$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343138303a3a2f33322d3332203d3e203539303136.roa File: 323430313a343138303a3a2f33322d3332203d3e203539303136.roa (raw, json) Hash identifier: OSFQ0l/OO8+SL8jJPJmY4WFRjU1QPttWYeUk5dMi/6I= Subject key identifier: E2:8A:15:03:0E:30:3A:A8:82:9F:B5:0B:AF:71:1F:F7:EB:DA:23:03 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 5E24B094FB6FE02257A733D25E95C71ABE564D8B Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343138303a3a2f33322d3332203d3e203539303136.roa Signing time: Thu 21 May 2026 02:42:09 +0000 ROA not before: Thu 21 May 2026 02:37:09 +0000 ROA not after: Thu 20 May 2027 02:42:09 +0000 asID: 59016 IP address blocks: 2401:4180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:24:b0:94:fb:6f:e0:22:57:a7:33:d2:5e:95:c7:1a:be:56:4d:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 21 02:37:09 2026 GMT Not After : May 20 02:42:09 2027 GMT Subject: CN=E28A15030E303AA8829FB50BAF711FF7EBDA2303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:f6:73:cc:4e:2f:d7:6c:78:a6:c6:ea:e9: e1:e3:96:f8:a3:86:fd:c0:a9:93:cb:30:69:59:18: 4a:b9:cb:be:30:7c:b9:ed:7a:7f:32:38:f7:ef:0c: 75:e0:34:1e:a3:50:c3:85:e2:5b:91:1c:6f:28:85: a6:0f:d7:d4:80:63:a5:8b:69:61:a7:8e:ec:d7:0c: a9:ce:6e:5c:3a:ff:b1:2c:91:91:e9:b8:69:41:61: 7b:ad:d5:08:95:47:00:5c:ed:eb:bf:6d:d8:d7:5f: 40:0e:80:64:44:d7:9f:49:95:7f:c2:71:21:4d:92: 72:b6:f3:bb:6e:2f:e9:c2:52:8a:56:98:00:9a:ab: 7d:67:88:dd:c8:01:3c:28:77:bb:fa:29:93:7c:e9: 0e:61:20:70:2f:b4:67:38:b0:90:34:7e:34:99:34: a9:37:8b:5b:ea:f5:20:d2:24:b4:90:02:06:4e:4b: 39:4c:0a:0f:61:d5:6d:b6:3c:fe:db:45:40:8f:a3: aa:81:6f:0b:dc:8a:7d:d4:8d:b1:7e:34:65:67:44: 1d:de:99:0f:2f:d1:24:00:b5:47:6a:6e:7f:53:68: 93:c6:81:fd:eb:5c:9d:70:21:6b:ea:9b:53:bc:1f: 84:1c:97:77:50:eb:e2:9d:f2:4e:42:4c:0e:9e:63: e7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:8A:15:03:0E:30:3A:A8:82:9F:B5:0B:AF:71:1F:F7:EB:DA:23:03 X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343138303a3a2f33322d3332203d3e203539303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:4180::/32 Signature Algorithm: sha256WithRSAEncryption 85:f3:fe:c8:0a:20:5c:31:44:d2:52:d9:b4:1d:f6:5e:83:aa: 9b:b9:fa:bd:04:14:20:52:3a:db:12:1d:de:98:46:d6:54:ab: 7b:6e:63:1c:5c:aa:84:98:28:f4:e4:08:e3:95:7a:97:af:00: 10:d1:f1:3d:07:e0:91:42:6b:c9:d0:4d:6d:14:14:90:29:6b: c6:5a:0b:6a:3d:b2:04:f9:af:e3:84:0a:7f:68:5f:a6:97:0c: 8f:8f:74:77:9a:80:6e:52:b9:f1:b9:cd:ef:1a:49:6e:e1:91: f7:34:32:d4:f2:9f:4d:35:2e:2a:a2:04:7d:8f:72:16:53:56: ff:87:78:d7:c7:fb:a5:32:bd:e2:bc:b0:69:4c:30:28:5d:cd: 36:20:47:db:40:42:a1:03:ef:16:6a:07:a1:80:67:fe:c2:6d: 9f:68:b2:a3:d5:62:2b:a6:4c:c7:22:ae:27:14:22:e5:81:79: ef:f5:e0:fd:4b:f2:c0:62:ac:b8:bc:15:d2:41:78:0f:6b:5c: c4:48:46:a9:23:90:c7:0f:f2:b1:fe:fa:32:1d:e3:e5:50:c8: 57:79:a3:33:ac:08:2e:3b:58:fd:13:e3:5d:a4:f4:fa:9e:da: 06:2c:9d:82:ad:6e:21:d8:a0:50:12:bd:4d:e2:bb:84:da:f3: 0a:af:d5:1b -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUXiSwlPtv4CJXpzPSXpXHGr5WTYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjEwMjM3MDlaFw0yNzA1MjAwMjQyMDlaMDMxMTAvBgNV BAMTKEUyOEExNTAzMEUzMDNBQTg4MjlGQjUwQkFGNzExRkY3RUJEQTIzMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZK/ZzzE4v12x4psbq6eHjlvij hv3AqZPLMGlZGEq5y74wfLnten8yOPfvDHXgNB6jUMOF4luRHG8ohaYP19SAY6WL aWGnjuzXDKnOblw6/7EskZHpuGlBYXut1QiVRwBc7eu/bdjXX0AOgGRE159JlX/C cSFNknK287tuL+nCUopWmACaq31niN3IATwod7v6KZN86Q5hIHAvtGc4sJA0fjSZ NKk3i1vq9SDSJLSQAgZOSzlMCg9h1W22PP7bRUCPo6qBbwvcin3UjbF+NGVnRB3e mQ8v0SQAtUdqbn9TaJPGgf3rXJ1wIWvqm1O8H4Qcl3dQ6+Kd8k5CTA6eY+eVAgMB AAGjggISMIICDjAdBgNVHQ4EFgQU4ooVAw4wOqiCn7ULr3Ef9+vaIwMwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjU3NjI5MjU4NDE2MTQ5LzAvMzIzNDMwMzEzYTM0 MzEzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBQYAwDQYJKoZIhvcNAQELBQADggEBAIXz/sgKIFwxRNJS2bQd9l6Dqpu5 +r0EFCBSOtsSHd6YRtZUq3tuYxxcqoSYKPTkCOOVepevABDR8T0H4JFCa8nQTW0U FJApa8ZaC2o9sgT5r+OECn9oX6aXDI+PdHeagG5SufG5ze8aSW7hkfc0MtTyn001 LiqiBH2PchZTVv+HeNfH+6UyveK8sGlMMChdzTYgR9tAQqED7xZqB6GAZ/7CbZ9o sqPVYiumTMciricUIuWBee/14P1L8sBirLi8FdJBeA9rXMRIRqkjkMcP8rH++jId 4+VQyFd5ozOsCC47WP0T412k9Pqe2gYsnYKtbiHYoFASvU3iu4Ta8wqv1Rs= -----END CERTIFICATE-----Generated at Fri May 29 23:58:55 2026 by rpki-client