$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3a2f34302d3430203d3e2034383337.roa File: 323430363a636163303a3a2f34302d3430203d3e2034383337.roa (raw, json) Hash identifier: gxfaw1dKY2Q6qP+Id0fg+A7WgGq55ytTLa6OoTsm1Xw= Subject key identifier: 47:72:B2:BE:51:A6:BC:68:F0:7A:48:74:56:E1:86:03:C0:6E:A8:2C Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Certificate serial: 0F12FF88DE4B6119FE9E36B00B956E35035936D8 Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3a2f34302d3430203d3e2034383337.roa Signing time: Thu 25 Jun 2026 02:39:56 +0000 ROA not before: Thu 25 Jun 2026 02:34:56 +0000 ROA not after: Thu 24 Jun 2027 02:39:56 +0000 asID: 4837 IP address blocks: 2406:cac0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 19:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:12:ff:88:de:4b:61:19:fe:9e:36:b0:0b:95:6e:35:03:59:36:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Validity Not Before: Jun 25 02:34:56 2026 GMT Not After : Jun 24 02:39:56 2027 GMT Subject: CN=4772B2BE51A6BC68F07A487456E18603C06EA82C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:93:04:e7:1d:ea:91:51:d1:8f:ae:f7:28:0e: 98:2e:c9:ac:44:a1:77:62:52:e7:43:7c:e9:c3:7a: bf:6a:10:7e:14:76:3f:9f:55:4d:10:cc:86:42:7c: 4b:32:a5:44:db:d2:08:7a:f0:cb:43:dd:36:2d:aa: d2:11:14:31:f3:ec:be:40:59:81:5d:d5:ae:38:ca: 44:9a:23:dc:03:68:40:19:e6:6a:34:54:3c:79:b3: a9:4a:53:c0:c5:5c:10:69:75:e4:79:29:d1:36:f9: 2e:5d:f1:30:82:90:df:57:e7:d8:52:fd:88:13:82: 4a:b9:7b:36:a0:41:d9:fe:b5:5f:52:62:9e:d6:e2: b0:71:50:21:4c:f6:6e:67:3d:8b:09:73:44:0e:15: 7b:3f:d9:f6:88:d0:35:83:24:a8:95:88:62:71:82: 14:43:ba:ab:3d:0d:7c:26:ca:cc:f0:73:84:f5:16: fe:21:f6:c7:32:c1:55:1d:bc:4e:dd:0d:14:40:f0: 90:78:f6:db:6d:84:ea:06:d0:7c:37:5d:3d:ba:35: d4:5a:d5:8b:30:96:cc:31:3d:1b:ab:ed:ee:94:07: 52:dd:4b:ab:12:7d:75:cc:91:00:6d:d5:03:21:65: 89:23:56:18:b4:26:10:8c:7f:79:f4:e9:d7:7a:30: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:72:B2:BE:51:A6:BC:68:F0:7A:48:74:56:E1:86:03:C0:6E:A8:2C X509v3 Authority Key Identifier: keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3a2f34302d3430203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:cac0::/40 Signature Algorithm: sha256WithRSAEncryption 3e:20:1e:cf:34:b0:38:b6:eb:9b:b6:82:77:59:ec:cd:c9:a7: b4:b3:1c:ce:83:fd:56:b7:5f:b8:41:8e:9d:19:47:03:64:35: 7a:13:06:03:77:33:2b:05:23:9a:0a:5f:ee:13:db:ee:e4:32: 9c:ec:7f:ca:cd:77:93:46:27:af:aa:0d:07:e1:7b:10:82:ec: ff:4b:cf:70:66:55:b6:bd:85:76:db:1b:4d:72:4c:39:e4:80: c8:c3:99:9b:bb:76:d9:75:b8:f0:85:b4:11:10:9d:58:2b:17: a7:a3:e1:f2:d7:1d:ef:76:c6:77:55:8b:de:e0:98:ac:46:c4: cc:da:6f:25:88:9f:0e:af:ee:e9:8c:18:aa:9d:40:89:ca:28: de:52:e5:b1:e7:0f:8e:6d:62:8c:62:30:22:6b:c5:8c:df:b1: b4:87:1a:3c:29:79:cb:7e:e4:c9:0e:54:ea:77:cf:8c:f0:52: 16:7c:40:0d:67:0c:39:46:7d:ff:3b:82:1d:20:8c:30:47:84: 9c:15:4e:98:19:2c:1b:c3:c1:5f:2d:7b:0b:93:8a:7b:64:3c: 40:27:40:71:1f:53:1f:6b:eb:b0:21:93:8b:10:89:31:09:db: 5d:e3:2a:40:fa:c0:b7:94:01:0a:dc:20:c2:74:c1:49:96:27: fb:df:5a:04 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDxL/iN5LYRn+njawC5VuNQNZNtgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2 MUMxRjhFRjAeFw0yNjA2MjUwMjM0NTZaFw0yNzA2MjQwMjM5NTZaMDMxMTAvBgNV BAMTKDQ3NzJCMkJFNTFBNkJDNjhGMDdBNDg3NDU2RTE4NjAzQzA2RUE4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtkwTnHeqRUdGPrvcoDpguyaxE oXdiUudDfOnDer9qEH4Udj+fVU0QzIZCfEsypUTb0gh68MtD3TYtqtIRFDHz7L5A WYFd1a44ykSaI9wDaEAZ5mo0VDx5s6lKU8DFXBBpdeR5KdE2+S5d8TCCkN9X59hS /YgTgkq5ezagQdn+tV9SYp7W4rBxUCFM9m5nPYsJc0QOFXs/2faI0DWDJKiViGJx ghRDuqs9DXwmyszwc4T1Fv4h9scywVUdvE7dDRRA8JB49ttthOoG0Hw3XT26NdRa 1YswlswxPRur7e6UB1LdS6sSfXXMkQBt1QMhZYkjVhi0JhCMf3n06dd6MFI3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUR3KyvlGmvGjwekh0VuGGA8BuqCwwHwYDVR0j BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1 M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5OTE5MzM0Mzc5MDk0MDE3LzAvMzIzNDMwMzYzYTYz NjE2MzMwM2EzYTJmMzQzMDJkMzQzMDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgD BgAkBsrAADANBgkqhkiG9w0BAQsFAAOCAQEAPiAezzSwOLbrm7aCd1nszcmntLMc zoP9VrdfuEGOnRlHA2Q1ehMGA3czKwUjmgpf7hPb7uQynOx/ys13k0Ynr6oNB+F7 EILs/0vPcGZVtr2FdtsbTXJMOeSAyMOZm7t22XW48IW0ERCdWCsXp6Ph8tcd73bG d1WL3uCYrEbEzNpvJYifDq/u6YwYqp1Aicoo3lLlsecPjm1ijGIwImvFjN+xtIca PCl5y37kyQ5U6nfPjPBSFnxADWcMOUZ9/zuCHSCMMEeEnBVOmBksG8PBXy17C5OK e2Q8QCdAcR9TH2vrsCGTixCJMQnbXeMqQPrAt5QBCtwgwnTBSZYn+99aBA== -----END CERTIFICATE-----Generated at Tue Jul 14 21:55:28 2026 by rpki-client