$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/323430353a383238303a3a2f33322d3332203d3e203633363037.roa File: 323430353a383238303a3a2f33322d3332203d3e203633363037.roa (raw, json) Hash identifier: cJB8DZCXLquxtRMnpkPAwvXkTBKziNRs8S4iiXYlCJ8= Subject key identifier: DB:72:D8:D2:2A:B7:7F:E6:85:7A:86:54:99:08:DD:37:22:90:30:18 Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Certificate serial: 580BA14E8953A206B51D0C7A368FAC935960031E Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/323430353a383238303a3a2f33322d3332203d3e203633363037.roa Signing time: Fri 26 Jun 2026 02:07:51 +0000 ROA not before: Fri 26 Jun 2026 02:02:51 +0000 ROA not after: Fri 25 Jun 2027 02:07:51 +0000 asID: 63607 IP address blocks: 2405:8280::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0b:a1:4e:89:53:a2:06:b5:1d:0c:7a:36:8f:ac:93:59:60:03:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB Validity Not Before: Jun 26 02:02:51 2026 GMT Not After : Jun 25 02:07:51 2027 GMT Subject: CN=DB72D8D22AB77FE6857A86549908DD3722903018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:88:3c:af:8d:d5:8b:66:95:13:9d:65:df:7d: 55:1b:10:77:7a:40:b1:c1:30:3f:35:7e:f1:23:c6: fa:82:d5:8e:55:76:cc:d6:0a:a4:1f:11:63:da:4e: 68:26:df:a0:76:74:3d:1e:fb:d7:51:f2:8e:05:ab: 2f:ab:ee:f5:60:63:aa:5f:91:2d:90:33:55:bb:91: 08:83:88:96:f7:2b:27:b3:9e:e4:cc:61:c6:92:a0: 9a:e7:d5:9c:e0:d8:42:0e:72:59:f7:f1:c4:4f:21: 41:d7:8c:66:97:cc:1a:ff:13:2a:f1:ee:7b:e4:ff: 93:56:d4:74:80:1b:de:47:32:88:0d:00:a3:b6:34: 6c:49:7d:5c:58:9e:97:30:95:ab:7d:30:4b:a6:89: b5:4f:b6:a1:6c:8a:3e:3f:4c:0f:20:d1:45:32:2d: cd:74:00:3b:cc:e1:41:ad:df:25:82:b1:14:0b:b4: f6:09:89:9d:83:03:cf:52:38:f0:51:f1:1e:bb:6b: b9:77:05:59:7d:84:70:68:d3:9e:e1:40:6e:ff:53: 85:36:0c:8a:f9:76:06:50:7d:7e:05:9f:ea:86:29: eb:f5:38:bd:7e:56:42:88:fe:c0:fa:a6:6f:35:bb: 25:80:a1:b8:56:6c:70:7f:58:b3:86:13:de:75:11: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:72:D8:D2:2A:B7:7F:E6:85:7A:86:54:99:08:DD:37:22:90:30:18 X509v3 Authority Key Identifier: keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/323430353a383238303a3a2f33322d3332203d3e203633363037.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:8280::/32 Signature Algorithm: sha256WithRSAEncryption 85:4f:db:4c:3c:11:b8:14:44:8f:73:e0:64:49:6c:cc:6a:6f: 57:51:9e:b3:29:0d:30:a8:ee:e6:d4:9d:c8:86:2e:88:5d:dd: fc:c8:40:47:d3:53:f0:17:47:53:e7:37:27:ef:ac:02:c1:22: 44:dd:df:1e:4b:ab:9a:8e:b4:d6:34:0c:3b:9d:87:c3:9b:ea: e2:49:71:7f:94:0d:c1:1c:d6:ec:82:05:1d:3f:f4:18:58:c8: 5e:ca:86:75:48:16:b8:47:e7:ca:08:ae:40:6e:02:de:eb:6c: ef:36:5f:34:9c:08:c1:9d:82:b3:43:8d:3e:15:8f:3f:ca:4b: 7b:9b:de:9a:03:23:98:29:86:0f:21:1a:1c:a7:79:e3:28:a3: 90:18:af:b3:31:25:15:0b:73:62:30:11:3c:5a:3e:6b:ce:de: 21:69:c6:9a:9e:6f:21:86:fe:c7:e9:42:44:c0:7a:27:77:5b: 08:7a:a4:bc:84:76:c6:6d:39:d5:8f:fe:51:bb:38:ff:83:3f: 45:5e:b3:a9:c0:e6:4d:a3:ff:5d:8f:d2:95:3a:9c:89:16:88: ea:f3:63:98:16:f3:f8:38:85:a5:74:07:b3:18:9c:f8:4d:cf: 71:30:7a:8f:34:80:88:55:b5:94:6b:4f:b3:ed:be:11:e2:fe: bd:b9:64:e8 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUWAuhTolToga1HQx6No+sk1lgAx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNC NDREQjlBQjAeFw0yNjA2MjYwMjAyNTFaFw0yNzA2MjUwMjA3NTFaMDMxMTAvBgNV BAMTKERCNzJEOEQyMkFCNzdGRTY4NTdBODY1NDk5MDhERDM3MjI5MDMwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiDyvjdWLZpUTnWXffVUbEHd6 QLHBMD81fvEjxvqC1Y5VdszWCqQfEWPaTmgm36B2dD0e+9dR8o4Fqy+r7vVgY6pf kS2QM1W7kQiDiJb3KyeznuTMYcaSoJrn1Zzg2EIOcln38cRPIUHXjGaXzBr/Eyrx 7nvk/5NW1HSAG95HMogNAKO2NGxJfVxYnpcwlat9MEumibVPtqFsij4/TA8g0UUy Lc10ADvM4UGt3yWCsRQLtPYJiZ2DA89SOPBR8R67a7l3BVl9hHBo057hQG7/U4U2 DIr5dgZQfX4Fn+qGKev1OL1+VkKI/sD6pm81uyWAobhWbHB/WLOGE951Ea7zAgMB AAGjggISMIICDjAdBgNVHQ4EFgQU23LY0iq3f+aFeoZUmQjdNyKQMBgwHwYDVR0j BBgwFoAUrjg6tLylo+Ed5Jr/cElNQ7RNuaswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy MjcwOTM1MDkxMDAwMTE5MS8wL0FFMzgzQUI0QkNBNUEzRTExREU0OUFGRjcwNDk0 RDQzQjQ0REI5QUIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUzODNBQjRCQ0E1QTNFMTFERTQ5QUZGNzA0OTRENDNCNDREQjlBQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTIyNzA5MzUwOTEwMDAxMTkxLzAvMzIzNDMwMzUzYTM4 MzIzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMzM2MzAzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQFgoAwDQYJKoZIhvcNAQELBQADggEBAIVP20w8EbgURI9z4GRJbMxqb1dR nrMpDTCo7ubUnciGLohd3fzIQEfTU/AXR1PnNyfvrALBIkTd3x5Lq5qOtNY0DDud h8Ob6uJJcX+UDcEc1uyCBR0/9BhYyF7KhnVIFrhH58oIrkBuAt7rbO82XzScCMGd grNDjT4Vjz/KS3ub3poDI5gphg8hGhyneeMoo5AYr7MxJRULc2IwETxaPmvO3iFp xpqebyGG/sfpQkTAeid3Wwh6pLyEdsZtOdWP/lG7OP+DP0Ves6nA5k2j/12P0pU6 nIkWiOrzY5gW8/g4haV0B7MYnPhNz3Eweo80gIhVtZRrT7PtvhHi/r25ZOg= -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:02 2026 by rpki-client