$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a393939393a3a2f34382d3438203d3e203234313431.roa File: 323430303a393630303a393939393a3a2f34382d3438203d3e203234313431.roa (raw, json) Hash identifier: mQUxD8YBkbZlhPn/d0clQ496uTqUpYidOatkAoz0eJ8= Subject key identifier: B5:6C:35:A7:95:86:59:31:BD:F4:EE:4E:7F:B8:94:90:E7:9E:50:8D Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Certificate serial: 3AE846405F138DB7F7E7C74EBE8A7A4A735DB18F Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a393939393a3a2f34382d3438203d3e203234313431.roa Signing time: Mon 13 Apr 2026 03:08:51 +0000 ROA not before: Mon 13 Apr 2026 03:03:51 +0000 ROA not after: Mon 12 Apr 2027 03:08:51 +0000 asID: 24141 IP address blocks: 2400:9600:9999::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 06:58:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e8:46:40:5f:13:8d:b7:f7:e7:c7:4e:be:8a:7a:4a:73:5d:b1:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F Validity Not Before: Apr 13 03:03:51 2026 GMT Not After : Apr 12 03:08:51 2027 GMT Subject: CN=B56C35A795865931BDF4EE4E7FB89490E79E508D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7a:81:8a:f7:00:d2:64:3b:8a:12:3a:81:90: fb:ba:33:58:d0:d3:4c:f1:37:99:ea:64:f4:63:21: 9d:54:d5:68:5f:c0:72:61:3a:ba:63:1b:85:54:a9: b2:cd:50:fe:dd:5f:6f:43:c7:51:22:db:73:09:f8: 21:40:3e:c7:45:f5:e4:a4:67:5b:c6:03:2b:01:e0: 7a:88:1c:df:81:5d:a9:89:20:cf:c9:48:f3:3a:af: 34:e1:4d:cc:e5:83:1b:60:92:02:4e:db:42:6a:51: fe:f7:53:65:3f:2a:1e:d8:14:ee:11:69:0f:78:8b: 9f:0a:90:86:dc:45:3c:17:41:af:2f:16:6a:3d:1d: 5e:7d:96:c6:bd:ef:49:5f:45:24:fe:74:67:ca:18: 1c:f1:e8:b9:90:26:8d:bc:e2:ba:c4:ea:08:cf:f2: 67:11:8b:30:c5:95:d3:38:35:4b:77:c8:db:d3:8f: 37:3b:3a:9a:19:bc:f6:30:3c:27:8f:c2:11:12:9d: 6e:9f:24:d9:4c:8e:d7:c8:92:c1:74:5e:77:f2:18: c2:1c:f1:8b:bf:7e:a2:38:c9:2b:d7:e3:25:b2:21: d6:16:15:03:9b:5c:47:cc:ef:cf:be:fe:ea:93:2b: a1:52:c1:c0:1b:8d:77:7d:1d:07:8b:fc:ce:bd:4e: c6:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6C:35:A7:95:86:59:31:BD:F4:EE:4E:7F:B8:94:90:E7:9E:50:8D X509v3 Authority Key Identifier: keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/323430303a393630303a393939393a3a2f34382d3438203d3e203234313431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:9600:9999::/48 Signature Algorithm: sha256WithRSAEncryption 6c:bf:da:1f:61:5c:32:79:4f:02:b9:cc:fc:d0:a4:13:34:a7: c8:77:47:f1:9f:ab:1c:81:70:ae:f0:85:01:57:84:9d:b0:57: 29:dd:7a:97:80:96:66:3f:2e:f9:12:d8:be:76:80:5f:80:6c: 0a:59:7f:d4:37:d4:28:03:7f:30:73:27:b0:7c:65:ea:83:0e: d3:e5:b9:d5:f0:a6:5d:95:97:84:92:d0:b2:2e:02:86:ae:30: 48:3c:45:61:65:d4:6a:cd:f5:ae:7c:7b:79:63:4f:22:92:45: af:87:a8:14:90:6e:54:a0:bd:01:95:fb:b0:d0:f4:c0:80:54: b7:f8:55:41:ae:58:98:08:63:de:96:c5:96:b5:eb:26:a9:32: 2e:c3:a7:1b:1b:d7:25:35:60:92:4b:1e:b9:b8:04:26:03:a6: 86:c9:7e:60:42:1c:26:16:56:64:60:40:ec:2c:70:de:62:2c: bb:53:1b:db:b5:84:ca:d2:88:39:15:f8:3f:8c:c2:5e:09:c6: 9c:5a:77:5a:07:93:40:54:01:cc:7c:ca:c6:6a:2f:27:6a:43: 0d:f7:27:53:88:b7:c0:35:16:51:c3:2c:da:f1:a6:8b:9c:e7: 21:c0:63:1c:e8:c7:9f:62:f9:82:29:66:7b:88:ed:0f:64:0e: 1c:50:6b:7d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUOuhGQF8Tjbf358dOvop6SnNdsY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG NzU0QkYzRjAeFw0yNjA0MTMwMzAzNTFaFw0yNzA0MTIwMzA4NTFaMDMxMTAvBgNV BAMTKEI1NkMzNUE3OTU4NjU5MzFCREY0RUU0RTdGQjg5NDkwRTc5RTUwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeeoGK9wDSZDuKEjqBkPu6M1jQ 00zxN5nqZPRjIZ1U1WhfwHJhOrpjG4VUqbLNUP7dX29Dx1Ei23MJ+CFAPsdF9eSk Z1vGAysB4HqIHN+BXamJIM/JSPM6rzThTczlgxtgkgJO20JqUf73U2U/Kh7YFO4R aQ94i58KkIbcRTwXQa8vFmo9HV59lsa970lfRST+dGfKGBzx6LmQJo284rrE6gjP 8mcRizDFldM4NUt3yNvTjzc7OpoZvPYwPCePwhESnW6fJNlMjtfIksF0XnfyGMIc 8Yu/fqI4ySvX4yWyIdYWFQObXEfM78++/uqTK6FSwcAbjXd9HQeL/M69TsYzAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUtWw1p5WGWTG99O5Of7iUkOeeUI0wHwYDVR0j BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzNDMwMzAz YTM5MzYzMDMwM2EzOTM5MzkzOTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzQz MTM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAJYAmZkwDQYJKoZIhvcNAQELBQADggEBAGy/2h9h XDJ5TwK5zPzQpBM0p8h3R/GfqxyBcK7whQFXhJ2wVyndepeAlmY/LvkS2L52gF+A bApZf9Q31CgDfzBzJ7B8ZeqDDtPludXwpl2Vl4SS0LIuAoauMEg8RWFl1GrN9a58 e3ljTyKSRa+HqBSQblSgvQGV+7DQ9MCAVLf4VUGuWJgIY96WxZa16yapMi7Dpxsb 1yU1YJJLHrm4BCYDpobJfmBCHCYWVmRgQOwscN5iLLtTG9u1hMrSiDkV+D+Mwl4J xpxad1oHk0BUAcx8ysZqLydqQw33J1OIt8A1FlHDLNrxpouc5yHAYxzox59i+YIp ZnuI7Q9kDhxQa30= -----END CERTIFICATE-----Generated at Mon Apr 13 13:54:50 2026 by rpki-client