$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e20313331353433.roa File: 323430323a356634303a3a2f33322d3430203d3e20313331353433.roa (raw, json) Hash identifier: Fr7SJF8nS/QnvygXHIyiT1ifZlb4UClCGvRUFGJ/Wbg= Subject key identifier: CC:D9:FA:9D:2D:4C:BC:FE:BF:F2:77:BC:D6:98:21:5C:40:07:3D:F6 Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Certificate serial: 6B9673254DC50A3811FE1C3110C074E21ED091CC Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e20313331353433.roa Signing time: Wed 10 Jun 2026 02:45:29 +0000 ROA not before: Wed 10 Jun 2026 02:40:29 +0000 ROA not after: Wed 09 Jun 2027 02:45:29 +0000 asID: 131543 IP address blocks: 2402:5f40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:96:73:25:4d:c5:0a:38:11:fe:1c:31:10:c0:74:e2:1e:d0:91:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Validity Not Before: Jun 10 02:40:29 2026 GMT Not After : Jun 9 02:45:29 2027 GMT Subject: CN=CCD9FA9D2D4CBCFEBFF277BCD698215C40073DF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9e:69:b5:8e:c9:09:bd:8f:94:72:a2:c7:91: df:e8:38:47:9f:1e:93:3b:c9:82:f9:63:0c:3b:aa: 00:53:6d:38:6d:50:cd:74:bd:44:33:0a:c7:72:17: 0b:07:50:17:b3:39:dd:ad:b3:69:9c:2b:99:d1:8d: b4:fd:a2:a3:b8:09:ee:5c:8e:09:8c:e0:3a:8f:56: e1:41:e0:a9:a8:90:57:6e:fe:d8:fd:4b:74:8a:c1: 74:48:1e:4f:a3:7d:7f:19:73:a7:26:91:5a:02:6e: 23:98:ad:2b:fe:00:52:c7:e8:42:19:11:43:dc:9f: a3:54:6c:5a:26:19:f6:45:97:65:11:e7:21:eb:d4: 99:7d:af:4f:b3:ab:21:53:27:db:50:6a:49:71:8b: 36:0b:dd:bd:47:ce:9a:64:c7:cc:c5:10:0d:42:0a: 26:85:25:ff:54:e1:25:45:0a:38:0a:1d:f0:6b:8b: de:1c:06:cd:06:59:f4:80:6e:f4:cd:84:c9:ff:01: dd:fd:84:2c:71:58:9b:16:7b:89:b6:a4:79:f7:95: 8c:c3:2d:18:49:f2:ab:46:88:30:ea:f0:0a:f9:82: de:b0:e7:1c:c8:b7:ff:44:a5:67:8b:79:b7:eb:82: 0a:b6:e7:c5:f7:15:23:3d:98:77:c9:f6:e5:24:0c: 40:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D9:FA:9D:2D:4C:BC:FE:BF:F2:77:BC:D6:98:21:5C:40:07:3D:F6 X509v3 Authority Key Identifier: keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5f40::/32 Signature Algorithm: sha256WithRSAEncryption 32:98:7b:7b:79:27:e8:31:6b:aa:50:aa:f2:03:bb:cf:43:49: 09:09:74:b8:5b:d8:fc:74:8f:70:f7:09:42:52:50:22:cd:26: 5c:5f:10:c9:44:8f:62:f7:71:09:a2:d8:9c:45:40:c7:0b:bc: d3:5d:71:b2:61:4c:12:7f:dd:b7:b3:79:b2:75:b1:9e:01:fb: d1:9a:8d:22:f0:8e:f5:b3:39:14:80:cb:21:32:2c:f7:de:18: 88:8d:9b:31:b3:42:c9:78:7c:7a:22:99:69:2d:90:12:5f:eb: 59:c8:e8:ab:ec:cf:52:26:4a:ee:3e:b3:00:3e:d9:bc:ec:1c: 6c:3b:18:d5:09:a9:af:e3:67:50:c6:40:0b:1b:a1:8c:05:45: 33:90:19:82:1e:e1:4a:19:18:12:f2:30:ce:90:65:38:50:6c: 4b:b2:3e:4e:c7:11:6c:3d:e6:06:79:12:a0:98:05:42:ef:6d: aa:fc:cc:4c:15:35:d9:8e:53:2b:a8:05:42:a2:5d:81:7b:06: 81:2b:c9:3e:93:cd:39:82:79:16:a4:22:9b:54:9c:be:4d:76: 93:45:ae:57:f2:94:e4:b5:ea:b5:cb:41:85:9e:a7:7b:ee:21: 60:64:16:d3:03:ca:f3:05:f9:a1:f5:4b:84:15:e6:38:5a:d4: 9c:59:f0:5b -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUa5ZzJU3FCjgR/hwxEMB04h7QkcwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD REMxMTdCNTAeFw0yNjA2MTAwMjQwMjlaFw0yNzA2MDkwMjQ1MjlaMDMxMTAvBgNV BAMTKENDRDlGQTlEMkQ0Q0JDRkVCRkYyNzdCQ0Q2OTgyMTVDNDAwNzNERjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVnmm1jskJvY+UcqLHkd/oOEef HpM7yYL5Yww7qgBTbThtUM10vUQzCsdyFwsHUBezOd2ts2mcK5nRjbT9oqO4Ce5c jgmM4DqPVuFB4KmokFdu/tj9S3SKwXRIHk+jfX8Zc6cmkVoCbiOYrSv+AFLH6EIZ EUPcn6NUbFomGfZFl2UR5yHr1Jl9r0+zqyFTJ9tQaklxizYL3b1Hzppkx8zFEA1C CiaFJf9U4SVFCjgKHfBri94cBs0GWfSAbvTNhMn/Ad39hCxxWJsWe4m2pHn3lYzD LRhJ8qtGiDDq8Ar5gt6w5xzIt/9EpWeLebfrggq258X3FSM9mHfJ9uUkDEABAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUzNn6nS1MvP6/8ne81pghXEAHPfYwHwYDVR0j BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTExNDEwODU4MDY2MDc3Mjg4My8wLzMyMzQzMDMyM2Ez NTY2MzQzMDNhM2EyZjMzMzIyZDM0MzAyMDNkM2UyMDMxMzMzMTM1MzQzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQCX0AwDQYJKoZIhvcNAQELBQADggEBADKYe3t5J+gxa6pQqvIDu89D SQkJdLhb2Px0j3D3CUJSUCLNJlxfEMlEj2L3cQmi2JxFQMcLvNNdcbJhTBJ/3bez ebJ1sZ4B+9GajSLwjvWzORSAyyEyLPfeGIiNmzGzQsl4fHoimWktkBJf61nI6Kvs z1ImSu4+swA+2bzsHGw7GNUJqa/jZ1DGQAsboYwFRTOQGYIe4UoZGBLyMM6QZThQ bEuyPk7HEWw95gZ5EqCYBULvbar8zEwVNdmOUyuoBUKiXYF7BoEryT6TzTmCeRak IptUnL5NdpNFrlfylOS16rXLQYWep3vuIWBkFtMDyvMF+aH1S4QV5jha1JxZ8Fs= -----END CERTIFICATE-----Generated at Fri Jun 12 04:33:33 2026 by rpki-client