon 13 Apr 2026 03:02:35 +0000 ROA not after: Mon 12 Apr 2027 03:07:35 +0000 asID: 24141 IP address blocks: 2400:9600:1006::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:99:4a:cf:16:c3:af:9f:df:f9:70:99:44:e3:86:bc:bf:02:d5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:02:35 2026 GMT Not After : Apr 12 03:07:35 2027 GMT Subject: CN=C1C39F9FE44395621D309E20BF37DA937312AE86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:15:53:7d:5a:d4:b2:93:50:81:3b:e5:49:d8: 3c:fb:1b:f6:1d:6f:c8:c3:0d:9c:ed:bf:51:3c:b0: df:48:0e:cb:dc:be:af:49:c7:81:02:f4:cc:a2:38: 8e:28:51:ee:66:c2:b9:0c:7a:f3:e1:38:66:b6:9e: 50:9f:06:84:1d:a4:8f:0b:32:3c:71:36:29:31:06: 80:38:45:b7:44:96:4e:0d:0c:70:ac:71:c4:87:29: 64:14:9f:5b:90:5b:ac:14:48:08:1f:16:0f:36:3d: 1f:3d:ff:f0:2d:d7:e3:92:95:73:f3:a4:7c:75:27: 79:ff:88:b7:a3:ed:06:b5:e3:b2:e9:cc:3e:f9:95: bd:ef:d2:49:ef:01:77:5b:5a:14:73:a1:01:80:c6: c3:55:34:fb:24:45:d4:1c:07:02:ab:10:da:d5:8d: 6d:ef:d8:fd:3d:1b:be:bb:57:56:50:d2:b7:c7:e4: fe:00:10:ca:37:8c:d5:4b:9d:e7:4b:99:a3:f5:7e: 6c:bc:99:95:8e:54:89:73:56:85:0e:59:16:26:ca: b1:5a:3b:9e:93:8b:5c:78:9f:86:5f:3d:60:55:a4: 86:12:f7:d5:24:21:ed:c6:5f:94:6e:7f:20:6f:03: 59:93:7a:82:76:3e:21:3d:e8:cb:c1:5d:88:34:ad: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C3:9F:9F:E4:43:95:62:1D:30:9E:20:BF:37:DA:93:73:12:AE:86 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030363a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:1006::/48 Signature Algorithm: sha256WithRSAEncryption 69:11:c9:33:96:ed:be:89:77:c8:81:fc:34:1e:76:70:62:5c: 0c:72:a9:37:2c:72:6e:29:64:62:d6:5e:35:76:91:86:d4:54: 84:7b:47:32:cc:3a:d8:f7:99:f7:91:b5:f5:2d:82:23:8a:3a: 85:1a:7c:35:9a:f1:66:ca:31:8f:26:b6:92:f1:3b:be:3d:08: 34:67:b4:a3:b1:7c:20:ab:64:8b:4d:62:46:e8:1c:10:98:04: ce:42:35:5c:10:35:b5:e4:e9:87:bc:7c:b8:2a:f7:c6:c9:56: 82:8c:f7:6c:d7:e6:8a:9c:32:27:6a:c6:7f:8c:9c:dc:50:f2: 2a:d6:16:e7:a4:d9:78:49:40:b1:2b:b8:8a:6c:c7:a0:dc:ba: 04:dc:e3:52:c6:bf:f5:78:d9:ee:cf:8e:2c:42:3c:5d:96:ea: e9:61:dc:5a:35:4e:bf:36:88:81:1b:ac:2a:53:a9:ab:71:99: 68:72:f1:7f:c4:78:52:09:e8:a2:29:30:87:5a:12:0f:86:56: 1f:1c:24:bf:c5:e2:4a:7a:e0:5e:24:28:05:b9:e4:af:ca:c7: 50:3a:1d:98:62:2d:4f:e5:31:e2:c3:37:38:02:1f:68:fe:bd: 03:4c:74:b0:3c:8f:b7:b5:ca:a7:9c:17:72:25:a3:3d:45:ab: 7f:25:38:34 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUOplKzxbDr5/f+XCZROOGvL8C1WQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAyMzVaFw0yNzA0MTIwMzA3MzVaMDMxMTAvBgNV BAMTKEMxQzM5RjlGRTQ0Mzk1NjIxRDMwOUUyMEJGMzdEQTkzNzMxMkFFODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwFVN9WtSyk1CBO+VJ2Dz7G/Yd b8jDDZztv1E8sN9IDsvcvq9Jx4EC9MyiOI4oUe5mwrkMevPhOGa2nlCfBoQdpI8L MjxxNikxBoA4RbdElk4NDHCsccSHKWQUn1uQW6wUSAgfFg82PR89//At1+OSlXPz pHx1J3n/iLej7Qa147LpzD75lb3v0knvAXdbWhRzoQGAxsNVNPskRdQcBwKrENrV jW3v2P09G767V1ZQ0rfH5P4AEMo3jNVLnedLmaP1fmy8mZWOVIlzVoUOWRYmyrFa O56Ti1x4n4ZfPWBVpIYS99UkIe3GX5RufyBvA1mTeoJ2PiE96MvBXYg0rZgpAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUwcOfn+RDlWIdMJ4gvzfak3MSroYwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzMTMwMzAzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAEAYwDQYJKoZIhvcNAQELBQADggEBAGkRyTOW 7b6Jd8iB/DQednBiXAxyqTcscm4pZGLWXjV2kYbUVIR7RzLMOtj3mfeRtfUtgiOK OoUafDWa8WbKMY8mtpLxO749CDRntKOxfCCrZItNYkboHBCYBM5CNVwQNbXk6Ye8 fLgq98bJVoKM92zX5oqcMidqxn+MnNxQ8irWFuek2XhJQLEruIpsx6DcugTc41LG v/V42e7PjixCPF2W6ulh3Fo1Tr82iIEbrCpTqatxmWhy8X/EeFIJ6KIpMIdaEg+G Vh8cJL/F4kp64F4kKAW55K/Kx1A6HZhiLU/lMeLDNzgCH2j+vQNMdLA8j7e1yqec F3Iloz1Fq38lODQ= -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:18 2026 by rpki-client