$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a383030303a3a2f33362d3336203d3e203137393638.roa File: 323430303a666530303a383030303a3a2f33362d3336203d3e203137393638.roa (raw, json) Hash identifier: xIzg2KIMEn47hz4Zl4mmgZvoGFklGkdg/85tomfZSLs= Subject key identifier: E8:8C:82:1E:B6:31:C2:C7:70:ED:12:6E:BC:9E:56:85:CF:9C:0F:C2 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 3435949E053A702BEFD4DD9E275C623D4A55BF91 Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a383030303a3a2f33362d3336203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:46:50 +0000 ROA not before: Mon 29 Jun 2026 02:41:50 +0000 ROA not after: Mon 28 Jun 2027 02:46:50 +0000 asID: 17968 IP address blocks: 2400:fe00:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:35:94:9e:05:3a:70:2b:ef:d4:dd:9e:27:5c:62:3d:4a:55:bf:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:41:50 2026 GMT Not After : Jun 28 02:46:50 2027 GMT Subject: CN=E88C821EB631C2C770ED126EBC9E5685CF9C0FC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ea:9f:df:04:b2:60:1f:69:09:3a:a0:cb:24: 36:9f:07:13:fd:9e:1d:9c:81:32:07:62:55:7a:52: ef:b3:81:21:6e:17:10:bb:91:c9:c4:9f:35:2b:b9: a2:ea:4c:57:ca:94:93:e4:df:b2:dd:da:78:7f:a4: 8e:ca:e3:0f:0c:3b:fc:0b:e0:29:bd:47:ab:42:d1: 22:44:61:fe:ab:99:7b:75:4b:1e:c9:16:bc:e1:ad: cb:8f:42:62:03:8f:56:47:dd:7a:1d:9e:50:67:1b: 5a:ac:d5:29:42:fb:88:33:c3:39:31:ca:57:b0:90: 8b:ae:60:a6:ca:83:ff:c2:99:43:6f:08:07:5e:82: 6b:34:36:64:fa:b9:f5:64:c9:fb:b2:d1:f8:26:9b: 8d:d9:a6:b0:4c:60:19:6f:33:a6:83:1a:47:97:e4: b8:ef:44:cd:4d:ee:23:42:a7:49:40:28:62:e6:64: 50:55:6a:20:73:60:01:86:2a:7c:c4:27:43:0a:88: 03:52:f5:60:ec:ec:09:11:b3:42:fa:64:ba:51:26: 4f:89:76:8f:c4:b3:44:00:54:f7:d5:7b:0a:ae:81: 26:7c:81:0a:bc:94:6f:a7:07:77:0e:ce:24:25:cd: 65:56:22:07:be:f5:69:c2:74:99:42:c5:39:73:5b: 4a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:8C:82:1E:B6:31:C2:C7:70:ED:12:6E:BC:9E:56:85:CF:9C:0F:C2 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a383030303a3a2f33362d3336203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:fe00:8000::/36 Signature Algorithm: sha256WithRSAEncryption 24:3b:e6:30:65:ca:ef:53:36:b2:cf:ad:13:5e:8d:dd:ac:aa: 90:b8:c9:63:0f:f5:62:da:08:e4:b9:31:a3:21:9b:5e:8d:ab: a9:eb:80:d9:6c:a8:41:90:f1:0f:22:16:f8:cf:a9:5f:02:9f: bb:fb:30:ab:4f:ed:ad:bb:b7:47:b4:5f:60:87:81:27:dc:2f: 50:1a:5e:f4:af:60:d9:7e:2c:43:0c:1e:66:c4:5f:cf:a0:4e: ad:94:09:fd:ec:e7:9f:fb:d5:69:7c:05:0f:ff:a5:0a:3b:c8: f6:42:13:47:f6:9c:41:83:54:b8:b9:b5:2b:68:e2:7d:fc:7d: 3c:f7:1d:f0:a7:fc:be:cd:ea:cf:ae:45:d1:ac:71:4b:8a:0d: 20:92:ea:41:0b:0a:51:d2:78:06:da:d4:85:53:22:a5:48:40: 0b:4b:5b:fa:5c:9f:94:a7:b1:f9:cd:39:6b:e3:00:41:18:2e: 8c:46:6b:6e:db:3e:c1:8d:47:ad:31:8e:58:21:cb:9d:66:f0: cc:c3:cd:26:72:17:69:8c:5b:a8:33:c0:92:70:e2:fa:35:52: b3:5c:60:1b:93:7f:8c:87:4e:dd:0f:c9:90:26:63:c1:29:72: b5:18:2e:22:d0:86:a5:9d:34:45:bf:dd:17:2a:b9:94:ed:21: dc:84:96:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUNDWUngU6cCvv1N2eJ1xiPUpVv5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQxNTBaFw0yNzA2MjgwMjQ2NTBaMDMxMTAvBgNV BAMTKEU4OEM4MjFFQjYzMUMyQzc3MEVEMTI2RUJDOUU1Njg1Q0Y5QzBGQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6p/fBLJgH2kJOqDLJDafBxP9 nh2cgTIHYlV6Uu+zgSFuFxC7kcnEnzUruaLqTFfKlJPk37Ld2nh/pI7K4w8MO/wL 4Cm9R6tC0SJEYf6rmXt1Sx7JFrzhrcuPQmIDj1ZH3XodnlBnG1qs1SlC+4gzwzkx ylewkIuuYKbKg//CmUNvCAdegms0NmT6ufVkyfuy0fgmm43ZprBMYBlvM6aDGkeX 5LjvRM1N7iNCp0lAKGLmZFBVaiBzYAGGKnzEJ0MKiANS9WDs7AkRs0L6ZLpRJk+J do/Es0QAVPfVewqugSZ8gQq8lG+nB3cOziQlzWVWIge+9WnCdJlCxTlzW0rRAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQU6IyCHrYxwsdw7RJuvJ5Whc+cD8IwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzIzNDMwMzAz YTY2NjUzMDMwM2EzODMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzcz OTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkAP4AgDANBgkqhkiG9w0BAQsFAAOCAQEAJDvmMGXK 71M2ss+tE16N3ayqkLjJYw/1YtoI5LkxoyGbXo2rqeuA2WyoQZDxDyIW+M+pXwKf u/swq0/trbu3R7RfYIeBJ9wvUBpe9K9g2X4sQwweZsRfz6BOrZQJ/eznn/vVaXwF D/+lCjvI9kITR/acQYNUuLm1K2jiffx9PPcd8Kf8vs3qz65F0axxS4oNIJLqQQsK UdJ4BtrUhVMipUhAC0tb+lyflKex+c05a+MAQRgujEZrbts+wY1HrTGOWCHLnWbw zMPNJnIXaYxbqDPAknDi+jVSs1xgG5N/jIdO3Q/JkCZjwSlytRguItCGpZ00Rb/d Fyq5lO0h3ISWlQ== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:13 2026 by rpki-client