$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112279725855801365/0/323430303a633230303a3a2f33322d3332203d3e2030.roa File: 323430303a633230303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: jWSURrH5i9Ve77dNSm/DOqVvWVta2CLwxt5B21ziKXk= Subject key identifier: 5B:00:DD:9E:0A:27:1C:08:7D:3C:62:9A:F4:24:89:F2:76:A0:64:3B Certificate issuer: /CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Certificate serial: 184FF097537070443CA9D0C1E439DE3FF0DB028F Authority key identifier: 55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/323430303a633230303a3a2f33322d3332203d3e2030.roa Signing time: Thu 28 May 2026 08:03:27 +0000 ROA not before: Thu 28 May 2026 07:58:27 +0000 ROA not after: Thu 27 May 2027 08:03:27 +0000 asID: 0 IP address blocks: 2400:c200::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 05:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:4f:f0:97:53:70:70:44:3c:a9:d0:c1:e4:39:de:3f:f0:db:02:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=558E3A27BD7622FACC3317CBF8132E06D97F46B1 Validity Not Before: May 28 07:58:27 2026 GMT Not After : May 27 08:03:27 2027 GMT Subject: CN=5B00DD9E0A271C087D3C629AF42489F276A0643B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ad:4a:64:74:da:72:58:28:f6:e1:68:8f:c2: 74:58:d9:88:d1:be:4e:b4:d9:f5:5f:c1:58:e9:05: eb:8f:09:f7:8d:b8:ed:2e:85:bf:db:5a:2a:38:14: 2b:67:22:df:55:56:e3:3d:c1:23:34:c4:d2:b8:63: e0:c4:52:6c:20:0e:e5:36:93:c8:d9:96:50:1b:68: 94:65:e6:dc:a1:1f:5b:81:47:7d:cf:a6:d0:a0:71: cc:94:ee:ed:4e:a3:cf:92:96:af:73:b4:50:80:9a: 0b:d2:cf:2d:e0:a2:f3:68:7f:8f:61:41:19:67:3c: 81:4d:9c:2b:24:fe:68:e7:a7:f8:c1:65:f7:5a:7a: f2:81:b4:60:cc:14:02:23:9c:e7:36:5f:bb:34:8e: 5e:4b:97:f5:4e:8b:ff:5c:d5:46:f7:b1:91:0d:14: f2:47:94:0b:79:42:a4:72:1c:01:d9:77:17:8b:68: 14:11:28:40:ed:dc:46:aa:42:e3:15:13:c7:2b:eb: 6e:56:55:19:b7:27:e0:96:58:2a:7f:91:a6:37:ff: 1f:51:01:0f:66:46:f0:9a:47:be:dd:dc:f8:33:b7: 4f:a8:4f:3c:31:bf:95:ae:ce:5d:41:ba:08:b2:99: 6d:88:8b:42:84:c2:67:74:cb:1b:38:6e:30:da:96: d7:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:00:DD:9E:0A:27:1C:08:7D:3C:62:9A:F4:24:89:F2:76:A0:64:3B X509v3 Authority Key Identifier: keyid:55:8E:3A:27:BD:76:22:FA:CC:33:17:CB:F8:13:2E:06:D9:7F:46:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/558E3A27BD7622FACC3317CBF8132E06D97F46B1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/558E3A27BD7622FACC3317CBF8132E06D97F46B1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112279725855801365/0/323430303a633230303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:c200::/32 Signature Algorithm: sha256WithRSAEncryption 4d:57:a4:54:7a:64:8c:b3:8d:76:39:ba:10:93:9c:4b:bf:ca: a2:73:c4:eb:60:8a:02:26:4b:ac:9e:67:7e:bc:9d:84:21:8b: 5b:bf:43:d5:af:2b:1d:8b:cb:b9:77:0d:57:1f:02:6b:16:aa: 71:fb:e4:00:34:12:91:0c:cb:60:c4:6e:40:d7:53:6d:de:60: f3:da:59:96:d9:12:d2:43:ce:4f:4f:eb:fd:14:48:5b:09:f5: 63:53:32:fb:f3:40:69:05:0f:aa:91:43:29:12:0d:f6:15:dc: f9:23:3b:7c:7c:50:00:d9:96:12:57:9b:c9:17:30:fa:3c:d5: 83:6c:87:72:80:e7:63:14:47:35:f6:f9:40:54:7a:80:9e:48: ab:d5:a9:03:cf:93:5b:9a:12:7b:d0:4a:1d:61:62:39:8e:19: c0:8f:07:de:de:c9:55:13:22:0e:58:d2:98:39:a9:6b:f6:09: 58:7d:18:6f:f4:f0:98:d8:9f:f8:34:56:b4:dc:e5:a2:4e:2b: d1:aa:c7:fa:1d:18:0e:66:0b:bc:2e:ce:51:0e:c0:2b:7b:30: 3e:bc:93:13:69:6c:97:ad:1d:28:58:c0:6e:f3:c3:ed:ce:52: 2c:9f:3c:e0:95:46:3d:30:5f:1a:fc:12:51:68:02:0f:00:02: 80:e6:b9:55 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGE/wl1NwcEQ8qdDB5DneP/DbAo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZE OTdGNDZCMTAeFw0yNjA1MjgwNzU4MjdaFw0yNzA1MjcwODAzMjdaMDMxMTAvBgNV BAMTKDVCMDBERDlFMEEyNzFDMDg3RDNDNjI5QUY0MjQ4OUYyNzZBMDY0M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCerUpkdNpyWCj24WiPwnRY2YjR vk602fVfwVjpBeuPCfeNuO0uhb/bWio4FCtnIt9VVuM9wSM0xNK4Y+DEUmwgDuU2 k8jZllAbaJRl5tyhH1uBR33PptCgccyU7u1Oo8+Slq9ztFCAmgvSzy3govNof49h QRlnPIFNnCsk/mjnp/jBZfdaevKBtGDMFAIjnOc2X7s0jl5Ll/VOi/9c1Ub3sZEN FPJHlAt5QqRyHAHZdxeLaBQRKEDt3EaqQuMVE8cr625WVRm3J+CWWCp/kaY3/x9R AQ9mRvCaR77d3Pgzt0+oTzwxv5Wuzl1BugiymW2Ii0KEwmd0yxs4bjDaltflAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUWwDdngonHAh9PGKa9CSJ8nagZDswHwYDVR0j BBgwFoAUVY46J712IvrMMxfL+BMuBtl/RrEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjI3OTcyNTg1NTgwMTM2NS8wLzU1OEUzQTI3QkQ3NjIyRkFDQzMzMTdDQkY4MTMy RTA2RDk3RjQ2QjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTU4RTNBMjdCRDc2MjJGQUNDMzMxN0NCRjgxMzJFMDZEOTdGNDZCMS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTEyMjc5NzI1ODU1ODAxMzY1LzAvMzIzNDMwMzAzYTYz MzIzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAMIA MA0GCSqGSIb3DQEBCwUAA4IBAQBNV6RUemSMs412OboQk5xLv8qic8TrYIoCJkus nmd+vJ2EIYtbv0PVrysdi8u5dw1XHwJrFqpx++QANBKRDMtgxG5A11Nt3mDz2lmW 2RLSQ85PT+v9FEhbCfVjUzL780BpBQ+qkUMpEg32Fdz5Izt8fFAA2ZYSV5vJFzD6 PNWDbIdygOdjFEc19vlAVHqAnkir1akDz5NbmhJ70EodYWI5jhnAjwfe3slVEyIO WNKYOalr9glYfRhv9PCY2J/4NFa03OWiTivRqsf6HRgOZgu8Ls5RDsArezA+vJMT aWyXrR0oWMBu88PtzlIsnzzglUY9MF8a/BJRaAIPAAKA5rlV -----END CERTIFICATE-----Generated at Fri May 29 23:53:25 2026 by rpki-client