$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112300133472534549/0/323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa File: 323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa (raw, json) Hash identifier: ocFBS+51pfXKI0lNf1ZYbOle2BhHxF8/x93CRD8hQsQ= Subject key identifier: 4C:94:ED:53:D5:C3:82:18:AF:48:7D:50:35:DD:38:4D:7E:90:D9:D5 Certificate issuer: /CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Certificate serial: 09A824B0E6049F8216FA0BF955D222767A6C0488 Authority key identifier: 5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa Signing time: Mon 29 Jun 2026 10:03:33 +0000 ROA not before: Mon 29 Jun 2026 09:58:33 +0000 ROA not after: Mon 28 Jun 2027 10:03:33 +0000 asID: 4837 IP address blocks: 2406:1e40:f012::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:02:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a8:24:b0:e6:04:9f:82:16:fa:0b:f9:55:d2:22:76:7a:6c:04:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4 Validity Not Before: Jun 29 09:58:33 2026 GMT Not After : Jun 28 10:03:33 2027 GMT Subject: CN=4C94ED53D5C38218AF487D5035DD384D7E90D9D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:bc:66:61:5d:29:97:19:95:63:e4:cf:f9:c3: 95:82:09:0d:b2:52:cf:7d:a0:23:5e:c4:8c:38:a9: 67:86:ce:b5:f8:66:50:fe:f5:b6:f2:33:4e:e8:f8: 56:7c:e9:ef:e3:ee:ac:63:84:52:44:5e:45:fb:b5: 2f:63:e0:a2:53:a7:73:b6:30:a1:00:31:34:62:3c: 8f:60:98:b2:b3:59:8d:0c:9e:c7:c2:ea:00:c3:7b: 8f:22:41:56:94:bd:7e:20:34:b1:25:50:1d:cd:52: 98:a8:dc:79:f1:b7:20:72:5e:6a:fa:50:79:2b:9e: a7:65:81:e5:e4:21:c6:31:31:44:2a:0f:de:9d:0e: e2:34:89:34:f7:9c:b3:df:4b:f9:43:63:36:97:0b: 71:51:93:20:d5:bb:ef:7c:9b:3a:0b:1b:d7:a0:1a: 33:c5:d1:9c:39:ae:40:b5:81:ec:78:59:1d:ef:87: 7f:30:12:ff:3a:65:42:10:be:90:66:b1:29:23:a0: 7e:a0:b1:38:c5:27:94:b5:34:e9:5e:0e:bd:5c:66: b6:24:42:04:fd:a7:4f:ce:d6:46:1c:6a:ec:8d:1c: 8c:1c:36:0c:a8:59:5c:60:3f:4a:bc:f7:d9:44:c5: eb:7f:83:4d:1a:a6:92:f5:cb:ff:29:d6:d0:d7:07: a6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:94:ED:53:D5:C3:82:18:AF:48:7D:50:35:DD:38:4D:7E:90:D9:D5 X509v3 Authority Key Identifier: keyid:5A:13:B0:DE:9C:8C:16:5E:1D:F7:4B:37:ED:5F:08:A0:0D:C7:05:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A13B0DE9C8C165E1DF74B37ED5F08A00DC705F4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112300133472534549/0/323430363a316534303a663031323a3a2f34372d3437203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:1e40:f012::/47 Signature Algorithm: sha256WithRSAEncryption ba:48:98:32:8a:70:46:32:a3:47:08:ed:fc:f2:8f:61:99:e2: ad:ee:5b:e4:0f:24:b3:7a:8c:00:c5:aa:1c:a2:50:8f:f4:42: 8c:e3:63:8d:ec:45:5a:ae:b4:3f:82:d4:31:d7:9c:05:c0:8c: a6:ea:09:17:8d:d8:af:76:5b:33:a2:44:a6:29:21:b9:81:ba: 71:c5:ad:94:d3:23:2d:d8:3a:66:2c:f4:2e:1a:6f:cb:a2:63: 47:7c:68:12:cd:dc:90:a7:16:29:8f:5c:7e:fc:f3:8d:8c:21: d3:be:71:4f:84:5a:78:33:0f:5c:84:2c:36:2b:2d:64:b6:94: 3c:d5:69:7c:b8:9d:3c:0b:53:bb:c4:75:92:11:20:dd:ec:e8: 18:77:55:5d:6e:61:78:96:f7:82:90:7b:ce:37:64:dc:e3:46: d7:61:32:cd:06:b2:57:f5:06:4f:56:bf:0a:d2:a4:27:b7:18: 21:69:70:b7:88:2b:2c:12:b2:f0:85:44:82:4e:d0:b9:7d:ee: de:7c:8e:d9:bd:8d:98:0f:0a:a9:b0:eb:87:ae:16:0e:01:06: ef:6b:57:d0:ca:ec:bf:be:97:60:bb:68:ab:11:25:6b:14:e1: d6:67:33:b2:d1:0c:6e:b6:61:bc:66:a6:8f:fe:6f:f9:67:0b: 5d:8f:34:50 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUCagksOYEn4IW+gv5VdIidnpsBIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAw REM3MDVGNDAeFw0yNjA2MjkwOTU4MzNaFw0yNzA2MjgxMDAzMzNaMDMxMTAvBgNV BAMTKDRDOTRFRDUzRDVDMzgyMThBRjQ4N0Q1MDM1REQzODREN0U5MEQ5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxvGZhXSmXGZVj5M/5w5WCCQ2y Us99oCNexIw4qWeGzrX4ZlD+9bbyM07o+FZ86e/j7qxjhFJEXkX7tS9j4KJTp3O2 MKEAMTRiPI9gmLKzWY0MnsfC6gDDe48iQVaUvX4gNLElUB3NUpio3HnxtyByXmr6 UHkrnqdlgeXkIcYxMUQqD96dDuI0iTT3nLPfS/lDYzaXC3FRkyDVu+98mzoLG9eg GjPF0Zw5rkC1gex4WR3vh38wEv86ZUIQvpBmsSkjoH6gsTjFJ5S1NOleDr1cZrYk QgT9p0/O1kYcauyNHIwcNgyoWVxgP0q899lExet/g00appL1y/8p1tDXB6YHAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUTJTtU9XDghivSH1QNd04TX6Q2dUwHwYDVR0j BBgwFoAUWhOw3pyMFl4d90s37V8IoA3HBfQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjMwMDEzMzQ3MjUzNDU0OS8wLzVBMTNCMERFOUM4QzE2NUUxREY3NEIzN0VENUYw OEEwMERDNzA1RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUExM0IwREU5QzhDMTY1RTFERjc0QjM3RUQ1RjA4QTAwREM3MDVGNC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTEyMzAwMTMzNDcyNTM0NTQ5LzAvMzIzNDMwMzYz YTMxNjUzNDMwM2E2NjMwMzEzMjNhM2EyZjM0MzcyZDM0MzcyMDNkM2UyMDM0Mzgz MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcBJAYeQPASMA0GCSqGSIb3DQEBCwUAA4IBAQC6SJgyinBG MqNHCO388o9hmeKt7lvkDySzeowAxaocolCP9EKM42ON7EVarrQ/gtQx15wFwIym 6gkXjdivdlszokSmKSG5gbpxxa2U0yMt2DpmLPQuGm/LomNHfGgSzdyQpxYpj1x+ /PONjCHTvnFPhFp4Mw9chCw2Ky1ktpQ81Wl8uJ08C1O7xHWSESDd7OgYd1VdbmF4 lveCkHvON2Tc40bXYTLNBrJX9QZPVr8K0qQntxghaXC3iCssErLwhUSCTtC5fe7e fI7ZvY2YDwqpsOuHrhYOAQbva1fQyuy/vpdgu2irESVrFOHWZzOy0QxutmG8ZqaP /m/5ZwtdjzRQ -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:30 2026 by rpki-client