$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a313a3a2f34382d3634203d3e203536303431.roa File: 323430323a396238303a313a3a2f34382d3634203d3e203536303431.roa (raw, json) Hash identifier: udpb+nkW/uWcKyqEMNk2Syt5J4sdh2HJS5JNjppwkPI= Subject key identifier: D0:4D:11:38:F5:51:07:F3:1B:F7:29:6F:80:56:82:A1:B8:0A:90:96 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 071C48B13F5E945663EFE9265DA55DAA1ACA2F5A Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a313a3a2f34382d3634203d3e203536303431.roa Signing time: Fri 29 May 2026 07:14:10 +0000 ROA not before: Fri 29 May 2026 07:09:10 +0000 ROA not after: Fri 28 May 2027 07:14:10 +0000 asID: 56041 IP address blocks: 2402:9b80:1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1c:48:b1:3f:5e:94:56:63:ef:e9:26:5d:a5:5d:aa:1a:ca:2f:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: May 29 07:09:10 2026 GMT Not After : May 28 07:14:10 2027 GMT Subject: CN=D04D1138F55107F31BF7296F805682A1B80A9096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a1:08:a5:88:7d:00:a7:5a:a5:e5:5d:d6:d7: 5a:80:3e:ba:65:2e:7d:e9:5c:8d:04:eb:ac:43:ce: 88:57:87:65:2b:ca:c8:e5:df:75:7a:6f:50:5e:8e: ae:db:1c:6b:dc:4d:5b:4b:36:ed:66:23:8d:b3:00: e3:74:d3:1f:52:7c:d5:17:87:e0:ed:79:91:1e:69: e2:ef:bb:19:bb:c6:db:a8:19:b2:27:8e:15:27:53: 15:ef:12:61:04:7b:d6:15:30:0d:4f:c2:7d:65:1a: 9b:c2:04:21:d1:19:6f:e2:ed:3d:fe:21:55:fd:c8: 9c:a7:cc:d5:1f:44:bb:69:79:01:a7:ab:dd:f7:8e: d3:04:a2:b2:9a:92:41:a1:1e:dc:0f:e9:00:cb:1e: f7:3a:6e:45:b5:80:4f:5c:28:52:2b:6a:84:67:89: c1:cd:13:d1:8f:4e:61:8e:a3:ee:3d:c4:eb:87:2a: c2:ee:6f:0f:46:59:52:b9:15:52:48:5b:8b:8e:89: e5:d0:13:b8:69:88:99:ad:0a:0a:e2:9b:d2:66:0c: 08:be:fe:c2:89:61:62:da:05:99:4c:b0:a4:59:e3: 5f:03:f7:cc:91:22:eb:3d:9b:07:97:4f:c3:9e:fc: bb:b2:2c:24:ea:44:2a:52:75:d7:15:9d:e5:55:ed: b0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:4D:11:38:F5:51:07:F3:1B:F7:29:6F:80:56:82:A1:B8:0A:90:96 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a313a3a2f34382d3634203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:1::/48 Signature Algorithm: sha256WithRSAEncryption d1:bb:f9:17:5a:c8:b8:f0:eb:5f:66:24:6f:dd:7a:9e:70:e3: a9:74:1c:51:2f:0b:35:79:45:58:26:49:ab:7a:ee:a7:f4:33: 8e:c2:25:93:48:2e:00:c1:34:26:a7:a2:71:a5:76:c8:79:54: cd:2d:4c:07:18:8e:da:40:d6:ae:71:97:ad:db:60:3f:2d:db: 48:e5:6c:fe:1c:ff:33:0c:94:8f:23:f8:67:3c:50:41:0b:7c: 6d:fc:33:6b:f0:aa:a4:9d:ac:81:8d:12:55:80:6d:5e:14:3f: 15:63:29:4f:55:8d:1e:5a:f7:bf:e5:6c:ef:f3:88:71:86:d4: 84:07:d6:2e:59:65:e8:22:c9:e7:7e:98:07:6e:a0:2c:ea:27: 4e:83:84:87:19:cf:95:f4:63:c3:de:17:e8:7f:65:d5:03:5b: 25:38:29:bd:48:c9:b1:87:cd:b9:90:8a:36:e1:dc:c1:f9:5b: ac:28:b2:5b:b2:a1:f4:89:30:18:ac:f8:49:60:53:80:fd:5b: 59:33:e0:91:eb:20:d9:3d:57:df:f5:8d:1e:9f:07:fd:80:14: 70:09:db:d2:86:8f:a3:c8:6e:ae:cb:68:84:53:00:67:f2:bd: cc:ae:72:37:10:d2:39:98:87:11:b0:64:c8:44:a9:da:ff:ef: 51:fc:b8:9c -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUBxxIsT9elFZj7+kmXaVdqhrKL1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA1MjkwNzA5MTBaFw0yNzA1MjgwNzE0MTBaMDMxMTAvBgNV BAMTKEQwNEQxMTM4RjU1MTA3RjMxQkY3Mjk2RjgwNTY4MkExQjgwQTkwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDboQiliH0Ap1ql5V3W11qAPrpl Ln3pXI0E66xDzohXh2Urysjl33V6b1Bejq7bHGvcTVtLNu1mI42zAON00x9SfNUX h+DteZEeaeLvuxm7xtuoGbInjhUnUxXvEmEEe9YVMA1Pwn1lGpvCBCHRGW/i7T3+ IVX9yJynzNUfRLtpeQGnq933jtMEorKakkGhHtwP6QDLHvc6bkW1gE9cKFIraoRn icHNE9GPTmGOo+49xOuHKsLubw9GWVK5FVJIW4uOieXQE7hpiJmtCgrim9JmDAi+ /sKJYWLaBZlMsKRZ418D98yRIus9mweXT8Oe/LuyLCTqRCpSddcVneVV7bAvAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU0E0ROPVRB/Mb9ylvgFaCobgKkJYwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTMxM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AAATANBgkqhkiG9w0BAQsFAAOCAQEA0bv5F1rIuPDrX2Yk b916nnDjqXQcUS8LNXlFWCZJq3rup/QzjsIlk0guAME0JqeicaV2yHlUzS1MBxiO 2kDWrnGXrdtgPy3bSOVs/hz/MwyUjyP4ZzxQQQt8bfwza/CqpJ2sgY0SVYBtXhQ/ FWMpT1WNHlr3v+Vs7/OIcYbUhAfWLlll6CLJ536YB26gLOonToOEhxnPlfRjw94X 6H9l1QNbJTgpvUjJsYfNuZCKNuHcwflbrCiyW7Kh9IkwGKz4SWBTgP1bWTPgkesg 2T1X3/WNHp8H/YAUcAnb0oaPo8hurstohFMAZ/K9zK5yNxDSOZiHEbBkyESp2v/v Ufy4nA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:57 2026 by rpki-client