$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a313330303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: CjsB/PC8sn1AcRVPDgBzpLlXeYrqCWv4t9NoLK8oTeI= Subject key identifier: 75:EF:07:A9:10:A2:E5:59:DC:0C:82:8F:A5:5F:CF:0A:CB:B5:16:F4 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 226B7BF78843FF2D1F39A08D36209E6908635870 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 07:58:03 +0000 ROA not before: Mon 29 Jun 2026 07:53:03 +0000 ROA not after: Mon 28 Jun 2027 07:58:03 +0000 asID: 131543 IP address blocks: 2402:5ec0:1300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6b:7b:f7:88:43:ff:2d:1f:39:a0:8d:36:20:9e:69:08:63:58:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:53:03 2026 GMT Not After : Jun 28 07:58:03 2027 GMT Subject: CN=75EF07A910A2E559DC0C828FA55FCF0ACBB516F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:0b:c7:dd:eb:b6:12:77:6a:7d:f1:66:e4:3c: 99:4f:34:2f:fe:42:66:80:9c:f6:0d:76:1c:a1:3e: b7:7d:0e:62:bf:f0:e5:6f:ef:af:3c:5d:9e:71:5c: 27:ca:27:47:bc:3f:35:b3:72:b7:b0:7c:38:4e:7e: d9:18:57:3c:19:99:dd:5e:41:5b:38:ee:89:3d:91: e2:9b:33:2c:28:02:a2:f2:1c:e2:e8:3b:69:e4:04: f0:e2:28:e5:9b:61:8e:cc:ad:68:a4:7c:fc:3c:a1: 84:45:6b:2d:68:cf:1a:8b:90:03:77:5a:a0:d9:4f: 33:21:20:97:8d:37:e4:9a:03:67:f7:b9:80:28:d6: cd:20:09:d1:19:fe:6a:0e:d8:6c:d7:05:7d:45:36: ed:7c:2a:b7:c2:10:87:86:d7:8d:dc:24:bd:b9:6d: fe:91:0e:47:2a:ea:f9:c2:87:51:0b:30:43:9d:0e: 4a:88:e0:71:d0:56:18:94:d1:ea:69:b0:a5:9c:c9: fb:88:4a:fe:df:9b:f6:aa:86:7d:a7:be:e7:ad:6b: 7a:50:a3:b8:b1:9b:ed:50:41:7f:49:9e:3d:40:38: 66:67:1d:74:e4:c7:da:6d:a2:10:47:43:bc:55:93: 94:0c:9e:c0:ff:bb:d1:f1:3c:23:98:c0:72:f5:51: 8d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:EF:07:A9:10:A2:E5:59:DC:0C:82:8F:A5:5F:CF:0A:CB:B5:16:F4 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1300::/40 Signature Algorithm: sha256WithRSAEncryption 58:02:f8:29:c6:c8:37:b0:8c:44:ad:7e:2e:e5:3a:52:43:3e: 7e:88:13:ed:04:ea:2b:95:7e:95:17:07:ab:79:6f:23:98:60: e9:22:e3:28:6b:2e:42:18:31:8a:d0:84:53:e8:02:6b:c0:71: d3:76:24:6e:33:72:80:0d:fa:b5:51:5c:83:37:ff:e4:bc:70: 6f:93:d1:1a:6c:48:87:59:cb:b8:09:ad:ae:82:42:f9:70:52: 9d:af:aa:81:70:0f:60:91:54:d7:a7:b2:d7:a1:ca:be:8f:2a: b8:c3:39:40:9d:4c:41:c2:fa:8c:ae:de:9a:9d:1f:13:fc:a2: f8:77:c3:71:a6:e6:01:d4:32:f4:1c:1a:8b:40:df:24:e9:93: df:6d:d7:e2:3c:15:3f:3b:d6:3e:a7:54:57:ae:44:d9:83:90: 3f:47:6a:fc:dd:31:4f:05:1f:72:6a:1c:98:cb:19:6f:4a:fa: 0a:ea:d8:34:a6:81:5a:d6:41:85:14:88:7d:59:24:57:2e:95: e9:83:7b:0a:6f:27:44:4d:0e:10:65:08:65:f6:bf:f4:ea:85: 64:c5:cb:d6:46:f6:7d:48:d9:74:82:d9:10:25:9c:ed:8a:43: 6e:e8:98:5f:c5:15:36:5f:31:f5:93:c4:0a:20:69:59:8f:48: b8:49:c7:4e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUImt794hD/y0fOaCNNiCeaQhjWHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzUzMDNaFw0yNzA2MjgwNzU4MDNaMDMxMTAvBgNV BAMTKDc1RUYwN0E5MTBBMkU1NTlEQzBDODI4RkE1NUZDRjBBQ0JCNTE2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVC8fd67YSd2p98WbkPJlPNC/+ QmaAnPYNdhyhPrd9DmK/8OVv7688XZ5xXCfKJ0e8PzWzcrewfDhOftkYVzwZmd1e QVs47ok9keKbMywoAqLyHOLoO2nkBPDiKOWbYY7MrWikfPw8oYRFay1ozxqLkAN3 WqDZTzMhIJeNN+SaA2f3uYAo1s0gCdEZ/moO2GzXBX1FNu18KrfCEIeG143cJL25 bf6RDkcq6vnCh1ELMEOdDkqI4HHQVhiU0eppsKWcyfuISv7fm/aqhn2nvueta3pQ o7ixm+1QQX9Jnj1AOGZnHXTkx9ptohBHQ7xVk5QMnsD/u9HxPCOYwHL1UY3FAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUde8HqRCi5VncDIKPpV/PCsu1FvQwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsATMA0GCSqGSIb3DQEBCwUAA4IBAQBYAvgp xsg3sIxErX4u5TpSQz5+iBPtBOorlX6VFwereW8jmGDpIuMoay5CGDGK0IRT6AJr wHHTdiRuM3KADfq1UVyDN//kvHBvk9EabEiHWcu4Ca2ugkL5cFKdr6qBcA9gkVTX p7LXocq+jyq4wzlAnUxBwvqMrt6anR8T/KL4d8NxpuYB1DL0HBqLQN8k6ZPfbdfi PBU/O9Y+p1RXrkTZg5A/R2r83TFPBR9yahyYyxlvSvoK6tg0poFa1kGFFIh9WSRX LpXpg3sKbydETQ4QZQhl9r/06oVkxcvWRvZ9SNl0gtkQJZztikNu6JhfxRU2XzH1 k8QKIGlZj0i4ScdO -----END CERTIFICATE-----Generated at Tue Jul 14 21:58:32 2026 by rpki-client