$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112624177837244435/0/323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa File: 323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa (raw, json) Hash identifier: tHPg+UAtakOXb2bI4+bicsHKTUKZvXIfQ1aMjcpe3+E= Subject key identifier: 4A:4E:70:EC:D2:18:DE:4D:04:74:A0:AF:E6:66:66:D0:18:C6:1A:02 Certificate issuer: /CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Certificate serial: 58E2534B9C9300E3400B5724CD93DE1539FDA645 Authority key identifier: 5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa Signing time: Fri 29 May 2026 06:36:46 +0000 ROA not before: Fri 29 May 2026 06:31:46 +0000 ROA not after: Fri 28 May 2027 06:36:46 +0000 asID: 4837 IP address blocks: 2404:6500:dcb3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 09:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e2:53:4b:9c:93:00:e3:40:0b:57:24:cd:93:de:15:39:fd:a6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5A810173A47217EBB60C9FD95C833B012AD8D3D9 Validity Not Before: May 29 06:31:46 2026 GMT Not After : May 28 06:36:46 2027 GMT Subject: CN=4A4E70ECD218DE4D0474A0AFE66666D018C61A02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d0:6e:e3:ad:7d:d8:30:26:a0:6c:6c:b1:1e: bd:9d:d9:18:ee:64:30:62:e4:bf:c6:dd:9a:7e:3b: 0c:4d:8a:58:59:f1:1c:33:aa:70:1d:5b:b8:50:ce: a7:ba:01:38:78:12:58:20:77:e0:2b:13:75:fe:1a: a6:25:d9:33:db:9f:07:72:dd:64:19:79:7a:5d:54: d5:f1:78:b6:dc:26:61:aa:c5:f3:03:6a:44:8a:8b: 8a:a6:20:14:5f:38:d5:7e:61:9a:cd:1e:3b:6d:25: fb:4c:f2:48:6a:16:8d:88:c7:99:79:a9:17:4b:c1: c0:70:78:c8:02:d9:24:52:41:60:7b:90:c2:bb:d0: ab:5a:09:1e:3d:d5:fd:b4:65:05:e4:fc:a2:27:19: 00:8d:53:96:0d:7e:75:38:d8:f1:e8:a6:df:d2:05: 47:08:b6:ea:af:d0:87:3f:e3:f1:18:b5:61:89:c4: 90:ba:5e:01:b8:2a:39:6f:15:b8:eb:a3:a0:ac:68: 5f:f3:f4:c6:33:a3:c4:ed:1d:9b:b9:86:51:cc:8e: c1:3e:5d:64:c1:85:5a:16:a4:7b:1c:c6:e7:dc:20: 65:24:57:4a:fb:0a:6b:1f:a5:97:42:61:f4:ec:85: 56:2f:45:60:7a:a2:a6:e4:73:d8:4f:40:61:72:be: df:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4E:70:EC:D2:18:DE:4D:04:74:A0:AF:E6:66:66:D0:18:C6:1A:02 X509v3 Authority Key Identifier: keyid:5A:81:01:73:A4:72:17:EB:B6:0C:9F:D9:5C:83:3B:01:2A:D8:D3:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/5A810173A47217EBB60C9FD95C833B012AD8D3D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5A810173A47217EBB60C9FD95C833B012AD8D3D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112624177837244435/0/323430343a363530303a646362333a3a2f34382d3438203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:6500:dcb3::/48 Signature Algorithm: sha256WithRSAEncryption 3d:8a:3c:7d:6a:ea:70:d1:1a:a6:7e:4c:c6:ba:0c:73:2e:a7: 1c:43:a1:00:75:7e:c8:5c:5c:ba:00:68:58:f3:6d:74:07:41: c2:af:e4:ad:65:23:1b:25:fa:c8:79:03:39:b2:83:7d:3b:a9: 12:bf:17:da:ae:f5:55:53:ce:b3:78:8e:1a:9e:03:c1:d0:c0: e9:2e:eb:aa:ac:7e:b1:1f:e5:ab:ba:d2:9a:b0:52:64:93:7b: f1:c0:22:79:4d:36:d8:67:9e:db:77:54:17:25:a2:4f:80:a9: 92:a4:58:a6:57:85:48:21:79:a1:39:1a:03:ec:50:58:02:23: f6:a7:7d:0e:23:62:fd:b4:12:58:ce:61:2d:52:46:d4:3e:31: 74:04:18:9a:24:19:ca:3c:0e:c7:d2:cb:e4:81:bf:3f:51:45: 66:91:a1:c4:c8:dd:a7:bc:c3:97:f2:72:db:1d:94:a6:7b:4b: 15:d8:d3:2b:66:a4:d0:4d:df:92:63:e0:4c:9e:52:38:78:8c: b9:29:97:07:38:0c:f5:ee:93:00:0f:6c:87:ff:4f:17:1f:59: 0f:dd:d3:b2:a7:d6:58:05:9b:a3:f7:8b:35:97:b9:ca:fe:2c: b8:89:89:a8:cc:3f:93:d7:49:f9:03:62:fd:76:d1:67:fc:b5: 3f:7a:13:67 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUWOJTS5yTAONAC1ckzZPeFTn9pkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEy QUQ4RDNEOTAeFw0yNjA1MjkwNjMxNDZaFw0yNzA1MjgwNjM2NDZaMDMxMTAvBgNV BAMTKDRBNEU3MEVDRDIxOERFNEQwNDc0QTBBRkU2NjY2NkQwMThDNjFBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCU0G7jrX3YMCagbGyxHr2d2Rju ZDBi5L/G3Zp+OwxNilhZ8RwzqnAdW7hQzqe6ATh4Elggd+ArE3X+GqYl2TPbnwdy 3WQZeXpdVNXxeLbcJmGqxfMDakSKi4qmIBRfONV+YZrNHjttJftM8khqFo2Ix5l5 qRdLwcBweMgC2SRSQWB7kMK70KtaCR491f20ZQXk/KInGQCNU5YNfnU42PHopt/S BUcItuqv0Ic/4/EYtWGJxJC6XgG4KjlvFbjro6CsaF/z9MYzo8TtHZu5hlHMjsE+ XWTBhVoWpHscxufcIGUkV0r7CmsfpZdCYfTshVYvRWB6oqbkc9hPQGFyvt+zAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUSk5w7NIY3k0EdKCv5mZm0BjGGgIwHwYDVR0j BBgwFoAUWoEBc6RyF+u2DJ/ZXIM7ASrY09kwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MjYyNDE3NzgzNzI0NDQzNS8wLzVBODEwMTczQTQ3MjE3RUJCNjBDOUZEOTVDODMz QjAxMkFEOEQzRDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUE4MTAxNzNBNDcyMTdFQkI2MEM5RkQ5NUM4MzNCMDEyQUQ4RDNEOS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTEyNjI0MTc3ODM3MjQ0NDM1LzAvMzIzNDMwMzQz YTM2MzUzMDMwM2E2NDYzNjIzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0Mzgz MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJARlANyzMA0GCSqGSIb3DQEBCwUAA4IBAQA9ijx9aupw 0RqmfkzGugxzLqccQ6EAdX7IXFy6AGhY8210B0HCr+StZSMbJfrIeQM5soN9O6kS vxfarvVVU86zeI4angPB0MDpLuuqrH6xH+WrutKasFJkk3vxwCJ5TTbYZ57bd1QX JaJPgKmSpFimV4VIIXmhORoD7FBYAiP2p30OI2L9tBJYzmEtUkbUPjF0BBiaJBnK PA7H0svkgb8/UUVmkaHEyN2nvMOX8nLbHZSme0sV2NMrZqTQTd+SY+BMnlI4eIy5 KZcHOAz17pMAD2yH/08XH1kP3dOyp9ZYBZuj94s1l7nK/iy4iYmozD+T10n5A2L9 dtFn/LU/ehNn -----END CERTIFICATE-----Generated at Fri May 29 22:58:17 2026 by rpki-client