$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343838303a3a2f33322d3332203d3e203539303136.roa File: 323430313a343838303a3a2f33322d3332203d3e203539303136.roa (raw, json) Hash identifier: L3uEhrRZb8f4yuEifKGAUDh5wDZ3Fi8QViYq2N6q/6w= Subject key identifier: C2:E4:60:C9:94:B9:C8:D0:C0:7E:34:26:A7:E7:4F:F7:28:0A:96:27 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 428DD8AE5BB425EFE2204061045E13E7D3BF923A Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343838303a3a2f33322d3332203d3e203539303136.roa Signing time: Thu 21 May 2026 02:43:03 +0000 ROA not before: Thu 21 May 2026 02:38:03 +0000 ROA not after: Thu 20 May 2027 02:43:03 +0000 asID: 59016 IP address blocks: 2401:4880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:8d:d8:ae:5b:b4:25:ef:e2:20:40:61:04:5e:13:e7:d3:bf:92:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 21 02:38:03 2026 GMT Not After : May 20 02:43:03 2027 GMT Subject: CN=C2E460C994B9C8D0C07E3426A7E74FF7280A9627 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:80:10:6b:28:c0:2a:12:f0:2c:d4:0f:ad: cd:2f:c3:27:c0:85:d4:57:5c:d3:59:f8:60:25:a1: f6:57:d5:bd:61:b5:2c:1b:cc:34:36:ea:ae:78:c7: a5:f8:e1:c7:ca:6e:d9:66:b1:81:fc:4e:74:ce:4b: 16:ae:37:69:ff:e5:89:0c:60:2c:6d:52:ec:6f:0a: 75:3f:2e:7f:8a:b4:5d:2d:39:46:3b:b7:26:12:8a: af:b3:2a:01:83:9d:15:97:89:1c:18:43:8b:81:c6: ec:af:0b:eb:e8:b3:4a:86:8c:92:17:dc:25:98:b6: fd:9f:95:3b:33:68:d8:cf:94:7a:9a:f4:aa:60:6a: e9:cb:84:5c:da:23:3f:ed:ce:70:c0:04:48:aa:c0: c7:d6:15:81:7b:dc:ae:db:bf:dc:b7:59:1b:09:a1: 65:d7:4d:86:79:f3:5a:a4:51:88:33:bc:2a:b9:46: 11:ce:9b:91:49:58:ae:22:5d:1f:24:11:58:b7:d4: b9:91:ec:f0:1a:4e:3e:6a:7b:3c:81:9c:18:6f:c7: 09:04:bd:b5:a0:9b:1c:a0:2f:12:f7:94:62:c6:b6: e1:44:27:fb:58:e3:46:d5:f2:8f:fe:70:52:55:24: 3a:1f:1e:e9:a4:85:83:5f:17:b7:e1:40:c2:cd:e3: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E4:60:C9:94:B9:C8:D0:C0:7E:34:26:A7:E7:4F:F7:28:0A:96:27 X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a343838303a3a2f33322d3332203d3e203539303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:4880::/32 Signature Algorithm: sha256WithRSAEncryption 1f:28:1d:de:15:f1:23:10:1e:15:24:66:8d:3e:d7:39:b7:8e: fa:42:12:27:7f:a1:7d:64:10:c9:bc:9f:32:58:10:65:4b:cc: 31:f8:62:2e:58:33:01:d1:b4:f6:10:de:6d:99:67:59:33:8e: ca:7a:9e:09:f5:95:d9:ca:d3:65:32:5b:a2:05:73:9e:89:1f: d5:11:cb:64:9e:f5:3f:8a:3a:ce:60:65:46:5e:cc:88:d4:86: fd:6c:10:ca:61:2d:3f:c7:37:3b:c5:f2:43:63:95:22:10:3a: 32:44:2c:d9:a3:5c:da:f2:bd:87:81:7b:0a:65:24:37:47:11: c4:c0:c8:72:08:e5:7b:f5:a2:b7:22:3b:07:d9:7b:7c:c9:3c: 16:bd:e3:e9:12:e4:47:23:66:7a:92:aa:99:2e:b9:79:00:93: 56:78:dd:a0:f8:60:6d:a7:45:e7:e6:dd:72:62:5e:22:8d:59: b6:69:cc:d2:e4:63:de:c0:7f:4b:8d:d8:f2:9c:a8:fc:14:82: 36:24:a3:02:cb:ca:c5:96:4c:47:a5:2d:fe:be:c9:eb:af:20: 53:af:1e:a4:b2:da:d3:65:c5:57:8c:55:66:03:cd:cf:b2:7e: c6:7d:c9:8e:b0:21:1d:0f:55:a5:31:ad:c6:d3:a1:c9:b8:76: 48:98:82:72 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUQo3Yrlu0Je/iIEBhBF4T59O/kjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjEwMjM4MDNaFw0yNzA1MjAwMjQzMDNaMDMxMTAvBgNV BAMTKEMyRTQ2MEM5OTRCOUM4RDBDMDdFMzQyNkE3RTc0RkY3MjgwQTk2MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdeYAQayjAKhLwLNQPrc0vwyfA hdRXXNNZ+GAlofZX1b1htSwbzDQ26q54x6X44cfKbtlmsYH8TnTOSxauN2n/5YkM YCxtUuxvCnU/Ln+KtF0tOUY7tyYSiq+zKgGDnRWXiRwYQ4uBxuyvC+vos0qGjJIX 3CWYtv2flTszaNjPlHqa9KpgaunLhFzaIz/tznDABEiqwMfWFYF73K7bv9y3WRsJ oWXXTYZ581qkUYgzvCq5RhHOm5FJWK4iXR8kEVi31LmR7PAaTj5qezyBnBhvxwkE vbWgmxygLxL3lGLGtuFEJ/tY40bV8o/+cFJVJDofHumkhYNfF7fhQMLN4+SvAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUwuRgyZS5yNDAfjQmp+dP9ygKlicwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjU3NjI5MjU4NDE2MTQ5LzAvMzIzNDMwMzEzYTM0 MzgzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBSIAwDQYJKoZIhvcNAQELBQADggEBAB8oHd4V8SMQHhUkZo0+1zm3jvpC Eid/oX1kEMm8nzJYEGVLzDH4Yi5YMwHRtPYQ3m2ZZ1kzjsp6ngn1ldnK02UyW6IF c56JH9URy2Se9T+KOs5gZUZezIjUhv1sEMphLT/HNzvF8kNjlSIQOjJELNmjXNry vYeBewplJDdHEcTAyHII5Xv1orciOwfZe3zJPBa94+kS5EcjZnqSqpkuuXkAk1Z4 3aD4YG2nRefm3XJiXiKNWbZpzNLkY97Af0uN2PKcqPwUgjYkowLLysWWTEelLf6+ yeuvIFOvHqSy2tNlxVeMVWYDzc+yfsZ9yY6wIR0PVaUxrcbTocm4dkiYgnI= -----END CERTIFICATE-----Generated at Fri May 29 23:57:10 2026 by rpki-client