$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a333838303a3a2f33322d3332203d3e203539303136.roa File: 323430313a333838303a3a2f33322d3332203d3e203539303136.roa (raw, json) Hash identifier: nIUpPle9V8mZQDvkQEuy67ZE77I4TcZ0g8BdblFs/40= Subject key identifier: B9:0A:35:2F:63:74:1A:4C:35:19:D6:20:05:40:9D:D5:D9:5F:F2:7F Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 4734F9B0E6672A9FB3258D88F1799F598654E1C4 Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a333838303a3a2f33322d3332203d3e203539303136.roa Signing time: Thu 21 May 2026 02:36:03 +0000 ROA not before: Thu 21 May 2026 02:31:03 +0000 ROA not after: Thu 20 May 2027 02:36:03 +0000 asID: 59016 IP address blocks: 2401:3880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:34:f9:b0:e6:67:2a:9f:b3:25:8d:88:f1:79:9f:59:86:54:e1:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 21 02:31:03 2026 GMT Not After : May 20 02:36:03 2027 GMT Subject: CN=B90A352F63741A4C3519D62005409DD5D95FF27F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:46:aa:29:26:97:df:6d:77:2f:03:72:ac:65: 12:3c:85:98:06:2e:5b:38:9a:97:76:d2:ab:7b:19: 7c:01:c5:68:24:fb:e8:be:ff:b3:59:68:63:1d:fa: 2c:87:dd:85:d7:5d:ce:0b:44:08:04:02:d3:bd:c7: c9:42:d7:35:5b:60:e4:29:56:48:cc:d2:46:a5:3c: d9:92:75:61:50:c9:61:9b:59:68:94:17:9b:e7:fd: 4f:fc:71:21:52:83:00:66:ea:78:e7:47:61:d8:20: 28:42:32:81:6a:86:65:77:ce:07:3f:c6:bf:49:12: 36:ec:b0:34:48:ef:a7:7e:91:a2:09:95:69:54:fe: e9:b9:23:25:aa:cb:07:c0:c8:e7:df:36:13:77:b2: f4:be:9b:19:c4:b9:91:ff:fc:82:1c:4c:b0:3a:28: 65:6a:4c:20:a9:2a:3a:f5:f5:96:23:eb:3a:f1:36: f9:f6:5d:db:27:16:00:af:f3:e9:ef:53:94:1a:1d: ad:73:43:6d:2f:35:b6:83:c6:23:82:6b:f4:3a:75: 3d:37:89:1c:7a:cc:c6:35:3a:02:b7:55:f5:89:64: 2f:ed:86:b9:b2:e6:44:d9:9d:30:11:af:d6:fc:a3: 56:8f:6e:71:5f:fb:8a:45:9e:84:31:16:6c:52:c8: 2c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0A:35:2F:63:74:1A:4C:35:19:D6:20:05:40:9D:D5:D9:5F:F2:7F X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a333838303a3a2f33322d3332203d3e203539303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3880::/32 Signature Algorithm: sha256WithRSAEncryption 8e:da:1c:ca:e2:29:4d:88:86:92:84:55:b3:d4:33:da:5b:1d: 65:3d:84:c3:12:b7:71:65:2a:fa:ea:2a:d0:41:de:c0:e0:d7: d7:df:c1:97:e0:d6:dd:53:e7:09:64:80:e3:dd:7e:5d:1d:fb: 3e:6b:68:aa:87:1d:ab:3f:f1:13:17:1e:b3:10:e2:ac:e1:55: 65:ab:59:c7:51:33:b3:e2:9b:4c:73:aa:a2:0f:ec:69:ad:f1: 1c:ed:75:ea:4b:e4:19:a6:25:2c:be:19:61:1a:09:8b:ea:4d: 91:3d:61:bc:71:b3:b9:bd:fb:de:85:e1:1e:3c:b4:58:d2:86: 9d:75:40:a0:c6:6a:4b:c3:af:7f:2c:07:3a:4b:59:7c:d4:0d: 18:9f:db:f9:e6:82:f1:56:30:64:fb:97:f1:ea:01:bb:fc:52: 5b:48:67:32:f3:dc:e1:6e:cc:50:7b:f0:85:33:0a:c3:82:0f: 52:a3:9d:2d:51:24:b7:ab:53:cc:29:a6:f8:a5:e6:d4:1e:07: c8:59:eb:0d:c3:9b:65:e3:90:c8:19:8a:ee:48:89:d3:91:50: b4:a0:86:68:4f:95:bc:8c:94:e7:f2:63:82:53:a5:58:ee:33: 36:e6:fc:a5:4e:23:6a:02:7f:c3:d6:4e:aa:63:c6:67:08:76: 2d:3b:c5:f7 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIURzT5sOZnKp+zJY2I8XmfWYZU4cQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjEwMjMxMDNaFw0yNzA1MjAwMjM2MDNaMDMxMTAvBgNV BAMTKEI5MEEzNTJGNjM3NDFBNEMzNTE5RDYyMDA1NDA5REQ1RDk1RkYyN0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNRqopJpffbXcvA3KsZRI8hZgG Lls4mpd20qt7GXwBxWgk++i+/7NZaGMd+iyH3YXXXc4LRAgEAtO9x8lC1zVbYOQp VkjM0kalPNmSdWFQyWGbWWiUF5vn/U/8cSFSgwBm6njnR2HYIChCMoFqhmV3zgc/ xr9JEjbssDRI76d+kaIJlWlU/um5IyWqywfAyOffNhN3svS+mxnEuZH//IIcTLA6 KGVqTCCpKjr19ZYj6zrxNvn2XdsnFgCv8+nvU5QaHa1zQ20vNbaDxiOCa/Q6dT03 iRx6zMY1OgK3VfWJZC/thrmy5kTZnTARr9b8o1aPbnFf+4pFnoQxFmxSyCy3AgMB AAGjggISMIICDjAdBgNVHQ4EFgQUuQo1L2N0Gkw1GdYgBUCd1dlf8n8wHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjU3NjI5MjU4NDE2MTQ5LzAvMzIzNDMwMzEzYTMz MzgzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBOIAwDQYJKoZIhvcNAQELBQADggEBAI7aHMriKU2IhpKEVbPUM9pbHWU9 hMMSt3FlKvrqKtBB3sDg19ffwZfg1t1T5wlkgOPdfl0d+z5raKqHHas/8RMXHrMQ 4qzhVWWrWcdRM7Pim0xzqqIP7Gmt8RztdepL5BmmJSy+GWEaCYvqTZE9Ybxxs7m9 +96F4R48tFjShp11QKDGakvDr38sBzpLWXzUDRif2/nmgvFWMGT7l/HqAbv8UltI ZzLz3OFuzFB78IUzCsOCD1KjnS1RJLerU8wppvil5tQeB8hZ6w3Dm2XjkMgZiu5I idORULSghmhPlbyMlOfyY4JTpVjuMzbm/KVOI2oCf8PWTqpjxmcIdi07xfc= -----END CERTIFICATE-----Generated at Fri May 29 23:56:51 2026 by rpki-client