$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030373a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a313030373a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: ABIX6ex7zvc9I4+Am2HOoH0W8b+zSWl06SVX2WLnG60= Subject key identifier: 73:F7:32:56:BB:C0:A2:9D:21:CA:97:97:CC:7E:42:A0:DC:10:4E:77 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 25BC6BE5269ACC22577926044FEC5E6682E13CD2 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030373a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:07:35 +0000 ROA not before: Mon 13 Apr 2026 03:02:35 +0000 ROA not after: Mon 12 Apr 2027 03:07:35 +0000 asID: 24141 IP address blocks: 2400:9600:1007::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:bc:6b:e5:26:9a:cc:22:57:79:26:04:4f:ec:5e:66:82:e1:3c:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:02:35 2026 GMT Not After : Apr 12 03:07:35 2027 GMT Subject: CN=73F73256BBC0A29D21CA9797CC7E42A0DC104E77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:02:c0:8f:fa:d4:c8:3c:b3:60:de:98:b7:53: 6f:a2:62:46:41:a2:6f:b7:04:76:e1:a9:6a:d9:ae: 34:04:ea:c0:30:c5:59:36:af:34:28:33:fa:4e:94: 8e:9f:55:00:43:d6:86:00:a4:41:0f:e7:4c:ef:6b: 55:a2:b1:e8:db:4c:0b:4b:c9:3c:57:7f:b7:91:c2: 77:ca:37:33:eb:fd:46:ad:26:98:47:58:c3:90:bd: 5f:b6:4c:62:1f:6c:cc:9b:ce:d7:b7:ff:50:f1:aa: 35:37:ce:ec:dc:03:74:d5:0e:54:e8:8f:66:2b:bd: 6c:d8:4b:70:4c:81:b7:d8:71:12:bf:88:51:26:08: 65:7c:c8:5b:1f:53:8a:f4:ad:7d:1a:77:d2:5e:09: 39:65:b9:6e:50:f4:19:3d:95:3b:6c:66:29:4e:8b: ea:7d:c4:2e:8f:0d:57:25:8f:32:4b:45:e8:cd:79: fb:4b:0f:14:7c:06:f0:c6:71:bf:66:5a:38:9f:25: eb:49:64:0a:83:cd:1a:2c:24:fd:35:7e:64:f3:b5: 8b:58:bc:a8:57:2b:a4:7a:69:ab:24:a9:e4:a7:2e: ea:f5:13:49:dc:2a:2e:23:64:de:4d:14:9c:4b:de: fa:e8:27:90:06:e9:ab:4c:e4:1c:f1:93:ce:2d:2c: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F7:32:56:BB:C0:A2:9D:21:CA:97:97:CC:7E:42:A0:DC:10:4E:77 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313030373a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:1007::/48 Signature Algorithm: sha256WithRSAEncryption 4c:a9:7e:5d:38:33:67:07:2c:61:e7:94:32:c8:fc:9d:60:90: 36:d5:45:85:79:63:3f:e8:38:39:02:bf:c5:93:ba:1f:c1:ca: 93:9c:9a:d8:97:f0:d1:a6:7f:d9:a7:fe:43:f6:d8:85:7e:df: b0:0d:5a:be:5f:b8:30:a8:eb:84:e5:85:db:a7:71:3d:92:1c: 6b:84:64:d2:c2:e7:72:be:3d:d6:4e:1d:0e:e3:01:d7:65:ff: 0e:29:dd:e6:38:1f:e2:39:87:cd:f1:e3:83:ce:11:0d:17:8b: 26:65:9f:fe:d6:82:7b:74:bd:1f:aa:18:af:67:0c:49:01:98: 72:2e:8f:3b:77:49:92:2b:22:35:5c:11:46:cb:7f:cb:9b:ca: 51:71:ce:8e:39:55:f3:ce:94:ac:df:e1:ae:4d:d3:40:90:34: fa:63:2e:d1:fc:5b:08:c3:de:b5:01:0a:8f:1b:49:7c:0a:f9: 99:c9:a4:ad:89:fd:5f:d2:89:ec:04:1d:b7:bd:12:b2:71:14: fc:16:49:bb:91:57:f5:88:2e:4c:f4:ab:84:87:0f:fa:30:a9: 30:ab:e4:b4:0b:21:d8:91:54:d4:ab:08:77:ba:51:ba:e4:8f: 6f:2d:cc:bb:9a:53:44:7b:84:9b:63:52:f3:8d:46:29:d3:1b: 35:78:99:21 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUJbxr5SaazCJXeSYET+xeZoLhPNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAyMzVaFw0yNzA0MTIwMzA3MzVaMDMxMTAvBgNV BAMTKDczRjczMjU2QkJDMEEyOUQyMUNBOTc5N0NDN0U0MkEwREMxMDRFNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsAsCP+tTIPLNg3pi3U2+iYkZB om+3BHbhqWrZrjQE6sAwxVk2rzQoM/pOlI6fVQBD1oYApEEP50zva1WisejbTAtL yTxXf7eRwnfKNzPr/UatJphHWMOQvV+2TGIfbMybzte3/1DxqjU3zuzcA3TVDlTo j2YrvWzYS3BMgbfYcRK/iFEmCGV8yFsfU4r0rX0ad9JeCTlluW5Q9Bk9lTtsZilO i+p9xC6PDVcljzJLRejNeftLDxR8BvDGcb9mWjifJetJZAqDzRosJP01fmTztYtY vKhXK6R6aaskqeSnLur1E0ncKi4jZN5NFJxL3vroJ5AG6atM5Bzxk84tLFa3AgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUc/cyVrvAop0hypeXzH5CoNwQTncwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzMTMwMzAzNzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAEAcwDQYJKoZIhvcNAQELBQADggEBAEypfl04 M2cHLGHnlDLI/J1gkDbVRYV5Yz/oODkCv8WTuh/BypOcmtiX8NGmf9mn/kP22IV+ 37ANWr5fuDCo64TlhduncT2SHGuEZNLC53K+PdZOHQ7jAddl/w4p3eY4H+I5h83x 44POEQ0XiyZln/7Wgnt0vR+qGK9nDEkBmHIujzt3SZIrIjVcEUbLf8ubylFxzo45 VfPOlKzf4a5N00CQNPpjLtH8WwjD3rUBCo8bSXwK+ZnJpK2J/V/SiewEHbe9ErJx FPwWSbuRV/WILkz0q4SHD/owqTCr5LQLIdiRVNSrCHe6Ubrkj28tzLuaU0R7hJtj UvONRinTGzV4mSE= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:37 2026 by rpki-client