$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a313630303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: B2Z4y/LA9UEYUAxcnbmGfTyoALHCsX4zTHLXeM+9rzY= Subject key identifier: 95:8A:08:CC:2C:D7:B4:3D:DE:09:56:9C:FE:CF:CC:53:15:3D:77:9B Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 4DBC6848B50C6B90C14687DFF3ED36C6970DB0C0 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:01:10 +0000 ROA not before: Mon 29 Jun 2026 07:56:10 +0000 ROA not after: Mon 28 Jun 2027 08:01:10 +0000 asID: 131543 IP address blocks: 2402:5ec0:1600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:bc:68:48:b5:0c:6b:90:c1:46:87:df:f3:ed:36:c6:97:0d:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:56:10 2026 GMT Not After : Jun 28 08:01:10 2027 GMT Subject: CN=958A08CC2CD7B43DDE09569CFECFCC53153D779B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:d3:e9:41:0d:f8:79:cf:28:04:7d:0f:18: ef:da:97:76:c3:a4:9e:07:7f:aa:31:95:3e:6c:5f: 0b:09:e5:88:7c:53:d7:7c:6a:b1:7d:8b:6e:d0:04: 41:10:ad:39:c1:1f:b4:57:97:0d:81:05:18:26:ad: 78:6f:3c:c0:40:49:a5:39:c4:96:51:72:b1:c2:12: a5:96:c7:38:e7:8c:c0:6a:7f:51:e6:12:29:7b:74: 2e:98:34:7d:b5:38:23:b2:d5:62:56:0e:51:68:91: 0d:7e:d7:b5:3e:c9:24:0e:80:90:8b:c4:fd:10:c8: 71:91:15:60:d8:11:17:de:67:a5:15:e3:f3:82:73: 1e:a0:79:97:91:d5:57:7d:aa:49:06:8a:48:75:b3: 0d:91:98:78:2f:c9:fe:9d:af:33:89:f9:23:25:95: 8e:10:ac:5e:a8:a3:03:8e:db:79:29:82:46:c4:a7: 26:74:77:bd:08:8c:ac:d4:49:23:fe:f6:57:45:b1: c9:1f:70:80:f2:09:fc:e6:ee:33:98:b6:c5:96:3f: c3:91:2d:92:ec:d2:10:59:7a:be:e8:65:d2:b6:0f: 59:20:3f:32:b5:c4:a1:88:d5:69:8e:8e:3f:f4:67: 0b:a3:8b:cf:af:38:69:fe:89:7a:a3:f5:f2:85:9f: ca:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:8A:08:CC:2C:D7:B4:3D:DE:09:56:9C:FE:CF:CC:53:15:3D:77:9B X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1600::/40 Signature Algorithm: sha256WithRSAEncryption 45:26:a7:e4:1b:39:99:58:1a:a3:6b:e3:a3:77:dc:b3:71:86: 4a:0e:e0:a0:5a:ac:04:73:53:6b:68:3b:5a:5e:f1:8f:d3:1d: 31:a1:50:77:63:05:7f:00:bc:b8:ad:18:24:50:6e:43:b2:6e: bf:d5:ab:1f:b9:db:02:17:f9:05:f9:e7:20:fd:1b:d1:aa:47: 9e:fa:82:b2:6c:aa:74:27:55:cb:d9:3d:9a:f5:fb:66:c2:5c: 52:09:67:6c:73:46:dc:40:70:b8:1f:43:e4:54:22:fe:6b:25: 39:32:b4:94:04:72:56:38:b3:70:8a:54:26:00:de:d3:c5:58: 5e:6e:4c:d1:d0:5a:57:2e:48:7d:8a:c8:7b:21:1b:bb:73:31: 56:73:26:6c:80:34:de:f2:98:f6:0d:02:a8:b3:b8:17:8f:7d: f2:80:f8:d7:0d:a1:cb:04:ee:8f:cf:91:ed:11:28:32:f7:60: 4a:2b:aa:12:bf:69:b9:75:6b:0a:b9:4b:a4:f0:01:06:ab:4c: 12:3a:0e:bd:64:6d:b1:4b:34:78:00:ff:e6:d5:1f:70:f3:45: 25:49:20:3e:c2:45:f2:04:c3:4e:99:46:7f:43:5a:fa:59:c2: f3:35:ac:07:43:6d:bf:cc:fc:ce:a9:a0:83:71:7d:7e:16:ef: 67:87:93:db -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUTbxoSLUMa5DBRoff8+02xpcNsMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTBaFw0yNzA2MjgwODAxMTBaMDMxMTAvBgNV BAMTKDk1OEEwOENDMkNEN0I0M0RERTA5NTY5Q0ZFQ0ZDQzUzMTUzRDc3OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qtPpQQ34ec8oBH0PGO/al3bD pJ4Hf6oxlT5sXwsJ5Yh8U9d8arF9i27QBEEQrTnBH7RXlw2BBRgmrXhvPMBASaU5 xJZRcrHCEqWWxzjnjMBqf1HmEil7dC6YNH21OCOy1WJWDlFokQ1+17U+ySQOgJCL xP0QyHGRFWDYERfeZ6UV4/OCcx6geZeR1Vd9qkkGikh1sw2RmHgvyf6drzOJ+SMl lY4QrF6oowOO23kpgkbEpyZ0d70IjKzUSSP+9ldFsckfcIDyCfzm7jOYtsWWP8OR LZLs0hBZer7oZdK2D1kgPzK1xKGI1WmOjj/0Zwuji8+vOGn+iXqj9fKFn8rvAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUlYoIzCzXtD3eCVac/s/MUxU9d5swHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTM2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAWMA0GCSqGSIb3DQEBCwUAA4IBAQBFJqfk GzmZWBqja+Ojd9yzcYZKDuCgWqwEc1NraDtaXvGP0x0xoVB3YwV/ALy4rRgkUG5D sm6/1asfudsCF/kF+ecg/RvRqkee+oKybKp0J1XL2T2a9ftmwlxSCWdsc0bcQHC4 H0PkVCL+ayU5MrSUBHJWOLNwilQmAN7TxVhebkzR0FpXLkh9ish7IRu7czFWcyZs gDTe8pj2DQKos7gXj33ygPjXDaHLBO6Pz5HtESgy92BKK6oSv2m5dWsKuUuk8AEG q0wSOg69ZG2xSzR4AP/m1R9w80UlSSA+wkXyBMNOmUZ/Q1r6WcLzNawHQ22/zPzO qaCDcX1+Fu9nh5Pb -----END CERTIFICATE-----Generated at Tue Jul 14 21:57:55 2026 by rpki-client