$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a346138303a3a2f33322d3332203d3e203539303136.roa File: 323430313a346138303a3a2f33322d3332203d3e203539303136.roa (raw, json) Hash identifier: TA9sNJg7is21RvuqNvlhYmi7s0BOFgm0l6CxlSd3k3E= Subject key identifier: F3:3D:37:5E:0E:9B:16:FB:08:AD:ED:4B:E8:E0:48:70:8F:7B:EC:F0 Certificate issuer: /CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Certificate serial: 3560F9A4E68AD2960AC6B12FADF7DC41CDA22C22 Authority key identifier: 95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a346138303a3a2f33322d3332203d3e203539303136.roa Signing time: Thu 21 May 2026 02:43:03 +0000 ROA not before: Thu 21 May 2026 02:38:03 +0000 ROA not after: Thu 20 May 2027 02:43:03 +0000 asID: 59016 IP address blocks: 2401:4a80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 08:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:60:f9:a4:e6:8a:d2:96:0a:c6:b1:2f:ad:f7:dc:41:cd:a2:2c:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95325EDFAB899EDF9C6AE51432F897FFDF47DCD3 Validity Not Before: May 21 02:38:03 2026 GMT Not After : May 20 02:43:03 2027 GMT Subject: CN=F33D375E0E9B16FB08ADED4BE8E048708F7BECF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:eb:8e:b2:23:e1:cd:1d:9b:83:c0:51:92:aa: 0d:89:01:f0:bb:05:ce:f7:8e:88:97:df:b4:3b:ef: d1:0e:a5:49:70:58:78:e7:db:08:50:a5:45:64:0c: 50:aa:32:cc:7e:a7:4b:7a:5a:a7:01:85:72:ef:7a: 21:3b:78:24:a4:51:fb:2c:95:9b:15:f3:a2:b0:76: 52:56:29:28:bb:57:82:f0:c7:c8:5a:0c:76:94:a3: b1:e5:97:4a:a1:04:4c:2b:4e:f0:56:2d:19:82:26: 46:f8:67:72:d4:52:0a:8e:b8:6a:fc:07:49:f8:38: eb:29:51:62:1b:dd:a0:66:6f:ae:4a:68:0d:2a:89: bf:b4:c1:90:55:2b:94:99:be:96:76:2c:9d:79:62: 6a:75:36:1e:30:c9:65:de:af:d9:64:b2:1d:b4:00: 68:25:95:19:d3:fd:2d:1a:db:2c:c1:da:e4:ef:6d: eb:43:d9:23:cb:76:43:04:7f:cd:16:2c:44:b7:ea: 7d:a7:82:95:2f:13:8c:e2:2d:27:18:8d:5d:56:79: 7e:c6:e1:cd:57:8f:de:4e:b0:5f:9c:40:25:68:fe: b2:8a:71:0a:02:35:5d:ae:b7:4f:4d:24:35:4e:de: 2d:5b:17:33:39:82:75:7a:e0:27:47:c9:5b:ad:66: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3D:37:5E:0E:9B:16:FB:08:AD:ED:4B:E8:E0:48:70:8F:7B:EC:F0 X509v3 Authority Key Identifier: keyid:95:32:5E:DF:AB:89:9E:DF:9C:6A:E5:14:32:F8:97:FF:DF:47:DC:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/95325EDFAB899EDF9C6AE51432F897FFDF47DCD3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109657629258416149/0/323430313a346138303a3a2f33322d3332203d3e203539303136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:4a80::/32 Signature Algorithm: sha256WithRSAEncryption 2a:0f:c4:02:e3:e1:2b:cf:21:e1:90:1b:58:87:3a:56:91:64: 91:68:5f:bb:4a:6c:e2:27:6b:d5:8b:7b:43:1e:40:36:61:43: e8:07:87:cd:cd:60:7a:c1:a5:8d:eb:20:03:51:7c:41:e3:82: 56:7d:7a:5f:c5:9a:d5:1b:c0:e7:1d:94:40:1e:b0:76:f9:7b: b5:92:ec:ae:34:71:a6:e7:9d:58:c6:f9:28:1b:fc:47:ae:c5: d4:9c:4e:7a:b7:57:b3:80:23:69:c6:71:60:b2:23:99:56:a1: 37:96:6c:80:cf:c8:94:33:08:d7:e5:36:4a:49:17:91:73:f3: 53:27:ca:92:ee:15:b2:7a:4a:06:2f:a8:e7:9d:37:b4:a1:77: 6c:72:ab:54:f6:0f:92:ef:cf:ba:28:8a:ba:64:27:d0:62:64: fc:e0:cc:23:c3:03:b9:d9:bd:29:c1:dc:5b:c9:ef:74:55:24: 90:56:68:0f:fb:94:15:90:1a:f8:e3:c9:95:07:33:0d:7f:75: 35:b5:ef:26:dd:e3:8b:68:15:6c:6b:b5:9b:40:4c:28:f5:49: 14:af:d1:83:01:c4:61:ed:74:96:25:c1:e7:16:41:7f:ed:20: 22:ab:93:fd:17:54:b2:16:2e:f5:5e:6d:27:2a:85:88:48:bc: 6b:d9:21:21 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUNWD5pOaK0pYKxrEvrffcQc2iLCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZE RjQ3RENEMzAeFw0yNjA1MjEwMjM4MDNaFw0yNzA1MjAwMjQzMDNaMDMxMTAvBgNV BAMTKEYzM0QzNzVFMEU5QjE2RkIwOEFERUQ0QkU4RTA0ODcwOEY3QkVDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY646yI+HNHZuDwFGSqg2JAfC7 Bc73joiX37Q779EOpUlwWHjn2whQpUVkDFCqMsx+p0t6WqcBhXLveiE7eCSkUfss lZsV86KwdlJWKSi7V4Lwx8haDHaUo7Hll0qhBEwrTvBWLRmCJkb4Z3LUUgqOuGr8 B0n4OOspUWIb3aBmb65KaA0qib+0wZBVK5SZvpZ2LJ15Ymp1Nh4wyWXer9lksh20 AGgllRnT/S0a2yzB2uTvbetD2SPLdkMEf80WLES36n2ngpUvE4ziLScYjV1WeX7G 4c1Xj95OsF+cQCVo/rKKcQoCNV2ut09NJDVO3i1bFzM5gnV64CdHyVutZmLxAgMB AAGjggISMIICDjAdBgNVHQ4EFgQU8z03Xg6bFvsIre1L6OBIcI977PAwHwYDVR0j BBgwFoAUlTJe36uJnt+cauUUMviX/99H3NMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw OTY1NzYyOTI1ODQxNjE0OS8wLzk1MzI1RURGQUI4OTlFREY5QzZBRTUxNDMyRjg5 N0ZGREY0N0RDRDMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTUzMjVFREZBQjg5OUVERjlDNkFFNTE0MzJGODk3RkZERjQ3RENEMy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA5NjU3NjI5MjU4NDE2MTQ5LzAvMzIzNDMwMzEzYTM0 NjEzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzUzOTMwMzEzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQBSoAwDQYJKoZIhvcNAQELBQADggEBACoPxALj4SvPIeGQG1iHOlaRZJFo X7tKbOIna9WLe0MeQDZhQ+gHh83NYHrBpY3rIANRfEHjglZ9el/FmtUbwOcdlEAe sHb5e7WS7K40cabnnVjG+Sgb/EeuxdScTnq3V7OAI2nGcWCyI5lWoTeWbIDPyJQz CNflNkpJF5Fz81MnypLuFbJ6SgYvqOedN7Shd2xyq1T2D5Lvz7ooirpkJ9BiZPzg zCPDA7nZvSnB3FvJ73RVJJBWaA/7lBWQGvjjyZUHMw1/dTW17ybd44toFWxrtZtA TCj1SRSv0YMBxGHtdJYlwecWQX/tICKrk/0XVLIWLvVebScqhYhIvGvZISE= -----END CERTIFICATE-----Generated at Fri May 29 23:58:52 2026 by rpki-client