$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e2034383038.roa File: 323430323a356563303a313630303a3a2f34302d3430203d3e2034383038.roa (raw, json) Hash identifier: WlV/LYhvIuB7Vp6LW8/0DQDKRGgYwQtioI6VYAv98oU= Subject key identifier: E2:ED:DD:12:AB:FD:67:3A:9A:56:3D:EB:6D:16:DA:8E:9E:4F:DC:C7 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 38743318433A2D2B9128E9E3B43FEA421AABE2E6 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e2034383038.roa Signing time: Mon 29 Jun 2026 08:01:11 +0000 ROA not before: Mon 29 Jun 2026 07:56:11 +0000 ROA not after: Mon 28 Jun 2027 08:01:11 +0000 asID: 4808 IP address blocks: 2402:5ec0:1600::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:74:33:18:43:3a:2d:2b:91:28:e9:e3:b4:3f:ea:42:1a:ab:e2:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:56:11 2026 GMT Not After : Jun 28 08:01:11 2027 GMT Subject: CN=E2EDDD12ABFD673A9A563DEB6D16DA8E9E4FDCC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2f:67:bc:a0:cc:e8:9f:e3:fd:32:ff:6e:e5: 34:dd:6b:ed:bf:63:43:6e:c5:14:79:7f:45:00:bd: b1:2d:99:7b:c6:5d:85:76:ae:66:8e:fe:70:4a:dc: cb:6f:73:c8:ed:f7:dc:de:9e:96:a4:61:a3:6e:ae: bc:ee:8d:c0:fc:9e:ed:93:c5:6a:76:65:a2:2d:01: 14:e3:dd:68:d1:6d:77:cd:39:59:1f:ac:24:9f:a2: f9:c4:8a:16:68:ab:49:2a:56:ca:6e:cd:93:62:47: 13:89:2f:77:3c:20:73:bd:f1:df:ea:f9:fd:0b:07: 85:3e:81:01:e7:ef:0b:ad:72:21:3b:84:41:7b:be: 6e:2b:c9:1d:44:08:da:fa:00:e8:0e:ac:36:4a:51: 38:fb:26:e4:72:e7:9f:2d:b3:c9:c6:94:eb:0b:d7: 8e:54:a9:00:bd:e6:4e:bb:1f:03:f8:48:dd:af:78: 5d:fe:b2:b9:38:88:f0:0e:a9:5c:e5:a0:b2:34:a3: 27:d3:1e:5d:67:b1:a1:8a:dd:b0:18:fa:c5:aa:dd: 19:a1:e6:35:19:db:c5:f1:96:2c:6d:db:cc:71:34: 77:11:4a:ae:0c:2a:91:db:c3:d4:d6:36:64:3b:dc: 7b:0e:44:0a:07:12:8f:37:43:ce:30:9b:40:2b:7b: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:ED:DD:12:AB:FD:67:3A:9A:56:3D:EB:6D:16:DA:8E:9E:4F:DC:C7 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313630303a3a2f34302d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1600::/40 Signature Algorithm: sha256WithRSAEncryption 2d:99:f4:4e:6b:b1:86:1f:97:58:58:49:5c:72:c5:0d:d7:71: 46:34:f8:09:45:97:f9:02:cf:1b:a9:fc:26:67:fb:ae:9e:68: d5:2e:27:40:b5:8f:4d:fd:94:b4:c9:ec:d8:01:10:3d:e5:a7: 88:db:b2:39:fa:2a:0f:36:16:e3:93:1c:6f:52:e7:05:ec:5c: 47:52:81:37:e6:dc:7c:45:a0:a0:f8:2c:c6:5f:9c:6e:3c:97: 3a:58:21:b1:7e:39:dd:48:c5:96:5a:68:a5:0a:74:2a:90:af: d4:51:29:d1:d0:09:8c:f2:f2:34:6f:01:a7:de:e1:f1:ff:0d: 33:74:d4:19:fb:9c:8c:22:e7:2e:82:a0:98:90:16:dd:94:d3: 61:41:f0:dc:cc:2b:5b:a6:59:86:a0:4d:ec:fc:88:6f:04:77: fa:87:a0:62:20:77:0c:ac:a5:de:39:5a:a5:4c:67:48:fd:7d: 6c:ff:90:d1:1f:81:9e:9e:12:7d:29:dc:bf:90:a6:ca:a6:76: 17:1c:75:19:5d:ad:3b:c9:a3:e0:0f:24:b5:ef:bf:8f:0c:c2: e5:e4:d4:f1:b5:61:3e:f4:97:22:82:22:f7:4d:00:05:fa:2c: 74:77:55:8d:33:73:86:56:80:cb:e3:24:db:f9:fd:db:75:38: f5:9a:18:b4 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUOHQzGEM6LSuRKOnjtD/qQhqr4uYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTFaFw0yNzA2MjgwODAxMTFaMDMxMTAvBgNV BAMTKEUyRURERDEyQUJGRDY3M0E5QTU2M0RFQjZEMTZEQThFOUU0RkRDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVL2e8oMzon+P9Mv9u5TTda+2/ Y0NuxRR5f0UAvbEtmXvGXYV2rmaO/nBK3Mtvc8jt99zenpakYaNurrzujcD8nu2T xWp2ZaItARTj3WjRbXfNOVkfrCSfovnEihZoq0kqVspuzZNiRxOJL3c8IHO98d/q +f0LB4U+gQHn7wutciE7hEF7vm4ryR1ECNr6AOgOrDZKUTj7JuRy558ts8nGlOsL 145UqQC95k67HwP4SN2veF3+srk4iPAOqVzloLI0oyfTHl1nsaGK3bAY+sWq3Rmh 5jUZ28Xxlixt28xxNHcRSq4MKpHbw9TWNmQ73HsORAoHEo83Q84wm0Are51PAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQU4u3dEqv9ZzqaVj3rbRbajp5P3McwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTM2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAJAJewBYwDQYJKoZIhvcNAQELBQADggEBAC2Z9E5rsYYf l1hYSVxyxQ3XcUY0+AlFl/kCzxup/CZn+66eaNUuJ0C1j039lLTJ7NgBED3lp4jb sjn6Kg82FuOTHG9S5wXsXEdSgTfm3HxFoKD4LMZfnG48lzpYIbF+Od1IxZZaaKUK dCqQr9RRKdHQCYzy8jRvAafe4fH/DTN01Bn7nIwi5y6CoJiQFt2U02FB8NzMK1um WYagTez8iG8Ed/qHoGIgdwyspd45WqVMZ0j9fWz/kNEfgZ6eEn0p3L+Qpsqmdhcc dRldrTvJo+APJLXvv48MwuXk1PG1YT70lyKCIvdNAAX6LHR3VY0zc4ZWgMvjJNv5 /dt1OPWaGLQ= -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:29 2026 by rpki-client