$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a633030303a3a2f33362d3336203d3e203137393638.roa File: 323430303a666530303a633030303a3a2f33362d3336203d3e203137393638.roa (raw, json) Hash identifier: 1gyEXpaLmqpEpEtlV+SryMFyt8lxhFN6A1jGYGNpBm8= Subject key identifier: 49:42:E4:30:CD:8F:9E:5B:67:05:A6:67:5A:F0:C5:27:4B:1B:59:D7 Certificate issuer: /CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Certificate serial: 7CB6E0CDA517EC6FE71CAB37061819422CD9355D Authority key identifier: FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a633030303a3a2f33362d3336203d3e203137393638.roa Signing time: Mon 29 Jun 2026 02:46:51 +0000 ROA not before: Mon 29 Jun 2026 02:41:51 +0000 ROA not after: Mon 28 Jun 2027 02:46:51 +0000 asID: 17968 IP address blocks: 2400:fe00:c000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 20:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:b6:e0:cd:a5:17:ec:6f:e7:1c:ab:37:06:18:19:42:2c:d9:35:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FCFC30E6FF346C4B57938E5745FC717D99DA3675 Validity Not Before: Jun 29 02:41:51 2026 GMT Not After : Jun 28 02:46:51 2027 GMT Subject: CN=4942E430CD8F9E5B6705A6675AF0C5274B1B59D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:86:78:01:17:8e:8a:27:3d:ca:79:a5:af:dc: e4:7b:80:8c:8a:5b:a3:4d:02:8a:c6:9a:7c:e5:a9: 4b:a3:2e:22:e5:f1:fa:67:ad:2a:8c:79:6f:79:16: a9:4c:b9:5b:20:16:18:46:6a:22:50:3b:83:dd:a4: 52:fa:12:49:11:09:31:ee:56:fe:fc:95:1c:b4:bb: f7:e3:cf:b0:97:2d:5d:90:b9:f6:27:33:33:8f:c0: f5:a9:f5:82:a2:82:66:91:35:65:78:ac:1b:35:da: 61:eb:6e:43:cf:41:02:53:96:95:3c:81:d3:e6:eb: 73:55:93:49:a2:66:2b:3a:46:db:31:67:01:ba:1d: de:c8:e9:43:00:02:0b:a7:d6:2c:0a:b8:01:84:24: 81:06:78:5d:39:02:ab:ea:ba:91:99:82:e7:8b:54: cd:a0:9a:ed:0b:c9:3f:2b:f9:19:2c:06:26:69:0a: 95:0b:9d:d7:8a:f2:93:81:b4:ed:c4:05:0f:27:76: d6:e9:6b:ba:a9:55:72:eb:d7:09:c1:67:77:3b:82: 3c:d0:9b:92:99:fa:86:03:4b:9a:d8:0c:a6:7a:53: ce:e3:ff:df:22:ec:82:23:c7:b2:bc:89:5f:bb:83: 59:4b:6e:ee:bf:46:b1:9d:4a:41:61:a4:e3:6e:b8: 3c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:42:E4:30:CD:8F:9E:5B:67:05:A6:67:5A:F0:C5:27:4B:1B:59:D7 X509v3 Authority Key Identifier: keyid:FC:FC:30:E6:FF:34:6C:4B:57:93:8E:57:45:FC:71:7D:99:DA:36:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/FCFC30E6FF346C4B57938E5745FC717D99DA3675.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FCFC30E6FF346C4B57938E5745FC717D99DA3675.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123785436171337765/0/323430303a666530303a633030303a3a2f33362d3336203d3e203137393638.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:fe00:c000::/36 Signature Algorithm: sha256WithRSAEncryption ad:9f:4b:65:86:32:b4:fc:13:f4:e5:70:77:3a:a8:43:10:93: 8f:9b:8a:f8:eb:b8:7f:64:30:56:66:e8:6b:ed:1f:3c:ca:e1: f6:d8:c7:72:3d:f6:e3:48:0f:54:d3:3c:f5:d8:9f:a9:1f:ab: bd:71:95:a9:84:92:97:5f:3e:a6:2e:87:4a:88:44:a1:e8:3b: f9:42:03:9a:89:85:2d:10:71:54:fe:76:db:62:33:96:02:93: 61:89:22:21:90:69:43:a4:47:8d:63:fe:df:53:52:4f:49:37: f8:38:3b:21:7c:8e:e0:aa:3a:33:ab:e0:42:09:5c:2b:55:e6: 06:01:39:9f:39:69:7f:60:a4:92:4a:38:34:d4:22:36:87:5d: 3b:3d:20:c7:83:9e:34:4d:71:29:95:c1:d4:18:69:a0:00:37: c9:2d:b9:51:95:49:df:e4:24:09:a7:e9:a8:35:73:d2:15:98: 99:06:9e:5f:c8:b4:58:eb:a0:43:63:e1:df:ce:0f:01:96:aa: 52:8c:5c:4f:7e:35:3f:77:3d:f9:69:2e:86:99:05:0d:15:ad: f6:87:56:93:af:6a:6c:78:ee:a4:61:96:f6:8d:c9:b7:36:52: 41:43:15:61:09:44:ee:a8:30:ed:bb:29:99:f5:80:76:04:db: 02:11:a6:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUfLbgzaUX7G/nHKs3BhgZQizZNV0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5 OURBMzY3NTAeFw0yNjA2MjkwMjQxNTFaFw0yNzA2MjgwMjQ2NTFaMDMxMTAvBgNV BAMTKDQ5NDJFNDMwQ0Q4RjlFNUI2NzA1QTY2NzVBRjBDNTI3NEIxQjU5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2hngBF46KJz3KeaWv3OR7gIyK W6NNAorGmnzlqUujLiLl8fpnrSqMeW95FqlMuVsgFhhGaiJQO4PdpFL6EkkRCTHu Vv78lRy0u/fjz7CXLV2QufYnMzOPwPWp9YKigmaRNWV4rBs12mHrbkPPQQJTlpU8 gdPm63NVk0miZis6RtsxZwG6Hd7I6UMAAgun1iwKuAGEJIEGeF05AqvqupGZgueL VM2gmu0LyT8r+RksBiZpCpULndeK8pOBtO3EBQ8ndtbpa7qpVXLr1wnBZ3c7gjzQ m5KZ+oYDS5rYDKZ6U87j/98i7IIjx7K8iV+7g1lLbu6/RrGdSkFhpONuuDzZAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUSULkMM2PnltnBaZnWvDFJ0sbWdcwHwYDVR0j BBgwFoAU/Pww5v80bEtXk45XRfxxfZnaNnUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzc4NTQzNjE3MTMzNzc2NS8wL0ZDRkMzMEU2RkYzNDZDNEI1NzkzOEU1NzQ1RkM3 MTdEOTlEQTM2NzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRkNGQzMwRTZGRjM0NkM0QjU3OTM4RTU3NDVGQzcxN0Q5OURBMzY3NS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzNzg1NDM2MTcxMzM3NzY1LzAvMzIzNDMwMzAz YTY2NjUzMDMwM2E2MzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzcz OTM2Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkAP4AwDANBgkqhkiG9w0BAQsFAAOCAQEArZ9LZYYy tPwT9OVwdzqoQxCTj5uK+Ou4f2QwVmboa+0fPMrh9tjHcj3240gPVNM89difqR+r vXGVqYSSl18+pi6HSohEoeg7+UIDmomFLRBxVP5222IzlgKTYYkiIZBpQ6RHjWP+ 31NST0k3+Dg7IXyO4Ko6M6vgQglcK1XmBgE5nzlpf2Ckkko4NNQiNoddOz0gx4Oe NE1xKZXB1BhpoAA3yS25UZVJ3+QkCafpqDVz0hWYmQaeX8i0WOugQ2Ph384PAZaq UoxcT341P3c9+WkuhpkFDRWt9odWk69qbHjupGGW9o3JtzZSQUMVYQlE7qgw7bsp mfWAdgTbAhGmkA== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:13 2026 by rpki-client