$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a316130383a3a2f34382d3438203d3e203130323132.roa File: 323430333a623430303a316130383a3a2f34382d3438203d3e203130323132.roa (raw, json) Hash identifier: aBAAF5fnyXeNrQKCs7VLA8QOOfs34+g3Ytka7EQZWjo= Subject key identifier: 91:CC:4D:74:C9:06:D1:90:DE:4E:C1:28:9A:09:93:75:E6:F2:C6:DA Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 164DB2A604671B02AFDAC6516A162E1BB09B2920 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a316130383a3a2f34382d3438203d3e203130323132.roa Signing time: Mon 27 Apr 2026 08:37:06 +0000 ROA not before: Mon 27 Apr 2026 08:32:06 +0000 ROA not after: Mon 26 Apr 2027 08:37:06 +0000 asID: 10212 IP address blocks: 2403:b400:1a08::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4d:b2:a6:04:67:1b:02:af:da:c6:51:6a:16:2e:1b:b0:9b:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 27 08:32:06 2026 GMT Not After : Apr 26 08:37:06 2027 GMT Subject: CN=91CC4D74C906D190DE4EC1289A099375E6F2C6DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:24:73:d0:23:b4:6c:c7:fb:c0:fd:4f:66:0a: 68:21:43:37:98:75:fb:b8:0a:22:12:a2:ec:55:7c: 83:66:b7:d4:ea:18:1d:fe:d4:ab:ad:e3:7b:1e:bd: 41:85:57:79:0f:7a:52:63:f1:e2:c9:9d:f8:fc:83: 11:61:65:ec:5d:b2:15:b9:d7:2c:b3:d6:94:ad:6b: a2:fd:1e:7c:87:d8:ab:17:71:46:1d:d1:bb:1b:d0: ab:51:08:4b:d3:d5:8c:3a:c0:ed:0d:f3:d3:67:30: 97:82:bc:e6:19:0d:12:ca:ba:2b:fd:54:07:39:1b: fc:92:76:84:07:54:9a:be:d7:fb:99:d9:36:94:71: 8b:f5:17:0a:a1:4a:75:19:38:d3:9d:35:b2:1b:18: 55:ad:98:2b:56:65:ea:c8:73:5b:8c:cf:96:8a:f8: 3a:49:1f:f3:5b:11:06:19:eb:5e:7e:a6:a8:c9:43: 4e:70:67:a9:a9:02:14:da:d3:8f:5e:26:23:eb:8a: 91:23:4a:ee:7c:9b:0c:1e:16:63:5a:02:c0:c8:aa: ac:fb:bc:7c:62:e8:5f:56:79:cf:44:37:ad:9c:4a: 59:30:34:33:ee:a1:c4:cc:85:80:35:c4:d5:1f:17: 4c:63:79:0c:c1:95:f5:3a:b4:72:f5:4e:75:90:c6: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CC:4D:74:C9:06:D1:90:DE:4E:C1:28:9A:09:93:75:E6:F2:C6:DA X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a316130383a3a2f34382d3438203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b400:1a08::/48 Signature Algorithm: sha256WithRSAEncryption 40:69:4f:11:70:c7:51:27:13:97:5b:31:07:47:16:02:87:93: 2f:8a:cf:24:01:56:ca:be:1b:aa:9f:79:db:f8:da:54:de:97: 26:21:ca:ee:97:54:5b:ec:ed:54:32:bc:bb:8c:5e:a6:28:b5: e8:1b:71:65:e6:4a:be:1f:25:04:ab:6d:f5:48:70:9a:f2:c5: a9:45:b5:2d:d1:64:e0:69:c9:98:2f:be:a4:93:4a:84:98:4b: eb:52:d8:b1:23:5c:ad:ac:d0:e5:8a:27:df:20:25:65:08:73: b8:1b:37:33:63:32:4e:b0:17:6a:07:d6:6a:0f:85:ec:22:0a: 4c:92:52:cc:fa:cb:b0:77:15:4a:73:f9:5b:6f:a7:cb:e0:c2: dc:3d:41:f8:43:47:b6:34:01:9b:e0:08:5d:52:91:b7:2f:eb: d9:7c:f7:ee:3b:ad:ff:0d:a2:22:4b:55:24:35:05:62:af:f2: 65:01:db:5a:fb:9d:43:e9:71:d2:24:6f:2f:2f:aa:4d:c8:af: ef:02:37:69:b5:ae:58:4c:0e:40:c6:5f:c9:1b:6e:0c:2f:72: db:1d:86:0e:34:66:43:d7:f9:5e:67:fa:8e:fb:41:13:c4:53: f8:d6:17:c2:dd:5f:ff:c5:f0:65:5b:43:9c:e9:d2:b8:42:88: 72:36:c2:33 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUFk2ypgRnGwKv2sZRahYuG7CbKSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjcwODMyMDZaFw0yNzA0MjYwODM3MDZaMDMxMTAvBgNV BAMTKDkxQ0M0RDc0QzkwNkQxOTBERTRFQzEyODlBMDk5Mzc1RTZGMkM2REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJHPQI7Rsx/vA/U9mCmghQzeY dfu4CiISouxVfINmt9TqGB3+1Kut43sevUGFV3kPelJj8eLJnfj8gxFhZexdshW5 1yyz1pSta6L9HnyH2KsXcUYd0bsb0KtRCEvT1Yw6wO0N89NnMJeCvOYZDRLKuiv9 VAc5G/ySdoQHVJq+1/uZ2TaUcYv1FwqhSnUZONOdNbIbGFWtmCtWZerIc1uMz5aK +DpJH/NbEQYZ615+pqjJQ05wZ6mpAhTa049eJiPripEjSu58mwweFmNaAsDIqqz7 vHxi6F9Wec9EN62cSlkwNDPuocTMhYA1xNUfF0xjeQzBlfU6tHL1TnWQxty/AgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUkcxNdMkG0ZDeTsEomgmTdebyxtowHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzNDMwMzMz YTYyMzQzMDMwM2EzMTYxMzAzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzAz MjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkA7QAGggwDQYJKoZIhvcNAQELBQADggEBAEBpTxFw x1EnE5dbMQdHFgKHky+KzyQBVsq+G6qfedv42lTelyYhyu6XVFvs7VQyvLuMXqYo tegbcWXmSr4fJQSrbfVIcJryxalFtS3RZOBpyZgvvqSTSoSYS+tS2LEjXK2s0OWK J98gJWUIc7gbNzNjMk6wF2oH1moPhewiCkySUsz6y7B3FUpz+Vtvp8vgwtw9QfhD R7Y0AZvgCF1Skbcv69l89+47rf8NoiJLVSQ1BWKv8mUB21r7nUPpcdIkby8vqk3I r+8CN2m1rlhMDkDGX8kbbgwvctsdhg40ZkPX+V5n+o77QRPEU/jWF8LdX//F8GVb Q5zp0rhCiHI2wjM= -----END CERTIFICATE-----Generated at Mon Apr 27 13:23:08 2026 by rpki-client