$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a333333333a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a333333333a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: 0DaLD8sIcl6aIdI6AWroVai1erLwckv91TvLoUahJC0= Subject key identifier: 2A:BD:A7:00:C2:88:72:FE:E9:15:F8:45:75:EF:56:CE:16:9E:33:67 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 183A5C92CFADA4F56BB14B74467071B221E84CB7 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a333333333a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:08:51 +0000 ROA not before: Mon 13 Apr 2026 03:03:51 +0000 ROA not after: Mon 12 Apr 2027 03:08:51 +0000 asID: 24141 IP address blocks: 2400:9600:3333::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:3a:5c:92:cf:ad:a4:f5:6b:b1:4b:74:46:70:71:b2:21:e8:4c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:03:51 2026 GMT Not After : Apr 12 03:08:51 2027 GMT Subject: CN=2ABDA700C28872FEE915F84575EF56CE169E3367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f2:a9:3b:cd:8e:04:7e:36:f1:7c:dc:21:8d: 34:58:64:b4:37:38:67:e5:17:46:ef:ac:46:83:a2: 98:76:03:eb:e9:90:57:0e:c7:94:0f:4c:ba:d2:37: c7:0e:32:04:54:c1:27:7c:09:e2:15:b1:fa:7b:fb: 9d:3b:44:8c:35:f1:90:3f:f3:f1:10:01:f0:c5:5b: 99:a6:3c:f7:a6:fe:7a:6c:3a:46:60:86:c1:89:4f: c4:5f:41:1c:35:50:33:96:3a:8e:88:f6:e1:70:b9: f8:2e:57:d5:8a:92:5f:6c:51:5a:d1:99:97:2a:87: 34:a0:3c:8b:1f:55:66:cb:a3:6e:8d:c8:2c:57:e1: f9:3b:33:c0:6c:f4:38:dc:10:50:b2:e9:6f:e0:b1: fa:43:ce:f2:21:92:7d:3b:a5:19:49:38:90:0a:e5: 99:42:45:79:f6:1a:78:0b:18:04:79:55:25:23:72: 89:2f:d6:60:5f:14:dd:d5:59:77:ed:51:cc:9c:a8: 3f:53:8a:6a:8f:c9:00:d2:a5:f3:83:ec:19:d8:7a: 0a:26:df:e7:ef:4c:1f:33:76:cb:f2:1e:f4:b9:c2: 29:44:31:86:17:ee:50:fb:8d:33:7d:29:8e:8f:28: 29:53:13:ae:f0:67:2c:b6:f0:88:c6:66:34:eb:b9: 1a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BD:A7:00:C2:88:72:FE:E9:15:F8:45:75:EF:56:CE:16:9E:33:67 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a333333333a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:3333::/48 Signature Algorithm: sha256WithRSAEncryption 1f:31:20:39:59:f2:60:82:40:38:81:98:03:f6:96:7a:88:c4: 42:00:4f:14:5f:21:c5:2d:2d:07:16:2b:f0:c6:5d:3f:dc:f1: 6d:15:f4:16:38:4f:1d:75:ff:9d:e3:cc:bc:37:b8:f0:7a:19: 0b:26:7d:96:e5:7f:39:d0:b0:ff:9b:c5:18:99:58:ab:e7:4b: 0d:49:42:49:5f:ba:89:6e:0e:c8:6e:ed:31:e0:90:52:94:62: 18:a2:53:8a:db:74:05:25:67:12:f6:e4:b6:fd:ab:21:a5:d9: 91:2c:9e:91:0d:fc:8c:b8:3a:e8:1d:3f:b7:66:64:1b:eb:44: 35:55:58:7f:08:4a:0e:8b:22:ab:dc:74:8c:d4:4e:42:dd:14: 07:3b:e1:10:4f:34:24:d2:90:a8:7a:7b:f6:84:85:c5:0d:c1: fc:cd:97:30:c1:50:3c:04:01:cb:d7:fb:a5:87:1a:06:18:f6: cc:4d:9f:26:8b:1b:29:83:f5:0a:cc:22:2b:29:d0:f5:9d:d3: 01:83:0b:60:60:ea:89:f8:18:30:1d:64:55:2d:6f:de:b2:d5: f3:c9:fd:5c:a8:82:4b:d6:a5:20:33:cb:b5:bf:60:0d:0d:64: 0e:15:54:20:06:ed:c1:37:dd:f6:5b:81:5a:b0:01:92:d3:8b: 95:3f:4c:59 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUGDpcks+tpPVrsUt0RnBxsiHoTLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAzNTFaFw0yNzA0MTIwMzA4NTFaMDMxMTAvBgNV BAMTKDJBQkRBNzAwQzI4ODcyRkVFOTE1Rjg0NTc1RUY1NkNFMTY5RTMzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS8qk7zY4EfjbxfNwhjTRYZLQ3 OGflF0bvrEaDoph2A+vpkFcOx5QPTLrSN8cOMgRUwSd8CeIVsfp7+507RIw18ZA/ 8/EQAfDFW5mmPPem/npsOkZghsGJT8RfQRw1UDOWOo6I9uFwufguV9WKkl9sUVrR mZcqhzSgPIsfVWbLo26NyCxX4fk7M8Bs9DjcEFCy6W/gsfpDzvIhkn07pRlJOJAK 5ZlCRXn2GngLGAR5VSUjcokv1mBfFN3VWXftUcycqD9TimqPyQDSpfOD7BnYegom 3+fvTB8zdsvyHvS5wilEMYYX7lD7jTN9KY6PKClTE67wZyy28IjGZjTruRr/AgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUKr2nAMKIcv7pFfhFde9WzhaeM2cwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzMzMzMzMzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAMzMwDQYJKoZIhvcNAQELBQADggEBAB8xIDlZ 8mCCQDiBmAP2lnqIxEIATxRfIcUtLQcWK/DGXT/c8W0V9BY4Tx11/53jzLw3uPB6 GQsmfZblfznQsP+bxRiZWKvnSw1JQklfuoluDshu7THgkFKUYhiiU4rbdAUlZxL2 5Lb9qyGl2ZEsnpEN/Iy4OugdP7dmZBvrRDVVWH8ISg6LIqvcdIzUTkLdFAc74RBP NCTSkKh6e/aEhcUNwfzNlzDBUDwEAcvX+6WHGgYY9sxNnyaLGymD9QrMIisp0PWd 0wGDC2Bg6on4GDAdZFUtb96y1fPJ/VyogkvWpSAzy7W/YA0NZA4VVCAG7cE33fZb gVqwAZLTi5U/TFk= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:50 2026 by rpki-client