$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110017641860300821/0/323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa File: 323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa (raw, json) Hash identifier: NZeJ5bQFAG7ba0+Y7Pn0f3zGdJzBRiRJ447HtDKanFM= Subject key identifier: B4:11:EA:A4:56:3E:8C:31:07:B4:1B:59:BD:C2:49:7D:DA:5D:A1:D7 Certificate issuer: /CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Certificate serial: 54E38820BBF0F4C520C1351C3AB9877FA5F5CA5A Authority key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa Signing time: Fri 22 May 2026 01:38:36 +0000 ROA not before: Fri 22 May 2026 01:33:36 +0000 ROA not after: Fri 21 May 2027 01:38:36 +0000 asID: 134773 IP address blocks: 2406:e3c0:1800::/37 maxlen: 37 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e3:88:20:bb:f0:f4:c5:20:c1:35:1c:3a:b9:87:7f:a5:f5:ca:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Validity Not Before: May 22 01:33:36 2026 GMT Not After : May 21 01:38:36 2027 GMT Subject: CN=B411EAA4563E8C3107B41B59BDC2497DDA5DA1D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ce:88:19:de:a0:1b:01:00:b9:5b:30:48:4d: 02:2a:be:fc:ac:e7:25:4b:64:de:4c:47:d5:a8:a7: d7:28:e5:a7:48:f9:77:13:60:e8:02:6d:77:76:64: cb:c6:0f:f4:13:5c:91:e1:40:ca:e6:5d:fa:78:ea: 76:64:b5:71:8f:a6:8b:10:78:39:eb:ba:8f:89:d2: 3f:bf:b8:fa:67:85:c1:b9:de:2e:f2:d0:66:46:ce: e9:98:93:ab:01:c2:80:db:12:d7:e8:de:1a:9b:7b: f1:91:9c:06:5a:30:7f:d5:c6:6e:f4:a7:26:0f:ed: 3c:24:98:43:0e:d1:61:c3:2a:00:fd:e2:9b:a6:39: ef:99:88:43:be:df:9a:01:60:d1:54:68:c0:62:5b: ab:06:88:e3:6c:49:35:74:8b:b2:26:18:13:89:d5: 68:1a:42:e0:47:a0:68:f4:84:03:c6:6d:5e:df:fd: 5d:40:fc:d7:96:01:0f:d1:85:9a:03:61:7f:47:91: 7a:90:28:c8:ef:4f:e5:63:cb:c7:4c:03:5b:e4:da: 1e:f0:70:9b:45:d5:30:21:be:23:42:27:73:e8:5f: e8:03:f7:fd:6e:cc:1f:ac:8e:17:71:0e:9a:9f:29: 0e:2d:e6:e5:b2:3c:da:0b:af:60:34:d9:6e:26:39: b7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:11:EA:A4:56:3E:8C:31:07:B4:1B:59:BD:C2:49:7D:DA:5D:A1:D7 X509v3 Authority Key Identifier: keyid:08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/323430363a653363303a313830303a3a2f33372d3337203d3e20313334373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:e3c0:1800::/37 Signature Algorithm: sha256WithRSAEncryption 5f:3c:85:c2:d8:c1:ab:7d:5c:3f:3b:5f:4a:c8:24:a1:69:c4: 47:46:d2:eb:17:1c:db:86:7d:5a:bf:a7:08:14:3d:fa:00:13: 0c:66:38:42:bb:af:79:14:04:30:2a:8c:2d:d9:95:ac:e5:b8: 6c:ca:e9:02:4d:a3:b4:e7:a2:2e:90:70:f8:9a:e6:4c:2b:8a: c6:23:3e:2b:7f:3d:27:98:77:84:cd:78:92:ab:5b:43:b9:5b: 73:66:7f:52:4c:b3:48:c4:9a:49:f5:4f:ff:5a:75:f0:54:4d: 2c:18:3f:45:66:8d:41:bd:ec:62:5a:47:ef:c2:4d:f1:25:b2: 0a:96:62:43:da:3b:1b:80:a9:77:c0:3d:a6:52:66:5d:91:7d: ff:88:a3:7f:49:fa:3d:bf:f5:f6:87:b4:d8:af:f7:4e:79:e6: 0c:28:ec:2f:8d:a2:f0:0c:a0:85:2d:32:f4:de:f8:d4:09:89: ab:af:43:34:6b:71:55:51:21:be:a2:be:3b:0e:0e:28:51:9e: ce:0a:ad:72:0a:71:a8:13:61:24:83:32:64:87:37:f9:0c:27: 95:b9:42:f1:95:08:18:c1:28:df:f9:e5:c9:c1:bb:75:ee:a9: 01:70:79:40:8a:25:a6:a4:1c:da:d0:ce:d0:19:13:42:a1:9a: 5e:3d:c4:b0 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUVOOIILvw9MUgwTUcOrmHf6X1ylowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUND NkUzMDM0RjAeFw0yNjA1MjIwMTMzMzZaFw0yNzA1MjEwMTM4MzZaMDMxMTAvBgNV BAMTKEI0MTFFQUE0NTYzRThDMzEwN0I0MUI1OUJEQzI0OTdEREE1REExRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBzogZ3qAbAQC5WzBITQIqvvys 5yVLZN5MR9Wop9co5adI+XcTYOgCbXd2ZMvGD/QTXJHhQMrmXfp46nZktXGPposQ eDnruo+J0j+/uPpnhcG53i7y0GZGzumYk6sBwoDbEtfo3hqbe/GRnAZaMH/Vxm70 pyYP7TwkmEMO0WHDKgD94pumOe+ZiEO+35oBYNFUaMBiW6sGiONsSTV0i7ImGBOJ 1WgaQuBHoGj0hAPGbV7f/V1A/NeWAQ/RhZoDYX9HkXqQKMjvT+Vjy8dMA1vk2h7w cJtF1TAhviNCJ3PoX+gD9/1uzB+sjhdxDpqfKQ4t5uWyPNoLr2A02W4mObelAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUtBHqpFY+jDEHtBtZvcJJfdpdodcwHwYDVR0j BBgwFoAUCMfeiUpKiGIrp4vJ5B36XMbjA08wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDAxNzY0MTg2MDMwMDgyMS8wLzA4QzdERTg5NEE0QTg4NjIyQkE3OEJDOUU0MURG QTVDQzZFMzAzNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUNDNkUzMDM0Ri5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTEwMDE3NjQxODYwMzAwODIxLzAvMzIzNDMwMzYz YTY1MzM2MzMwM2EzMTM4MzAzMDNhM2EyZjMzMzcyZDMzMzcyMDNkM2UyMDMxMzMz NDM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGAyQG48AYMA0GCSqGSIb3DQEBCwUAA4IBAQBfPIXC 2MGrfVw/O19KyCShacRHRtLrFxzbhn1av6cIFD36ABMMZjhCu695FAQwKowt2ZWs 5bhsyukCTaO056IukHD4muZMK4rGIz4rfz0nmHeEzXiSq1tDuVtzZn9STLNIxJpJ 9U//WnXwVE0sGD9FZo1BvexiWkfvwk3xJbIKlmJD2jsbgKl3wD2mUmZdkX3/iKN/ Sfo9v/X2h7TYr/dOeeYMKOwvjaLwDKCFLTL03vjUCYmrr0M0a3FVUSG+or47Dg4o UZ7OCq1yCnGoE2EkgzJkhzf5DCeVuULxlQgYwSjf+eXJwbt17qkBcHlAiiWmpBza 0M7QGRNCoZpePcSw -----END CERTIFICATE-----Generated at Fri May 29 23:53:20 2026 by rpki-client