$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313030303a3a2f34302d3430203d3e203233373234.roa File: 323430323a356563303a313030303a3a2f34302d3430203d3e203233373234.roa (raw, json) Hash identifier: 0arHGiPXKS50NZL1Hql4wzBt1xcbRyOxtR/wUuhvtN0= Subject key identifier: CA:B3:3F:80:B8:40:AB:6B:88:17:03:B0:E7:E6:F9:3B:EB:EF:F6:FC Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 67AA85046FEB5A7A96C32C1A5C1014B4A844F6D7 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313030303a3a2f34302d3430203d3e203233373234.roa Signing time: Mon 29 Jun 2026 07:53:28 +0000 ROA not before: Mon 29 Jun 2026 07:48:28 +0000 ROA not after: Mon 28 Jun 2027 07:53:28 +0000 asID: 23724 IP address blocks: 2402:5ec0:1000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:aa:85:04:6f:eb:5a:7a:96:c3:2c:1a:5c:10:14:b4:a8:44:f6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:48:28 2026 GMT Not After : Jun 28 07:53:28 2027 GMT Subject: CN=CAB33F80B840AB6B881703B0E7E6F93BEBEFF6FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:59:75:a3:0c:84:4e:4d:44:38:3e:17:62:37: 06:69:36:78:30:b9:45:84:58:6b:a2:72:e1:68:7a: 44:13:d5:fb:67:10:8c:79:6a:bd:fc:17:93:35:29: 97:43:92:e0:7c:4b:37:62:6a:85:29:1b:29:5e:63: 49:78:ff:fe:19:c0:40:6d:10:53:d5:5e:be:35:06: f8:da:de:b6:de:b9:2e:a1:10:a1:06:77:1c:f0:fe: 09:d6:9d:73:da:b9:d1:60:20:82:9f:3f:d0:1f:8b: 97:85:fd:03:a5:e8:96:6c:1c:87:7a:2f:a8:10:7e: 0e:2a:d4:f6:8b:8d:ec:cb:7e:75:04:74:f2:27:96: 22:41:b0:7d:db:8b:d4:ca:24:3f:5f:2e:cf:39:67: 83:9a:b6:de:a7:2f:f8:1d:5d:c7:6d:fa:5d:0d:f2: a4:fa:08:33:65:8e:b1:c7:f9:95:cc:b8:e5:41:ab: 0c:8b:59:ee:38:bf:93:eb:e5:06:8d:5d:56:cf:4b: 7a:6d:3c:b7:82:8f:1a:a8:62:af:84:3f:d3:ef:c1: 93:e5:39:27:d0:d8:16:97:1a:7a:ef:27:b5:7f:e7: 76:b3:e4:12:bf:47:68:4b:94:7f:5b:f2:c2:f8:8a: 14:94:1f:4a:1d:fd:cd:d9:79:50:de:4a:e3:a6:74: 58:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B3:3F:80:B8:40:AB:6B:88:17:03:B0:E7:E6:F9:3B:EB:EF:F6:FC X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313030303a3a2f34302d3430203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1000::/40 Signature Algorithm: sha256WithRSAEncryption c1:da:68:4e:4d:40:31:84:0a:fd:22:47:9f:91:b6:bc:45:5b: 42:c8:4d:b1:6e:bb:f6:8a:21:c4:17:11:c7:73:88:68:c1:c1: 39:4f:42:31:9c:9a:be:f3:ee:b5:65:e5:b0:db:bf:2f:a2:b4: 61:5f:1d:d3:34:15:fd:30:37:d5:a1:8e:ab:52:24:08:c3:cb: 68:c0:3c:1a:2d:53:99:5e:73:be:a6:4b:a6:5c:c8:21:f4:c9: 8b:e8:a1:e0:56:0f:f0:db:01:e5:33:ba:17:c3:3b:4e:eb:8e: 39:6c:a4:e2:a5:7e:24:25:3b:ee:29:cd:ba:56:e4:6c:3c:17: 2f:c7:8d:ac:0d:bb:f3:68:7b:36:83:52:a9:c4:9e:b0:34:fb: 40:55:eb:c0:cf:d5:ca:e7:e2:98:c5:95:f6:56:cf:50:5d:75: 88:41:24:86:4c:b7:c2:b7:af:c7:ad:7b:fb:84:f2:a5:f2:02: 61:10:9e:9b:42:35:24:61:ab:73:60:05:47:bc:e3:7e:dd:07: f0:dc:52:2c:ec:83:8b:17:23:9e:6e:44:92:e4:55:fb:d7:97: 7a:80:68:c0:74:3b:76:ad:b7:df:26:84:08:d2:65:88:79:57: 00:97:25:cb:e8:20:a1:68:c1:de:1b:67:d6:bb:1f:32:34:b0: 77:c4:76:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUZ6qFBG/rWnqWwywaXBAUtKhE9tcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzQ4MjhaFw0yNzA2MjgwNzUzMjhaMDMxMTAvBgNV BAMTKENBQjMzRjgwQjg0MEFCNkI4ODE3MDNCMEU3RTZGOTNCRUJFRkY2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWXWjDIROTUQ4PhdiNwZpNngw uUWEWGuicuFoekQT1ftnEIx5ar38F5M1KZdDkuB8SzdiaoUpGyleY0l4//4ZwEBt EFPVXr41Bvja3rbeuS6hEKEGdxzw/gnWnXPaudFgIIKfP9Afi5eF/QOl6JZsHId6 L6gQfg4q1PaLjezLfnUEdPInliJBsH3bi9TKJD9fLs85Z4Oatt6nL/gdXcdt+l0N 8qT6CDNljrHH+ZXMuOVBqwyLWe44v5Pr5QaNXVbPS3ptPLeCjxqoYq+EP9PvwZPl OSfQ2BaXGnrvJ7V/53az5BK/R2hLlH9b8sL4ihSUH0od/c3ZeVDeSuOmdFjVAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUyrM/gLhAq2uIFwOw5+b5O+vv9vwwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTMwMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMyMzMz NzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgAkAl7AEDANBgkqhkiG9w0BAQsFAAOCAQEAwdpoTk1A MYQK/SJHn5G2vEVbQshNsW679oohxBcRx3OIaMHBOU9CMZyavvPutWXlsNu/L6K0 YV8d0zQV/TA31aGOq1IkCMPLaMA8Gi1TmV5zvqZLplzIIfTJi+ih4FYP8NsB5TO6 F8M7TuuOOWyk4qV+JCU77inNulbkbDwXL8eNrA2782h7NoNSqcSesDT7QFXrwM/V yufimMWV9lbPUF11iEEkhky3wrevx617+4TypfICYRCem0I1JGGrc2AFR7zjft0H 8NxSLOyDixcjnm5EkuRV+9eXeoBowHQ7dq233yaECNJliHlXAJcly+ggoWjB3htn 1rsfMjSwd8R21w== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:11 2026 by rpki-client