$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a663a3a2f34382d3634203d3e203536303431.roa File: 323430323a396238303a663a3a2f34382d3634203d3e203536303431.roa (raw, json) Hash identifier: V1+WI1DsPArZ27HzNNx7SOCVpyAwibKkvpfToYyMN0c= Subject key identifier: 9D:FB:28:D8:2C:23:0A:DB:DB:52:10:32:F7:B2:B3:16:EB:B2:EC:92 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 1DED697C95874856C6B9F84BAA2367751FAA9E85 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a663a3a2f34382d3634203d3e203536303431.roa Signing time: Fri 29 May 2026 07:14:09 +0000 ROA not before: Fri 29 May 2026 07:09:09 +0000 ROA not after: Fri 28 May 2027 07:14:09 +0000 asID: 56041 IP address blocks: 2402:9b80:f::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 23:13:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:ed:69:7c:95:87:48:56:c6:b9:f8:4b:aa:23:67:75:1f:aa:9e:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: May 29 07:09:09 2026 GMT Not After : May 28 07:14:09 2027 GMT Subject: CN=9DFB28D82C230ADBDB521032F7B2B316EBB2EC92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0f:c3:90:86:97:4a:d4:9f:e8:82:81:69:f1: 17:00:6b:1c:54:86:3d:96:74:2c:c6:70:76:50:0f: 53:d8:fb:6a:c0:cf:99:40:b7:f4:49:fc:bc:0d:98: cc:61:18:68:58:bc:0a:32:f4:ee:db:09:2b:d0:4d: 0c:3f:e6:32:80:c0:f4:7a:09:92:8a:d8:78:27:33: 15:55:8e:1d:7d:39:82:df:19:29:7b:04:4d:d8:5f: db:37:14:95:5f:d6:73:68:47:a8:fe:87:54:1b:86: 5c:11:dc:59:77:8e:a2:61:72:0f:38:07:c3:bd:01: c7:c5:da:6e:bb:47:b6:ef:0d:c2:1b:bd:1d:f6:5b: a7:52:67:f9:ed:83:6b:81:24:50:59:da:8c:ed:2a: b3:1a:94:30:87:bb:5e:ad:42:66:52:44:ff:a0:1f: d1:a4:53:f2:02:bc:14:d2:19:b0:9d:be:05:0f:ba: ed:31:49:ba:8f:ee:60:f0:0d:6f:f9:af:fb:3a:2c: b8:ad:88:bc:29:e2:70:b5:bb:5f:35:ca:d3:81:77: dc:62:d2:c0:28:df:48:41:a0:0c:9c:b6:27:79:b9: 32:a3:05:15:c4:24:1a:c7:80:35:b3:9f:c4:92:ea: cf:7a:44:79:7a:19:8d:b9:ec:2f:7e:42:1c:cf:29: 4b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:FB:28:D8:2C:23:0A:DB:DB:52:10:32:F7:B2:B3:16:EB:B2:EC:92 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a663a3a2f34382d3634203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:f::/48 Signature Algorithm: sha256WithRSAEncryption 01:ae:c5:ad:ac:d3:33:b2:dc:fe:c2:f9:8a:6b:dd:13:11:bf: ec:1d:3c:d9:98:f2:44:56:99:b6:6a:5d:f7:55:56:3b:97:31: d1:17:e5:3d:ea:a6:f0:ff:2b:86:c0:92:e0:7d:fb:96:76:08: 12:81:b1:49:81:b2:d8:57:ac:a3:d9:3d:4c:70:42:ce:1e:9d: de:1c:f4:31:b1:bf:89:b2:fc:fd:ba:97:6a:49:31:48:75:df: bb:88:b3:d4:a5:a5:d4:49:0d:0a:eb:83:77:48:04:96:9d:dc: 8e:36:9f:17:e7:ba:23:1d:0b:6b:98:10:a6:ce:de:b5:94:c9: 97:c9:b4:ae:d9:7c:0b:46:8c:64:f9:cd:6f:51:f1:6f:97:57: 85:f4:4d:26:f0:ee:0f:84:2f:48:57:5b:5f:c6:fa:fa:37:7e: 17:bc:d8:fd:4e:dd:62:73:a4:fd:8a:34:cd:51:2f:8e:aa:ea: cb:be:a0:3c:f0:3c:05:3f:9b:f4:24:72:5f:ec:51:6f:b6:43: c0:31:dd:84:ff:9b:5e:4b:ea:95:dc:c9:4c:d5:53:f8:c7:33: d0:84:83:a9:31:8f:35:6d:4d:a3:9d:e3:3e:0b:ae:eb:71:86: c2:9d:a8:94:3e:ac:64:7f:99:f1:6b:ec:02:5b:b4:92:1a:5c: ef:b4:b7:38 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUHe1pfJWHSFbGufhLqiNndR+qnoUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA1MjkwNzA5MDlaFw0yNzA1MjgwNzE0MDlaMDMxMTAvBgNV BAMTKDlERkIyOEQ4MkMyMzBBREJEQjUyMTAzMkY3QjJCMzE2RUJCMkVDOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1D8OQhpdK1J/ogoFp8RcAaxxU hj2WdCzGcHZQD1PY+2rAz5lAt/RJ/LwNmMxhGGhYvAoy9O7bCSvQTQw/5jKAwPR6 CZKK2HgnMxVVjh19OYLfGSl7BE3YX9s3FJVf1nNoR6j+h1QbhlwR3Fl3jqJhcg84 B8O9AcfF2m67R7bvDcIbvR32W6dSZ/ntg2uBJFBZ2oztKrMalDCHu16tQmZSRP+g H9GkU/ICvBTSGbCdvgUPuu0xSbqP7mDwDW/5r/s6LLitiLwp4nC1u181ytOBd9xi 0sAo30hBoAyctid5uTKjBRXEJBrHgDWzn8SS6s96RHl6GY257C9+QhzPKUtNAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUnfso2CwjCtvbUhAy97KzFuuy7JIwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTY2M2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AADzANBgkqhkiG9w0BAQsFAAOCAQEAAa7FrazTM7Lc/sL5 imvdExG/7B082ZjyRFaZtmpd91VWO5cx0RflPeqm8P8rhsCS4H37lnYIEoGxSYGy 2Feso9k9THBCzh6d3hz0MbG/ibL8/bqXakkxSHXfu4iz1KWl1EkNCuuDd0gElp3c jjafF+e6Ix0La5gQps7etZTJl8m0rtl8C0aMZPnNb1Hxb5dXhfRNJvDuD4QvSFdb X8b6+jd+F7zY/U7dYnOk/Yo0zVEvjqrqy76gPPA8BT+b9CRyX+xRb7ZDwDHdhP+b XkvqldzJTNVT+Mcz0ISDqTGPNW1No53jPguu63GGwp2olD6sZH+Z8WvsAlu0khpc 77S3OA== -----END CERTIFICATE-----Generated at Fri Jun 12 04:48:57 2026 by rpki-client