$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a363636363a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a363636363a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: +AvnefpWtMAUm9UE5m5KZP4bdNrMwMSPqL5nChcs9nE= Subject key identifier: 6A:42:66:E9:48:10:FC:FA:CA:1F:CD:2F:0D:F5:DA:CD:C4:49:B0:04 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 376A74AA39BBF1C68883D104E1F9B1F21D91D996 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a363636363a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:08:52 +0000 ROA not before: Mon 13 Apr 2026 03:03:52 +0000 ROA not after: Mon 12 Apr 2027 03:08:52 +0000 asID: 24141 IP address blocks: 2400:9600:6666::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6a:74:aa:39:bb:f1:c6:88:83:d1:04:e1:f9:b1:f2:1d:91:d9:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:03:52 2026 GMT Not After : Apr 12 03:08:52 2027 GMT Subject: CN=6A4266E94810FCFACA1FCD2F0DF5DACDC449B004 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:04:4c:0e:3e:c6:20:68:2b:21:4d:d9:0c:75: e3:c7:3e:63:9b:b1:f2:c8:ee:d0:1f:ca:69:41:98: 5f:ea:08:74:e7:76:cd:fe:6f:09:f5:6e:7c:1c:07: b4:04:10:be:d1:0a:04:7a:c7:1c:89:7a:6e:be:fd: 45:4e:32:76:20:f4:d8:9d:c1:30:60:7c:78:6c:b8: a5:19:67:fc:dc:b2:58:77:63:f0:7a:e8:31:60:78: 53:c9:50:1c:6d:22:28:0a:5e:af:c0:98:f2:fa:a6: 00:2e:af:86:6e:46:0d:bb:af:83:94:72:ca:53:71: 8c:ad:a3:4f:e9:4c:83:cf:44:4a:27:68:83:09:ed: 3a:f4:6a:13:4c:29:2e:2a:34:d3:07:ae:64:2b:5d: 7f:db:39:0f:8b:72:88:df:22:32:d5:4e:12:3f:6a: 78:3c:c7:83:ca:b7:2d:a5:81:7a:50:b3:69:de:96: 6f:29:6d:d8:1d:cd:23:61:42:47:f3:2f:42:f7:20: 23:0e:4c:ed:a7:42:af:5a:80:19:a6:09:eb:dc:1d: 93:d8:27:84:47:ab:41:70:48:6c:46:97:e9:9f:a1: 42:1f:ae:b6:7e:2c:d7:b8:8d:fe:e2:36:4f:ae:9b: 50:70:8f:4b:66:c6:29:a0:b1:0c:74:db:79:49:da: 91:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:42:66:E9:48:10:FC:FA:CA:1F:CD:2F:0D:F5:DA:CD:C4:49:B0:04 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a363636363a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:6666::/48 Signature Algorithm: sha256WithRSAEncryption 81:2c:cb:8b:e1:65:f1:15:18:fb:09:bf:7a:d0:b1:71:9d:87: 09:1c:ee:59:b9:05:a3:1c:f7:0e:6c:9b:7c:1d:a7:64:23:8e: 54:fe:da:d4:00:64:29:8d:63:95:d7:51:57:38:93:81:66:77: 70:64:c6:19:e2:46:17:9c:c4:72:b3:e2:82:f5:07:30:9b:90: 5f:e1:78:39:8a:e4:1e:0b:b8:d1:da:c9:8d:eb:39:15:29:95: 75:2e:2b:fd:ab:89:87:f2:36:59:38:2b:9e:62:f6:94:85:4d: 69:8f:da:2c:b8:e7:05:f0:4e:6a:53:34:99:5f:ce:d1:0f:f8: d0:e4:70:1d:aa:d4:12:a2:48:e0:2a:f4:72:12:22:25:6f:82: 45:bf:46:bb:9a:33:59:07:5d:c7:01:27:d3:87:1f:6c:dd:9e: c8:e4:8a:96:18:d8:a9:59:db:eb:da:d9:ae:9c:f6:26:91:4d: 5a:d1:d7:b9:c8:ba:88:59:e7:1b:af:e1:5f:6f:ef:ab:19:7a: 68:08:30:bd:da:3c:5f:73:50:55:95:ce:49:82:50:af:42:44: 74:10:9c:9d:e5:5d:91:e8:ae:f9:0c:42:06:ef:ec:01:fb:bc: 46:2b:ca:25:c1:f9:ea:99:d3:7c:2e:26:19:61:83:94:5d:10: d4:d7:05:96 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUN2p0qjm78caIg9EE4fmx8h2R2ZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAzNTJaFw0yNzA0MTIwMzA4NTJaMDMxMTAvBgNV BAMTKDZBNDI2NkU5NDgxMEZDRkFDQTFGQ0QyRjBERjVEQUNEQzQ0OUIwMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5BEwOPsYgaCshTdkMdePHPmOb sfLI7tAfymlBmF/qCHTnds3+bwn1bnwcB7QEEL7RCgR6xxyJem6+/UVOMnYg9Nid wTBgfHhsuKUZZ/zcslh3Y/B66DFgeFPJUBxtIigKXq/AmPL6pgAur4ZuRg27r4OU cspTcYyto0/pTIPPREonaIMJ7Tr0ahNMKS4qNNMHrmQrXX/bOQ+LcojfIjLVThI/ ang8x4PKty2lgXpQs2nelm8pbdgdzSNhQkfzL0L3ICMOTO2nQq9agBmmCevcHZPY J4RHq0FwSGxGl+mfoUIfrrZ+LNe4jf7iNk+um1Bwj0tmximgsQx023lJ2pGVAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUakJm6UgQ/PrKH80vDfXazcRJsAQwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzNjM2MzYzNjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAZmYwDQYJKoZIhvcNAQELBQADggEBAIEsy4vh ZfEVGPsJv3rQsXGdhwkc7lm5BaMc9w5sm3wdp2QjjlT+2tQAZCmNY5XXUVc4k4Fm d3BkxhniRhecxHKz4oL1BzCbkF/heDmK5B4LuNHayY3rORUplXUuK/2riYfyNlk4 K55i9pSFTWmP2iy45wXwTmpTNJlfztEP+NDkcB2q1BKiSOAq9HISIiVvgkW/Rrua M1kHXccBJ9OHH2zdnsjkipYY2KlZ2+va2a6c9iaRTVrR17nIuohZ5xuv4V9v76sZ emgIML3aPF9zUFWVzkmCUK9CRHQQnJ3lXZHorvkMQgbv7AH7vEYryiXB+eqZ03wu Jhlhg5RdENTXBZY= -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:23 2026 by rpki-client