$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa File: 323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa (raw, json) Hash identifier: 6yt1vZTM0OmhcugzzBuMuaCYULNg8Jv+YWa4pkue5ss= Subject key identifier: B2:E4:4F:09:43:CB:31:83:A8:34:40:E6:73:40:FB:2B:27:06:EA:B6 Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 6B7BBC979760D8FB9136630AA1B55089CA1C53E2 Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa Signing time: Mon 13 Apr 2026 03:00:18 +0000 ROA not before: Mon 13 Apr 2026 02:55:18 +0000 ROA not after: Mon 12 Apr 2027 03:00:18 +0000 asID: 4812 IP address blocks: 2400:9600:8800::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:7b:bc:97:97:60:d8:fb:91:36:63:0a:a1:b5:50:89:ca:1c:53:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 02:55:18 2026 GMT Not After : Apr 12 03:00:18 2027 GMT Subject: CN=B2E44F0943CB3183A83440E67340FB2B2706EAB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:4f:6b:49:41:2a:eb:23:93:df:1b:93:9f:c5: 58:60:69:a5:00:7a:22:1d:1f:e3:d2:41:98:0e:bd: c5:b1:1e:3f:96:7b:14:b4:2e:2c:43:60:e1:af:ca: 8c:eb:16:d5:a0:36:64:41:7e:e5:44:68:1d:61:48: aa:ad:f2:5f:05:62:4b:35:f4:80:38:e1:54:cb:37: af:d4:40:b4:55:cf:87:d6:ff:37:af:16:b8:40:d3: 8b:a3:02:3b:41:97:52:bc:94:62:0a:54:96:e8:9c: d7:ff:28:35:1c:f2:d8:aa:6e:ed:4e:e3:93:75:cc: 21:77:60:8e:59:58:37:1d:14:3a:2e:c9:8f:b7:31: be:91:04:ae:b4:4d:6a:04:f5:f7:f0:60:36:45:ca: 00:30:81:5c:be:7a:d0:9a:73:b0:f3:62:9e:38:f4: 13:26:ff:d6:a3:50:d8:32:93:ef:ed:90:ce:7a:de: 1b:95:4c:2d:4b:c6:58:95:a4:03:8d:e1:2b:0e:d1: f7:db:d3:e5:01:e0:1f:6d:a1:bc:e5:2f:f0:22:43: 55:25:6b:35:0a:e3:58:aa:5b:f4:a5:fe:66:5e:08: 56:3e:21:04:08:60:48:c7:0b:97:b3:a7:c6:da:a2: 76:1a:5c:24:c2:5e:12:a1:02:de:75:f5:a7:a3:ab: 96:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E4:4F:09:43:CB:31:83:A8:34:40:E6:73:40:FB:2B:27:06:EA:B6 X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a383830303a3a2f34382d3438203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:8800::/48 Signature Algorithm: sha256WithRSAEncryption 06:35:09:b7:64:6d:d8:66:aa:01:af:fa:02:83:86:bc:c9:39: 98:58:b8:c0:46:1d:c7:b5:57:4d:aa:d3:3e:ef:55:aa:a2:18: 1a:b3:2a:27:a0:15:6a:83:93:14:f2:75:ad:fe:44:10:04:27: 07:78:6b:4a:29:06:4b:9c:28:62:35:6d:28:23:9c:d5:a1:95: 22:b6:5c:a5:18:67:65:4e:73:c4:62:fb:35:1d:b3:89:01:5b: d6:79:98:86:24:5f:46:b1:d4:bd:72:df:09:eb:ec:78:0b:4f: b4:fb:67:5a:02:63:b3:de:18:3c:a2:31:d8:5e:d0:52:dc:41: a4:29:ff:7a:93:71:5e:ed:4c:59:e1:63:5c:c4:54:cf:e7:81: 5a:93:32:0f:4c:1d:e2:28:78:62:fd:63:1f:74:f5:79:fc:c8: 24:76:01:d7:a4:89:16:00:50:f2:dc:c4:48:e1:50:60:d8:45: 7f:6e:4d:51:32:db:69:3c:cf:43:8c:9e:49:43:72:05:45:60: 10:01:c7:4a:98:97:9f:f0:06:73:3a:b1:85:fd:2d:50:9d:04: 35:3c:3f:4f:70:f0:f9:85:1a:4f:fb:4f:5e:51:ac:bd:23:38: 7c:93:65:ff:ea:64:1b:1d:86:73:f9:59:a8:bc:4b:14:72:a8: fa:ae:66:b6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUa3u8l5dg2PuRNmMKobVQicocU+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMjU1MThaFw0yNzA0MTIwMzAwMThaMDMxMTAvBgNV BAMTKEIyRTQ0RjA5NDNDQjMxODNBODM0NDBFNjczNDBGQjJCMjcwNkVBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnT2tJQSrrI5PfG5OfxVhgaaUA eiIdH+PSQZgOvcWxHj+WexS0LixDYOGvyozrFtWgNmRBfuVEaB1hSKqt8l8FYks1 9IA44VTLN6/UQLRVz4fW/zevFrhA04ujAjtBl1K8lGIKVJbonNf/KDUc8tiqbu1O 45N1zCF3YI5ZWDcdFDouyY+3Mb6RBK60TWoE9ffwYDZFygAwgVy+etCac7DzYp44 9BMm/9ajUNgyk+/tkM563huVTC1LxliVpAON4SsO0ffb0+UB4B9tobzlL/AiQ1Ul azUK41iqW/Sl/mZeCFY+IQQIYEjHC5ezp8baonYaXCTCXhKhAt519aejq5YtAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUsuRPCUPLMYOoNEDmc0D7KycG6rYwHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzODM4MzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0Mzgz MTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJACWAIgAMA0GCSqGSIb3DQEBCwUAA4IBAQAGNQm3ZG3Y ZqoBr/oCg4a8yTmYWLjARh3HtVdNqtM+71WqohgasyonoBVqg5MU8nWt/kQQBCcH eGtKKQZLnChiNW0oI5zVoZUitlylGGdlTnPEYvs1HbOJAVvWeZiGJF9GsdS9ct8J 6+x4C0+0+2daAmOz3hg8ojHYXtBS3EGkKf96k3Fe7UxZ4WNcxFTP54FakzIPTB3i KHhi/WMfdPV5/MgkdgHXpIkWAFDy3MRI4VBg2EV/bk1RMttpPM9DjJ5JQ3IFRWAQ AcdKmJef8AZzOrGF/S1QnQQ1PD9PcPD5hRpP+09eUay9Izh8k2X/6mQbHYZz+Vmo vEsUcqj6rma2 -----END CERTIFICATE-----Generated at Mon Apr 13 12:26:18 2026 by rpki-client