$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e2034383038.roa File: 323430323a356634303a3a2f33322d3430203d3e2034383038.roa (raw, json) Hash identifier: hEdpxSyQhKq8Tt6+4mX4pbyGXdjKHqDZ4gkvGobLPvk= Subject key identifier: E5:2A:9C:09:A7:D0:99:3E:2F:59:45:B3:95:39:19:C5:B8:8E:61:4F Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Certificate serial: 556B91FC7BE587BFA54ADB92DBE7AF6935B51B35 Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e2034383038.roa Signing time: Wed 10 Jun 2026 02:45:29 +0000 ROA not before: Wed 10 Jun 2026 02:40:29 +0000 ROA not after: Wed 09 Jun 2027 02:45:29 +0000 asID: 4808 IP address blocks: 2402:5f40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6b:91:fc:7b:e5:87:bf:a5:4a:db:92:db:e7:af:69:35:b5:1b:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Validity Not Before: Jun 10 02:40:29 2026 GMT Not After : Jun 9 02:45:29 2027 GMT Subject: CN=E52A9C09A7D0993E2F5945B3953919C5B88E614F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6c:45:ac:94:18:aa:ed:e3:bf:d9:97:3e:c3: 71:bf:e8:f7:4d:a0:ba:86:a3:c5:1d:4d:ad:48:00: 9d:69:72:d8:19:6c:e2:c7:c8:76:f9:7d:52:dc:73: d8:c0:1e:47:69:ac:f6:a7:bd:8d:ed:86:78:66:3b: 0b:af:26:a3:75:1b:32:13:8a:71:3f:26:53:96:36: b3:09:4d:97:56:db:b5:26:16:35:59:e6:35:8c:fb: f7:b8:11:51:bd:11:ac:ef:77:3c:29:7f:55:f9:ec: 01:c5:94:df:2b:70:56:92:28:fd:a7:ac:66:8f:2b: ba:04:48:8e:15:e0:40:ea:18:8f:66:b4:9c:41:fd: 8d:ab:5a:07:cf:13:1c:65:aa:3b:75:21:f5:59:b2: 17:e4:95:19:cb:0d:c7:f3:56:61:d2:96:21:7d:e9: d6:bf:d1:69:9c:c3:66:6a:bd:cd:34:ea:73:0c:f3: dd:4b:bf:d0:c1:35:34:03:8f:40:31:77:df:0a:13: 26:e4:4c:0b:d2:fc:d3:8f:fb:39:72:8e:4d:84:55: e3:23:72:3f:56:05:89:01:9f:ab:66:bd:78:75:29: d4:51:b6:37:54:b8:94:9b:d7:b0:b9:79:31:42:cc: c3:db:3f:95:ed:c2:c4:e1:d5:13:55:58:3e:86:f3: 3b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:2A:9C:09:A7:D0:99:3E:2F:59:45:B3:95:39:19:C5:B8:8E:61:4F X509v3 Authority Key Identifier: keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5f40::/32 Signature Algorithm: sha256WithRSAEncryption 28:03:72:10:fe:2a:61:34:02:ef:20:11:1e:80:9a:4c:65:82: cb:a5:34:ad:f6:f7:d6:27:3c:19:d4:3c:ea:12:25:a9:13:8e: 94:b9:c8:e1:f7:48:17:6b:f1:bc:7f:b2:87:af:97:b8:79:0c: e7:bb:53:8c:72:45:08:e4:31:47:24:9f:de:20:32:6a:78:e3: 48:b1:29:5e:10:a0:a4:c5:17:85:67:b1:75:dc:0a:05:27:7d: 36:16:ed:ca:d9:0c:a3:e5:e1:c5:ad:cd:e9:4f:d0:d1:7d:9e: a7:1c:e0:ac:67:e8:b7:e0:bd:2f:a7:1d:27:d3:70:68:5d:ee: e3:3f:d8:93:5c:1e:0f:42:74:2d:5f:8a:e9:a0:77:27:cd:28: 96:84:c1:51:45:4c:70:72:68:62:c7:9f:29:e1:89:b0:4c:71: 0d:4a:e0:c0:11:a0:18:20:03:fc:ea:1d:3c:41:59:2f:cf:2d: 2f:5e:16:de:ab:fe:8a:0e:70:46:8f:36:20:11:4c:d2:b3:6a: f6:2a:96:7e:4c:0d:c1:96:93:b5:14:6e:9e:f7:c6:49:aa:87: c9:aa:f2:ed:8b:b1:ae:1a:a8:e8:b0:59:6f:5d:f8:9f:b7:c0: 8e:b5:20:10:7f:81:51:27:aa:fd:3f:7b:9e:fd:ed:38:9c:53: da:dc:8e:89 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUVWuR/Hvlh7+lStuS2+evaTW1GzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD REMxMTdCNTAeFw0yNjA2MTAwMjQwMjlaFw0yNzA2MDkwMjQ1MjlaMDMxMTAvBgNV BAMTKEU1MkE5QzA5QTdEMDk5M0UyRjU5NDVCMzk1MzkxOUM1Qjg4RTYxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbEWslBiq7eO/2Zc+w3G/6PdN oLqGo8UdTa1IAJ1pctgZbOLHyHb5fVLcc9jAHkdprPanvY3thnhmOwuvJqN1GzIT inE/JlOWNrMJTZdW27UmFjVZ5jWM+/e4EVG9Eazvdzwpf1X57AHFlN8rcFaSKP2n rGaPK7oESI4V4EDqGI9mtJxB/Y2rWgfPExxlqjt1IfVZshfklRnLDcfzVmHSliF9 6da/0Wmcw2Zqvc006nMM891Lv9DBNTQDj0Axd98KEybkTAvS/NOP+zlyjk2EVeMj cj9WBYkBn6tmvXh1KdRRtjdUuJSb17C5eTFCzMPbP5XtwsTh1RNVWD6G8zvbAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU5SqcCafQmT4vWUWzlTkZxbiOYU8wHwYDVR0j BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0MTA4NTgwNjYwNzcyODgzLzAvMzIzNDMwMzIzYTM1 NjYzNDMwM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAl9AMA0GCSqGSIb3DQEBCwUAA4IBAQAoA3IQ/iphNALvIBEegJpMZYLLpTSt 9vfWJzwZ1DzqEiWpE46Uucjh90gXa/G8f7KHr5e4eQznu1OMckUI5DFHJJ/eIDJq eONIsSleEKCkxReFZ7F13AoFJ302Fu3K2Qyj5eHFrc3pT9DRfZ6nHOCsZ+i34L0v px0n03BoXe7jP9iTXB4PQnQtX4rpoHcnzSiWhMFRRUxwcmhix58p4YmwTHENSuDA EaAYIAP86h08QVkvzy0vXhbeq/6KDnBGjzYgEUzSs2r2KpZ+TA3BlpO1FG6e98ZJ qofJqvLti7GuGqjosFlvXfift8COtSAQf4FRJ6r9P3ue/e04nFPa3I6J -----END CERTIFICATE-----Generated at Fri Jun 12 02:25:34 2026 by rpki-client