$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a323232323a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a323232323a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: 8WJwYm5WbpZ/hsGNl+8D3BsMtAIbzcNSNcNVFfNQa5I= Subject key identifier: 5D:20:F2:C1:2B:67:F7:27:25:03:75:A0:91:59:4F:31:8B:40:17:30 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 19F2B3A52E760C10ADA5C6A69A0F4639EAEDAA12 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a323232323a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:08:51 +0000 ROA not before: Mon 13 Apr 2026 03:03:51 +0000 ROA not after: Mon 12 Apr 2027 03:08:51 +0000 asID: 24141 IP address blocks: 2400:9600:2222::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:f2:b3:a5:2e:76:0c:10:ad:a5:c6:a6:9a:0f:46:39:ea:ed:aa:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:03:51 2026 GMT Not After : Apr 12 03:08:51 2027 GMT Subject: CN=5D20F2C12B67F727250375A091594F318B401730 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:00:7c:f1:a5:ad:93:c4:f3:dd:25:db:75:fd: fc:0a:06:e3:2a:d2:b8:98:95:42:c4:12:95:fc:1c: 25:e6:42:4b:60:12:e6:f7:ca:e0:70:51:d8:05:74: 4f:c2:6d:48:33:74:51:72:45:9b:0c:09:05:c4:c7: a1:17:54:6f:da:23:0e:4a:b8:50:51:72:41:4a:f1: 1e:85:04:7a:7e:f2:09:d2:04:cd:68:84:c4:e8:e5: 25:6b:f2:be:c2:66:83:fe:47:fe:b1:88:4b:10:8c: a8:39:36:d6:42:60:14:64:8a:c7:5d:78:dc:bf:13: 99:43:1c:91:01:7d:50:ff:c0:87:34:8a:92:22:59: 9a:2f:e0:38:a5:51:9a:33:29:a7:f9:8e:be:b9:fa: ab:ee:f2:9d:fa:4c:fb:60:f1:91:a8:1c:48:53:00: c5:52:6a:13:6e:40:a8:bf:03:f9:9e:0b:30:f9:90: 85:4b:ba:99:a3:3d:a9:46:7f:a9:73:27:ce:aa:ee: 78:e0:9d:ab:04:5b:13:65:5f:70:fa:1b:67:89:85: ea:db:e5:8a:5b:e6:cc:c8:b7:0c:c6:83:92:a3:4d: e2:a5:fd:db:56:ad:c2:37:23:35:1e:e9:59:2a:5d: 32:25:47:cf:34:04:9f:cc:3e:b2:d5:dc:98:ea:5b: 9f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:20:F2:C1:2B:67:F7:27:25:03:75:A0:91:59:4F:31:8B:40:17:30 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a323232323a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:2222::/48 Signature Algorithm: sha256WithRSAEncryption 12:eb:27:61:06:d3:d2:a6:e6:a2:b7:94:99:5c:3d:b8:f0:ce: 93:e6:7b:ad:bc:35:ba:97:5a:a6:d5:eb:ee:1a:db:44:f4:5f: 28:33:9d:70:97:ad:57:ed:da:03:03:95:a7:62:50:45:0a:0c: 9f:9f:40:c2:b7:fe:d3:b2:51:6e:26:71:c3:fa:bd:88:9f:3f: 86:c2:d7:d9:e2:0f:c8:49:3d:5b:bd:d1:b8:a7:76:e6:0f:7e: 70:71:e8:a5:f0:21:5b:1e:ff:04:df:44:87:e5:91:9f:bb:68: b5:b7:99:b9:6c:73:da:ce:25:29:ca:68:23:83:a9:55:4e:bb: 5a:42:d8:4b:05:de:66:5b:4b:ae:cc:3c:d0:65:d0:3f:65:14: 3d:6f:86:ba:8e:d8:fe:6d:dd:89:2e:e0:d2:9d:80:6d:fa:17: b3:db:eb:93:fc:16:d4:7a:16:89:b8:26:22:64:27:27:1e:4e: 77:fa:b6:8a:ce:e9:8e:11:72:56:c1:fa:81:57:13:b5:68:c9: d7:69:05:b2:e4:3c:84:a9:dd:12:40:69:c2:90:95:cd:80:53: cf:eb:15:b2:14:42:31:bc:b0:49:7f:8a:65:cc:92:ab:5b:ee: 18:20:62:d1:2a:2b:bd:f7:ed:20:7b:2c:46:71:63:17:97:1a: 34:2e:e1:0e -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUGfKzpS52DBCtpcammg9GOertqhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAzNTFaFw0yNzA0MTIwMzA4NTFaMDMxMTAvBgNV BAMTKDVEMjBGMkMxMkI2N0Y3MjcyNTAzNzVBMDkxNTk0RjMxOEI0MDE3MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0AHzxpa2TxPPdJdt1/fwKBuMq 0riYlULEEpX8HCXmQktgEub3yuBwUdgFdE/CbUgzdFFyRZsMCQXEx6EXVG/aIw5K uFBRckFK8R6FBHp+8gnSBM1ohMTo5SVr8r7CZoP+R/6xiEsQjKg5NtZCYBRkisdd eNy/E5lDHJEBfVD/wIc0ipIiWZov4DilUZozKaf5jr65+qvu8p36TPtg8ZGoHEhT AMVSahNuQKi/A/meCzD5kIVLupmjPalGf6lzJ86q7njgnasEWxNlX3D6G2eJherb 5Ypb5szItwzGg5KjTeKl/dtWrcI3IzUe6VkqXTIlR880BJ/MPrLV3JjqW5+DAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUXSDywStn9yclA3WgkVlPMYtAFzAwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzMjMyMzIzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAIiIwDQYJKoZIhvcNAQELBQADggEBABLrJ2EG 09Km5qK3lJlcPbjwzpPme628NbqXWqbV6+4a20T0XygznXCXrVft2gMDladiUEUK DJ+fQMK3/tOyUW4mccP6vYifP4bC19niD8hJPVu90binduYPfnBx6KXwIVse/wTf RIflkZ+7aLW3mblsc9rOJSnKaCODqVVOu1pC2EsF3mZbS67MPNBl0D9lFD1vhrqO 2P5t3Yku4NKdgG36F7Pb65P8FtR6Fom4JiJkJyceTnf6torO6Y4RclbB+oFXE7Vo yddpBbLkPISp3RJAacKQlc2AU8/rFbIUQjG8sEl/imXMkqtb7hggYtEqK7337SB7 LEZxYxeXGjQu4Q4= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:55 2026 by rpki-client