$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336138303a3a2f33322d3332203d3e203539303136.roa File: 323430313a336138303a3a2f33322d3332203d3e203539303136.roa (raw, json) Hash identifier: u0/hBW5D7s2jYfYBv53rUbNvjfHmSGPr9Qius6arWjQ= Subject key identifier: 20:12:8F:41:F6:6F:6C:25:1C:0D:DE:C1:7D:FB:8C:25:81:EF:8B:CD Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 18B872363565090BA9D4FE4C0E84853747E902F8 Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336138303a3a2f33322d3332203d3e203539303136.roa Signing time: Thu 21 May 2026 02:42:10 +0000 ROA not before: Thu 21 May 2026 02:37:10 +0000 ROA not after: Thu 20 May 2027 02:42:10 +0000 asID: 59016 IP address blocks: 2401:3a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:b8:72:36:35:65:09:0b:a9:d4:fe:4c:0e:84:85:37:47:e9:02:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 21 02:37:10 2026 GMT Not After : May 20 02:42:10 2027 GMT Subject: CN=20128F41F66F6C251C0DDEC17DFB8C2581EF8BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:50:40:b0:4e:13:73:f6:35:13:42:46:79: 77:59:9c:c9:d6:5a:09:8c:f2:ad:ac:ca:08:07:d2: 76:ad:ed:ed:e2:49:6d:7f:05:5f:39:e3:bb:5a:3f: 40:ee:cf:fe:38:2a:1b:d4:0a:62:fe:42:a9:14:c9: 7c:37:51:26:a3:73:91:d3:8e:4a:c9:16:3e:31:9b: 6e:3d:5a:0a:4a:78:af:3e:a3:b0:c1:62:00:96:a8: 39:02:6e:f5:ff:2e:00:d8:8b:5e:52:06:14:08:f8: 70:7b:49:71:62:52:f1:5a:9e:2c:63:f2:b5:b7:1d: e2:7b:5a:c7:9f:50:5c:34:e4:17:35:c8:bf:e5:c0: fc:7c:af:0f:3a:04:9e:89:71:ff:58:39:f8:97:ab: f2:e0:d2:e2:c6:d7:0a:ea:04:ad:1c:a6:96:c3:37: e2:36:28:22:6a:7a:56:f8:ca:b6:da:19:c9:4c:57: 1e:7c:b6:97:65:60:d8:0b:f2:51:9a:0c:d4:40:57: 7f:60:d9:14:7f:43:a9:9f:f0:a6:07:5f:e9:d1:95: 19:5c:ca:ca:fe:4c:14:50:81:7b:e5:ae:40:0c:bb: ec:6c:12:6c:94:e0:1c:a8:3a:81:4b:c1:18:f1:bd: af:2e:21:cd:46:fd:61:d9:ed:a7:fe:67:37:7e:19: 50:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:12:8F:41:F6:6F:6C:25:1C:0D:DE:C1:7D:FB:8C:25:81:EF:8B:CD X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336138303a3a2f33322d3332203d3e203539303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3a80::/32 Signature Algorithm: sha256WithRSAEncryption 61:18:5b:d6:a4:ae:69:26:ee:1a:01:dc:d9:44:40:2f:a4:7e: ea:1d:95:48:39:d0:cc:e1:cd:40:b8:f0:be:aa:28:c0:94:ea: 72:d8:1a:dd:71:35:dc:b4:55:9d:d5:da:d7:83:07:87:a2:8c: 32:eb:1e:a4:25:f2:2b:5d:93:1c:f5:84:1f:5b:91:61:76:fb: 43:fe:8a:de:c9:1a:05:db:39:46:06:28:44:a2:84:c4:19:46: 75:57:5b:0f:e0:91:4e:f6:a8:33:9c:57:14:6f:73:d0:89:8b: 62:cb:bd:23:12:30:fc:9a:e2:b9:0e:a6:74:07:08:7e:6e:05: ad:50:7d:64:bf:6b:fb:5a:11:6a:49:1c:ae:22:3b:33:83:58: f2:4e:e4:70:cb:81:c7:d1:4c:6b:d7:61:bd:c4:68:0e:58:14: 82:9d:a7:42:43:9e:e0:71:a2:a8:6f:a5:27:5d:43:32:0b:3c: 66:2d:ff:ff:e4:d3:6d:fe:08:4f:77:7a:13:58:bf:37:9c:0f: 48:6f:1a:0c:80:cc:08:29:2a:d3:d6:75:1b:6b:a0:e2:f6:64: 51:60:d0:b7:86:c8:db:cd:de:c5:f2:45:8d:bf:a8:ae:11:57: ba:9a:17:63:08:ab:1e:37:7d:07:66:cb:15:fd:fc:c0:53:10: 31:64:87:b9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUGLhyNjVlCQup1P5MDoSFN0fpAvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjEwMjM3MTBaFw0yNzA1MjAwMjQyMTBaMDMxMTAvBgNV BAMTKDIwMTI4RjQxRjY2RjZDMjUxQzBEREVDMTdERkI4QzI1ODFFRjhCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdElBAsE4Tc/Y1E0JGeXdZnMnW WgmM8q2syggH0nat7e3iSW1/BV8547taP0Duz/44KhvUCmL+QqkUyXw3USajc5HT jkrJFj4xm249WgpKeK8+o7DBYgCWqDkCbvX/LgDYi15SBhQI+HB7SXFiUvFanixj 8rW3HeJ7WsefUFw05Bc1yL/lwPx8rw86BJ6Jcf9YOfiXq/Lg0uLG1wrqBK0cppbD N+I2KCJqelb4yrbaGclMVx58tpdlYNgL8lGaDNRAV39g2RR/Q6mf8KYHX+nRlRlc ysr+TBRQgXvlrkAMu+xsEmyU4ByoOoFLwRjxva8uIc1G/WHZ7af+Zzd+GVCxAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUIBKPQfZvbCUcDd7BffuMJYHvi80wHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjU3NjI5MjU4NDE2MTQ5LzAvMzIzNDMwMzEzYTMz NjEzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBOoAwDQYJKoZIhvcNAQELBQADggEBAGEYW9akrmkm7hoB3NlEQC+kfuod lUg50MzhzUC48L6qKMCU6nLYGt1xNdy0VZ3V2teDB4eijDLrHqQl8itdkxz1hB9b kWF2+0P+it7JGgXbOUYGKESihMQZRnVXWw/gkU72qDOcVxRvc9CJi2LLvSMSMPya 4rkOpnQHCH5uBa1QfWS/a/taEWpJHK4iOzODWPJO5HDLgcfRTGvXYb3EaA5YFIKd p0JDnuBxoqhvpSddQzILPGYt///k023+CE93ehNYvzecD0hvGgyAzAgpKtPWdRtr oOL2ZFFg0LeGyNvN3sXyRY2/qK4RV7qaF2MIqx43fQdmyxX9/MBTEDFkh7k= -----END CERTIFICATE-----Generated at Fri May 29 23:59:13 2026 by rpki-client