$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a323a3a2f34382d3634203d3e203536303431.roa File: 323430323a396238303a323a3a2f34382d3634203d3e203536303431.roa (raw, json) Hash identifier: icRMJ0hdNwR85F1nRmLhMzsyF+jqg18bTMkCiV7Nd4U= Subject key identifier: 8D:FC:7A:89:8E:20:2F:5E:48:35:49:A9:79:F6:CA:70:70:02:2F:2C Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 09EB5D88BAC161670E21DCD95A52CBFFED7B26A7 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a323a3a2f34382d3634203d3e203536303431.roa Signing time: Fri 29 May 2026 07:14:10 +0000 ROA not before: Fri 29 May 2026 07:09:10 +0000 ROA not after: Fri 28 May 2027 07:14:10 +0000 asID: 56041 IP address blocks: 2402:9b80:2::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:eb:5d:88:ba:c1:61:67:0e:21:dc:d9:5a:52:cb:ff:ed:7b:26:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: May 29 07:09:10 2026 GMT Not After : May 28 07:14:10 2027 GMT Subject: CN=8DFC7A898E202F5E483549A979F6CA7070022F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9b:23:c3:42:0d:f1:96:20:09:08:63:7a:ca: 49:ff:70:b3:36:2d:11:bb:93:f7:23:65:a4:a9:14: 68:54:1a:d0:32:e5:36:95:3b:22:b6:6d:e6:e0:9a: ba:50:10:7a:f9:99:57:67:88:8b:5a:31:9d:5e:fc: 71:e5:ca:35:9b:51:6b:03:a8:3f:c5:72:44:0a:b1: 09:f4:63:62:e5:99:7a:50:25:01:71:9e:99:0e:7b: 7e:9a:bb:19:e7:2a:11:69:cc:d8:39:bc:b7:3c:00: 65:d0:d9:1b:a6:44:3a:64:b4:9a:ab:a4:7e:0d:0c: 7a:49:e2:92:5c:c2:26:d8:aa:1a:11:49:ed:60:cf: 84:44:45:d7:dd:26:08:23:78:46:1e:67:53:18:08: d3:d5:88:73:cf:2b:e3:a3:dc:98:8b:b5:3a:19:9b: 12:d7:f8:fe:67:12:e3:48:31:50:2f:df:12:54:8e: cf:65:18:11:52:43:99:65:f7:80:36:75:29:49:af: 0b:38:d0:98:25:f1:9d:ce:7c:30:11:b9:ea:00:9b: 25:02:12:30:cc:f2:0a:85:98:bc:4d:16:df:59:c4: bf:a2:e5:54:fb:7a:ef:48:ca:20:5d:e8:c9:e3:75: ab:ad:04:21:1f:cf:69:d8:ae:b7:87:51:d4:8d:1d: be:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FC:7A:89:8E:20:2F:5E:48:35:49:A9:79:F6:CA:70:70:02:2F:2C X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a323a3a2f34382d3634203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:2::/48 Signature Algorithm: sha256WithRSAEncryption 25:9d:62:01:3f:55:b3:81:eb:3c:3e:58:99:d6:e0:10:cc:dc: d5:bc:44:ab:3e:f0:ca:26:96:cf:32:ca:e8:67:29:8a:b3:33: 58:87:ac:42:bc:4b:5d:c2:af:bc:7d:b3:cc:a1:59:96:4c:ab: f1:85:55:a4:9f:70:a4:05:4f:62:6e:9a:a1:86:e9:81:fe:95: eb:78:9d:6b:1c:fb:13:be:ed:3f:ad:3c:a8:1e:44:ef:a5:f7: ab:50:30:21:c7:95:cd:24:5a:95:52:e6:78:f8:0f:47:7e:70: c4:50:70:a4:eb:77:b0:3d:cb:6e:d2:8d:9d:ba:28:72:c9:fb: 60:d9:ee:83:5a:96:44:7c:59:e5:19:98:c7:72:08:99:06:2c: 14:ea:31:c8:48:ec:72:d1:13:e6:12:a5:fd:f2:c1:12:bf:e3: 57:7e:8d:09:93:88:89:d6:2a:1d:69:96:04:2f:25:df:a0:b8: b1:b5:dc:48:66:e5:d5:7f:dc:20:d5:a8:84:31:c4:fd:15:65: 9e:f0:64:a8:b5:36:74:23:d0:df:fa:c5:1a:34:e8:d3:bb:5e: f8:01:9d:96:c8:b8:bf:de:00:07:34:49:7c:1c:ea:3b:35:20: d0:fe:7c:7a:fd:7f:5b:35:4e:c4:e7:f9:12:fb:30:29:88:ea: 89:86:2c:82 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUCetdiLrBYWcOIdzZWlLL/+17JqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA1MjkwNzA5MTBaFw0yNzA1MjgwNzE0MTBaMDMxMTAvBgNV BAMTKDhERkM3QTg5OEUyMDJGNUU0ODM1NDlBOTc5RjZDQTcwNzAwMjJGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzmyPDQg3xliAJCGN6ykn/cLM2 LRG7k/cjZaSpFGhUGtAy5TaVOyK2bebgmrpQEHr5mVdniItaMZ1e/HHlyjWbUWsD qD/FckQKsQn0Y2LlmXpQJQFxnpkOe36auxnnKhFpzNg5vLc8AGXQ2RumRDpktJqr pH4NDHpJ4pJcwibYqhoRSe1gz4RERdfdJggjeEYeZ1MYCNPViHPPK+Oj3JiLtToZ mxLX+P5nEuNIMVAv3xJUjs9lGBFSQ5ll94A2dSlJrws40Jgl8Z3OfDARueoAmyUC EjDM8gqFmLxNFt9ZxL+i5VT7eu9IyiBd6MnjdautBCEfz2nYrreHUdSNHb4bAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUjfx6iY4gL15INUmpefbKcHACLywwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTMyM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AAAjANBgkqhkiG9w0BAQsFAAOCAQEAJZ1iAT9Vs4HrPD5Y mdbgEMzc1bxEqz7wyiaWzzLK6GcpirMzWIesQrxLXcKvvH2zzKFZlkyr8YVVpJ9w pAVPYm6aoYbpgf6V63idaxz7E77tP608qB5E76X3q1AwIceVzSRalVLmePgPR35w xFBwpOt3sD3LbtKNnboocsn7YNnug1qWRHxZ5RmYx3IImQYsFOoxyEjsctET5hKl /fLBEr/jV36NCZOIidYqHWmWBC8l36C4sbXcSGbl1X/cINWohDHE/RVlnvBkqLU2 dCPQ3/rFGjTo07te+AGdlsi4v94ABzRJfBzqOzUg0P58ev1/WzVOxOf5EvswKYjq iYYsgg== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:58 2026 by rpki-client