$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a333938303a3a2f33322d3332203d3e203539303136.roa File: 323430313a333938303a3a2f33322d3332203d3e203539303136.roa (raw, json) Hash identifier: bTUMqZDoaHrSxBkNQJ8uuKsEF6Z9jgMuGDUhgCcaTtc= Subject key identifier: 22:5B:B9:8B:72:88:3B:5C:63:F4:8C:13:19:25:67:09:4A:7F:E3:B9 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 736DE9CF763213582E63A7D4B58CFDCCFDDFFF7A Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a333938303a3a2f33322d3332203d3e203539303136.roa Signing time: Thu 21 May 2026 02:42:10 +0000 ROA not before: Thu 21 May 2026 02:37:10 +0000 ROA not after: Thu 20 May 2027 02:42:10 +0000 asID: 59016 IP address blocks: 2401:3980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:6d:e9:cf:76:32:13:58:2e:63:a7:d4:b5:8c:fd:cc:fd:df:ff:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 21 02:37:10 2026 GMT Not After : May 20 02:42:10 2027 GMT Subject: CN=225BB98B72883B5C63F48C13192567094A7FE3B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:67:d9:d3:4f:d6:c2:83:3c:b4:03:b9:7d: 11:4f:b6:58:00:f8:7c:a3:d1:c5:67:ef:38:ab:d9: 49:65:e3:14:93:d2:72:f1:19:45:d9:a4:1f:6f:89: 1d:3b:16:c3:97:8c:fb:f2:9c:a8:69:5c:3c:00:a0: 31:83:de:ac:1c:72:2b:ac:dc:ad:4e:d7:75:6d:fc: 19:76:89:75:7b:a1:dc:02:09:5c:2b:5f:af:2d:af: b5:0e:5d:21:48:2c:c2:ce:15:39:16:1d:54:c1:e5: 63:fa:e8:ea:66:c2:5d:c5:e2:4b:6f:22:0a:b9:37: ce:0c:c7:3c:ca:34:d7:9d:ec:e6:a1:e5:cc:57:21: af:3c:16:9c:4c:b3:d1:32:ec:c6:a8:5f:de:06:4b: ff:96:68:fe:b9:d2:25:8b:3b:bf:92:dc:38:d6:88: 70:66:1e:b1:cb:3a:c9:bf:0a:b6:2e:f8:66:76:e9: 31:dd:1c:cb:ca:6b:85:d9:f2:2d:90:a1:67:2b:0c: 11:06:ad:b0:19:e3:69:a8:d2:42:61:a9:4b:da:c8: 4a:df:73:62:b0:20:29:15:e9:17:38:c7:41:03:75: 54:c2:88:fc:e8:1a:d4:79:17:0e:9a:dd:e6:b4:ec: 58:60:d6:1b:70:a5:c8:98:29:cc:b9:87:11:42:fb: f7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5B:B9:8B:72:88:3B:5C:63:F4:8C:13:19:25:67:09:4A:7F:E3:B9 X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a333938303a3a2f33322d3332203d3e203539303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3980::/32 Signature Algorithm: sha256WithRSAEncryption 4a:95:69:c5:1e:b8:24:32:c3:8c:9a:93:8b:15:f5:50:4a:4d: 17:4d:be:2d:d5:74:ba:0d:2f:01:a0:d2:27:2c:d1:b5:12:c6: e0:14:20:cb:cd:a6:14:fe:d3:33:63:86:1f:ed:ef:43:46:57: da:d0:83:4d:20:93:27:dd:58:3f:81:1f:0c:ea:c2:ab:58:74: 6d:af:40:4c:7a:66:de:f1:2c:e9:88:e3:a6:fb:21:62:6b:eb: d1:52:27:98:c1:69:fd:21:4c:f4:e8:f4:e9:c0:c6:82:9f:fe: 9b:6a:d9:11:79:0c:0c:61:3b:be:39:ec:13:a9:75:ef:87:1c: ab:8a:b3:9d:28:38:c7:a3:07:34:ac:e7:93:86:9a:dc:29:d6: e1:cd:27:e6:73:7c:01:f5:a1:5f:1b:c2:72:2d:7f:03:56:38: 0b:14:15:c3:77:5a:21:e2:b8:6a:2d:54:47:fe:d4:fe:67:d3: 73:f9:f1:77:4c:00:74:c0:8f:45:f8:e3:ca:99:ee:ed:53:22: 11:18:4c:0e:ab:90:c7:c0:de:99:ae:ab:c2:87:61:2f:9a:21: ff:aa:06:9a:15:4d:f2:a9:f7:92:04:31:bd:3e:f2:b3:3f:d7: 08:d4:59:a0:56:84:02:0c:f5:51:88:97:41:51:1a:6d:27:f2: f6:69:cc:b8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUc23pz3YyE1guY6fUtYz9zP3f/3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjEwMjM3MTBaFw0yNzA1MjAwMjQyMTBaMDMxMTAvBgNV BAMTKDIyNUJCOThCNzI4ODNCNUM2M0Y0OEMxMzE5MjU2NzA5NEE3RkUzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe2GfZ00/WwoM8tAO5fRFPtlgA +Hyj0cVn7zir2Ull4xST0nLxGUXZpB9viR07FsOXjPvynKhpXDwAoDGD3qwccius 3K1O13Vt/Bl2iXV7odwCCVwrX68tr7UOXSFILMLOFTkWHVTB5WP66Opmwl3F4ktv Igq5N84MxzzKNNed7Oah5cxXIa88FpxMs9Ey7MaoX94GS/+WaP650iWLO7+S3DjW iHBmHrHLOsm/CrYu+GZ26THdHMvKa4XZ8i2QoWcrDBEGrbAZ42mo0kJhqUvayErf c2KwICkV6Rc4x0EDdVTCiPzoGtR5Fw6a3ea07Fhg1htwpciYKcy5hxFC+/eRAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUIlu5i3KIO1xj9IwTGSVnCUp/47kwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjU3NjI5MjU4NDE2MTQ5LzAvMzIzNDMwMzEzYTMz MzkzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBOYAwDQYJKoZIhvcNAQELBQADggEBAEqVacUeuCQyw4yak4sV9VBKTRdN vi3VdLoNLwGg0ics0bUSxuAUIMvNphT+0zNjhh/t70NGV9rQg00gkyfdWD+BHwzq wqtYdG2vQEx6Zt7xLOmI46b7IWJr69FSJ5jBaf0hTPTo9OnAxoKf/ptq2RF5DAxh O7457BOpde+HHKuKs50oOMejBzSs55OGmtwp1uHNJ+ZzfAH1oV8bwnItfwNWOAsU FcN3WiHiuGotVEf+1P5n03P58XdMAHTAj0X448qZ7u1TIhEYTA6rkMfA3pmuq8KH YS+aIf+qBpoVTfKp95IEMb0+8rM/1wjUWaBWhAIM9VGIl0FRGm0n8vZpzLg= -----END CERTIFICATE-----Generated at Fri May 29 23:56:49 2026 by rpki-client