$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/323430333a653763303a313a3a2f34382d3438203d3e2034383437.roa File: 323430333a653763303a313a3a2f34382d3438203d3e2034383437.roa (raw, json) Hash identifier: Qzmbn7+BiqPdX+/uBh1aA5bogjMd1mjMZMN2yWhJeCc= Subject key identifier: 73:95:90:64:2A:55:50:04:87:06:F2:17:B3:40:A2:91:46:14:D2:26 Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Certificate serial: 7CA399A199437F73DFB61FC9DB003993AAA4DA74 Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/323430333a653763303a313a3a2f34382d3438203d3e2034383437.roa Signing time: Sat 27 Jun 2026 17:12:31 +0000 ROA not before: Sat 27 Jun 2026 17:07:31 +0000 ROA not after: Sat 26 Jun 2027 17:12:31 +0000 asID: 4847 IP address blocks: 2403:e7c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 13:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:a3:99:a1:99:43:7f:73:df:b6:1f:c9:db:00:39:93:aa:a4:da:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Validity Not Before: Jun 27 17:07:31 2026 GMT Not After : Jun 26 17:12:31 2027 GMT Subject: CN=739590642A5550048706F217B340A2914614D226 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c1:10:37:02:69:1b:f9:78:08:2b:98:6f:eb: 8c:d0:ed:dd:97:77:84:af:e3:35:9a:5c:ff:4c:6a: f7:8a:6c:97:81:7b:f2:3c:85:9e:aa:8e:38:8e:b7: 87:61:b7:d2:2f:37:30:e0:57:62:19:1b:a6:13:d6: fb:e2:8f:2e:d5:b2:d0:b4:54:97:ce:b9:c5:7a:67: 57:97:ad:01:03:c3:5a:a0:e6:2c:cf:4a:ee:b4:09: 63:fd:c9:5c:07:b1:7f:9b:e3:cd:cb:a6:63:f4:48: 6f:c6:9a:5d:b1:e9:75:4f:a5:4f:e1:3d:9f:54:e1: bc:c2:79:2b:1f:bb:b4:8c:22:e1:de:e6:98:16:b2: eb:2c:18:b2:69:21:4f:1d:89:e4:fa:15:ad:b8:0f: 9f:22:21:90:e2:2d:9f:af:cf:8e:4c:96:79:74:be: 24:51:1f:4b:b3:2f:4e:84:18:4a:fb:74:a2:2e:16: 35:59:4c:53:e2:07:c6:9b:e4:25:9d:f9:03:92:39: 38:21:a4:b6:d8:1d:d9:6b:b1:ba:fc:91:1a:af:d5: 59:3b:71:5a:cd:a9:0c:96:a0:01:b1:4a:8a:84:25: 34:01:50:b6:10:1c:7c:0a:19:e2:a2:96:30:44:3e: 53:5b:af:3b:92:6c:0e:c8:0c:2c:07:fc:0b:2d:97: 94:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:95:90:64:2A:55:50:04:87:06:F2:17:B3:40:A2:91:46:14:D2:26 X509v3 Authority Key Identifier: keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/323430333a653763303a313a3a2f34382d3438203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:e7c0:1::/48 Signature Algorithm: sha256WithRSAEncryption 64:3e:10:7d:d6:d2:78:dd:87:c1:c7:d6:01:6b:c1:14:d6:23: 6b:9d:ad:11:08:a4:dc:51:81:ed:d3:56:0c:17:cb:aa:4c:59: bc:9c:28:a1:d4:6c:61:6f:6a:c1:72:83:0a:4e:61:e8:e5:a4: 75:18:e9:29:bb:4b:06:bb:38:5b:8c:e6:6b:26:36:38:a9:a9: c6:11:2b:9d:b8:d5:e1:37:74:23:80:57:26:a6:81:87:89:1f: ef:13:67:07:5c:5e:4a:a0:b6:23:fc:db:ef:8a:d0:35:80:4e: ff:17:fb:61:a9:9b:56:c5:02:ae:6b:a3:a2:0b:72:47:34:0c: 83:c0:47:b6:70:e5:57:9d:41:90:b8:14:24:93:29:ca:f7:9a: fc:45:98:97:8a:cc:30:2f:d3:fd:34:c1:f4:e8:9c:65:1d:ab: 5c:c1:9d:af:a4:3b:f5:16:ce:8b:4c:d2:59:24:ba:03:52:34: f9:39:4a:ef:4e:04:f8:95:5b:9a:c4:33:5a:61:95:07:5a:dd: 81:a4:44:06:e5:1e:b4:ed:33:e3:1b:5b:b7:c8:c3:f9:3a:cd: a7:99:4a:46:62:6d:83:31:8a:9a:aa:9e:77:e8:4b:44:05:fc: d6:34:d8:da:26:6e:a5:0f:61:aa:b2:c2:89:7e:b3:0b:12:28: 97:56:76:c6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUfKOZoZlDf3Pfth/J2wA5k6qk2nQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2 MjlEMEYzRTAeFw0yNjA2MjcxNzA3MzFaFw0yNzA2MjYxNzEyMzFaMDMxMTAvBgNV BAMTKDczOTU5MDY0MkE1NTUwMDQ4NzA2RjIxN0IzNDBBMjkxNDYxNEQyMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbwRA3Amkb+XgIK5hv64zQ7d2X d4Sv4zWaXP9MaveKbJeBe/I8hZ6qjjiOt4dht9IvNzDgV2IZG6YT1vvijy7VstC0 VJfOucV6Z1eXrQEDw1qg5izPSu60CWP9yVwHsX+b483LpmP0SG/Gml2x6XVPpU/h PZ9U4bzCeSsfu7SMIuHe5pgWsussGLJpIU8dieT6Fa24D58iIZDiLZ+vz45Mlnl0 viRRH0uzL06EGEr7dKIuFjVZTFPiB8ab5CWd+QOSOTghpLbYHdlrsbr8kRqv1Vk7 cVrNqQyWoAGxSoqEJTQBULYQHHwKGeKiljBEPlNbrzuSbA7IDCwH/Astl5QVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUc5WQZCpVUASHBvIXs0CikUYU0iYwHwYDVR0j BBgwFoAU6+i05up8WLLlbjxZn4ahMmKdDz4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY1NjI3MTU1ODQ0MzAyNy8wL0VCRThCNEU2RUE3QzU4QjJFNTZFM0M1OTlGODZB MTMyNjI5RDBGM0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2MjlEMEYzRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwODY1NjI3MTU1ODQ0MzAyNy8wLzMyMzQzMDMzM2E2 NTM3NjMzMDNhMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM4MzQzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQD58AAATANBgkqhkiG9w0BAQsFAAOCAQEAZD4QfdbSeN2HwcfWAWvB FNYja52tEQik3FGB7dNWDBfLqkxZvJwoodRsYW9qwXKDCk5h6OWkdRjpKbtLBrs4 W4zmayY2OKmpxhErnbjV4Td0I4BXJqaBh4kf7xNnB1xeSqC2I/zb74rQNYBO/xf7 YambVsUCrmujogtyRzQMg8BHtnDlV51BkLgUJJMpyvea/EWYl4rMMC/T/TTB9Oic ZR2rXMGdr6Q79RbOi0zSWSS6A1I0+TlK704E+JVbmsQzWmGVB1rdgaREBuUetO0z 4xtbt8jD+TrNp5lKRmJtgzGKmqqed+hLRAX81jTY2iZupQ9hqrLCiX6zCxIol1Z2 xg== -----END CERTIFICATE-----Generated at Tue Jul 14 21:56:45 2026 by rpki-client