$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313131313a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a313131313a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: b//q/jFPEePfuro6BwryXbgDWz5xerEJlKMESIRDrIk= Subject key identifier: BA:67:C5:AE:D4:C0:9B:5C:22:DF:C9:1B:38:30:6D:38:4A:45:5E:C5 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 29881174A5DD0A5CB9CC98ECE3B63951E3FC2452 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313131313a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:08:51 +0000 ROA not before: Mon 13 Apr 2026 03:03:51 +0000 ROA not after: Mon 12 Apr 2027 03:08:51 +0000 asID: 24141 IP address blocks: 2400:9600:1111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:88:11:74:a5:dd:0a:5c:b9:cc:98:ec:e3:b6:39:51:e3:fc:24:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:03:51 2026 GMT Not After : Apr 12 03:08:51 2027 GMT Subject: CN=BA67C5AED4C09B5C22DFC91B38306D384A455EC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:c3:a8:de:98:51:9c:bc:7a:d6:97:9a:71: 13:07:00:03:3d:8f:5e:79:89:57:9d:97:d9:8b:b0: 3d:b5:b8:3f:df:43:b6:c9:43:5a:37:37:c1:c3:ed: ed:64:53:3a:0b:82:77:77:af:1c:3d:79:e8:cd:ca: d6:cf:02:f1:ec:59:5c:31:ad:55:84:b6:f2:e1:13: 07:57:3f:9b:db:4f:f8:b2:c5:ac:7b:29:42:7c:b9: 35:5d:82:f9:c6:9d:68:8b:55:dc:38:a9:4c:c5:a8: 02:c0:83:bd:c3:18:27:49:04:23:cf:bd:c3:1e:bf: ee:1c:c0:dd:b3:e9:2d:fa:0d:71:f8:b1:e6:9f:0c: 16:4d:2c:a1:d0:ec:c4:50:cb:4a:27:e8:91:2b:cd: 6a:ba:a5:df:97:5d:f1:c0:c7:b8:18:a5:a5:30:ed: 67:84:b0:f8:57:d1:f5:94:df:fb:70:02:83:5e:02: 67:f2:c7:1f:c7:c1:2b:44:40:90:34:b4:f6:8e:b6: 3d:52:59:01:eb:e3:ab:57:70:10:37:36:c0:96:ab: 4e:19:fe:84:5b:c3:c0:ce:5d:5a:3d:77:20:17:b3: 24:d9:fa:5a:3a:10:63:4c:a0:02:d4:bb:91:15:e5: 0f:d6:2e:84:4e:18:77:04:26:ee:91:5b:6a:aa:46: 8c:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:67:C5:AE:D4:C0:9B:5C:22:DF:C9:1B:38:30:6D:38:4A:45:5E:C5 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a313131313a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:1111::/48 Signature Algorithm: sha256WithRSAEncryption 15:5e:33:4f:d6:b8:b3:00:b5:e8:a6:c6:3d:2a:46:3b:d0:78: 59:77:a7:50:61:7e:ce:2a:b5:3f:8f:6a:a6:a5:4e:8b:b9:01: a0:51:d8:54:4d:f4:42:b5:c0:78:83:7d:aa:02:a8:ab:b8:32: 91:94:87:d0:ae:f3:0d:2d:d3:73:f8:e0:57:2f:d2:97:63:58: dd:54:ab:08:42:f4:30:f9:1b:a5:2c:69:05:79:5f:a6:b4:6b: de:82:06:a2:a2:89:17:31:30:b3:9f:e0:a8:17:50:34:d0:af: ad:2c:01:55:33:f4:6d:ac:f4:51:76:4b:3e:eb:3d:c2:10:4b: 37:af:9f:f8:36:3f:dd:60:6d:25:5c:5e:31:06:65:e1:3d:7e: 0c:7a:0d:d5:e6:ba:de:d3:65:86:0f:a0:4e:d9:b3:9c:e2:04: 2f:d9:ba:78:31:4f:2f:57:89:ac:03:ff:45:bd:1e:2e:45:94: 8b:c6:0d:cd:40:37:bf:4a:74:bc:9a:17:3f:fc:96:f5:dd:c8: a0:78:7c:05:79:d2:a4:0d:d5:60:a2:ec:47:bf:af:5b:6d:28: 97:53:4a:ee:c1:29:d9:d9:03:ee:eb:66:c6:3a:4d:25:84:fb: 66:27:61:a6:a3:7e:c8:3b:bc:1e:03:1d:7f:8c:52:a7:e7:f6: ed:34:f8:8b -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUKYgRdKXdCly5zJjs47Y5UeP8JFIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAzNTFaFw0yNzA0MTIwMzA4NTFaMDMxMTAvBgNV BAMTKEJBNjdDNUFFRDRDMDlCNUMyMkRGQzkxQjM4MzA2RDM4NEE0NTVFQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClesOo3phRnLx61peacRMHAAM9 j155iVedl9mLsD21uD/fQ7bJQ1o3N8HD7e1kUzoLgnd3rxw9eejNytbPAvHsWVwx rVWEtvLhEwdXP5vbT/iyxax7KUJ8uTVdgvnGnWiLVdw4qUzFqALAg73DGCdJBCPP vcMev+4cwN2z6S36DXH4seafDBZNLKHQ7MRQy0on6JErzWq6pd+XXfHAx7gYpaUw 7WeEsPhX0fWU3/twAoNeAmfyxx/HwStEQJA0tPaOtj1SWQHr46tXcBA3NsCWq04Z /oRbw8DOXVo9dyAXsyTZ+lo6EGNMoALUu5EV5Q/WLoROGHcEJu6RW2qqRozNAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUumfFrtTAm1wi38kbODBtOEpFXsUwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzMTMxMzEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAEREwDQYJKoZIhvcNAQELBQADggEBABVeM0/W uLMAteimxj0qRjvQeFl3p1Bhfs4qtT+PaqalTou5AaBR2FRN9EK1wHiDfaoCqKu4 MpGUh9Cu8w0t03P44Fcv0pdjWN1UqwhC9DD5G6UsaQV5X6a0a96CBqKiiRcxMLOf 4KgXUDTQr60sAVUz9G2s9FF2Sz7rPcIQSzevn/g2P91gbSVcXjEGZeE9fgx6DdXm ut7TZYYPoE7Zs5ziBC/ZungxTy9XiawD/0W9Hi5FlIvGDc1AN79KdLyaFz/8lvXd yKB4fAV50qQN1WCi7Ee/r1ttKJdTSu7BKdnZA+7rZsY6TSWE+2YnYaajfsg7vB4D HX+MUqfn9u00+Is= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:54 2026 by rpki-client