$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa File: 323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa (raw, json) Hash identifier: 5Cssj0oD+zq7BYXS/ITi5VE8H5pPSZbUy+Vkm3Mrsh8= Subject key identifier: 01:F6:9F:B4:A2:4B:36:74:D2:78:13:0D:57:C7:CA:0F:A3:0B:1F:89 Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Certificate serial: 09F4FA6DCE378492A98A1CCDB2D9A8C93F16AAA3 Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa Signing time: Sat 30 May 2026 22:13:18 +0000 ROA not before: Sat 30 May 2026 22:08:18 +0000 ROA not after: Sat 29 May 2027 22:13:18 +0000 asID: 4808 IP address blocks: 2403:e7c0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:27:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f4:fa:6d:ce:37:84:92:a9:8a:1c:cd:b2:d9:a8:c9:3f:16:aa:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E Validity Not Before: May 30 22:08:18 2026 GMT Not After : May 29 22:13:18 2027 GMT Subject: CN=01F69FB4A24B3674D278130D57C7CA0FA30B1F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:96:c9:a6:c2:ed:76:01:43:6a:d4:c9:4a:b1: fe:8a:f3:61:c1:25:3e:f0:6b:91:26:f1:56:e8:13: 7b:5a:9c:ae:91:a1:d6:12:30:1c:27:ef:ae:b7:4a: 4c:25:41:b6:36:a3:4c:0e:38:35:c3:cc:80:c2:07: 37:b9:f9:83:3a:5e:45:08:6d:03:07:df:55:93:ea: 46:17:c8:ec:c7:13:62:de:b3:e5:ea:2b:63:7f:5e: ac:4f:89:aa:b7:59:46:fc:fd:0e:c2:2a:d7:cb:20: f4:00:3f:38:5f:da:60:6f:4d:70:d0:63:f1:9a:6d: a8:47:de:79:18:dc:8c:12:6c:b2:ee:c1:0e:51:f0: 81:81:db:60:7b:6a:fc:f2:1c:4f:df:ef:e2:4d:f0: 99:d5:67:16:1b:7e:7e:77:67:85:44:81:ba:56:f5: 6c:1b:0f:17:28:02:13:95:58:bb:3e:fc:a2:58:62: 69:6b:92:cc:fa:75:1d:3f:b0:2a:5f:50:13:12:10: 74:87:d2:77:37:a2:5c:27:21:d9:a9:ac:50:c4:93: c8:7c:48:b9:bc:3e:bf:89:7f:9a:29:e3:58:9b:fc: 27:9b:88:76:b1:2c:de:46:c2:67:cc:94:99:84:08: 58:f9:d9:9e:c9:93:07:2f:11:a2:6a:8d:f8:da:d2: a1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:F6:9F:B4:A2:4B:36:74:D2:78:13:0D:57:C7:CA:0F:A3:0B:1F:89 X509v3 Authority Key Identifier: keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/323430333a653763303a333a3a2f34382d3438203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:e7c0:3::/48 Signature Algorithm: sha256WithRSAEncryption 69:8e:6f:45:55:36:7f:aa:3e:1b:8f:3e:b1:2e:4f:73:aa:c9: e3:e0:08:ef:71:0d:32:ec:0b:b6:5b:53:03:fe:96:35:4c:dc: af:4e:b6:83:1d:76:f3:81:6c:1b:0f:0d:61:56:d1:5e:c0:25: 93:d3:36:90:b7:cf:fa:0a:8b:58:d5:d7:d9:72:51:b9:6a:6b: 84:c8:ec:26:ff:ab:e2:f1:73:00:5e:8f:e2:b5:0a:56:7c:95: 21:af:00:47:32:b0:2b:f1:d0:eb:08:32:a0:2d:aa:ff:0a:b0: 06:8e:34:2f:38:95:29:8a:0a:1c:34:67:dd:2a:7e:d1:c6:67: eb:1f:fd:27:3d:23:3c:b0:62:fc:4a:8c:7b:18:0a:d7:a4:dc: 8f:8d:9f:dd:53:82:b8:b4:f6:40:99:71:52:8d:98:73:59:e0: bc:43:7d:1f:3a:85:ab:3b:c3:fd:85:23:2d:c0:3e:a8:ea:79: e7:4c:b9:4d:31:4c:1c:8b:36:c1:92:7a:0c:7e:97:44:a9:b8: 43:e3:50:8c:c3:a7:54:fe:2f:9a:50:b8:a1:97:4e:cd:92:0f: 49:fd:30:e0:22:c5:0c:1a:ca:03:52:80:07:45:ba:86:1d:b1: 06:83:2b:0b:54:59:ec:56:b7:22:c2:ec:4b:c0:de:bf:ec:59: fe:28:a6:10 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUCfT6bc43hJKpihzNstmoyT8WqqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2 MjlEMEYzRTAeFw0yNjA1MzAyMjA4MThaFw0yNzA1MjkyMjEzMThaMDMxMTAvBgNV BAMTKDAxRjY5RkI0QTI0QjM2NzREMjc4MTMwRDU3QzdDQTBGQTMwQjFGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklsmmwu12AUNq1MlKsf6K82HB JT7wa5Em8VboE3tanK6RodYSMBwn7663SkwlQbY2o0wOODXDzIDCBze5+YM6XkUI bQMH31WT6kYXyOzHE2Les+XqK2N/XqxPiaq3WUb8/Q7CKtfLIPQAPzhf2mBvTXDQ Y/GabahH3nkY3IwSbLLuwQ5R8IGB22B7avzyHE/f7+JN8JnVZxYbfn53Z4VEgbpW 9WwbDxcoAhOVWLs+/KJYYmlrksz6dR0/sCpfUBMSEHSH0nc3olwnIdmprFDEk8h8 SLm8Pr+Jf5op41ib/CebiHaxLN5GwmfMlJmECFj52Z7JkwcvEaJqjfja0qFVAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUAfaftKJLNnTSeBMNV8fKD6MLH4kwHwYDVR0j BBgwFoAU6+i05up8WLLlbjxZn4ahMmKdDz4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw ODY1NjI3MTU1ODQ0MzAyNy8wL0VCRThCNEU2RUE3QzU4QjJFNTZFM0M1OTlGODZB MTMyNjI5RDBGM0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2MjlEMEYzRS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwODY1NjI3MTU1ODQ0MzAyNy8wLzMyMzQzMDMzM2E2 NTM3NjMzMDNhMzMzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNDM4MzAzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACQD58AAAzANBgkqhkiG9w0BAQsFAAOCAQEAaY5vRVU2f6o+G48+sS5P c6rJ4+AI73ENMuwLtltTA/6WNUzcr062gx1284FsGw8NYVbRXsAlk9M2kLfP+gqL WNXX2XJRuWprhMjsJv+r4vFzAF6P4rUKVnyVIa8ARzKwK/HQ6wgyoC2q/wqwBo40 LziVKYoKHDRn3Sp+0cZn6x/9Jz0jPLBi/EqMexgK16Tcj42f3VOCuLT2QJlxUo2Y c1ngvEN9HzqFqzvD/YUjLcA+qOp550y5TTFMHIs2wZJ6DH6XRKm4Q+NQjMOnVP4v mlC4oZdOzZIPSf0w4CLFDBrKA1KAB0W6hh2xBoMrC1RZ7Fa3IsLsS8Dev+xZ/iim EA== -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:19 2026 by rpki-client