$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203233373234.roa File: 323430323a356634303a3a2f33322d3430203d3e203233373234.roa (raw, json) Hash identifier: BYhl8Kes59vhOWYPWklbb97wfjM9JLHk+KCCzyARPMo= Subject key identifier: DF:E6:D1:C2:F1:E7:51:98:B8:18:4F:36:2C:ED:41:92:AE:7A:2D:0D Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Certificate serial: 32D68C79B390FD92D1C557F581585FE021FF940B Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203233373234.roa Signing time: Wed 10 Jun 2026 02:45:29 +0000 ROA not before: Wed 10 Jun 2026 02:40:29 +0000 ROA not after: Wed 09 Jun 2027 02:45:29 +0000 asID: 23724 IP address blocks: 2402:5f40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:d6:8c:79:b3:90:fd:92:d1:c5:57:f5:81:58:5f:e0:21:ff:94:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Validity Not Before: Jun 10 02:40:29 2026 GMT Not After : Jun 9 02:45:29 2027 GMT Subject: CN=DFE6D1C2F1E75198B8184F362CED4192AE7A2D0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:7d:01:d0:bd:01:75:4a:3a:7b:9d:cd:83: c1:38:de:b0:b9:3b:a2:b3:8c:1d:d7:b7:15:0b:b1: 09:ee:53:e6:f9:a4:71:1d:8a:55:53:aa:78:1f:68: d6:05:f2:3f:26:d8:22:6c:c0:cd:10:ab:fd:fc:3e: 6e:94:9a:12:2e:df:17:12:d9:52:14:e4:e6:17:c9: 9b:d7:cd:8e:53:6f:99:94:2c:f0:7c:09:49:bb:2a: 03:34:01:db:04:ad:25:75:8a:f7:f6:b2:0b:43:44: cf:83:bf:3b:4c:b1:47:18:b5:cf:63:6f:d4:3a:1a: 2d:59:a8:a5:5e:3a:d2:1a:95:d1:cd:31:8c:c8:6b: 03:67:fe:89:0c:33:b2:e2:52:7a:dd:88:0f:cf:b7: 53:df:fd:1a:7c:55:c6:15:2f:65:64:8e:83:2b:56: e3:0b:30:29:4c:1a:4d:52:09:c7:02:aa:27:a5:00: 45:b1:c9:03:43:e6:c3:13:53:ee:75:fd:6b:cc:28: 5d:ce:16:3e:23:5a:b5:8f:4f:65:08:5a:f9:ca:88: 08:1a:cb:17:0f:93:1b:7d:dc:76:1e:ca:00:80:49: f7:a4:d7:0e:90:ff:54:a3:49:68:2f:0b:00:60:2d: 18:93:52:e7:1a:e0:b6:74:46:92:6f:ad:0a:8d:18: c6:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E6:D1:C2:F1:E7:51:98:B8:18:4F:36:2C:ED:41:92:AE:7A:2D:0D X509v3 Authority Key Identifier: keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5f40::/32 Signature Algorithm: sha256WithRSAEncryption 15:0f:1f:37:f9:ed:6c:2b:1f:db:fc:50:eb:4e:9e:4e:87:4f: 46:a1:4a:9b:72:3b:30:1b:09:5d:8d:69:f7:be:29:55:03:af: 88:ef:6e:2e:7d:9b:30:38:e9:7b:7c:c6:5e:bb:b7:03:9e:6c: 42:1f:6c:ce:62:9d:fc:a4:6f:68:75:96:8c:7f:11:57:f8:33: 1f:cd:43:37:bb:01:b1:e0:ac:5f:f1:8b:8d:9f:07:79:51:41: de:0b:c9:f2:81:b0:b9:be:94:20:19:ab:82:2e:a1:1d:87:0e: 83:3f:14:6d:be:26:20:dc:fd:76:13:a2:b5:f0:d0:10:10:29: 93:c3:70:97:c0:32:0d:b6:a3:60:a4:24:4b:86:85:5c:31:53: c1:5e:8d:93:06:15:f0:60:bb:ca:61:30:80:0f:7f:b0:47:d1: ae:e5:ef:5d:b6:93:69:3d:b3:9e:0f:05:eb:56:59:c0:eb:97: 60:62:35:d8:12:2b:aa:2b:54:e9:73:fa:57:cd:4f:c8:81:d5: e6:ee:2b:65:b0:80:a5:7e:b4:3e:d4:d8:eb:5c:02:e0:c8:a9: ee:97:c4:98:99:1a:a1:36:2f:1f:a4:78:51:5e:9e:64:54:91: 0e:af:6c:e4:b1:30:1b:09:db:26:b3:b4:7d:01:36:88:0d:32: d4:51:0d:18 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUMtaMebOQ/ZLRxVf1gVhf4CH/lAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD REMxMTdCNTAeFw0yNjA2MTAwMjQwMjlaFw0yNzA2MDkwMjQ1MjlaMDMxMTAvBgNV BAMTKERGRTZEMUMyRjFFNzUxOThCODE4NEYzNjJDRUQ0MTkyQUU3QTJEMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bn0B0L0BdUo6e53Ng8E43rC5 O6KzjB3XtxULsQnuU+b5pHEdilVTqngfaNYF8j8m2CJswM0Qq/38Pm6UmhIu3xcS 2VIU5OYXyZvXzY5Tb5mULPB8CUm7KgM0AdsErSV1ivf2sgtDRM+DvztMsUcYtc9j b9Q6Gi1ZqKVeOtIaldHNMYzIawNn/okMM7LiUnrdiA/Pt1Pf/Rp8VcYVL2VkjoMr VuMLMClMGk1SCccCqielAEWxyQND5sMTU+51/WvMKF3OFj4jWrWPT2UIWvnKiAga yxcPkxt93HYeygCASfek1w6Q/1SjSWgvCwBgLRiTUuca4LZ0RpJvrQqNGMY5AgMB AAGjggISMIICDjAdBgNVHQ4EFgQU3+bRwvHnUZi4GE82LO1Bkq56LQ0wHwYDVR0j BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0MTA4NTgwNjYwNzcyODgzLzAvMzIzNDMwMzIzYTM1 NjYzNDMwM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCX0AwDQYJKoZIhvcNAQELBQADggEBABUPHzf57WwrH9v8UOtOnk6HT0ah SptyOzAbCV2Nafe+KVUDr4jvbi59mzA46Xt8xl67twOebEIfbM5infykb2h1lox/ EVf4Mx/NQze7AbHgrF/xi42fB3lRQd4LyfKBsLm+lCAZq4IuoR2HDoM/FG2+JiDc /XYTorXw0BAQKZPDcJfAMg22o2CkJEuGhVwxU8FejZMGFfBgu8phMIAPf7BH0a7l 7122k2k9s54PBetWWcDrl2BiNdgSK6orVOlz+lfNT8iB1ebuK2WwgKV+tD7U2Otc AuDIqe6XxJiZGqE2Lx+keFFenmRUkQ6vbOSxMBsJ2yaztH0BNogNMtRRDRg= -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:55 2026 by rpki-client