$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a383830303a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a383830303a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: l98ZGHC7FXl3jVVqS1cdoxVQz831cwxK0E1YI1S/gm8= Subject key identifier: 65:D1:6E:CD:AF:B1:A5:B8:28:BB:39:75:F1:63:73:A4:68:37:F2:A0 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 1F3AA2BD71ED15C5E0C7917057345C5D31ACF088 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a383830303a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:08:51 +0000 ROA not before: Mon 13 Apr 2026 03:03:51 +0000 ROA not after: Mon 12 Apr 2027 03:08:51 +0000 asID: 24141 IP address blocks: 2400:9600:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:3a:a2:bd:71:ed:15:c5:e0:c7:91:70:57:34:5c:5d:31:ac:f0:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:03:51 2026 GMT Not After : Apr 12 03:08:51 2027 GMT Subject: CN=65D16ECDAFB1A5B828BB3975F16373A46837F2A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:49:88:ad:50:a1:a2:b0:45:7c:73:1c:49: 41:d7:97:6b:9d:8a:ec:a7:66:22:6d:b9:c6:96:b5: 71:a2:0d:9b:71:2b:e0:01:6d:3f:09:c2:07:26:ff: a0:f1:a3:c2:65:ac:21:be:7b:be:1d:c2:72:b9:31: d4:f4:14:a1:5d:64:66:79:f3:c1:ec:35:81:3f:41: 36:d7:3a:b2:49:81:d5:8e:fd:64:15:3f:3e:ff:f4: 03:57:7a:e7:5a:22:49:8b:63:4b:87:92:6a:f9:c2: 60:db:30:12:0f:db:e4:a9:68:9e:d5:24:da:b9:3c: 3d:8a:f3:da:96:0e:25:08:ad:d4:c1:66:7a:bd:fb: 04:89:8a:e1:d5:bb:67:46:62:26:cb:f6:e9:18:33: 40:39:86:34:0c:8a:cd:0a:40:a4:1a:e2:d4:e9:5e: 8f:df:15:82:c2:b4:ac:d2:49:6e:35:89:85:19:cd: 47:62:40:88:f5:fb:32:34:db:4d:0a:d5:d4:b7:09: ee:ac:34:6e:33:5e:8d:d3:51:93:ce:7b:a4:dc:4b: ce:a3:55:5e:48:e6:2b:25:b0:92:e2:2d:f3:f8:76: a2:cd:da:72:18:cc:ab:88:94:14:ca:a7:22:e8:60: 4f:e5:f2:ca:a6:fb:b9:50:6f:d0:74:5b:54:2c:0e: 80:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D1:6E:CD:AF:B1:A5:B8:28:BB:39:75:F1:63:73:A4:68:37:F2:A0 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a383830303a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:8800::/48 Signature Algorithm: sha256WithRSAEncryption 3b:a1:19:b1:94:a4:d6:74:93:e3:4d:e9:81:af:bf:9d:30:e3: 9d:d5:e6:60:3e:ef:e1:f7:14:72:bd:38:6f:49:42:d8:72:82: 8f:c8:3e:45:0b:b9:a1:cd:b8:85:4a:f9:74:3c:f2:06:2f:39: 9f:d5:4e:01:27:67:ed:48:3b:af:98:4a:88:bb:71:8c:31:a5: b6:66:a0:1c:34:53:9c:7e:8b:81:7c:ce:80:47:14:e9:25:56: ce:6d:4b:f2:42:5e:43:fa:45:f6:b7:83:d8:2a:b5:d7:e0:24: 6c:92:be:7f:ac:50:c1:04:b7:22:6a:9d:13:f2:b5:bd:3e:c7: 10:5e:19:84:84:8a:35:1d:cb:f6:a3:9b:3c:93:1a:0e:52:30: 82:bf:d5:59:e1:eb:32:fb:56:58:31:0f:d8:62:5e:1f:30:27: 38:00:cf:98:85:1a:a2:ae:ab:7a:9d:5d:fe:57:da:5c:79:64: 00:c7:7b:75:cb:41:1b:76:d1:1f:90:52:dd:18:b0:8d:3c:2e: d9:88:2e:1f:cb:5c:09:66:50:59:fc:92:f2:35:b0:5d:86:18: af:fe:3b:a5:14:25:47:f3:9b:17:d4:90:e5:a9:e8:36:d6:02: cf:e8:2e:5a:05:24:98:71:82:ed:f7:62:a2:d9:8b:2d:28:af: 61:2b:17:b3 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUHzqivXHtFcXgx5FwVzRcXTGs8IgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAzNTFaFw0yNzA0MTIwMzA4NTFaMDMxMTAvBgNV BAMTKDY1RDE2RUNEQUZCMUE1QjgyOEJCMzk3NUYxNjM3M0E0NjgzN0YyQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/UkmIrVChorBFfHMcSUHXl2ud iuynZiJtucaWtXGiDZtxK+ABbT8Jwgcm/6Dxo8JlrCG+e74dwnK5MdT0FKFdZGZ5 88HsNYE/QTbXOrJJgdWO/WQVPz7/9ANXeudaIkmLY0uHkmr5wmDbMBIP2+SpaJ7V JNq5PD2K89qWDiUIrdTBZnq9+wSJiuHVu2dGYibL9ukYM0A5hjQMis0KQKQa4tTp Xo/fFYLCtKzSSW41iYUZzUdiQIj1+zI0200K1dS3Ce6sNG4zXo3TUZPOe6TcS86j VV5I5islsJLiLfP4dqLN2nIYzKuIlBTKpyLoYE/l8sqm+7lQb9B0W1QsDoBZAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUZdFuza+xpbgouzl18WNzpGg38qAwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzODM4MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAiAAwDQYJKoZIhvcNAQELBQADggEBADuhGbGU pNZ0k+NN6YGvv50w453V5mA+7+H3FHK9OG9JQthygo/IPkULuaHNuIVK+XQ88gYv OZ/VTgEnZ+1IO6+YSoi7cYwxpbZmoBw0U5x+i4F8zoBHFOklVs5tS/JCXkP6Rfa3 g9gqtdfgJGySvn+sUMEEtyJqnRPytb0+xxBeGYSEijUdy/ajmzyTGg5SMIK/1Vnh 6zL7VlgxD9hiXh8wJzgAz5iFGqKuq3qdXf5X2lx5ZADHe3XLQRt20R+QUt0YsI08 LtmILh/LXAlmUFn8kvI1sF2GGK/+O6UUJUfzmxfUkOWp6DbWAs/oLloFJJhxgu33 YqLZiy0or2ErF7M= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:54 2026 by rpki-client