$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e2034383038.roa File: 323430323a356563303a313130303a3a2f34302d3430203d3e2034383038.roa (raw, json) Hash identifier: 43UDULnaIVfwci+XCoY4lOvRHbnbtxdN5vaiewci7BU= Subject key identifier: 58:FE:76:58:2C:E9:CE:E8:FA:6D:1D:13:BC:FA:07:19:19:5F:6E:EA Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 29C6243F3018B5BE92E33485800F3CAE82E04F45 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e2034383038.roa Signing time: Mon 29 Jun 2026 07:53:29 +0000 ROA not before: Mon 29 Jun 2026 07:48:29 +0000 ROA not after: Mon 28 Jun 2027 07:53:29 +0000 asID: 4808 IP address blocks: 2402:5ec0:1100::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c6:24:3f:30:18:b5:be:92:e3:34:85:80:0f:3c:ae:82:e0:4f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:48:29 2026 GMT Not After : Jun 28 07:53:29 2027 GMT Subject: CN=58FE76582CE9CEE8FA6D1D13BCFA0719195F6EEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:01:34:8a:86:dc:c3:04:3b:6a:29:4b:54: 34:b8:60:3e:03:c0:2a:18:2c:27:3a:e1:2c:44:6f: d8:ab:51:cb:d0:d6:f0:f3:50:cd:f7:27:d1:8d:ea: c2:85:52:ae:b3:7d:a6:2a:f7:63:dd:13:c3:e9:64: 4f:b6:43:b4:8e:97:01:0a:ca:d2:4e:7d:92:59:f9: ba:ba:0c:fc:d0:f0:68:8b:fd:41:1b:57:67:18:35: 9a:30:94:cf:22:a0:11:32:80:ca:39:56:92:b0:ed: dd:e3:c8:07:31:3e:23:02:62:dd:2d:b0:35:10:86: 0a:be:1e:e7:45:19:ad:99:b0:f9:ed:d6:11:12:43: 96:1c:1c:2b:4c:c0:f9:6a:5d:25:2e:7f:96:53:9f: 25:e2:d1:1e:53:6c:88:58:aa:9f:77:bc:66:9f:85: 72:71:e8:d1:2c:ce:48:af:81:45:ee:67:fa:e8:b2: 3c:2f:56:c0:d5:a4:2d:f0:31:34:56:93:9d:28:08: 22:53:d5:34:06:34:0b:4e:3e:9d:90:2b:c7:27:75: c1:db:2b:3a:7f:78:1d:be:6e:13:af:07:52:0d:59: 01:11:46:86:7e:86:ea:61:36:8a:3c:4b:11:94:a6: b8:eb:bc:88:de:60:fb:c1:0a:0b:34:0b:08:a2:ef: 14:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FE:76:58:2C:E9:CE:E8:FA:6D:1D:13:BC:FA:07:19:19:5F:6E:EA X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313130303a3a2f34302d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1100::/40 Signature Algorithm: sha256WithRSAEncryption 16:0f:c7:51:37:ef:c7:9a:f3:53:f4:bd:8f:67:0e:d8:ed:7f: 49:9f:77:d9:da:f7:3e:04:fb:b7:80:49:1a:27:f7:2a:1c:e7: f6:8f:8a:e3:80:63:c7:ce:6b:88:d6:51:dd:f5:8a:a1:5f:c3: c2:65:2c:ea:30:b5:42:53:80:e7:38:ac:98:22:91:03:06:21: a0:bf:8f:45:38:d1:9c:c1:14:87:fd:6d:65:c8:04:0e:58:ac: 71:36:5b:b6:4e:cf:d0:eb:6c:ae:c9:14:ad:8c:cd:18:d5:ab: 0e:b8:b7:40:f5:d3:36:33:6a:24:20:8b:75:ee:a1:f9:94:3e: f7:68:7c:e8:6e:4d:84:fd:03:78:6c:76:52:48:ad:d4:36:d1: cf:92:96:2d:ac:fd:ec:06:82:b8:aa:3c:b6:6a:24:c0:ed:14: 04:3d:98:56:dd:e6:b6:a8:9d:0c:ce:3b:7f:06:50:18:11:91: 5d:a6:f3:bc:43:a6:b7:1d:b2:f6:c7:13:bd:e5:17:b7:3c:2b: 8a:81:f3:f3:e8:33:ea:99:07:57:0f:3d:8c:44:70:e8:29:0f: f6:3b:3d:54:fc:63:21:cc:82:fc:51:bf:ff:65:f9:6d:ff:b6: 9c:e1:76:06:21:6b:37:7a:43:2d:dd:5f:f5:a5:e2:a8:cb:10: 9a:28:57:df -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUKcYkPzAYtb6S4zSFgA88roLgT0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzQ4MjlaFw0yNzA2MjgwNzUzMjlaMDMxMTAvBgNV BAMTKDU4RkU3NjU4MkNFOUNFRThGQTZEMUQxM0JDRkEwNzE5MTk1RjZFRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2AgE0iobcwwQ7ailLVDS4YD4D wCoYLCc64SxEb9irUcvQ1vDzUM33J9GN6sKFUq6zfaYq92PdE8PpZE+2Q7SOlwEK ytJOfZJZ+bq6DPzQ8GiL/UEbV2cYNZowlM8ioBEygMo5VpKw7d3jyAcxPiMCYt0t sDUQhgq+HudFGa2ZsPnt1hESQ5YcHCtMwPlqXSUuf5ZTnyXi0R5TbIhYqp93vGaf hXJx6NEszkivgUXuZ/rosjwvVsDVpC3wMTRWk50oCCJT1TQGNAtOPp2QK8cndcHb Kzp/eB2+bhOvB1INWQERRoZ+huphNoo8SxGUprjrvIjeYPvBCgs0Cwii7xSPAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUWP52WCzpzuj6bR0TvPoHGRlfbuowHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTMxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAJAJewBEwDQYJKoZIhvcNAQELBQADggEBABYPx1E378ea 81P0vY9nDtjtf0mfd9na9z4E+7eASRon9yoc5/aPiuOAY8fOa4jWUd31iqFfw8Jl LOowtUJTgOc4rJgikQMGIaC/j0U40ZzBFIf9bWXIBA5YrHE2W7ZOz9DrbK7JFK2M zRjVqw64t0D10zYzaiQgi3XuofmUPvdofOhuTYT9A3hsdlJIrdQ20c+Sli2s/ewG griqPLZqJMDtFAQ9mFbd5raonQzOO38GUBgRkV2m87xDprcdsvbHE73lF7c8K4qB 8/PoM+qZB1cPPYxEcOgpD/Y7PVT8YyHMgvxRv/9l+W3/tpzhdgYhazd6Qy3dX/Wl 4qjLEJooV98= -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:22 2026 by rpki-client