$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110017641860300821/0/323430363a653363303a3a2f33322d3332203d3e20313337373231.roa File: 323430363a653363303a3a2f33322d3332203d3e20313337373231.roa (raw, json) Hash identifier: k8TzbFMmHAutaTx4LA5r4lZixH232tTVKYk+YbSt+44= Subject key identifier: 1E:6D:68:42:87:6C:26:08:F5:5D:C6:07:3F:9B:A2:9B:36:21:01:C9 Certificate issuer: /CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Certificate serial: 1866DF13D333D19A643AF6073F05514D6BD839B4 Authority key identifier: 08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/323430363a653363303a3a2f33322d3332203d3e20313337373231.roa Signing time: Fri 22 May 2026 01:38:36 +0000 ROA not before: Fri 22 May 2026 01:33:36 +0000 ROA not after: Fri 21 May 2027 01:38:36 +0000 asID: 137721 IP address blocks: 2406:e3c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:66:df:13:d3:33:d1:9a:64:3a:f6:07:3f:05:51:4d:6b:d8:39:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F Validity Not Before: May 22 01:33:36 2026 GMT Not After : May 21 01:38:36 2027 GMT Subject: CN=1E6D6842876C2608F55DC6073F9BA29B362101C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:14:70:b3:1e:d0:85:8d:2d:46:4d:88:c5:54: 6b:dc:b2:ea:38:f5:51:00:58:5f:5f:64:fa:ab:d9: 31:ab:cf:e7:75:ef:90:52:13:59:60:24:c9:d5:69: 96:99:e9:80:dc:69:e9:b4:97:69:6e:26:55:a2:1f: 5f:17:bd:16:50:2c:52:5d:40:9a:ea:73:8b:9e:81: d2:a1:9f:74:fb:24:b1:55:d1:df:7a:aa:5a:99:6a: 2c:2b:64:c6:15:f2:72:49:7c:3d:3a:2f:9e:25:fb: 0c:c8:08:c6:b4:34:4e:e0:84:56:46:ee:53:64:e0: e2:84:28:c3:2e:75:d8:5a:8f:ba:02:4b:f4:a5:ff: be:d7:9a:de:85:0c:e6:cc:df:77:5d:1c:3f:8e:33: 1b:6b:52:be:a6:37:37:9e:17:b9:bd:2d:72:b3:b3: 2d:52:91:92:a4:35:6e:9e:fb:84:69:6b:71:f7:e1: 17:2f:1b:d9:4c:91:e8:bb:01:cc:eb:fd:91:26:ff: f4:af:0d:c3:3f:ad:03:ac:75:06:56:43:0a:71:f7: a6:38:3a:61:0a:e8:a7:75:55:a0:b0:26:1b:37:c1: b1:b2:7a:1e:8e:2c:bb:5e:83:cf:4a:90:fd:45:f1: db:a4:10:5a:d2:6f:98:05:3c:3a:9c:63:65:96:28: 58:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6D:68:42:87:6C:26:08:F5:5D:C6:07:3F:9B:A2:9B:36:21:01:C9 X509v3 Authority Key Identifier: keyid:08:C7:DE:89:4A:4A:88:62:2B:A7:8B:C9:E4:1D:FA:5C:C6:E3:03:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/08C7DE894A4A88622BA78BC9E41DFA5CC6E3034F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110017641860300821/0/323430363a653363303a3a2f33322d3332203d3e20313337373231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:e3c0::/32 Signature Algorithm: sha256WithRSAEncryption 0c:70:5b:18:86:c7:c0:23:ce:b1:7c:a0:47:0a:42:c0:82:7d: a6:a9:77:84:cb:2c:6a:67:0d:19:af:e5:67:45:c7:3a:e5:7a: ec:a8:d6:e6:71:4e:21:ad:e5:fe:e2:73:45:71:7e:2b:19:90: a9:b7:58:3e:c1:e3:dc:e1:f8:ab:45:02:a7:bf:61:c6:e5:de: 24:b3:13:7c:f5:a7:55:44:11:78:97:79:8f:75:09:42:b2:51: 8e:25:a0:f0:1f:3f:b2:10:a1:0e:a4:48:f4:91:12:cd:1a:bf: ef:b7:45:23:a9:9f:73:df:b0:e3:7a:5a:b3:89:f8:95:b9:df: 9c:5e:c3:45:0e:15:84:9f:7d:d2:1c:3d:e2:06:15:50:dc:87: bd:b3:7b:cb:63:e2:3c:19:fd:56:81:cf:cc:e6:08:c9:13:de: c4:df:8f:c1:48:f0:69:20:ed:6d:5c:e5:b0:dc:bf:f1:9f:78: 84:db:3c:62:a3:e1:a8:12:b0:5b:df:8e:89:e9:8f:53:a5:04: 1a:b1:16:53:19:f7:8f:08:b7:78:42:24:4c:24:18:32:f5:59: 55:0f:81:d4:83:ff:4c:aa:16:c9:77:82:60:be:c6:dd:3c:09: 0b:a0:5b:8f:f4:55:53:a8:01:e7:f0:11:72:45:c2:46:2c:a4: 60:16:6a:d1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUGGbfE9Mz0ZpkOvYHPwVRTWvYObQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUND NkUzMDM0RjAeFw0yNjA1MjIwMTMzMzZaFw0yNzA1MjEwMTM4MzZaMDMxMTAvBgNV BAMTKDFFNkQ2ODQyODc2QzI2MDhGNTVEQzYwNzNGOUJBMjlCMzYyMTAxQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUFHCzHtCFjS1GTYjFVGvcsuo4 9VEAWF9fZPqr2TGrz+d175BSE1lgJMnVaZaZ6YDcaem0l2luJlWiH18XvRZQLFJd QJrqc4uegdKhn3T7JLFV0d96qlqZaiwrZMYV8nJJfD06L54l+wzICMa0NE7ghFZG 7lNk4OKEKMMuddhaj7oCS/Sl/77Xmt6FDObM33ddHD+OMxtrUr6mNzeeF7m9LXKz sy1SkZKkNW6e+4Rpa3H34RcvG9lMkei7Aczr/ZEm//SvDcM/rQOsdQZWQwpx96Y4 OmEK6Kd1VaCwJhs3wbGyeh6OLLteg89KkP1F8dukEFrSb5gFPDqcY2WWKFitAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUHm1oQodsJgj1XcYHP5uimzYhAckwHwYDVR0j BBgwFoAUCMfeiUpKiGIrp4vJ5B36XMbjA08wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDAxNzY0MTg2MDMwMDgyMS8wLzA4QzdERTg5NEE0QTg4NjIyQkE3OEJDOUU0MURG QTVDQzZFMzAzNEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMDhDN0RFODk0QTRBODg2MjJCQTc4QkM5RTQxREZBNUNDNkUzMDM0Ri5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExMDAxNzY0MTg2MDMwMDgyMS8wLzMyMzQzMDM2M2E2 NTMzNjMzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMxMzMzNzM3MzIzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQG48AwDQYJKoZIhvcNAQELBQADggEBAAxwWxiGx8AjzrF8oEcKQsCC faapd4TLLGpnDRmv5WdFxzrleuyo1uZxTiGt5f7ic0VxfisZkKm3WD7B49zh+KtF Aqe/Ycbl3iSzE3z1p1VEEXiXeY91CUKyUY4loPAfP7IQoQ6kSPSREs0av++3RSOp n3PfsON6WrOJ+JW535xew0UOFYSffdIcPeIGFVDch72ze8tj4jwZ/VaBz8zmCMkT 3sTfj8FI8Gkg7W1c5bDcv/GfeITbPGKj4agSsFvfjonpj1OlBBqxFlMZ948It3hC JEwkGDL1WVUPgdSD/0yqFsl3gmC+xt08CQugW4/0VVOoAefwEXJFwkYspGAWatE= -----END CERTIFICATE-----Generated at Fri May 29 22:57:12 2026 by rpki-client