$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e2034383038.roa File: 323430323a356563303a313330303a3a2f34302d3430203d3e2034383038.roa (raw, json) Hash identifier: x53rltWbNtooj6tQjMQde/L/9W+ttXRQvR14A3btBYw= Subject key identifier: FF:49:26:9B:B3:CC:D8:50:C1:4D:2D:40:8E:74:08:49:BC:10:35:2E Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 3A5729EB2D42F7E4B871AE6E39CE10C011E5888D Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e2034383038.roa Signing time: Mon 29 Jun 2026 07:58:04 +0000 ROA not before: Mon 29 Jun 2026 07:53:04 +0000 ROA not after: Mon 28 Jun 2027 07:58:04 +0000 asID: 4808 IP address blocks: 2402:5ec0:1300::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:57:29:eb:2d:42:f7:e4:b8:71:ae:6e:39:ce:10:c0:11:e5:88:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:53:04 2026 GMT Not After : Jun 28 07:58:04 2027 GMT Subject: CN=FF49269BB3CCD850C14D2D408E740849BC10352E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7f:f6:0a:dd:86:e4:a7:ec:87:13:6a:75:df: 06:34:5e:7a:77:78:07:33:4b:43:b5:89:c9:49:a2: ae:ab:6c:2f:28:e8:60:47:26:6a:55:c8:f4:71:92: 33:17:4f:af:92:bf:08:41:24:4a:65:75:0b:c7:31: fe:94:4c:c2:e4:5e:4f:33:ed:1a:3c:3a:0f:52:a5: 3e:0a:a9:c9:ef:0b:30:ac:5e:e6:16:b5:cd:e9:95: 41:cc:6c:a2:04:c1:69:43:fa:14:9f:7e:49:3b:bf: 74:37:3d:03:c6:65:06:a1:d3:07:e4:28:89:64:ca: ec:a1:73:62:c9:9a:ad:77:4c:16:ed:62:53:74:b4: c9:a4:11:f7:90:11:c0:a1:97:14:14:5a:68:5e:ff: ba:45:0e:58:fe:76:d4:c7:7d:be:e5:6b:e6:0b:79: eb:1d:22:1f:01:8a:78:0b:40:da:ab:b6:19:99:d9: 6d:04:9f:d6:b0:2d:24:aa:c1:b8:f0:3e:ec:39:cc: 89:9a:31:76:03:97:67:a2:66:54:2a:e8:f3:d2:ec: 4f:2e:0d:2a:fa:46:b6:f3:b5:33:69:68:e4:f8:94: 47:01:d9:cc:26:c7:4e:f2:83:7d:b2:ef:12:fc:8f: 65:93:09:af:a6:72:55:84:01:42:9d:a4:ba:4b:8a: 67:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:49:26:9B:B3:CC:D8:50:C1:4D:2D:40:8E:74:08:49:BC:10:35:2E X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313330303a3a2f34302d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1300::/40 Signature Algorithm: sha256WithRSAEncryption 15:29:25:e2:76:30:e8:ab:07:71:52:12:e1:f6:6d:99:86:e3: 0b:dc:97:a9:fc:ef:b6:af:14:34:60:3c:85:3d:9d:0b:5b:ec: 2e:d8:5b:7f:c2:ac:78:43:e6:99:44:60:92:80:e0:5a:e7:65: 5b:fb:13:79:63:cf:14:17:b5:11:10:1b:d7:e3:f5:da:cb:ca: 6f:48:c2:e3:91:e5:a1:67:32:0f:6c:74:e0:28:4d:f8:85:a6: 99:f8:7d:8c:99:7e:43:7f:f6:83:b1:df:fa:8c:1a:ec:cf:b6: c6:89:3f:ed:6e:22:14:0f:ae:3d:29:c5:ac:96:74:f9:26:9f: c8:09:e9:04:99:51:4f:89:66:00:f9:a1:92:2d:b8:eb:ad:a1: 0b:4c:df:3f:1d:52:b8:57:b9:54:f5:44:18:03:e1:6f:57:02: 85:2d:5d:41:e8:02:a5:b3:7a:90:8d:8a:da:d1:c1:62:1a:2b: 4f:1b:c6:22:2c:99:a7:41:6a:f9:d8:11:0d:67:e9:6e:8a:a6: 57:93:fb:fd:ca:fa:12:5a:17:09:4c:ae:16:cf:2f:f5:cf:31: 09:c0:cd:cc:d6:54:af:86:06:bf:9a:35:09:e3:40:45:c2:5d: fa:d6:0e:52:5f:3f:82:66:fb:e0:18:a3:61:38:df:1d:ca:e1: a0:e2:35:d5 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUOlcp6y1C9+S4ca5uOc4QwBHliI0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzUzMDRaFw0yNzA2MjgwNzU4MDRaMDMxMTAvBgNV BAMTKEZGNDkyNjlCQjNDQ0Q4NTBDMTREMkQ0MDhFNzQwODQ5QkMxMDM1MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPf/YK3Ybkp+yHE2p13wY0Xnp3 eAczS0O1iclJoq6rbC8o6GBHJmpVyPRxkjMXT6+SvwhBJEpldQvHMf6UTMLkXk8z 7Ro8Og9SpT4KqcnvCzCsXuYWtc3plUHMbKIEwWlD+hSffkk7v3Q3PQPGZQah0wfk KIlkyuyhc2LJmq13TBbtYlN0tMmkEfeQEcChlxQUWmhe/7pFDlj+dtTHfb7la+YL eesdIh8BingLQNqrthmZ2W0En9awLSSqwbjwPuw5zImaMXYDl2eiZlQq6PPS7E8u DSr6RrbztTNpaOT4lEcB2cwmx07yg32y7xL8j2WTCa+mclWEAUKdpLpLimcRAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQU/0kmm7PM2FDBTS1AjnQISbwQNS4wHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTMzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAJAJewBMwDQYJKoZIhvcNAQELBQADggEBABUpJeJ2MOir B3FSEuH2bZmG4wvcl6n877avFDRgPIU9nQtb7C7YW3/CrHhD5plEYJKA4FrnZVv7 E3ljzxQXtREQG9fj9drLym9IwuOR5aFnMg9sdOAoTfiFppn4fYyZfkN/9oOx3/qM GuzPtsaJP+1uIhQPrj0pxayWdPkmn8gJ6QSZUU+JZgD5oZItuOutoQtM3z8dUrhX uVT1RBgD4W9XAoUtXUHoAqWzepCNitrRwWIaK08bxiIsmadBavnYEQ1n6W6KpleT +/3K+hJaFwlMrhbPL/XPMQnAzczWVK+GBr+aNQnjQEXCXfrWDlJfP4Jm++AYo2E4 3x3K4aDiNdU= -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:27 2026 by rpki-client