$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e2034353338.roa File: 323430323a653734303a3a2f33322d3332203d3e2034353338.roa (raw, json) Hash identifier: IxNmfYj51w/bq1DwSzLAy5cD3aVP/sUfnP92xwzus20= Subject key identifier: 5D:5F:7C:16:FE:49:FE:1B:D5:30:A4:B4:D4:4E:C7:50:3D:BB:CD:64 Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145 Certificate serial: 3F628789E3AD9488405CB4C20700F698D9A34913 Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e2034353338.roa Signing time: Fri 29 May 2026 06:41:02 +0000 ROA not before: Fri 29 May 2026 06:36:02 +0000 ROA not after: Fri 28 May 2027 06:41:02 +0000 asID: 4538 IP address blocks: 2402:e740::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 10:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:62:87:89:e3:ad:94:88:40:5c:b4:c2:07:00:f6:98:d9:a3:49:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145 Validity Not Before: May 29 06:36:02 2026 GMT Not After : May 28 06:41:02 2027 GMT Subject: CN=5D5F7C16FE49FE1BD530A4B4D44EC7503DBBCD64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dc:06:e0:ce:9e:41:c5:0b:e1:e3:cf:d7:01: 32:16:52:d1:98:4d:da:77:c1:32:d1:b2:a6:c4:f7: 49:3c:8c:e3:7e:3b:06:06:e7:0f:f2:57:84:22:8a: f7:74:b9:af:55:9c:25:d8:f9:24:55:ff:75:cf:69: 7b:95:9c:87:df:f7:6a:33:57:13:d8:a6:61:9d:2d: 43:df:c4:db:3c:22:d8:a4:a8:3c:04:59:07:48:44: 0e:b7:09:48:67:e4:06:8f:1b:0c:15:bc:04:4a:25: d7:b6:a5:ec:a7:19:ea:14:35:0c:4b:5a:43:da:30: aa:88:15:e9:04:22:64:f7:16:04:00:23:a8:86:21: 97:c7:b0:ab:a5:53:a0:28:5b:1b:79:12:bb:2a:1b: 4c:ab:e6:ce:7d:83:cb:73:1c:3e:38:e5:35:83:09: 2a:15:d6:e9:66:09:a1:8e:9a:91:fe:b7:9e:91:e9: c6:62:a7:2a:6f:a7:05:fb:2d:ad:e9:3b:be:2d:63: 49:7e:db:ef:ef:dd:05:b4:54:76:dc:d8:38:3d:a9: 5c:89:18:6a:cd:07:8c:70:c1:2d:8e:e0:a0:9e:cc: d6:86:0f:a1:7b:30:33:8e:bb:c3:ba:e6:e7:6f:78: 76:3c:9b:82:f3:80:c2:46:53:25:fc:50:b5:d7:3f: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:5F:7C:16:FE:49:FE:1B:D5:30:A4:B4:D4:4E:C7:50:3D:BB:CD:64 X509v3 Authority Key Identifier: keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d3332203d3e2034353338.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:e740::/32 Signature Algorithm: sha256WithRSAEncryption 1a:e0:82:6b:48:2a:39:cc:a2:25:a9:3e:4b:5c:b8:4d:31:ef: b0:18:4e:85:b7:c7:86:46:28:a6:98:91:b6:f1:14:e9:5b:74: e8:d4:10:ae:ff:81:83:40:e7:dc:cb:24:7e:e7:bd:4e:76:40: f1:08:5a:09:2f:b9:1d:73:79:a8:6d:04:41:16:c1:d1:87:f2: d2:e6:71:a4:fc:da:fc:81:9e:1a:70:cb:25:5f:d3:7f:61:87: 33:4c:fb:f8:e0:33:e8:1b:af:7a:f2:d0:a0:5e:28:17:a6:16: b2:ff:47:48:49:c8:cd:9e:cc:b9:be:cc:a8:4a:f6:2f:60:2a: e5:c5:0d:73:33:c5:dd:94:49:be:3b:7f:9f:b4:96:96:35:c7: eb:71:e6:00:9d:67:48:5e:f2:5b:1a:f8:45:15:08:95:fc:72: f2:de:c1:1a:d4:b9:ec:fe:0e:a1:4a:b1:36:a0:40:90:2c:13: d7:c0:98:70:4d:96:40:55:16:b1:5f:ac:6b:8b:87:9d:85:f5: 93:4e:d5:ea:cb:f9:7a:bc:13:9c:89:24:9f:f2:0e:ef:e5:66: 3d:52:79:f0:89:07:eb:a5:8b:d5:47:e1:58:ac:4a:cd:0c:44: 55:bf:03:c7:c0:f3:1e:c8:fb:08:a1:af:08:71:0a:f6:5e:e1: 41:01:ce:ff -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUP2KHieOtlIhAXLTCBwD2mNmjSRMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZB NkY0MTE0NTAeFw0yNjA1MjkwNjM2MDJaFw0yNzA1MjgwNjQxMDJaMDMxMTAvBgNV BAMTKDVENUY3QzE2RkU0OUZFMUJENTMwQTRCNEQ0NEVDNzUwM0RCQkNENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3Abgzp5BxQvh48/XATIWUtGY Tdp3wTLRsqbE90k8jON+OwYG5w/yV4Qiivd0ua9VnCXY+SRV/3XPaXuVnIff92oz VxPYpmGdLUPfxNs8ItikqDwEWQdIRA63CUhn5AaPGwwVvARKJde2peynGeoUNQxL WkPaMKqIFekEImT3FgQAI6iGIZfHsKulU6AoWxt5ErsqG0yr5s59g8tzHD445TWD CSoV1ulmCaGOmpH+t56R6cZipypvpwX7La3pO74tY0l+2+/v3QW0VHbc2Dg9qVyJ GGrNB4xwwS2O4KCezNaGD6F7MDOOu8O65udveHY8m4LzgMJGUyX8ULXXPxM9AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUXV98Fv5J/hvVMKS01E7HUD27zWQwHwYDVR0j BBgwFoAUxfc9rMX2VsCNjSxd7HJWz6b0EUUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk0ODg4NTY0OTU1NTQ1Ny8wL0M1RjczREFDQzVGNjU2QzA4RDhEMkM1REVDNzI1 NkNGQTZGNDExNDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZBNkY0MTE0NS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAwOTQ4ODg1NjQ5NTU1NDU3LzAvMzIzNDMwMzIzYTY1 MzczNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzQzNTMzMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAudAMA0GCSqGSIb3DQEBCwUAA4IBAQAa4IJrSCo5zKIlqT5LXLhNMe+wGE6F t8eGRiimmJG28RTpW3To1BCu/4GDQOfcyyR+571OdkDxCFoJL7kdc3mobQRBFsHR h/LS5nGk/Nr8gZ4acMslX9N/YYczTPv44DPoG6968tCgXigXphay/0dIScjNnsy5 vsyoSvYvYCrlxQ1zM8XdlEm+O3+ftJaWNcfrceYAnWdIXvJbGvhFFQiV/HLy3sEa 1Lns/g6hSrE2oECQLBPXwJhwTZZAVRaxX6xri4edhfWTTtXqy/l6vBOciSSf8g7v 5WY9UnnwiQfrpYvVR+FYrErNDERVvwPHwPMeyPsIoa8IcQr2XuFBAc7/ -----END CERTIFICATE-----Generated at Fri May 29 22:58:13 2026 by rpki-client