$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa File: 323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa (raw, json) Hash identifier: MmKHcvIlqA5q5tYLzb7CR3bSXT4jOLcAnOsXDr7mbkk= Subject key identifier: 29:92:85:60:D1:B7:A5:1C:85:47:16:65:49:64:1D:30:3C:C6:4B:71 Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0 Certificate serial: 3C78BF1A6BE66028DC9C0DEE4E0D7606CA2EEDEC Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa Signing time: Mon 15 Jun 2026 01:01:14 +0000 ROA not before: Mon 15 Jun 2026 00:56:14 +0000 ROA not after: Mon 14 Jun 2027 01:01:14 +0000 asID: 4811 IP address blocks: 2402:f140:ff01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:78:bf:1a:6b:e6:60:28:dc:9c:0d:ee:4e:0d:76:06:ca:2e:ed:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0 Validity Not Before: Jun 15 00:56:14 2026 GMT Not After : Jun 14 01:01:14 2027 GMT Subject: CN=29928560D1B7A51C8547166549641D303CC64B71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:6f:2e:a5:68:83:3f:c1:e6:e0:8d:53:8c: df:f8:df:42:a1:b1:60:13:90:d8:43:aa:d6:98:8b: 58:29:98:11:2c:b1:09:5f:cd:90:62:a6:ef:93:ff: 16:20:7d:fb:10:7a:d2:b6:a1:53:73:79:06:f3:8e: 24:bc:06:2b:b1:3c:50:f4:95:1e:fd:59:bb:25:20: 67:da:49:7c:6b:53:cd:9c:0e:d9:83:ee:b1:09:3e: 15:5d:35:10:6a:df:d3:4a:51:a5:a8:98:f3:ad:5b: 9c:b2:0b:30:0d:cb:1d:e3:88:bd:61:d1:17:63:9e: 4a:96:98:d2:ef:19:e4:f1:7f:c4:15:4c:4b:74:41: f4:0b:ae:0e:83:13:2f:11:72:16:38:a7:74:32:18: 96:d5:72:a5:cd:87:2e:89:fd:37:40:05:16:8c:e7: 31:c2:d9:f4:06:7d:99:24:76:4e:73:ce:79:5a:77: e6:2d:2c:99:44:bd:8e:39:81:f8:70:3d:75:1d:08: 6c:04:59:55:71:d1:61:79:83:75:3d:ac:df:1d:4c: 74:18:7c:be:54:75:02:83:6b:ee:a6:50:bd:3b:1e: 5f:60:70:17:b9:fc:f9:e1:04:1d:a7:fb:1d:8c:ba: 65:30:71:c5:b8:36:79:48:3c:85:be:5d:0f:6e:f1: 69:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:92:85:60:D1:B7:A5:1C:85:47:16:65:49:64:1D:30:3C:C6:4B:71 X509v3 Authority Key Identifier: keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666630313a3a2f34382d3438203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f140:ff01::/48 Signature Algorithm: sha256WithRSAEncryption 8f:d9:79:c6:4d:19:47:01:ec:74:27:85:5a:5a:51:1f:d4:72: e2:ac:2d:5e:73:2b:0b:48:e5:8c:65:2b:a1:39:89:1b:9a:d8: e8:63:17:25:13:04:ec:3c:75:31:44:88:3e:7e:9e:b6:80:3a: 28:e3:fc:ba:7a:3d:5e:65:52:d0:02:45:ba:46:16:37:37:e5: c1:75:cb:3a:6b:7f:16:a2:2e:31:35:30:c5:e6:01:87:36:13: de:00:a1:4c:52:28:40:ce:ef:61:bd:4f:76:39:31:1d:23:1f: 56:be:6c:d8:83:a2:e5:e0:6d:2d:84:e7:6f:fe:e1:c0:99:38: ab:15:28:28:49:4d:ea:8d:b7:53:33:82:cf:c1:91:84:fd:ea: 84:7e:bd:05:7e:bf:27:1c:94:ad:28:94:60:bb:38:ac:81:a0: eb:b4:c6:de:20:78:35:b2:4b:50:bd:1e:6f:85:ee:b9:47:6b: b2:1a:09:86:5b:ad:1b:be:49:8e:4e:c5:11:71:8f:c9:14:9d: 97:b9:19:e0:9c:db:b5:4a:1b:3b:82:32:42:8f:ec:c5:e4:16: 34:5a:fd:28:df:d1:04:1f:46:c7:a1:ce:cb:dc:78:17:09:53: ad:12:54:b2:b6:a2:a1:35:c9:78:89:39:8f:c9:c3:ee:3d:48: ae:34:14:76 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUPHi/GmvmYCjcnA3uTg12Bsou7ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2 MTIwQzlGMDAeFw0yNjA2MTUwMDU2MTRaFw0yNzA2MTQwMTAxMTRaMDMxMTAvBgNV BAMTKDI5OTI4NTYwRDFCN0E1MUM4NTQ3MTY2NTQ5NjQxRDMwM0NDNjRCNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaW8upWiDP8Hm4I1TjN/430Kh sWATkNhDqtaYi1gpmBEssQlfzZBipu+T/xYgffsQetK2oVNzeQbzjiS8BiuxPFD0 lR79WbslIGfaSXxrU82cDtmD7rEJPhVdNRBq39NKUaWomPOtW5yyCzANyx3jiL1h 0RdjnkqWmNLvGeTxf8QVTEt0QfQLrg6DEy8RchY4p3QyGJbVcqXNhy6J/TdABRaM 5zHC2fQGfZkkdk5zznlad+YtLJlEvY45gfhwPXUdCGwEWVVx0WF5g3U9rN8dTHQY fL5UdQKDa+6mUL07Hl9gcBe5/PnhBB2n+x2MumUwccW4NnlIPIW+XQ9u8WllAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUKZKFYNG3pRyFRxZlSWQdMDzGS3EwHwYDVR0j BBgwFoAUgjqdJIAqsQAmCV2SlSvsk2EgyfAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8yLzgyM0E5RDI0ODAyQUIxMDAyNjA5NUQ5Mjk1MkJF QzkzNjEyMEM5RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTE2OTEwMTEzMDUxOTAxOTc3LzIvMzIzNDMwMzIz YTY2MzEzNDMwM2E2NjY2MzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0Mzgz MTMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJALxQP8BMA0GCSqGSIb3DQEBCwUAA4IBAQCP2XnGTRlH Aex0J4VaWlEf1HLirC1ecysLSOWMZSuhOYkbmtjoYxclEwTsPHUxRIg+fp62gDoo 4/y6ej1eZVLQAkW6RhY3N+XBdcs6a38Woi4xNTDF5gGHNhPeAKFMUihAzu9hvU92 OTEdIx9WvmzYg6Ll4G0thOdv/uHAmTirFSgoSU3qjbdTM4LPwZGE/eqEfr0Ffr8n HJStKJRguzisgaDrtMbeIHg1sktQvR5vhe65R2uyGgmGW60bvkmOTsURcY/JFJ2X uRngnNu1Shs7gjJCj+zF5BY0Wv0o39EEH0bHoc7L3HgXCVOtElSytqKhNcl4iTmP ycPuPUiuNBR2 -----END CERTIFICATE-----Generated at Tue Jul 14 21:57:30 2026 by rpki-client