$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343538303a3a2f33322d3332203d3e203539303136.roa File: 323430313a343538303a3a2f33322d3332203d3e203539303136.roa (raw, json) Hash identifier: 4SF8Pp3L2TEVYRT22za3SayHJbSFtZ5mUY5kMm8lMLE= Subject key identifier: C1:C8:40:65:A6:61:33:35:4C:7B:7C:5D:06:BD:3D:61:8D:CD:44:EC Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 7FBE0682F0D869C6D4E1F8272DAD8C2EC1234349 Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343538303a3a2f33322d3332203d3e203539303136.roa Signing time: Thu 21 May 2026 02:42:10 +0000 ROA not before: Thu 21 May 2026 02:37:10 +0000 ROA not after: Thu 20 May 2027 02:42:10 +0000 asID: 59016 IP address blocks: 2401:4580::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:be:06:82:f0:d8:69:c6:d4:e1:f8:27:2d:ad:8c:2e:c1:23:43:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 21 02:37:10 2026 GMT Not After : May 20 02:42:10 2027 GMT Subject: CN=C1C84065A66133354C7B7C5D06BD3D618DCD44EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b4:37:c1:bd:e8:a0:d4:77:88:a7:3b:ec:61: 65:f3:52:01:68:43:b5:9b:c0:04:c9:29:8d:3e:a9: 3a:d4:cb:9a:a5:15:1e:1a:1e:8d:80:f3:e6:65:5d: 45:b3:f4:21:0e:e8:8f:1a:3d:31:37:f6:b0:6c:0a: b2:4e:0d:22:ee:e2:d6:f0:88:06:01:40:5b:f6:2b: ed:d5:67:2b:77:24:b6:db:08:33:a7:34:8a:99:d8: 66:3c:8d:43:7f:65:ad:f8:83:b9:d0:11:3c:c7:0c: 9d:1a:c8:72:e0:ea:8b:a8:f8:64:c5:21:1e:5f:99: 80:e8:5d:4e:8f:cd:fc:3f:0d:dd:ba:d3:64:e5:19: 26:0e:5d:b7:ca:d9:60:b9:39:c6:60:70:7a:94:67: ed:05:ef:47:81:97:6e:80:04:17:2b:03:34:50:e8: c5:1d:69:c0:4b:02:05:fb:67:3b:67:eb:e2:16:9c: 46:5c:e4:94:f8:ac:2b:75:d0:1e:26:26:2d:c7:30: c9:a9:c1:fa:e8:ec:a3:fd:3a:17:db:0c:cc:9a:f1: 2d:e1:40:75:52:36:9e:4d:ed:45:ed:66:67:03:3f: f6:82:f4:c9:56:e1:d9:27:d1:b2:c0:6d:52:ed:8f: ad:f5:18:bc:64:15:2a:29:64:67:ba:a1:ef:aa:98: ed:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:C8:40:65:A6:61:33:35:4C:7B:7C:5D:06:BD:3D:61:8D:CD:44:EC X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343538303a3a2f33322d3332203d3e203539303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:4580::/32 Signature Algorithm: sha256WithRSAEncryption 02:ac:b9:6a:6d:c0:77:71:cf:65:f8:c8:1e:a1:26:15:3f:b5: 5b:bf:5e:96:ee:88:cd:53:d4:15:ba:01:b5:8e:dd:98:be:1d: 39:37:04:09:48:b6:a7:df:99:0c:9c:68:23:89:5e:b7:df:20: b5:5e:3c:1f:2e:8a:b2:46:29:f5:0a:11:1c:1b:be:bf:3c:e0: 62:f2:a4:3f:47:5b:cf:ab:89:fb:75:c8:86:24:da:93:71:be: 61:49:05:e4:23:53:7e:2e:8d:03:c7:e9:b8:9d:29:f2:64:ed: af:b3:04:1a:e9:d2:13:5d:4b:db:77:29:47:98:11:81:dc:1e: b7:9f:d2:0c:84:3f:e6:09:44:6e:c0:a4:78:dd:e9:79:d5:df: d5:a1:42:53:bf:ef:af:32:09:f9:d1:b4:74:5b:a4:2d:c6:4d: cf:20:00:f1:53:63:26:16:ac:e7:e9:77:e1:20:77:e7:b7:ea: ff:7f:9a:2e:c1:ad:85:22:47:0c:57:c5:c4:db:6a:5c:0d:f4: 57:41:ce:6c:05:bc:3f:2e:f7:f4:36:20:01:70:ea:b7:7a:96: 4f:d1:21:91:a6:a3:aa:10:77:31:6c:3a:29:28:0e:d8:0e:d8: e7:6b:fa:5e:4a:75:e1:59:21:c4:0c:dc:db:7d:16:36:5e:c9: 0e:58:58:12 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUf74GgvDYacbU4fgnLa2MLsEjQ0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjEwMjM3MTBaFw0yNzA1MjAwMjQyMTBaMDMxMTAvBgNV BAMTKEMxQzg0MDY1QTY2MTMzMzU0QzdCN0M1RDA2QkQzRDYxOERDRDQ0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCptDfBveig1HeIpzvsYWXzUgFo Q7WbwATJKY0+qTrUy5qlFR4aHo2A8+ZlXUWz9CEO6I8aPTE39rBsCrJODSLu4tbw iAYBQFv2K+3VZyt3JLbbCDOnNIqZ2GY8jUN/Za34g7nQETzHDJ0ayHLg6ouo+GTF IR5fmYDoXU6Pzfw/Dd2602TlGSYOXbfK2WC5OcZgcHqUZ+0F70eBl26ABBcrAzRQ 6MUdacBLAgX7Zztn6+IWnEZc5JT4rCt10B4mJi3HMMmpwfro7KP9OhfbDMya8S3h QHVSNp5N7UXtZmcDP/aC9MlW4dkn0bLAbVLtj631GLxkFSopZGe6oe+qmO0pAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUwchAZaZhMzVMe3xdBr09YY3NROwwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjU3NjI5MjU4NDE2MTQ5LzAvMzIzNDMwMzEzYTM0 MzUzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBRYAwDQYJKoZIhvcNAQELBQADggEBAAKsuWptwHdxz2X4yB6hJhU/tVu/ XpbuiM1T1BW6AbWO3Zi+HTk3BAlItqffmQycaCOJXrffILVePB8uirJGKfUKERwb vr884GLypD9HW8+rift1yIYk2pNxvmFJBeQjU34ujQPH6bidKfJk7a+zBBrp0hNd S9t3KUeYEYHcHref0gyEP+YJRG7ApHjd6XnV39WhQlO/768yCfnRtHRbpC3GTc8g APFTYyYWrOfpd+Egd+e36v9/mi7BrYUiRwxXxcTbalwN9FdBzmwFvD8u9/Q2IAFw 6rd6lk/RIZGmo6oQdzFsOikoDtgO2Odr+l5KdeFZIcQM3Nt9FjZeyQ5YWBI= -----END CERTIFICATE-----Generated at Fri May 29 23:57:07 2026 by rpki-client