$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa File: 323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa (raw, json) Hash identifier: 6I5dCiQ1WXXdAyQE5mVGMmBaVm3iJExp8C+wBxugLC0= Subject key identifier: 99:E1:89:DB:6A:69:12:F9:46:C3:94:DA:7E:69:34:84:E1:2F:CB:24 Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0 Certificate serial: 5E58C645640112A2CEFD03417663E225CFA5A5FF Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa Signing time: Mon 15 Jun 2026 01:01:45 +0000 ROA not before: Mon 15 Jun 2026 00:56:45 +0000 ROA not after: Mon 14 Jun 2027 01:01:45 +0000 asID: 138421 IP address blocks: 2402:f140:ff11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:58:c6:45:64:01:12:a2:ce:fd:03:41:76:63:e2:25:cf:a5:a5:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0 Validity Not Before: Jun 15 00:56:45 2026 GMT Not After : Jun 14 01:01:45 2027 GMT Subject: CN=99E189DB6A6912F946C394DA7E693484E12FCB24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:20:c5:0a:ac:10:e3:48:6e:05:1e:f2:16:1d: 90:b5:04:ca:95:07:02:2f:4e:61:f2:6d:99:a3:ac: 88:f1:f6:28:c9:27:99:07:2d:68:1e:a8:2b:80:25: 32:40:b1:88:12:e9:1f:a7:2a:a5:09:2a:4f:23:f8: a7:76:47:94:be:aa:7e:f1:dd:34:57:38:34:9e:9d: 1c:7c:0c:c9:c8:e4:fd:f3:67:e6:e8:73:b1:a2:02: 14:f2:13:63:19:05:88:78:1e:1f:32:00:5b:32:ed: e6:c8:aa:e2:d0:93:b0:38:cb:13:ad:64:8c:b4:82: 1c:cb:9d:df:94:0a:49:00:d0:17:05:4d:89:11:b8: b9:b7:fc:9d:d4:63:a1:2f:1f:48:48:06:01:c4:84: 8d:0f:0b:60:a6:7e:39:ad:17:65:99:fa:21:8e:46: 4c:85:87:ad:9d:2c:7f:55:e8:ed:86:cd:3e:27:69: bf:d4:41:13:cc:a4:5b:dc:a8:9f:c3:3b:24:40:85: f6:8f:f1:fd:3f:16:2a:07:6b:cd:44:4a:ad:c7:62: 29:2c:09:43:5f:87:c6:9b:ff:41:28:b5:43:94:f8: 42:7b:8a:ba:58:eb:55:77:70:3c:d7:12:d2:b5:34: ae:53:a4:69:b3:d7:e7:73:e2:50:9d:3a:fa:82:14: 7f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E1:89:DB:6A:69:12:F9:46:C3:94:DA:7E:69:34:84:E1:2F:CB:24 X509v3 Authority Key Identifier: keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631313a3a2f34382d3438203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f140:ff11::/48 Signature Algorithm: sha256WithRSAEncryption 01:bc:83:c8:6b:b1:fd:71:21:a8:6f:90:f8:b7:82:e6:1a:98: 21:f6:82:4b:96:0b:74:28:7e:e6:ac:47:bc:f9:f2:ed:68:d1: 68:b3:88:9f:7d:ed:49:7b:b4:7e:f9:25:a9:89:90:44:ea:1c: 7f:5e:92:df:ca:c7:35:53:bc:7e:2f:0d:63:13:4b:1e:ce:cf: 1a:ca:15:c8:6b:43:92:5a:8a:00:dd:48:d2:b2:59:63:a1:bd: 0a:6f:d6:09:53:1d:0e:67:ff:e7:0d:e0:9f:e7:f2:69:3c:50: 46:ef:0d:9b:78:82:2a:5a:f8:bd:3d:a7:0c:93:f8:8f:e4:b0: df:d1:3a:79:be:17:df:3e:1b:57:45:08:99:cb:27:e2:32:b2: 45:7f:f6:7a:74:ec:a8:19:11:e5:c6:eb:49:ad:d9:66:09:55: 68:3b:d7:8c:a0:59:c2:f5:91:3e:56:73:c3:9e:2a:f7:b4:2f: f1:73:8c:66:ca:90:b4:ff:90:b3:30:ab:e0:14:6a:51:5c:c1: 87:a6:0b:4b:9d:27:36:f7:39:f7:f4:1b:f8:ec:34:33:bc:90: e5:50:76:95:0e:17:ee:91:e6:3f:31:23:ba:c3:2d:48:82:50: ed:57:5a:6e:02:23:25:29:b0:14:b9:77:0c:f2:5f:01:7a:6c: 31:2b:42:36 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUXljGRWQBEqLO/QNBdmPiJc+lpf8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2 MTIwQzlGMDAeFw0yNjA2MTUwMDU2NDVaFw0yNzA2MTQwMTAxNDVaMDMxMTAvBgNV BAMTKDk5RTE4OURCNkE2OTEyRjk0NkMzOTREQTdFNjkzNDg0RTEyRkNCMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpIMUKrBDjSG4FHvIWHZC1BMqV BwIvTmHybZmjrIjx9ijJJ5kHLWgeqCuAJTJAsYgS6R+nKqUJKk8j+Kd2R5S+qn7x 3TRXODSenRx8DMnI5P3zZ+boc7GiAhTyE2MZBYh4Hh8yAFsy7ebIquLQk7A4yxOt ZIy0ghzLnd+UCkkA0BcFTYkRuLm3/J3UY6EvH0hIBgHEhI0PC2CmfjmtF2WZ+iGO RkyFh62dLH9V6O2GzT4nab/UQRPMpFvcqJ/DOyRAhfaP8f0/FioHa81ESq3HYiks CUNfh8ab/0EotUOU+EJ7irpY61V3cDzXEtK1NK5TpGmz1+dz4lCdOvqCFH/FAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUmeGJ22ppEvlGw5Tafmk0hOEvyyQwHwYDVR0j BBgwFoAUgjqdJIAqsQAmCV2SlSvsk2EgyfAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8yLzgyM0E5RDI0ODAyQUIxMDAyNjA5NUQ5Mjk1MkJF QzkzNjEyMEM5RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTE2OTEwMTEzMDUxOTAxOTc3LzIvMzIzNDMwMzIz YTY2MzEzNDMwM2E2NjY2MzEzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz ODM0MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQC8UD/ETANBgkqhkiG9w0BAQsFAAOCAQEAAbyD yGux/XEhqG+Q+LeC5hqYIfaCS5YLdCh+5qxHvPny7WjRaLOIn33tSXu0fvklqYmQ ROocf16S38rHNVO8fi8NYxNLHs7PGsoVyGtDklqKAN1I0rJZY6G9Cm/WCVMdDmf/ 5w3gn+fyaTxQRu8Nm3iCKlr4vT2nDJP4j+Sw39E6eb4X3z4bV0UImcsn4jKyRX/2 enTsqBkR5cbrSa3ZZglVaDvXjKBZwvWRPlZzw54q97Qv8XOMZsqQtP+QszCr4BRq UVzBh6YLS50nNvc59/Qb+Ow0M7yQ5VB2lQ4X7pHmPzEjusMtSIJQ7VdabgIjJSmw FLl3DPJfAXpsMStCNg== -----END CERTIFICATE-----Generated at Tue Jul 14 21:58:29 2026 by rpki-client