$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a373030303a3a2f33362d3336203d3e203137393638.roa File: 323430303a666530303a373030303a3a2f33362d3336203d3e203137393638.roa (raw, json) Hash identifier: EP7CGTZs05k3gA8dEtn8/9Xj6SyGZZPdZf7gbQv6hFo= Subject key identifier: 85:62:D4:90:4C:FC:84:5F:08:5E:15:D9:E0:FA:B7:31:29:1B:28:0E Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 0F9E9CB28F41495084272161912D9D526F1E8544 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a373030303a3a2f33362d3336203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:46:51 +0000 ROA not before: Mon 29 Jun 2026 02:41:51 +0000 ROA not after: Mon 28 Jun 2027 02:46:51 +0000 asID: 17968 IP address blocks: 2400:fe00:7000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:9e:9c:b2:8f:41:49:50:84:27:21:61:91:2d:9d:52:6f:1e:85:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:41:51 2026 GMT Not After : Jun 28 02:46:51 2027 GMT Subject: CN=8562D4904CFC845F085E15D9E0FAB731291B280E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:48:54:46:cc:ee:92:ae:01:0b:c7:8d:96:c1: 1d:3c:4d:86:cd:8b:93:50:1c:83:88:da:f2:80:2b: 39:2f:dc:06:34:c5:1f:f2:87:10:1b:91:08:27:e2: b5:cd:7b:38:9d:2d:ab:55:30:05:05:47:26:44:14: cf:7e:f5:d6:8b:33:b3:ac:29:1d:d1:4e:8f:b0:c8: 5b:32:49:3a:e2:4f:82:84:64:b8:79:a1:28:26:b8: 3d:c4:c8:ed:86:3c:a5:39:44:07:49:05:89:61:94: 71:92:c8:75:f8:49:74:7e:2c:69:b6:a2:69:e1:07: 98:9b:d8:46:69:24:3e:c5:65:2e:19:9c:62:72:e6: e9:82:8a:b0:e9:14:13:94:98:c0:89:c8:85:8a:9e: 66:7b:2b:00:6f:2c:f7:f8:7f:b7:ce:ab:01:27:dd: ef:95:a6:73:5e:95:ef:21:49:33:df:06:e3:ba:13: c4:c2:f4:47:81:40:e1:90:0c:a0:de:62:7f:9f:62: 63:33:32:82:97:52:ca:f5:98:25:c1:49:8e:07:73: 85:3f:05:9f:e4:3a:75:9d:2a:06:92:08:d8:62:c3: 05:fb:24:b3:38:73:03:cc:cf:db:2a:fb:e1:60:3a: 34:59:10:c0:c5:58:e1:59:64:b7:f8:c4:d5:a3:ec: c9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:62:D4:90:4C:FC:84:5F:08:5E:15:D9:E0:FA:B7:31:29:1B:28:0E X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a373030303a3a2f33362d3336203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:fe00:7000::/36 Signature Algorithm: sha256WithRSAEncryption 33:ec:15:66:c7:d2:f5:be:11:1e:09:6f:28:99:31:b3:13:c9: 53:27:c2:a3:43:53:95:62:20:5f:7b:21:f2:2b:75:26:44:cb: b6:c8:73:41:9a:57:79:e8:ee:66:fb:25:48:8d:22:7f:b2:22: ea:75:9a:50:f3:85:64:47:36:e0:c3:95:50:8d:03:05:36:fa: f7:6b:f4:dd:a8:07:9b:a2:90:7c:93:c4:d3:f0:59:0e:0d:f7: 7d:ec:70:64:11:91:8d:06:7d:ef:a8:da:96:56:f7:ff:2b:2c: a2:75:99:c5:68:88:d6:05:6d:1f:8f:28:51:47:c1:10:4c:76: 21:a2:61:80:fc:a6:74:46:08:5f:ef:87:5c:ea:3e:9b:ce:be: cd:50:2d:b5:5f:0e:b6:1e:a4:ba:15:cd:a8:a6:83:41:45:f8: 6f:4f:73:b2:f6:4a:70:ae:cd:a4:04:82:14:33:cf:c6:de:ab: 07:af:a3:81:1e:60:2b:65:a9:7f:83:5d:9a:ff:69:d5:d8:e3: 50:20:5d:b9:dc:4d:37:98:5c:3a:69:a1:3e:9d:24:59:69:18: 89:cc:74:9d:06:2f:0c:af:5c:df:fa:85:1d:af:8f:f8:74:d1: f8:41:84:0b:37:e8:9d:83:28:9a:f3:fb:55:19:ba:10:d1:24: 04:f0:fc:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUD56cso9BSVCEJyFhkS2dUm8ehUQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQxNTFaFw0yNzA2MjgwMjQ2NTFaMDMxMTAvBgNV BAMTKDg1NjJENDkwNENGQzg0NUYwODVFMTVEOUUwRkFCNzMxMjkxQjI4MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfSFRGzO6SrgELx42WwR08TYbN i5NQHIOI2vKAKzkv3AY0xR/yhxAbkQgn4rXNezidLatVMAUFRyZEFM9+9daLM7Os KR3RTo+wyFsySTriT4KEZLh5oSgmuD3EyO2GPKU5RAdJBYlhlHGSyHX4SXR+LGm2 omnhB5ib2EZpJD7FZS4ZnGJy5umCirDpFBOUmMCJyIWKnmZ7KwBvLPf4f7fOqwEn 3e+VpnNele8hSTPfBuO6E8TC9EeBQOGQDKDeYn+fYmMzMoKXUsr1mCXBSY4Hc4U/ BZ/kOnWdKgaSCNhiwwX7JLM4cwPMz9sq++FgOjRZEMDFWOFZZLf4xNWj7Mn1AgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUhWLUkEz8hF8IXhXZ4Pq3MSkbKA4wHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzIzNDMwMzAz YTY2NjUzMDMwM2EzNzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzcz OTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkAP4AcDANBgkqhkiG9w0BAQsFAAOCAQEAM+wVZsfS 9b4RHglvKJkxsxPJUyfCo0NTlWIgX3sh8it1JkTLtshzQZpXeejuZvslSI0if7Ii 6nWaUPOFZEc24MOVUI0DBTb692v03agHm6KQfJPE0/BZDg33fexwZBGRjQZ976ja llb3/yssonWZxWiI1gVtH48oUUfBEEx2IaJhgPymdEYIX++HXOo+m86+zVAttV8O th6kuhXNqKaDQUX4b09zsvZKcK7NpASCFDPPxt6rB6+jgR5gK2Wpf4Ndmv9p1djj UCBdudxNN5hcOmmhPp0kWWkYicx0nQYvDK9c3/qFHa+P+HTR+EGECzfonYMomvP7 VRm6ENEkBPD8TA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:37 2026 by rpki-client