$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a333030333a3a2f34382d3438203d3e203130323132.roa File: 323430333a623430303a333030333a3a2f34382d3438203d3e203130323132.roa (raw, json) Hash identifier: KeGLNz/gkD9P8Ok9fkcdhY93PtXLiiojrjiNFxOH5fw= Subject key identifier: 80:9C:30:59:5C:83:90:F6:80:94:F2:AF:28:AD:FD:C7:A2:14:BB:46 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 72134BBE3CC0443AE20F28AA0B9093CD14112C0D Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a333030333a3a2f34382d3438203d3e203130323132.roa Signing time: Mon 27 Apr 2026 08:37:06 +0000 ROA not before: Mon 27 Apr 2026 08:32:06 +0000 ROA not after: Mon 26 Apr 2027 08:37:06 +0000 asID: 10212 IP address blocks: 2403:b400:3003::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 09:27:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:13:4b:be:3c:c0:44:3a:e2:0f:28:aa:0b:90:93:cd:14:11:2c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 27 08:32:06 2026 GMT Not After : Apr 26 08:37:06 2027 GMT Subject: CN=809C30595C8390F68094F2AF28ADFDC7A214BB46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3c:19:e6:0e:ca:64:14:ce:ef:65:e3:c4:59: 3b:df:d1:2b:14:c0:c4:4d:1c:ed:7e:02:c6:49:3f: 9a:72:e0:ab:60:58:a1:3c:8e:8d:c7:25:13:36:0e: 6b:c6:21:af:10:0c:0d:fa:e4:07:0e:00:65:32:25: a6:b6:40:f6:96:fb:8b:52:8a:9c:ed:9b:a9:60:5a: 25:53:03:63:83:cf:01:06:3a:5d:f2:b5:5c:f4:fd: b8:52:2d:4c:82:d9:15:f9:e6:57:a0:f3:d5:16:54: f8:cd:d3:79:41:72:1c:03:12:6e:0d:19:ca:2d:c0: 6f:23:e5:5a:0e:b6:e5:b7:2a:fd:da:6a:19:49:3d: 88:78:a8:98:68:47:4b:08:a2:94:a9:77:f0:10:58: 5e:62:82:83:29:d1:dc:17:65:5d:82:15:46:fb:5f: b8:88:4c:f3:03:00:0c:5c:e9:5e:50:9b:93:66:4e: a1:56:c1:e3:de:45:0a:3f:ec:ff:ad:ab:29:09:34: 54:19:aa:50:a6:17:76:81:b9:07:93:69:7b:41:9a: 78:6a:dc:4d:50:e4:ba:77:a5:8c:1c:c1:a8:32:3f: cc:91:96:a4:70:7a:2d:6b:15:e7:37:38:a8:8d:bd: 40:54:65:c9:9e:85:3a:64:7f:fa:9f:e3:5a:34:4a: 4a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9C:30:59:5C:83:90:F6:80:94:F2:AF:28:AD:FD:C7:A2:14:BB:46 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a333030333a3a2f34382d3438203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b400:3003::/48 Signature Algorithm: sha256WithRSAEncryption 59:b4:ac:fc:35:b7:d2:b3:be:c5:a6:4f:ac:90:56:5d:0c:0d: cb:51:ee:17:6a:a2:f4:e0:5f:7b:fc:4b:8d:32:62:3d:f6:f0: 8e:fd:da:b2:dc:99:bf:fb:f6:5a:18:18:f4:cb:57:64:25:9d: 3e:84:60:c6:55:15:6e:df:6e:52:bb:26:55:c4:19:03:cd:9d: 4b:ab:79:ee:f7:bf:85:65:f0:22:34:b0:c0:61:55:26:9f:8c: 21:e9:29:23:9d:13:46:0e:a0:d6:ed:ec:a9:c8:71:9b:37:fe: 75:94:d3:d2:f6:b5:c1:37:ad:f8:92:4a:0b:4c:a5:17:08:d7: 16:c7:88:12:d4:d2:0b:87:6d:9c:fa:b7:e6:06:24:a4:7f:2b: 0f:8d:5c:b7:f8:58:cd:6c:b1:3d:47:a7:d4:ea:87:9e:fd:d5: 7a:06:92:32:e3:a8:85:df:a1:50:a8:d1:51:9d:a0:17:6c:5a: 4d:6b:90:35:6a:ae:08:1f:ca:13:69:7f:39:c7:5c:65:87:52: 1c:a0:e4:bd:5a:5a:96:14:ae:a5:37:6d:c9:32:09:75:07:81: 4a:fb:5c:99:b3:aa:87:73:9b:00:ee:44:fd:0e:56:de:dd:e5: 64:e4:04:ec:6e:ca:84:58:75:b4:c1:ae:f7:47:ce:70:26:61: a7:4d:35:39 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUchNLvjzARDriDyiqC5CTzRQRLA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjcwODMyMDZaFw0yNzA0MjYwODM3MDZaMDMxMTAvBgNV BAMTKDgwOUMzMDU5NUM4MzkwRjY4MDk0RjJBRjI4QURGREM3QTIxNEJCNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxPBnmDspkFM7vZePEWTvf0SsU wMRNHO1+AsZJP5py4KtgWKE8jo3HJRM2DmvGIa8QDA365AcOAGUyJaa2QPaW+4tS ipztm6lgWiVTA2ODzwEGOl3ytVz0/bhSLUyC2RX55leg89UWVPjN03lBchwDEm4N GcotwG8j5VoOtuW3Kv3aahlJPYh4qJhoR0sIopSpd/AQWF5igoMp0dwXZV2CFUb7 X7iITPMDAAxc6V5Qm5NmTqFWwePeRQo/7P+tqykJNFQZqlCmF3aBuQeTaXtBmnhq 3E1Q5Lp3pYwcwagyP8yRlqRwei1rFec3OKiNvUBUZcmehTpkf/qf41o0SkqFAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUgJwwWVyDkPaAlPKvKK39x6IUu0YwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzNDMwMzMz YTYyMzQzMDMwM2EzMzMwMzAzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzAz MjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkA7QAMAMwDQYJKoZIhvcNAQELBQADggEBAFm0rPw1 t9KzvsWmT6yQVl0MDctR7hdqovTgX3v8S40yYj328I792rLcmb/79loYGPTLV2Ql nT6EYMZVFW7fblK7JlXEGQPNnUuree73v4Vl8CI0sMBhVSafjCHpKSOdE0YOoNbt 7KnIcZs3/nWU09L2tcE3rfiSSgtMpRcI1xbHiBLU0guHbZz6t+YGJKR/Kw+NXLf4 WM1ssT1Hp9Tqh5791XoGkjLjqIXfoVCo0VGdoBdsWk1rkDVqrggfyhNpfznHXGWH Uhyg5L1aWpYUrqU3bckyCXUHgUr7XJmzqodzmwDuRP0OVt7d5WTkBOxuyoRYdbTB rvdHznAmYadNNTk= -----END CERTIFICATE-----Generated at Mon Apr 27 13:23:09 2026 by rpki-client