$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa File: 323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa (raw, json) Hash identifier: C4vjh9oC6KZ/UwdEbBnBmLKe4TfS4Ep6Dsiv1fgoPyA= Subject key identifier: 3E:0B:26:8B:84:C7:FF:82:F0:5F:1B:D2:CA:34:63:B9:58:32:2A:2E Certificate issuer: /CN=823A9D24802AB10026095D92952BEC936120C9F0 Certificate serial: 227FF671463E63E00B5082FA15FE443D64155372 Authority key identifier: 82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa Signing time: Thu 18 Jun 2026 01:19:35 +0000 ROA not before: Thu 18 Jun 2026 01:14:35 +0000 ROA not after: Thu 17 Jun 2027 01:19:35 +0000 asID: 4837 IP address blocks: 2402:f140:ff13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 08:14:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7f:f6:71:46:3e:63:e0:0b:50:82:fa:15:fe:44:3d:64:15:53:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=823A9D24802AB10026095D92952BEC936120C9F0 Validity Not Before: Jun 18 01:14:35 2026 GMT Not After : Jun 17 01:19:35 2027 GMT Subject: CN=3E0B268B84C7FF82F05F1BD2CA3463B958322A2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:35:d4:96:78:1b:35:66:64:d8:82:e7:60:e9: 09:ca:c1:29:08:8d:97:5e:6e:c2:7a:b6:4c:74:73: 13:19:b7:d8:ae:5e:de:e9:9a:12:ca:ce:37:c1:db: 77:75:8c:e5:ca:39:88:5e:5a:4f:d0:0a:7f:a2:6f: 28:45:fa:9c:e5:15:4c:cc:58:f3:42:2a:2a:28:73: ed:26:4a:3a:0b:cd:da:bc:4a:0a:c2:cb:c8:18:34: e7:4d:c7:07:09:16:7b:b4:ae:79:a7:5d:f1:d9:c9: c2:4f:8d:33:a7:04:94:19:99:c7:c6:0b:00:4b:62: a6:f9:e5:99:9d:f4:34:15:fe:13:7d:82:43:5f:6b: 13:9a:f0:de:d0:d2:69:a3:d5:92:db:4f:9e:45:c3: f6:d4:e4:8a:5c:78:1a:b8:98:eb:83:48:83:6b:13: 86:27:41:13:2b:95:f1:c6:12:10:46:66:00:5e:b7: cb:c7:4e:f3:06:61:29:a7:b6:21:7e:fc:37:7f:00: b6:81:0a:76:76:6d:cd:c7:12:c1:f8:7c:ec:c2:b1: e8:54:4d:6f:7e:fe:04:c3:fc:9b:70:f9:9b:63:2c: fa:91:df:11:33:ed:65:4c:f8:fa:b0:1d:1b:7e:67: 52:b7:dc:60:b7:44:19:44:6b:26:60:75:14:4f:b8: 22:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0B:26:8B:84:C7:FF:82:F0:5F:1B:D2:CA:34:63:B9:58:32:2A:2E X509v3 Authority Key Identifier: keyid:82:3A:9D:24:80:2A:B1:00:26:09:5D:92:95:2B:EC:93:61:20:C9:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/823A9D24802AB10026095D92952BEC936120C9F0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/823A9D24802AB10026095D92952BEC936120C9F0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1116910113051901977/2/323430323a663134303a666631333a3a2f34382d3438203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f140:ff13::/48 Signature Algorithm: sha256WithRSAEncryption 96:4b:41:48:d7:71:26:42:59:95:20:ef:f7:c2:9e:03:e7:11: 22:6c:f1:cf:85:a2:bd:d2:90:b1:1c:99:95:e9:8f:95:6c:9e: c4:53:6f:2e:48:dc:60:c7:01:75:63:40:30:33:98:a4:e6:bf: 5c:79:e0:ee:5f:a2:f7:eb:1d:bc:1c:20:1a:30:b9:7d:7e:7c: e8:ba:56:0a:42:2b:8c:0d:65:30:4e:61:4e:cd:63:40:d4:6a: 88:60:1d:4f:99:7e:1d:7d:0e:25:81:1f:7d:1e:7f:1c:55:2f: b1:a4:74:e5:b6:8e:e1:27:7a:3c:0b:f8:d7:a7:a5:10:55:c2: 59:86:40:26:d0:27:ec:69:ef:48:d7:63:d9:6b:dd:1a:3f:5d: cf:d6:5a:42:e3:13:bb:c3:94:12:60:52:1e:75:63:20:8e:02: 17:90:76:52:f6:6c:40:56:3c:ed:51:26:23:5f:81:de:b8:48: 7e:7b:1c:36:09:d1:9d:34:3d:2a:9a:6b:0d:f2:4c:17:49:8c: 59:2a:ad:b3:a1:b3:59:87:ab:61:e9:02:1e:16:14:0e:77:38: 57:c4:d4:25:bc:0d:66:94:52:fa:0b:9c:f0:4d:0a:46:1b:20: e9:69:ee:e1:12:f5:47:cc:f0:98:50:fb:5b:5f:19:3f:b5:73: b0:91:68:0d -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUIn/2cUY+Y+ALUIL6Ff5EPWQVU3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2 MTIwQzlGMDAeFw0yNjA2MTgwMTE0MzVaFw0yNzA2MTcwMTE5MzVaMDMxMTAvBgNV BAMTKDNFMEIyNjhCODRDN0ZGODJGMDVGMUJEMkNBMzQ2M0I5NTgzMjJBMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQNdSWeBs1ZmTYgudg6QnKwSkI jZdebsJ6tkx0cxMZt9iuXt7pmhLKzjfB23d1jOXKOYheWk/QCn+ibyhF+pzlFUzM WPNCKiooc+0mSjoLzdq8SgrCy8gYNOdNxwcJFnu0rnmnXfHZycJPjTOnBJQZmcfG CwBLYqb55Zmd9DQV/hN9gkNfaxOa8N7Q0mmj1ZLbT55Fw/bU5IpceBq4mOuDSINr E4YnQRMrlfHGEhBGZgBet8vHTvMGYSmntiF+/Dd/ALaBCnZ2bc3HEsH4fOzCsehU TW9+/gTD/Jtw+ZtjLPqR3xEz7WVM+PqwHRt+Z1K33GC3RBlEayZgdRRPuCL9AgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUPgsmi4TH/4LwXxvSyjRjuVgyKi4wHwYDVR0j BBgwFoAUgjqdJIAqsQAmCV2SlSvsk2EgyfAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NjkxMDExMzA1MTkwMTk3Ny8yLzgyM0E5RDI0ODAyQUIxMDAyNjA5NUQ5Mjk1MkJF QzkzNjEyMEM5RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODIzQTlEMjQ4MDJBQjEwMDI2MDk1RDkyOTUyQkVDOTM2MTIwQzlGMC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTE2OTEwMTEzMDUxOTAxOTc3LzIvMzIzNDMwMzIz YTY2MzEzNDMwM2E2NjY2MzEzMzNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM0Mzgz MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcAJALxQP8TMA0GCSqGSIb3DQEBCwUAA4IBAQCWS0FI13Em QlmVIO/3wp4D5xEibPHPhaK90pCxHJmV6Y+VbJ7EU28uSNxgxwF1Y0AwM5ik5r9c eeDuX6L36x28HCAaMLl9fnzoulYKQiuMDWUwTmFOzWNA1GqIYB1PmX4dfQ4lgR99 Hn8cVS+xpHTlto7hJ3o8C/jXp6UQVcJZhkAm0Cfsae9I12PZa90aP13P1lpC4xO7 w5QSYFIedWMgjgIXkHZS9mxAVjztUSYjX4HeuEh+exw2CdGdND0qmmsN8kwXSYxZ Kq2zobNZh6th6QIeFhQOdzhXxNQlvA1mlFL6C5zwTQpGGyDpae7hEvVHzPCYUPtb Xxk/tXOwkWgN -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:54 2026 by rpki-client