$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203535393632.roa File: 323430323a356634303a3a2f33322d3430203d3e203535393632.roa (raw, json) Hash identifier: J8V4fC0EcnnEJAvudK1CUUz+Anxis8iYxXNE/PbJCkw= Subject key identifier: B2:5A:73:48:B4:B6:2D:BF:FB:85:A7:D8:7F:4C:E1:17:71:2E:81:44 Certificate issuer: /CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Certificate serial: 729722EB0127D806D01E1FB7949A86FDE77DB47D Authority key identifier: AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203535393632.roa Signing time: Wed 10 Jun 2026 02:45:29 +0000 ROA not before: Wed 10 Jun 2026 02:40:29 +0000 ROA not after: Wed 09 Jun 2027 02:45:29 +0000 asID: 55962 IP address blocks: 2402:5f40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 12:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:97:22:eb:01:27:d8:06:d0:1e:1f:b7:94:9a:86:fd:e7:7d:b4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5 Validity Not Before: Jun 10 02:40:29 2026 GMT Not After : Jun 9 02:45:29 2027 GMT Subject: CN=B25A7348B4B62DBFFB85A7D87F4CE117712E8144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:8f:a8:49:ae:8b:ad:dd:e6:28:66:64:0c: 01:6c:df:92:14:d5:fe:63:8d:2d:f1:ea:24:8a:63: 05:f4:09:c8:1b:ae:29:0f:48:db:cd:bc:38:2f:93: de:39:93:24:79:4d:da:2d:4c:9e:09:38:f5:58:3d: 9c:73:35:0a:6e:fa:70:33:c2:ac:f0:93:25:9b:43: d3:96:23:8c:ec:13:db:4d:80:64:cd:65:39:d6:10: 69:b2:8a:90:4b:e5:c8:71:c1:7d:e6:1b:fb:ef:fb: cc:6d:c1:7a:15:f4:15:31:bc:19:53:27:26:79:8d: 53:8a:7e:a3:b0:7e:73:17:d4:78:64:37:75:c1:f0: c6:68:d7:85:08:cc:b3:3d:1e:40:a0:d3:98:66:6d: 45:fa:f7:1d:60:c8:81:63:b7:58:64:f2:06:d0:06: 18:2e:5a:5c:5d:aa:94:04:6d:83:b3:57:59:14:f8: ec:37:1d:d5:ef:47:62:55:09:f1:e9:5a:da:4a:23: 65:4a:d1:68:c7:d5:cc:a9:c8:95:86:d3:e4:e2:44: ab:44:49:4d:79:6f:f6:1e:1f:44:5e:0c:84:e8:94: c8:fc:43:05:57:66:d0:d5:f7:43:9f:43:a6:7c:02: e9:7d:6a:e7:43:71:f9:51:95:52:36:82:00:b5:93: 45:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5A:73:48:B4:B6:2D:BF:FB:85:A7:D8:7F:4C:E1:17:71:2E:81:44 X509v3 Authority Key Identifier: keyid:AB:70:D3:6D:CE:87:17:D2:38:9F:FF:B9:BA:DC:C6:0E:CD:C1:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB70D36DCE8717D2389FFFB9BADCC60ECDC117B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114108580660772883/0/323430323a356634303a3a2f33322d3430203d3e203535393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5f40::/32 Signature Algorithm: sha256WithRSAEncryption ba:89:0d:c1:a2:3e:bb:92:4c:ad:a9:40:ff:02:17:26:35:42: 6b:f7:16:2a:32:c4:6b:a9:20:d1:2b:38:b1:e2:93:53:e8:18: ee:da:c4:5c:71:36:3a:d8:52:fe:ae:aa:86:ff:4b:cd:62:d3: 3f:c4:37:46:dd:d0:85:91:be:ec:1d:62:f3:1d:01:e0:47:03: 86:b6:57:df:cc:e3:5f:25:73:97:60:1b:fd:81:40:a7:36:39: 86:a5:a6:67:b7:7c:20:c3:af:2d:56:4b:c3:bd:8d:da:95:8f: 31:08:e2:94:b9:0f:61:ec:21:a1:da:f9:01:6e:3f:8a:90:9c: a4:ff:e7:27:52:41:b5:12:0a:7b:d4:a0:17:b6:d1:6a:1d:f9: d9:ae:27:4b:19:f1:74:71:c7:d6:53:00:39:20:b5:41:6c:f0: cd:38:a8:67:3b:15:dd:45:b7:be:31:09:57:7c:f3:ee:28:9b: 60:99:79:63:9e:fe:5b:27:f6:50:45:5c:63:8d:8b:64:b1:fb: 76:27:8f:48:e0:9d:43:52:35:c1:57:18:d8:14:ef:60:55:5a: 20:fc:02:ce:18:bc:25:e6:09:04:b2:3f:76:e3:a0:30:54:c8: 51:41:b4:5b:9b:69:7f:e4:cd:b8:d4:34:1f:c1:10:0d:cd:71: f5:51:85:b1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUcpci6wEn2AbQHh+3lJqG/ed9tH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVD REMxMTdCNTAeFw0yNjA2MTAwMjQwMjlaFw0yNzA2MDkwMjQ1MjlaMDMxMTAvBgNV BAMTKEIyNUE3MzQ4QjRCNjJEQkZGQjg1QTdEODdGNENFMTE3NzEyRTgxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpDo+oSa6Lrd3mKGZkDAFs35IU 1f5jjS3x6iSKYwX0CcgbrikPSNvNvDgvk945kyR5TdotTJ4JOPVYPZxzNQpu+nAz wqzwkyWbQ9OWI4zsE9tNgGTNZTnWEGmyipBL5chxwX3mG/vv+8xtwXoV9BUxvBlT JyZ5jVOKfqOwfnMX1HhkN3XB8MZo14UIzLM9HkCg05hmbUX69x1gyIFjt1hk8gbQ BhguWlxdqpQEbYOzV1kU+Ow3HdXvR2JVCfHpWtpKI2VK0WjH1cypyJWG0+TiRKtE SU15b/YeH0ReDITolMj8QwVXZtDV90OfQ6Z8Aul9audDcflRlVI2ggC1k0XnAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUslpzSLS2Lb/7hafYf0zhF3EugUQwHwYDVR0j BBgwFoAUq3DTbc6HF9I4n/+5utzGDs3BF7UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NDEwODU4MDY2MDc3Mjg4My8wL0FCNzBEMzZEQ0U4NzE3RDIzODlGRkZCOUJBREND NjBFQ0RDMTE3QjUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUI3MEQzNkRDRTg3MTdEMjM4OUZGRkI5QkFEQ0M2MEVDREMxMTdCNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE0MTA4NTgwNjYwNzcyODgzLzAvMzIzNDMwMzIzYTM1 NjYzNDMwM2EzYTJmMzMzMjJkMzQzMDIwM2QzZTIwMzUzNTM5MzYzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCX0AwDQYJKoZIhvcNAQELBQADggEBALqJDcGiPruSTK2pQP8CFyY1Qmv3 FioyxGupINErOLHik1PoGO7axFxxNjrYUv6uqob/S81i0z/EN0bd0IWRvuwdYvMd AeBHA4a2V9/M418lc5dgG/2BQKc2OYalpme3fCDDry1WS8O9jdqVjzEI4pS5D2Hs IaHa+QFuP4qQnKT/5ydSQbUSCnvUoBe20Wod+dmuJ0sZ8XRxx9ZTADkgtUFs8M04 qGc7Fd1Ft74xCVd88+4om2CZeWOe/lsn9lBFXGONi2Sx+3Ynj0jgnUNSNcFXGNgU 72BVWiD8As4YvCXmCQSyP3bjoDBUyFFBtFubaX/kzbjUNB/BEA3NcfVRhbE= -----END CERTIFICATE-----Generated at Fri Jun 12 04:32:55 2026 by rpki-client