$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa File: 323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa (raw, json) Hash identifier: 0ip0tR35yLxv7FjOPJ2IKu5phWDauQe0gqBqFSjInGs= Subject key identifier: 37:F4:B1:F0:2A:AC:5C:C8:7E:0F:09:70:79:FE:15:2A:46:F2:F8:E0 Certificate issuer: /CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Certificate serial: 4911553219EC1E1E95E815729D5567DD0FC4DBFA Authority key identifier: CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa Signing time: Tue 19 May 2026 06:33:16 +0000 ROA not before: Tue 19 May 2026 06:28:16 +0000 ROA not after: Tue 18 May 2027 06:33:16 +0000 asID: 24151 IP address blocks: 2001:dc7:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 15:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:11:55:32:19:ec:1e:1e:95:e8:15:72:9d:55:67:dd:0f:c4:db:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4 Validity Not Before: May 19 06:28:16 2026 GMT Not After : May 18 06:33:16 2027 GMT Subject: CN=37F4B1F02AAC5CC87E0F097079FE152A46F2F8E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bf:76:9c:f5:fe:36:d0:67:a0:6c:0c:44:52: 60:0e:f5:78:cf:97:2c:df:cb:1f:ba:31:ba:cb:7c: b3:68:83:2a:c2:28:f7:2b:3a:9c:5c:03:fa:90:34: 41:5c:36:92:6b:3b:15:fa:52:32:1b:5b:ea:90:3d: 56:93:29:c1:fa:a4:4e:d0:b9:41:a1:c9:c2:0d:fe: 54:67:77:d7:af:d0:09:94:b1:e9:f3:6b:b9:4f:a6: cd:66:33:36:a3:60:b3:3d:b0:e0:3f:e9:9d:0c:ac: 4d:f4:0c:74:4f:13:81:eb:9e:1a:59:63:e5:f2:a7: a8:f4:20:e9:cd:58:2b:d0:0e:e3:eb:b2:54:b9:94: 7c:00:34:3d:a1:33:30:53:80:33:02:dc:78:c2:d3: 51:09:ea:ca:65:5e:6d:5c:35:36:4b:0c:7a:a5:2e: 66:00:00:fa:92:fd:81:e2:dd:39:3d:3d:d1:59:34: 10:53:08:6d:4a:9b:e5:87:6c:82:a4:f5:f2:fc:49: 4d:df:5c:2e:12:5e:d6:9d:79:1f:77:c4:d6:49:b0: b8:38:37:1b:58:2d:57:9a:c3:06:d9:a5:0d:83:aa: 38:fe:79:eb:2e:6a:32:9b:a6:62:e8:5b:3b:08:35: 13:6a:3c:bb:ab:7f:54:18:c6:19:f8:05:86:2e:f0: 31:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F4:B1:F0:2A:AC:5C:C8:7E:0F:09:70:79:FE:15:2A:46:F2:F8:E0 X509v3 Authority Key Identifier: keyid:CE:AC:E6:7B:8C:6F:24:55:BF:EB:95:CA:97:F4:EF:CE:0D:10:DA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CEACE67B8C6F2455BFEB95CA97F4EFCE0D10DAC4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109004796452405267/0/323030313a6463373a613a3a2f34382d3438203d3e203234313531.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:dc7:a::/48 Signature Algorithm: sha256WithRSAEncryption 9a:4e:dc:69:9f:da:de:b6:a1:11:47:7e:93:27:3a:83:87:0d: 93:2b:6a:66:e9:09:53:43:37:2f:4e:ca:6c:c6:10:67:e2:83: 64:22:39:f1:98:74:ac:b7:eb:1f:8f:f6:31:dc:7a:74:25:7e: a6:bc:44:a6:d5:67:28:27:dc:99:77:4b:c8:e1:e3:50:62:70: 18:0b:a6:04:2e:ce:8d:34:ce:44:e6:08:6a:6b:2d:4d:c7:a3: e4:67:b6:ec:06:09:2e:82:4c:42:d8:56:41:94:db:43:ae:9c: 43:c8:20:0b:17:c4:f5:cc:09:92:f5:33:12:6b:59:05:39:9e: 21:b0:b1:0a:0c:0d:49:fd:80:59:bc:23:51:ff:b3:50:29:ca: 27:9b:4a:cd:11:7d:5a:de:99:7f:9b:d1:ac:50:cc:4a:88:b0: 00:ff:58:d1:70:db:e4:e6:1b:0b:7d:61:6b:09:8a:e2:20:10: 8a:de:78:63:4a:85:31:dc:78:28:70:1c:a4:58:31:b9:52:2a: 70:94:d1:0d:5b:b6:03:70:dc:97:b6:03:06:84:a5:80:e1:97: 34:69:24:e9:26:7e:17:b6:18:24:42:e4:e7:bd:ff:a2:7e:1f: c6:00:22:7b:92:55:c5:47:60:f1:98:94:a4:81:55:4a:39:dd: 3d:f8:68:d4 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUSRFVMhnsHh6V6BVynVVn3Q/E2/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0Uw RDEwREFDNDAeFw0yNjA1MTkwNjI4MTZaFw0yNzA1MTgwNjMzMTZaMDMxMTAvBgNV BAMTKDM3RjRCMUYwMkFBQzVDQzg3RTBGMDk3MDc5RkUxNTJBNDZGMkY4RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCBv3ac9f420GegbAxEUmAO9XjP lyzfyx+6MbrLfLNogyrCKPcrOpxcA/qQNEFcNpJrOxX6UjIbW+qQPVaTKcH6pE7Q uUGhycIN/lRnd9ev0AmUsenza7lPps1mMzajYLM9sOA/6Z0MrE30DHRPE4HrnhpZ Y+Xyp6j0IOnNWCvQDuPrslS5lHwAND2hMzBTgDMC3HjC01EJ6splXm1cNTZLDHql LmYAAPqS/YHi3Tk9PdFZNBBTCG1Km+WHbIKk9fL8SU3fXC4SXtadeR93xNZJsLg4 NxtYLVeawwbZpQ2Dqjj+eesuajKbpmLoWzsINRNqPLurf1QYxhn4BYYu8DFBAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUN/Sx8CqsXMh+Dwlwef4VKkby+OAwHwYDVR0j BBgwFoAUzqzme4xvJFW/65XKl/Tvzg0Q2sQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTAwNDc5NjQ1MjQwNTI2Ny8wL0NFQUNFNjdCOEM2RjI0NTVCRkVCOTVDQTk3RjRF RkNFMEQxMERBQzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0VBQ0U2N0I4QzZGMjQ1NUJGRUI5NUNBOTdGNEVGQ0UwRDEwREFDNC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwOTAwNDc5NjQ1MjQwNTI2Ny8wLzMyMzAzMDMxM2E2 NDYzMzczYTYxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNDMxMzUzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQC AAIwCQMHACABDccACjANBgkqhkiG9w0BAQsFAAOCAQEAmk7caZ/a3rahEUd+kyc6 g4cNkytqZukJU0M3L07KbMYQZ+KDZCI58Zh0rLfrH4/2Mdx6dCV+prxEptVnKCfc mXdLyOHjUGJwGAumBC7OjTTOROYIamstTcej5Ge27AYJLoJMQthWQZTbQ66cQ8gg CxfE9cwJkvUzEmtZBTmeIbCxCgwNSf2AWbwjUf+zUCnKJ5tKzRF9Wt6Zf5vRrFDM SoiwAP9Y0XDb5OYbC31hawmK4iAQit54Y0qFMdx4KHAcpFgxuVIqcJTRDVu2A3Dc l7YDBoSlgOGXNGkk6SZ+F7YYJELk573/on4fxgAie5JVxUdg8ZiUpIFVSjndPfho 1A== -----END CERTIFICATE-----Generated at Fri May 29 23:53:44 2026 by rpki-client