$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa File: 323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa (raw, json) Hash identifier: 9bGFD9HHavl9e02Jjpm7l9kROKPFls7dr+YzU90e5Gs= Subject key identifier: 60:A3:34:E5:39:A8:88:8C:12:68:AB:9A:6D:7E:07:E1:92:3F:E6:2B Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0 Certificate serial: 282AB81BA27C0A7EC58521D8ADABB533DDCD0EC1 Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa Signing time: Mon 15 Jun 2026 01:00:44 +0000 ROA not before: Mon 15 Jun 2026 00:55:44 +0000 ROA not after: Mon 14 Jun 2027 01:00:44 +0000 asID: 4808 IP address blocks: 2402:f140:ff10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:2a:b8:1b:a2:7c:0a:7e:c5:85:21:d8:ad:ab:b5:33:dd:cd:0e:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0 Validity Not Before: Jun 15 00:55:44 2026 GMT Not After : Jun 14 01:00:44 2027 GMT Subject: CN=60A334E539A8888C1268AB9A6D7E07E1923FE62B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:f5:40:23:d8:65:ea:f1:38:56:98:02:55: 56:ca:c1:af:98:1b:b8:24:df:7f:5d:fd:86:d3:12: 45:5d:44:a0:26:5b:ed:1b:f4:ab:94:c1:b9:fc:61: 23:8b:ee:11:c4:49:36:81:b8:9d:a4:bd:08:f6:e2: 73:a7:a8:a0:72:04:5d:de:0d:a0:0f:17:df:1e:3c: 0a:1d:ba:fa:c5:91:2d:8d:b4:b1:d5:96:d8:de:60: a9:c0:51:a6:22:f3:ec:68:45:ee:42:e3:b0:f4:e8: c3:5d:bf:49:a4:81:e6:ee:1a:40:90:c8:4c:8f:82: c7:8c:48:21:39:35:f9:26:c1:7b:25:3b:41:5e:cd: 1b:9b:68:d5:5e:c4:ca:cc:8f:6c:e8:2d:cf:38:1e: 3a:28:0f:eb:13:64:8a:4a:5f:36:33:c2:a3:3d:24: de:88:2e:8b:87:74:19:23:09:5b:bc:e6:0b:89:85: 08:8f:dc:a4:82:99:35:a7:2f:62:3f:dc:ea:36:0c: c1:ee:2c:36:88:5f:07:9d:56:cc:3f:76:a4:10:24: 9b:4a:0c:2d:75:02:81:63:41:d3:f7:14:7d:36:94: 4c:8d:f1:84:ea:18:92:bb:b5:1d:db:98:f2:bb:44: a2:a5:6d:49:cb:6d:e2:2e:c7:45:9b:d2:a2:60:11: 6f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A3:34:E5:39:A8:88:8C:12:68:AB:9A:6D:7E:07:E1:92:3F:E6:2B X509v3 Authority Key Identifier: keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631303a3a2f34382d3438203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f140:ff10::/48 Signature Algorithm: sha256WithRSAEncryption b9:87:6c:d4:d4:53:34:9d:08:82:b5:2e:59:ff:02:3f:ff:3b: d1:b4:be:b1:f1:65:3b:cd:c7:13:8d:07:7d:3c:45:a1:7e:93: 86:f9:1f:1b:90:3c:53:3d:2a:ad:7e:82:42:2d:9a:81:24:b7: 44:e6:df:e7:01:52:21:66:87:5f:b6:b1:f4:8f:ee:41:8f:91: df:8b:5f:4e:a5:25:73:4d:6e:02:6d:c7:38:f1:97:be:06:3c: 43:8b:3e:61:4c:9e:78:bc:d6:55:c0:95:49:66:2a:76:5e:ff: 58:f5:52:17:7a:3d:77:99:49:d4:2c:52:c1:78:e2:79:f3:13: 73:eb:ca:a3:58:ab:71:4c:e1:a7:7f:cb:3a:6b:6b:48:59:6b: 8a:88:93:03:38:d1:c4:88:5b:e5:cc:a0:61:bc:d0:89:c9:47: f9:25:9a:0d:16:fd:ca:9e:91:f5:34:a3:84:63:1f:1f:cd:90: 68:53:e5:9d:b1:da:79:91:f1:39:da:12:fb:85:e5:2a:0d:5c: 9f:a0:4b:1f:ea:87:7d:cc:7d:ff:0d:96:02:0c:76:39:cf:7d: 37:d5:66:db:06:60:2a:d9:85:16:8a:fc:03:ef:7f:29:73:8c: f3:fd:fc:57:a8:25:3e:92:91:3e:cd:34:15:90:63:65:3b:64: 57:ad:c6:16 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUKCq4G6J8Cn7FhSHYrau1M93NDsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2 MTIwQzlGMDAeFw0yNjA2MTUwMDU1NDRaFw0yNzA2MTQwMTAwNDRaMDMxMTAvBgNV BAMTKDYwQTMzNEU1MzlBODg4OEMxMjY4QUI5QTZEN0UwN0UxOTIzRkU2MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxH/VAI9hl6vE4VpgCVVbKwa+Y G7gk339d/YbTEkVdRKAmW+0b9KuUwbn8YSOL7hHESTaBuJ2kvQj24nOnqKByBF3e DaAPF98ePAoduvrFkS2NtLHVltjeYKnAUaYi8+xoRe5C47D06MNdv0mkgebuGkCQ yEyPgseMSCE5NfkmwXslO0FezRubaNVexMrMj2zoLc84HjooD+sTZIpKXzYzwqM9 JN6ILouHdBkjCVu85guJhQiP3KSCmTWnL2I/3Oo2DMHuLDaIXwedVsw/dqQQJJtK DC11AoFjQdP3FH02lEyN8YTqGJK7tR3bmPK7RKKlbUnLbeIux0Wb0qJgEW+JAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUYKM05TmoiIwSaKuabX4H4ZI/5iswHwYDVR0j BBgwFoAUgjqdJIAqsQAmCV2SlSvsk2EgyfAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8yLzgyM0E5RDI0ODAyQUIxMDAyNjA5NUQ5Mjk1MkJF QzkzNjEyMEM5RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTE2OTEwMTEzMDUxOTAxOTc3LzIvMzIzNDMwMzIz YTY2MzEzNDMwM2E2NjY2MzEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJALxQP8QMA0GCSqGSIb3DQEBCwUAA4IBAQC5h2zU1FM0 nQiCtS5Z/wI//zvRtL6x8WU7zccTjQd9PEWhfpOG+R8bkDxTPSqtfoJCLZqBJLdE 5t/nAVIhZodftrH0j+5Bj5Hfi19OpSVzTW4Cbcc48Ze+BjxDiz5hTJ54vNZVwJVJ Zip2Xv9Y9VIXej13mUnULFLBeOJ58xNz68qjWKtxTOGnf8s6a2tIWWuKiJMDONHE iFvlzKBhvNCJyUf5JZoNFv3KnpH1NKOEYx8fzZBoU+Wdsdp5kfE52hL7heUqDVyf oEsf6od9zH3/DZYCDHY5z3031WbbBmAq2YUWivwD738pc4zz/fxXqCU+kpE+zTQV kGNlO2RXrcYW -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:10 2026 by rpki-client