$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430363a3838303a3a2f33322d3332203d3e2030.roa File: 323430363a3838303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: zLQafVdFQlmu+N0ToNivjL+0KsdsUwTBCbVeEqvITFw= Subject key identifier: 86:C3:8C:DA:3E:36:05:2D:CC:7D:F9:B8:8E:D7:7C:2D:70:56:CB:F3 Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Certificate serial: 41C903E9ECE502C3EF4279D56EAE636DAAD66CD8 Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430363a3838303a3a2f33322d3332203d3e2030.roa Signing time: Mon 15 Jun 2026 06:53:51 +0000 ROA not before: Mon 15 Jun 2026 06:48:51 +0000 ROA not after: Mon 14 Jun 2027 06:53:51 +0000 asID: 0 IP address blocks: 2406:880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 09:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:c9:03:e9:ec:e5:02:c3:ef:42:79:d5:6e:ae:63:6d:aa:d6:6c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Validity Not Before: Jun 15 06:48:51 2026 GMT Not After : Jun 14 06:53:51 2027 GMT Subject: CN=86C38CDA3E36052DCC7DF9B88ED77C2D7056CBF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:06:b0:3e:0c:df:c2:e4:75:42:3c:03:88:bc: f4:83:9a:27:aa:93:d0:b8:27:49:1f:2d:ac:24:46: 4f:e6:d2:00:99:8a:e8:08:f0:94:3e:31:39:f4:54: d3:ce:4c:76:42:c5:95:ce:db:0a:d0:95:0c:35:72: 46:9b:0b:0f:fd:87:eb:50:a6:cd:5e:be:81:12:6e: a3:d4:b0:13:f4:37:ef:ff:5b:65:be:61:98:fe:c7: 5c:8b:39:7c:04:95:c1:cb:3b:62:27:5a:14:a3:a8: 95:90:5d:70:0e:c4:21:0e:f0:1f:da:05:bf:2c:1b: 41:01:1f:ee:5b:45:ea:3e:4a:92:4f:46:79:fd:3d: 7f:0c:24:70:34:24:54:57:e5:01:a6:17:33:fb:fd: d4:a4:db:3f:8a:33:56:39:c8:d8:9e:cd:01:b2:6f: 23:69:38:06:24:da:af:3f:99:eb:01:a3:dc:e7:15: cf:a2:9a:49:c9:9f:b4:af:24:3c:e7:5f:cc:7d:af: 5e:f9:cf:b3:95:b9:3b:2b:13:07:b9:a8:57:91:35: 1e:3e:3a:b4:45:c2:41:00:9f:e6:f7:c3:5c:47:61: fb:79:5a:be:bf:2e:05:4d:2e:52:b5:6c:e1:c4:39: de:1f:35:51:5f:45:85:78:62:50:e0:c5:74:5f:9a: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:C3:8C:DA:3E:36:05:2D:CC:7D:F9:B8:8E:D7:7C:2D:70:56:CB:F3 X509v3 Authority Key Identifier: keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430363a3838303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:880::/32 Signature Algorithm: sha256WithRSAEncryption 83:0b:1f:78:1b:52:ee:a8:46:3d:89:fa:6d:97:6f:88:cb:36: 27:62:14:54:e3:22:a8:5b:af:47:4c:94:ac:c1:99:4a:a0:a9: 29:2e:86:7e:ac:c7:1e:e9:4d:a2:90:09:a2:49:63:82:db:9b: 5a:78:91:e0:f5:b9:8c:d0:c4:f5:78:8e:f2:d9:f1:a8:cd:af: a9:12:ed:cd:c0:7c:04:2e:c0:53:27:69:20:8d:82:57:a7:47: 50:0a:ec:4b:d4:c7:24:76:79:98:06:cc:ac:6e:eb:b7:31:d5: 0a:64:ca:10:f5:cd:b8:76:e3:01:f5:a2:d4:7c:b5:ad:67:fc: 14:c7:54:a6:63:b5:a8:fc:a5:a7:c9:f5:58:cf:56:1e:17:f2: aa:89:52:c1:34:e5:24:99:e1:c6:31:44:11:d3:49:57:03:5c: 36:c4:e2:2a:a0:89:58:0a:0b:d7:8c:b8:b4:41:df:66:c6:45: 23:cd:04:af:b7:d4:0e:6a:df:b7:7b:37:73:c3:1c:13:5c:2d: db:6b:94:19:9c:5d:f1:e2:b5:38:cf:d3:24:1e:48:47:cf:b5: f6:a2:d1:01:d6:97:4c:12:04:6a:b3:77:0d:ff:ec:8e:a5:0e: 05:c8:f7:3f:81:49:4b:59:ab:e3:f8:28:40:e9:a0:6d:6f:8e: 75:18:18:79 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgIUQckD6ezlAsPvQnnVbq5jbarWbNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYw QjYwRDA0QTAeFw0yNjA2MTUwNjQ4NTFaFw0yNzA2MTQwNjUzNTFaMDMxMTAvBgNV BAMTKDg2QzM4Q0RBM0UzNjA1MkRDQzdERjlCODhFRDc3QzJENzA1NkNCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaBrA+DN/C5HVCPAOIvPSDmieq k9C4J0kfLawkRk/m0gCZiugI8JQ+MTn0VNPOTHZCxZXO2wrQlQw1ckabCw/9h+tQ ps1evoESbqPUsBP0N+//W2W+YZj+x1yLOXwElcHLO2InWhSjqJWQXXAOxCEO8B/a Bb8sG0EBH+5bReo+SpJPRnn9PX8MJHA0JFRX5QGmFzP7/dSk2z+KM1Y5yNiezQGy byNpOAYk2q8/mesBo9znFc+imknJn7SvJDznX8x9r175z7OVuTsrEwe5qFeRNR4+ OrRFwkEAn+b3w1xHYft5Wr6/LgVNLlK1bOHEOd4fNVFfRYV4YlDgxXRfmjkfAgMB AAGjggIIMIICBDAdBgNVHQ4EFgQUhsOM2j42BS3Mffm4jtd8LXBWy/MwHwYDVR0j BBgwFoAUnfpdRM9Q7fVuk7t/r4Y+tgtg0EowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODcyODcyMDI2NjM2MjkwNy8wLzlERkE1RDQ0Q0Y1MEVERjU2RTkzQkI3RkFGODYz RUI2MEI2MEQwNEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYwQjYwRDA0QS5jZXIw gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzI4NzIwMjY2MzYyOTA3LzAvMzIzNDMwMzYzYTM4 MzgzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJAYIgDAN BgkqhkiG9w0BAQsFAAOCAQEAgwsfeBtS7qhGPYn6bZdviMs2J2IUVOMiqFuvR0yU rMGZSqCpKS6GfqzHHulNopAJokljgtubWniR4PW5jNDE9XiO8tnxqM2vqRLtzcB8 BC7AUydpII2CV6dHUArsS9THJHZ5mAbMrG7rtzHVCmTKEPXNuHbjAfWi1Hy1rWf8 FMdUpmO1qPylp8n1WM9WHhfyqolSwTTlJJnhxjFEEdNJVwNcNsTiKqCJWAoL14y4 tEHfZsZFI80Er7fUDmrft3s3c8McE1wt22uUGZxd8eK1OM/TJB5IR8+19qLRAdaX TBIEarN3Df/sjqUOBcj3P4FJS1mr4/goQOmgbW+OdRgYeQ== -----END CERTIFICATE-----Generated at Wed Jun 24 16:01:55 2026 by rpki-client