$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa File: 323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa (raw, json) Hash identifier: pAykhPIfYRHqnOno6qjefm8mNfKydtfwIInu7z0tmp4= Subject key identifier: C3:F3:BF:E0:54:31:83:B6:EF:ED:79:FA:C3:2A:7A:5B:68:71:35:4E Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Certificate serial: 0A56660621278CF5E24EB9799A118B9F49163691 Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa Signing time: Thu 25 Jun 2026 02:39:57 +0000 ROA not before: Thu 25 Jun 2026 02:34:57 +0000 ROA not after: Thu 24 Jun 2027 02:39:57 +0000 asID: 4837 IP address blocks: 2406:cac0:200::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:56:66:06:21:27:8c:f5:e2:4e:b9:79:9a:11:8b:9f:49:16:36:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Validity Not Before: Jun 25 02:34:57 2026 GMT Not After : Jun 24 02:39:57 2027 GMT Subject: CN=C3F3BFE0543183B6EFED79FAC32A7A5B6871354E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d7:62:b0:4e:5a:4d:56:f4:19:7d:3c:07:9a: 7d:bc:d8:2b:56:e7:4e:8b:a1:76:48:25:b2:17:67: 7a:51:12:47:cd:8a:13:3b:53:29:0c:db:51:9f:7f: f2:1e:01:80:29:e9:21:39:78:fb:f1:02:cf:03:ae: 78:c4:ab:16:c5:62:b3:4a:8c:a6:42:6f:d0:4e:fb: be:23:dd:75:0c:20:55:b7:81:9f:a4:65:7f:d6:f5: 26:5b:63:d5:7b:7c:e8:09:76:cd:0e:4b:ad:66:80: 28:d8:89:2b:eb:d5:ec:8a:b0:0b:ad:5e:1c:81:ff: 8d:b6:c0:a1:3d:3a:57:b0:f8:c3:df:a6:ea:c7:36: 71:d1:23:5a:7f:21:6c:67:f1:51:e0:44:0b:73:42: 7f:c4:c7:6a:5f:f6:80:bb:23:87:02:e0:08:55:70: 31:d8:c8:42:eb:ee:a1:fe:ad:16:9b:1c:e4:e8:17: 93:c2:b1:ae:97:61:0e:6f:5e:0c:ef:24:11:87:04: 74:5b:7a:54:a4:56:95:cb:77:29:20:60:74:c1:44: 9e:2b:31:81:9e:8f:dd:49:da:58:36:44:02:d2:5a: eb:18:cf:7c:56:88:d5:2b:60:1b:a3:6e:89:10:e7: b3:6b:41:e1:00:41:95:d2:06:0c:80:1e:82:a8:01: da:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F3:BF:E0:54:31:83:B6:EF:ED:79:FA:C3:2A:7A:5B:68:71:35:4E X509v3 Authority Key Identifier: keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3230303a3a2f34302d3430203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:cac0:200::/40 Signature Algorithm: sha256WithRSAEncryption 9d:5d:2a:9f:b3:71:c5:72:aa:b8:8b:2d:06:b6:d3:99:06:d5: 8a:20:9c:5b:3d:f6:f9:f6:99:76:40:48:61:f3:58:25:d9:64: f2:ef:1d:16:70:5d:d7:cf:e3:bd:73:1f:01:f3:4c:b9:26:93: 0c:07:d7:f7:6c:10:71:12:9d:87:f5:43:c3:5f:e2:9f:d9:13: 1c:d2:d1:72:4d:f5:eb:da:c1:b7:e6:a1:1d:54:cf:00:d1:5e: ff:b8:f8:b2:f4:7d:58:ee:77:5d:5c:e1:d7:0b:78:26:00:5b: 58:45:53:84:90:cd:cf:3d:a6:6d:08:22:d4:57:22:bc:52:5d: 26:6b:84:17:45:e7:5c:6e:8a:8f:55:4c:c3:d1:13:a4:e9:b4: 8b:ba:a1:43:19:16:4d:c8:e4:73:62:4d:2b:20:09:d3:76:be: f6:62:a3:fa:38:2d:e3:48:52:af:3e:fe:3b:b6:c1:f7:6e:41: a1:2f:31:10:7b:5d:12:ac:0b:76:6c:41:c8:2b:48:c4:fd:77: 13:b6:2a:f4:02:7b:57:7e:a8:88:bc:2f:03:e2:3b:7e:10:ff: a5:86:f1:57:3b:46:e4:c1:64:3a:4b:7a:f7:0e:55:9b:f9:04: ac:38:7a:e8:51:b2:99:b1:47:e1:48:f2:90:1d:a1:64:f8:6a: 41:b9:ef:28 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgIUClZmBiEnjPXiTrl5mhGLn0kWNpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2 MUMxRjhFRjAeFw0yNjA2MjUwMjM0NTdaFw0yNzA2MjQwMjM5NTdaMDMxMTAvBgNV BAMTKEMzRjNCRkUwNTQzMTgzQjZFRkVENzlGQUMzMkE3QTVCNjg3MTM1NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ12KwTlpNVvQZfTwHmn282CtW 506LoXZIJbIXZ3pREkfNihM7UykM21Gff/IeAYAp6SE5ePvxAs8DrnjEqxbFYrNK jKZCb9BO+74j3XUMIFW3gZ+kZX/W9SZbY9V7fOgJds0OS61mgCjYiSvr1eyKsAut XhyB/422wKE9Olew+MPfpurHNnHRI1p/IWxn8VHgRAtzQn/Ex2pf9oC7I4cC4AhV cDHYyELr7qH+rRabHOToF5PCsa6XYQ5vXgzvJBGHBHRbelSkVpXLdykgYHTBRJ4r MYGej91J2lg2RALSWusYz3xWiNUrYBujbokQ57NrQeEAQZXSBgyAHoKoAdoBAgMB AAGjggIcMIICGDAdBgNVHQ4EFgQUw/O/4FQxg7bv7Xn6wyp6W2hxNU4wHwYDVR0j BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1 M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk5OTE5MzM0Mzc5MDk0MDE3LzAvMzIzNDMwMzYz YTYzNjE2MzMwM2EzMjMwMzAzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNDM4MzMz Ny5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQS MBAwDgQCAAIwCAMGACQGysACMA0GCSqGSIb3DQEBCwUAA4IBAQCdXSqfs3HFcqq4 iy0GttOZBtWKIJxbPfb59pl2QEhh81gl2WTy7x0WcF3Xz+O9cx8B80y5JpMMB9f3 bBBxEp2H9UPDX+Kf2RMc0tFyTfXr2sG35qEdVM8A0V7/uPiy9H1Y7nddXOHXC3gm AFtYRVOEkM3PPaZtCCLUVyK8Ul0ma4QXRedcboqPVUzD0ROk6bSLuqFDGRZNyORz Yk0rIAnTdr72YqP6OC3jSFKvPv47tsH3bkGhLzEQe10SrAt2bEHIK0jE/XcTtir0 AntXfqiIvC8D4jt+EP+lhvFXO0bkwWQ6S3r3DlWb+QSsOHroUbKZsUfhSPKQHaFk +GpBue8o -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:02 2026 by rpki-client