$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a613a3a2f34382d3634203d3e203536303431.roa File: 323430323a396238303a613a3a2f34382d3634203d3e203536303431.roa (raw, json) Hash identifier: ACUMmLddRIlQOdQOQcM1lzxTXWj8tV+dNXsJqHSHSvM= Subject key identifier: BD:D2:7C:FE:84:AC:45:D6:3C:26:FA:4F:E0:F5:08:A8:64:08:42:5B Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 32D68047C648430B6D925216286F0EFDBCB021F4 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a613a3a2f34382d3634203d3e203536303431.roa Signing time: Fri 29 May 2026 07:14:09 +0000 ROA not before: Fri 29 May 2026 07:09:09 +0000 ROA not after: Fri 28 May 2027 07:14:09 +0000 asID: 56041 IP address blocks: 2402:9b80:a::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d6:80:47:c6:48:43:0b:6d:92:52:16:28:6f:0e:fd:bc:b0:21:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: May 29 07:09:09 2026 GMT Not After : May 28 07:14:09 2027 GMT Subject: CN=BDD27CFE84AC45D63C26FA4FE0F508A86408425B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a4:b3:48:4b:0f:ec:9b:26:3b:f9:9b:c2:61: fb:85:7b:89:c3:37:8d:3a:e1:69:c9:ff:da:1e:11: 1a:db:b7:76:c6:eb:4e:93:72:d2:21:07:3b:2c:6b: a7:26:02:2c:3b:f0:8e:74:39:4f:cb:e8:11:3f:0c: 46:f4:40:67:f1:ed:31:43:31:80:bf:25:8c:3f:ce: a8:c7:ca:3b:10:09:9a:64:0c:5e:93:8d:9c:32:42: f4:8a:7e:0a:c1:73:bf:6e:10:75:0a:a4:bc:40:cf: 1b:5c:9b:01:af:a0:fb:d4:ac:7c:2c:49:a6:59:24: ce:a5:a0:7b:93:a0:fc:66:c3:2e:fc:7c:bf:45:4f: f6:1d:82:53:ba:04:a8:f0:b8:72:4d:cc:a6:87:6f: 0b:83:26:4b:1f:24:06:b2:0b:a3:fc:66:d5:5f:a4: a4:8f:cc:8b:63:f5:cd:45:00:58:35:5a:66:d5:27: 6c:94:b3:71:fc:85:0c:63:22:f3:0c:bc:e3:7d:03: d0:55:76:4d:55:03:0e:43:68:77:f1:de:bf:12:a0: 1e:3f:69:c0:8d:d7:b4:ff:de:45:27:d8:23:55:01: 23:58:75:7c:51:44:79:8d:64:f2:b3:86:51:a3:e8: 2e:91:c1:d6:be:fb:12:44:12:55:99:e8:83:55:2f: d6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D2:7C:FE:84:AC:45:D6:3C:26:FA:4F:E0:F5:08:A8:64:08:42:5B X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a613a3a2f34382d3634203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:a::/48 Signature Algorithm: sha256WithRSAEncryption 0f:1b:c5:f6:1a:04:9c:95:aa:d6:5c:79:56:5a:c0:81:3d:e5: 25:42:09:d0:b7:16:90:45:23:2d:3b:4d:56:2d:4c:dc:63:c1: 8a:e7:18:cf:46:e6:49:2a:24:1b:a3:c3:53:8d:b7:91:e3:8f: 72:ff:0e:0e:c5:66:08:f5:bd:d1:ce:f5:13:6d:bd:e5:52:cc: 1c:0d:26:d4:11:6b:47:47:0e:8b:ce:ae:87:86:c9:34:8b:22: aa:c3:2d:5a:ca:ac:19:25:ae:62:bb:e4:1b:b5:2c:e0:c2:4a: 7e:4f:0d:b6:3e:ca:0e:3d:00:c5:05:64:12:64:13:2b:4f:c9: 3a:28:b5:e2:fe:af:72:39:a7:be:b6:7e:e3:fa:1c:c4:49:15: 66:4b:69:eb:22:69:87:32:90:36:d9:e7:12:6c:27:29:f0:d7: 8e:e4:56:ee:02:f3:74:a2:d0:25:fe:35:63:43:e8:24:18:09: 0c:1b:6e:29:04:97:54:e3:2e:01:ad:16:f2:f8:69:31:de:b2: df:d6:3d:43:bf:a1:e8:ae:38:b5:9b:5c:bd:6c:ec:f6:64:87: 32:21:bf:73:04:84:27:ac:2f:8f:d3:43:62:17:5f:09:d0:9e: c5:c2:35:bf:dc:9f:7a:8a:41:1e:dc:05:6b:f1:07:26:07:d9: 47:98:78:26 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUMtaAR8ZIQwttklIWKG8O/bywIfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA1MjkwNzA5MDlaFw0yNzA1MjgwNzE0MDlaMDMxMTAvBgNV BAMTKEJERDI3Q0ZFODRBQzQ1RDYzQzI2RkE0RkUwRjUwOEE4NjQwODQyNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpLNISw/smyY7+ZvCYfuFe4nD N4064WnJ/9oeERrbt3bG606TctIhBzssa6cmAiw78I50OU/L6BE/DEb0QGfx7TFD MYC/JYw/zqjHyjsQCZpkDF6TjZwyQvSKfgrBc79uEHUKpLxAzxtcmwGvoPvUrHws SaZZJM6loHuToPxmwy78fL9FT/YdglO6BKjwuHJNzKaHbwuDJksfJAayC6P8ZtVf pKSPzItj9c1FAFg1WmbVJ2yUs3H8hQxjIvMMvON9A9BVdk1VAw5DaHfx3r8SoB4/ acCN17T/3kUn2CNVASNYdXxRRHmNZPKzhlGj6C6Rwda++xJEElWZ6INVL9YFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUvdJ8/oSsRdY8JvpP4PUIqGQIQlswHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTYxM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AACjANBgkqhkiG9w0BAQsFAAOCAQEADxvF9hoEnJWq1lx5 VlrAgT3lJUIJ0LcWkEUjLTtNVi1M3GPBiucYz0bmSSokG6PDU423keOPcv8ODsVm CPW90c71E2295VLMHA0m1BFrR0cOi86uh4bJNIsiqsMtWsqsGSWuYrvkG7Us4MJK fk8Ntj7KDj0AxQVkEmQTK0/JOii14v6vcjmnvrZ+4/ocxEkVZktp6yJphzKQNtnn EmwnKfDXjuRW7gLzdKLQJf41Y0PoJBgJDBtuKQSXVOMuAa0W8vhpMd6y39Y9Q7+h 6K44tZtcvWzs9mSHMiG/cwSEJ6wvj9NDYhdfCdCexcI1v9yfeopBHtwFa/EHJgfZ R5h4Jg== -----END CERTIFICATE-----Generated at Fri Jun 12 04:49:12 2026 by rpki-client