$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a313530303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: KVsXTWa93feTe8lW2RuNsKU3ClFsWx6CAnFNfevEJVw= Subject key identifier: 91:6D:3E:6B:4A:1D:4D:BD:7B:F1:CF:63:99:34:09:25:55:F2:25:6A Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 1C11F4422B6723D8FD7ECD8C47B593D9F70AAE64 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 07:58:03 +0000 ROA not before: Mon 29 Jun 2026 07:53:03 +0000 ROA not after: Mon 28 Jun 2027 07:58:03 +0000 asID: 131543 IP address blocks: 2402:5ec0:1500::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:11:f4:42:2b:67:23:d8:fd:7e:cd:8c:47:b5:93:d9:f7:0a:ae:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:53:03 2026 GMT Not After : Jun 28 07:58:03 2027 GMT Subject: CN=916D3E6B4A1D4DBD7BF1CF639934092555F2256A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:30:0e:4d:d6:fe:ff:2b:67:d3:f1:6d:cc:d6: 13:07:5a:71:f1:c8:09:82:dc:2f:ef:3d:66:20:68: 4f:bd:0b:6d:a7:2a:9a:8c:d0:6b:90:f6:b5:84:84: d9:54:b9:6d:2e:d3:31:f2:e6:c1:b8:ce:97:31:9a: d6:ae:ab:fc:39:ac:23:d0:13:85:c7:57:f1:1a:6d: c8:1d:1c:34:f4:ed:42:ad:5b:40:c3:6d:3c:b2:1e: e8:ae:80:6e:b9:32:ce:83:fe:c3:7c:c9:e7:21:27: 0c:a2:03:9b:d7:2d:b7:d3:21:ab:70:22:69:c8:ee: 8f:de:ed:47:1b:31:8f:7c:35:94:69:18:a2:e1:51: bd:c0:ad:89:33:10:a9:0f:b5:25:6c:bd:60:c7:67: dd:93:38:a8:16:74:0a:f5:73:65:f3:f9:1b:0d:f8: 85:30:70:96:6e:9c:b2:88:d9:7d:f1:d6:59:d6:d6: 48:33:59:e5:ae:d3:1c:50:94:7d:b4:d5:4a:8d:ba: a3:a8:59:67:cc:1a:8b:9e:57:03:c3:e5:b0:c1:11: 3e:22:79:56:1b:26:3a:cb:7c:53:22:eb:b2:3f:92: dc:c0:9b:40:0f:05:47:42:f7:fc:d5:20:38:51:5d: 32:c4:7d:df:2f:61:39:cc:e5:eb:85:b7:9e:04:aa: 2f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6D:3E:6B:4A:1D:4D:BD:7B:F1:CF:63:99:34:09:25:55:F2:25:6A X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313530303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1500::/40 Signature Algorithm: sha256WithRSAEncryption 11:06:ee:6e:a2:c1:52:ac:9d:11:fa:2c:9a:b0:2d:3d:2a:0a: 59:79:e7:22:52:fe:ea:22:06:e5:de:de:a4:6e:8c:3a:31:a3: e4:eb:3c:01:1a:f1:30:eb:41:42:03:b6:84:c1:13:64:52:11: 29:e4:53:8b:2e:0c:6c:fa:f2:cb:09:f5:d1:e6:db:57:29:94: 65:5c:3d:f2:50:7d:5d:14:65:96:34:e4:61:21:65:d7:08:0d: 3b:a5:eb:1d:a5:1d:ea:da:7d:1b:a9:d8:35:6d:60:97:55:45: 07:df:cc:a3:0f:e7:28:14:37:47:be:ff:f5:48:fa:f4:9d:fe: 7e:1f:5b:90:97:fb:37:d7:e9:33:03:47:be:e5:55:cd:e8:f2: 17:12:0e:d4:47:22:d6:34:19:d3:f8:78:2b:63:b1:77:ac:c3: a2:a9:f7:e8:ea:8f:5e:1b:f2:32:3a:e4:15:cb:70:12:f2:0a: de:6a:cc:3d:14:07:0e:da:1b:5c:fd:61:23:09:ad:c8:46:92: 7b:59:6f:ff:09:a1:59:f6:bf:7a:3c:6b:9f:ea:86:4b:b5:cd: 41:eb:05:6c:ac:e5:05:7a:9b:75:0a:09:48:97:c3:c4:07:67: 70:a5:ae:33:0c:02:ea:6a:70:6a:e3:c2:5d:8a:37:9f:28:5b: 31:a4:1f:43 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUHBH0QitnI9j9fs2MR7WT2fcKrmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzUzMDNaFw0yNzA2MjgwNzU4MDNaMDMxMTAvBgNV BAMTKDkxNkQzRTZCNEExRDREQkQ3QkYxQ0Y2Mzk5MzQwOTI1NTVGMjI1NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+MA5N1v7/K2fT8W3M1hMHWnHx yAmC3C/vPWYgaE+9C22nKpqM0GuQ9rWEhNlUuW0u0zHy5sG4zpcxmtauq/w5rCPQ E4XHV/EabcgdHDT07UKtW0DDbTyyHuiugG65Ms6D/sN8yechJwyiA5vXLbfTIatw ImnI7o/e7UcbMY98NZRpGKLhUb3ArYkzEKkPtSVsvWDHZ92TOKgWdAr1c2Xz+RsN +IUwcJZunLKI2X3x1lnW1kgzWeWu0xxQlH201UqNuqOoWWfMGoueVwPD5bDBET4i eVYbJjrLfFMi67I/ktzAm0APBUdC9/zVIDhRXTLEfd8vYTnM5euFt54Eqi83AgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUkW0+a0odTb178c9jmTQJJVXyJWowHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTM1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAVMA0GCSqGSIb3DQEBCwUAA4IBAQARBu5u osFSrJ0R+iyasC09KgpZeeciUv7qIgbl3t6kbow6MaPk6zwBGvEw60FCA7aEwRNk UhEp5FOLLgxs+vLLCfXR5ttXKZRlXD3yUH1dFGWWNORhIWXXCA07pesdpR3q2n0b qdg1bWCXVUUH38yjD+coFDdHvv/1SPr0nf5+H1uQl/s31+kzA0e+5VXN6PIXEg7U RyLWNBnT+HgrY7F3rMOiqffo6o9eG/IyOuQVy3AS8greasw9FAcO2htc/WEjCa3I RpJ7WW//CaFZ9r96PGuf6oZLtc1B6wVsrOUFept1CglIl8PEB2dwpa4zDALqanBq 48JdijefKFsxpB9D -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:23 2026 by rpki-client