$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336238303a3a2f33322d3332203d3e203539303136.roa File: 323430313a336238303a3a2f33322d3332203d3e203539303136.roa (raw, json) Hash identifier: BoT0BkuMQMjkrkhKJtwZepcOx6+TP+AJ/fdiDyAwVI0= Subject key identifier: 50:C4:05:57:62:AA:98:B7:FC:86:48:F0:B5:C7:04:81:84:95:6C:D4 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 0E5B6782314464B551BAE64CDAE7DFF7D2B7A479 Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336238303a3a2f33322d3332203d3e203539303136.roa Signing time: Thu 21 May 2026 02:42:09 +0000 ROA not before: Thu 21 May 2026 02:37:09 +0000 ROA not after: Thu 20 May 2027 02:42:09 +0000 asID: 59016 IP address blocks: 2401:3b80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:5b:67:82:31:44:64:b5:51:ba:e6:4c:da:e7:df:f7:d2:b7:a4:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 21 02:37:09 2026 GMT Not After : May 20 02:42:09 2027 GMT Subject: CN=50C4055762AA98B7FC8648F0B5C7048184956CD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ad:9b:0c:a3:19:d0:69:8f:46:2f:95:05:2e: 26:9b:ed:69:de:13:67:4f:8f:68:1a:77:d6:39:17: fb:7e:9a:24:3e:e4:fe:6c:be:83:53:45:28:ce:92: b2:83:fc:e2:15:5d:e1:57:1b:b9:5f:5d:40:ab:c4: 59:9b:69:d4:fa:18:84:80:db:dc:ff:7a:0f:33:02: d1:f3:b4:ef:49:41:b6:af:49:4d:aa:a3:88:2e:7e: f5:c0:cd:a7:5f:fc:9d:0f:00:27:b1:53:15:ef:8b: c0:12:40:65:8c:98:c9:4b:31:21:06:a4:c8:6e:7d: 61:92:08:da:39:85:01:50:7e:a5:3b:02:4b:5a:f2: 2f:ba:fb:55:43:a5:0d:eb:8f:bc:29:cf:80:c5:57: 0c:64:93:fb:6e:be:d5:00:0b:39:88:20:81:a4:f7: d4:3c:d4:cc:f1:9d:37:cf:a7:d2:8e:dc:f5:24:f3: 29:36:55:bf:af:00:a8:98:3c:8a:17:1d:0b:cc:27: b5:4c:22:69:99:f4:e9:15:01:e0:5a:6c:c5:f7:fe: 0d:a5:11:db:e1:1f:4f:6d:53:3d:2b:79:5e:1d:75: 8a:c5:35:68:63:2b:fd:65:43:f6:06:8a:3a:52:90: dc:b5:a0:75:41:5c:2a:ee:a9:00:6f:93:50:87:73: 16:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:C4:05:57:62:AA:98:B7:FC:86:48:F0:B5:C7:04:81:84:95:6C:D4 X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a336238303a3a2f33322d3332203d3e203539303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:3b80::/32 Signature Algorithm: sha256WithRSAEncryption 14:f0:5f:59:ae:41:94:09:aa:ad:35:9c:d3:bf:33:02:d7:f2: 34:25:b9:34:7c:c4:8c:04:c1:c4:2a:91:50:db:bb:5a:b0:af: c7:4f:1d:ed:be:4c:ae:a9:d8:da:e2:3b:81:f8:0c:d6:b5:d3: 77:a4:2e:e9:d3:b9:ed:34:d4:af:97:06:b6:11:ce:32:7b:8d: dc:ca:72:66:48:56:51:da:15:87:20:44:d5:3e:ce:fe:91:d4: bc:b6:66:c7:25:34:51:49:5b:94:1d:73:e2:5f:d3:d3:19:e0: 98:7a:cc:e9:b6:f5:ea:16:7b:c5:51:7b:a6:2c:8a:c5:b3:e6: 70:fd:76:e7:b2:05:f8:95:67:2d:61:ad:dc:dd:9c:b5:55:2a: 41:90:32:76:8a:dd:f5:c0:44:22:22:83:fd:7c:e3:1e:9f:a7: e5:c9:f6:77:5e:45:14:78:0f:8c:22:ae:70:31:64:9c:26:6e: 86:97:04:77:97:e3:39:b9:8f:e2:5a:28:0b:71:f7:e9:c4:06: a9:da:e4:e9:49:0f:d5:b6:2a:05:17:25:90:d1:81:c5:84:8e: b4:3b:96:e0:08:04:27:08:40:ae:08:a3:39:77:4b:49:81:1e: 5b:cf:3b:80:02:77:dd:ef:ce:ef:24:fa:bd:a7:76:1d:1b:94: 39:5f:d8:d9 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUDltngjFEZLVRuuZM2uff99K3pHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjEwMjM3MDlaFw0yNzA1MjAwMjQyMDlaMDMxMTAvBgNV BAMTKDUwQzQwNTU3NjJBQTk4QjdGQzg2NDhGMEI1QzcwNDgxODQ5NTZDRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWrZsMoxnQaY9GL5UFLiab7Wne E2dPj2gad9Y5F/t+miQ+5P5svoNTRSjOkrKD/OIVXeFXG7lfXUCrxFmbadT6GISA 29z/eg8zAtHztO9JQbavSU2qo4gufvXAzadf/J0PACexUxXvi8ASQGWMmMlLMSEG pMhufWGSCNo5hQFQfqU7Akta8i+6+1VDpQ3rj7wpz4DFVwxkk/tuvtUACzmIIIGk 99Q81MzxnTfPp9KO3PUk8yk2Vb+vAKiYPIoXHQvMJ7VMImmZ9OkVAeBabMX3/g2l EdvhH09tUz0reV4ddYrFNWhjK/1lQ/YGijpSkNy1oHVBXCruqQBvk1CHcxbVAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUUMQFV2KqmLf8hkjwtccEgYSVbNQwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjU3NjI5MjU4NDE2MTQ5LzAvMzIzNDMwMzEzYTMz NjIzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBO4AwDQYJKoZIhvcNAQELBQADggEBABTwX1muQZQJqq01nNO/MwLX8jQl uTR8xIwEwcQqkVDbu1qwr8dPHe2+TK6p2NriO4H4DNa103ekLunTue001K+XBrYR zjJ7jdzKcmZIVlHaFYcgRNU+zv6R1Ly2ZsclNFFJW5Qdc+Jf09MZ4Jh6zOm29eoW e8VRe6YsisWz5nD9dueyBfiVZy1hrdzdnLVVKkGQMnaK3fXARCIig/184x6fp+XJ 9ndeRRR4D4wirnAxZJwmboaXBHeX4zm5j+JaKAtx9+nEBqna5OlJD9W2KgUXJZDR gcWEjrQ7luAIBCcIQK4Iozl3S0mBHlvPO4ACd93vzu8k+r2ndh0blDlf2Nk= -----END CERTIFICATE-----Generated at Fri May 29 23:58:56 2026 by rpki-client