$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a373838303a3a2f33322d3332203d3e2030.roa File: 323430373a373838303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: QxnPT1CIMAlqQ663ZFA8jDyFlWdXGbjN3pr40XZAsmQ= Subject key identifier: 11:BF:C9:DD:7F:FC:BB:9D:46:C0:09:AF:A8:0E:D5:FF:D8:6B:3F:2C Certificate issuer: /CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Certificate serial: 74C783BAE0F2425D111FA4D2B9D26C843274A213 Authority key identifier: 9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a373838303a3a2f33322d3332203d3e2030.roa Signing time: Mon 15 Jun 2026 06:53:51 +0000 ROA not before: Mon 15 Jun 2026 06:48:51 +0000 ROA not after: Mon 14 Jun 2027 06:53:51 +0000 asID: 0 IP address blocks: 2407:7880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Jun 2026 09:48:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:c7:83:ba:e0:f2:42:5d:11:1f:a4:d2:b9:d2:6c:84:32:74:a2:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A Validity Not Before: Jun 15 06:48:51 2026 GMT Not After : Jun 14 06:53:51 2027 GMT Subject: CN=11BFC9DD7FFCBB9D46C009AFA80ED5FFD86B3F2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:73:ed:84:0d:ef:5a:f9:f2:12:5f:65:bc:6c: 18:56:78:f6:2d:f2:db:2b:07:8a:75:5f:46:1e:8b: 2f:24:1e:2f:33:97:08:1b:aa:3f:52:b2:1a:8a:d2: d5:a1:a6:b6:7d:3f:07:38:65:b9:0d:95:ad:f3:32: b8:75:bf:d0:3e:d6:fc:f3:84:c4:33:17:0b:e0:01: cc:63:df:7d:03:09:e8:86:58:98:c5:58:5b:28:4d: de:7e:dd:03:8a:b3:67:2c:e2:e0:e5:5b:33:53:01: bf:e8:c6:db:16:69:e1:aa:4a:aa:c2:ca:2f:bf:35: 93:84:93:f7:d3:55:1a:76:48:d8:24:02:40:36:c0: 1b:39:39:72:4d:6a:2d:23:a1:dd:71:b6:c2:fd:49: 53:d1:4c:10:d7:b7:bc:c6:f6:ae:3b:02:88:56:d2: 8a:22:5d:38:2e:6a:b5:bd:5f:e9:28:e7:47:90:6c: 55:9d:2d:04:de:5d:36:a2:98:f3:e0:47:77:d6:5e: af:ec:e4:94:ae:32:5e:68:b7:ea:8e:95:18:c4:d2: d1:01:70:8d:b0:78:69:6d:ce:aa:ab:c9:62:ba:97: 9c:d7:55:52:7a:ea:c2:cb:2c:90:50:b3:84:7b:5a: 45:60:ce:26:cc:c6:e9:99:68:32:7c:96:32:69:eb: 4e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:BF:C9:DD:7F:FC:BB:9D:46:C0:09:AF:A8:0E:D5:FF:D8:6B:3F:2C X509v3 Authority Key Identifier: keyid:9D:FA:5D:44:CF:50:ED:F5:6E:93:BB:7F:AF:86:3E:B6:0B:60:D0:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9DFA5D44CF50EDF56E93BB7FAF863EB60B60D04A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1118728720266362907/0/323430373a373838303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:7880::/32 Signature Algorithm: sha256WithRSAEncryption 04:ed:82:3a:35:0d:c2:3a:b5:d4:b5:d8:f9:ba:87:83:f9:b3: bc:f9:c6:dc:8f:28:ad:19:70:ec:56:a4:31:17:e7:56:9a:1a: 28:84:ee:26:34:b7:ac:3f:f2:e5:2e:19:de:03:bc:f7:64:b4: 07:ce:6d:62:3b:40:9e:56:56:9b:16:aa:28:0d:e0:02:ee:f3: 53:eb:65:ff:d8:b3:a8:9d:5e:27:83:3c:8c:5d:df:a4:f0:c9: 6c:61:72:75:21:eb:95:18:30:21:24:0d:60:13:78:a9:13:35: 68:c1:22:c0:83:58:3d:f1:ac:2e:ee:6c:af:36:fa:94:69:0e: db:de:50:6d:74:02:fc:57:1d:e6:20:24:6e:99:56:80:7a:69: 47:db:c0:09:20:04:5c:4b:ac:3d:31:57:4d:b9:43:e3:62:ef: d8:e2:50:89:ca:7d:f9:f9:99:1a:1c:fa:4b:64:4f:bb:91:4f: 3e:63:b0:6e:be:f1:20:b9:79:db:89:b9:05:8e:ff:71:c2:7a: 46:1e:4f:0c:e8:0f:74:6c:d1:44:88:73:42:9a:3c:2f:55:9c: 4a:65:00:83:50:aa:84:be:8f:d1:07:51:63:53:15:10:9f:1b: 40:df:47:2e:0e:56:51:bc:55:21:cd:b9:77:d9:4e:5f:83:91: e5:61:5e:f3 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUdMeDuuDyQl0RH6TSudJshDJ0ohMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYw QjYwRDA0QTAeFw0yNjA2MTUwNjQ4NTFaFw0yNzA2MTQwNjUzNTFaMDMxMTAvBgNV BAMTKDExQkZDOUREN0ZGQ0JCOUQ0NkMwMDlBRkE4MEVENUZGRDg2QjNGMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFc+2EDe9a+fISX2W8bBhWePYt 8tsrB4p1X0Yeiy8kHi8zlwgbqj9SshqK0tWhprZ9Pwc4ZbkNla3zMrh1v9A+1vzz hMQzFwvgAcxj330DCeiGWJjFWFsoTd5+3QOKs2cs4uDlWzNTAb/oxtsWaeGqSqrC yi+/NZOEk/fTVRp2SNgkAkA2wBs5OXJNai0jod1xtsL9SVPRTBDXt7zG9q47AohW 0ooiXTguarW9X+ko50eQbFWdLQTeXTaimPPgR3fWXq/s5JSuMl5ot+qOlRjE0tEB cI2weGltzqqryWK6l5zXVVJ66sLLLJBQs4R7WkVgzibMxumZaDJ8ljJp606PAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUEb/J3X/8u51GwAmvqA7V/9hrPywwHwYDVR0j BBgwFoAUnfpdRM9Q7fVuk7t/r4Y+tgtg0EowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx ODcyODcyMDI2NjM2MjkwNy8wLzlERkE1RDQ0Q0Y1MEVERjU2RTkzQkI3RkFGODYz RUI2MEI2MEQwNEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOURGQTVENDRDRjUwRURGNTZFOTNCQjdGQUY4NjNFQjYwQjYwRDA0QS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTE4NzI4NzIwMjY2MzYyOTA3LzAvMzIzNDMwMzczYTM3 MzgzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB3iA MA0GCSqGSIb3DQEBCwUAA4IBAQAE7YI6NQ3COrXUtdj5uoeD+bO8+cbcjyitGXDs VqQxF+dWmhoohO4mNLesP/LlLhneA7z3ZLQHzm1iO0CeVlabFqooDeAC7vNT62X/ 2LOonV4ngzyMXd+k8MlsYXJ1IeuVGDAhJA1gE3ipEzVowSLAg1g98awu7myvNvqU aQ7b3lBtdAL8Vx3mICRumVaAemlH28AJIARcS6w9MVdNuUPjYu/Y4lCJyn35+Zka HPpLZE+7kU8+Y7BuvvEguXnbibkFjv9xwnpGHk8M6A90bNFEiHNCmjwvVZxKZQCD UKqEvo/RB1FjUxUQnxtA30cuDlZRvFUhzbl32U5fg5HlYV7z -----END CERTIFICATE-----Generated at Wed Jun 24 16:02:08 2026 by rpki-client