$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e2034383038.roa File: 323430313a653863303a3a2f33322d3332203d3e2034383038.roa (raw, json) Hash identifier: XPvKj68ZZK7cAp5zw+E8F2hCg10wzktRpwnHqOBbXRc= Subject key identifier: F9:67:93:01:8D:43:AA:6C:79:14:09:F3:5A:47:6C:9A:60:AB:E5:8A Certificate issuer: /CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Certificate serial: 5C91B0967A3D4A15B0B81E12F85E41EC98373295 Authority key identifier: F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e2034383038.roa Signing time: Tue 23 Jun 2026 06:53:45 +0000 ROA not before: Tue 23 Jun 2026 06:48:45 +0000 ROA not after: Tue 22 Jun 2027 06:53:45 +0000 asID: 4808 IP address blocks: 2401:e8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 10:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:91:b0:96:7a:3d:4a:15:b0:b8:1e:12:f8:5e:41:ec:98:37:32:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F354F915FD6A0C20C9E625C28D36C4BC552B6A04 Validity Not Before: Jun 23 06:48:45 2026 GMT Not After : Jun 22 06:53:45 2027 GMT Subject: CN=F96793018D43AA6C791409F35A476C9A60ABE58A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:73:a1:c3:9c:a6:d2:27:93:ff:09:24:bd:69: 2d:39:00:49:47:46:24:16:79:9d:21:0b:b7:36:3c: 5a:f7:a4:4c:17:05:a0:d7:ba:2a:80:16:7a:30:eb: 9e:68:ad:86:73:2a:33:a1:b2:2c:f4:7f:a8:86:8e: a5:12:e1:fc:e6:2d:a7:bd:59:0f:41:70:3e:fa:e4: 3a:82:8f:b7:4e:14:bf:e5:f6:49:28:ef:fc:4b:9b: d5:5e:20:1f:30:86:b9:57:33:52:58:3e:85:01:23: d6:2a:ab:c2:a1:29:c5:ad:e1:9b:96:79:8a:ef:60: ff:66:b7:c9:e0:f3:7c:f3:16:94:52:d2:8c:e7:da: 3f:1e:a5:3c:cb:fe:7a:bd:84:18:53:14:03:84:e4: 3f:c0:6a:0a:ac:23:c5:19:d6:df:2a:9a:db:ba:03: d5:37:dd:5e:4c:ab:ef:cf:a1:05:60:7c:87:43:ad: 1c:77:cc:68:bf:7a:d3:a7:e2:46:f0:da:a4:52:a3: 39:bc:03:7e:68:da:e7:41:0e:fc:7b:7c:28:4d:a8: ee:84:76:b5:d3:0f:5d:20:e0:4f:99:9a:85:23:87: 9b:b2:a2:d7:0f:58:4e:00:6a:4b:31:8f:61:c5:aa: b5:38:82:70:2e:8b:9e:b9:13:b7:1e:0e:95:50:d0: bb:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:67:93:01:8D:43:AA:6C:79:14:09:F3:5A:47:6C:9A:60:AB:E5:8A X509v3 Authority Key Identifier: keyid:F3:54:F9:15:FD:6A:0C:20:C9:E6:25:C2:8D:36:C4:BC:55:2B:6A:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F354F915FD6A0C20C9E625C28D36C4BC552B6A04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1121693257609248803/0/323430313a653863303a3a2f33322d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:e8c0::/32 Signature Algorithm: sha256WithRSAEncryption 98:46:62:e6:35:03:c9:93:d5:4b:73:b3:03:c6:f9:55:bd:43: d2:17:9a:ea:e9:3e:35:c7:4f:6d:d0:6a:0f:2d:6e:f7:cd:e2: a4:da:ce:db:4e:1d:2f:dd:d9:7d:27:36:3e:91:8b:a7:a2:2f: 70:06:52:61:fd:b3:f4:87:15:df:b5:1f:67:2d:32:33:35:87: 14:f9:ee:08:4c:f0:6f:e4:d9:99:e6:de:f5:e6:47:84:08:ca: 77:11:a1:1e:7a:c7:83:71:c6:18:79:d0:3a:2b:53:16:cd:a1: f1:f6:b8:0d:71:c1:d2:a9:67:93:57:80:e2:72:b1:cc:27:2b: 9f:61:0d:a4:09:19:30:ea:69:06:e1:ba:b4:43:f2:11:21:b2: e5:65:f1:a9:0e:51:b8:45:a3:e7:c3:bf:55:45:f0:82:56:29: db:e5:0d:b4:ba:ad:c1:c3:4f:1f:14:7c:89:ad:86:7e:c6:08: 1f:45:46:2b:57:08:ea:1d:0f:9a:a3:d5:d9:86:79:d2:fc:98: b1:93:ed:19:9a:3c:34:8c:c4:cc:19:13:96:06:dd:66:07:6a: 71:ef:13:83:e6:c3:61:be:23:45:05:e4:c7:f3:f9:f7:f5:cf: e0:d9:ec:54:cb:9a:9c:ce:21:36:38:59:0e:c9:ae:26:75:ee: 41:57:9d:89 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUXJGwlno9ShWwuB4S+F5B7Jg3MpUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1 NTJCNkEwNDAeFw0yNjA2MjMwNjQ4NDVaFw0yNzA2MjIwNjUzNDVaMDMxMTAvBgNV BAMTKEY5Njc5MzAxOEQ0M0FBNkM3OTE0MDlGMzVBNDc2QzlBNjBBQkU1OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPc6HDnKbSJ5P/CSS9aS05AElH RiQWeZ0hC7c2PFr3pEwXBaDXuiqAFnow655orYZzKjOhsiz0f6iGjqUS4fzmLae9 WQ9BcD765DqCj7dOFL/l9kko7/xLm9VeIB8whrlXM1JYPoUBI9Yqq8KhKcWt4ZuW eYrvYP9mt8ng83zzFpRS0ozn2j8epTzL/nq9hBhTFAOE5D/AagqsI8UZ1t8qmtu6 A9U33V5Mq+/PoQVgfIdDrRx3zGi/etOn4kbw2qRSozm8A35o2udBDvx7fChNqO6E drXTD10g4E+ZmoUjh5uyotcPWE4Aaksxj2HFqrU4gnAui565E7ceDpVQ0LtvAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU+WeTAY1Dqmx5FAnzWkdsmmCr5YowHwYDVR0j BBgwFoAU81T5Ff1qDCDJ5iXCjTbEvFUragQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MTY5MzI1NzYwOTI0ODgwMy8wL0YzNTRGOTE1RkQ2QTBDMjBDOUU2MjVDMjhEMzZD NEJDNTUyQjZBMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjM1NEY5MTVGRDZBMEMyMEM5RTYyNUMyOEQzNkM0QkM1NTJCNkEwNC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIxNjkzMjU3NjA5MjQ4ODAzLzAvMzIzNDMwMzEzYTY1 Mzg2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAejAMA0GCSqGSIb3DQEBCwUAA4IBAQCYRmLmNQPJk9VLc7MDxvlVvUPSF5rq 6T41x09t0GoPLW73zeKk2s7bTh0v3dl9JzY+kYunoi9wBlJh/bP0hxXftR9nLTIz NYcU+e4ITPBv5NmZ5t715keECMp3EaEeeseDccYYedA6K1MWzaHx9rgNccHSqWeT V4DicrHMJyufYQ2kCRkw6mkG4bq0Q/IRIbLlZfGpDlG4RaPnw79VRfCCVinb5Q20 uq3Bw08fFHyJrYZ+xggfRUYrVwjqHQ+ao9XZhnnS/Jixk+0Zmjw0jMTMGROWBt1m B2px7xOD5sNhviNFBeTH8/n39c/g2exUy5qcziE2OFkOya4mde5BV52J -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:55 2026 by rpki-client