$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e2034383038.roa File: 323430323a356563303a313730303a3a2f34302d3430203d3e2034383038.roa (raw, json) Hash identifier: 0SVJnIxRlGDfN31SiaznlcewV1j78eszEnyYQzGLe7E= Subject key identifier: 8F:A1:7A:AF:0C:1F:C9:28:3C:BB:0F:75:59:B9:F4:A5:F5:B0:47:D2 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 66774858846864346A69DBD43944B9A740F0A616 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e2034383038.roa Signing time: Mon 29 Jun 2026 08:01:11 +0000 ROA not before: Mon 29 Jun 2026 07:56:11 +0000 ROA not after: Mon 28 Jun 2027 08:01:11 +0000 asID: 4808 IP address blocks: 2402:5ec0:1700::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:77:48:58:84:68:64:34:6a:69:db:d4:39:44:b9:a7:40:f0:a6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:56:11 2026 GMT Not After : Jun 28 08:01:11 2027 GMT Subject: CN=8FA17AAF0C1FC9283CBB0F7559B9F4A5F5B047D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f3:04:dc:d8:0d:46:99:91:79:8f:df:ca:d1: 4e:0c:e5:62:be:64:85:72:d6:b3:10:23:ee:2e:a4: 00:f9:79:b1:73:59:0f:68:ab:7a:ec:6a:07:86:a5: 48:d3:f1:91:d4:1f:06:ce:88:d9:3e:28:89:b1:6f: 73:95:10:02:8f:db:77:73:ec:e6:a5:87:16:0d:43: da:20:e1:e2:07:2e:e9:07:ac:20:00:15:45:55:60: 5e:ec:6b:a2:f5:4b:66:46:65:89:6d:1e:b4:71:9b: 13:37:89:0a:71:39:00:88:27:4f:71:17:05:18:4a: 0d:69:2c:c1:82:c8:ed:6f:aa:8d:56:00:ea:a2:58: b2:b2:2f:a0:e7:5e:22:b5:37:d2:2a:46:ee:4d:7f: fe:51:1b:46:93:c2:fb:8b:96:13:94:c7:a1:1a:23: ca:be:85:f6:94:a5:d0:de:30:7f:2f:94:0b:0b:52: 93:a0:00:35:3b:97:cb:46:98:0a:76:36:c2:67:c1: 32:73:96:c3:f1:65:80:41:3d:11:61:2a:af:d9:e2: 71:97:37:3c:40:ec:58:3a:68:3c:02:12:27:03:fa: 39:f3:f5:65:db:a1:58:21:ed:d2:12:47:11:74:49: 96:1f:64:7c:7c:c6:f8:23:62:d6:13:52:81:06:28: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:A1:7A:AF:0C:1F:C9:28:3C:BB:0F:75:59:B9:F4:A5:F5:B0:47:D2 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313730303a3a2f34302d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1700::/40 Signature Algorithm: sha256WithRSAEncryption 7a:41:92:49:2c:5b:d1:3e:6e:fc:b6:8e:48:e3:70:0d:a7:a1: 53:89:48:b2:a4:c3:2a:f9:af:b8:74:f8:f8:74:3e:47:85:4c: 5e:ce:1f:31:e9:73:da:64:b0:bd:80:e0:09:1e:86:11:d1:80: 59:41:0a:52:f6:87:dc:24:75:1c:c2:87:63:d9:8e:d6:c1:c7: a1:98:71:9b:fb:91:2d:de:b0:2c:13:9a:4e:5e:33:fa:99:8b: f4:91:7b:a1:3d:2c:2d:b1:f1:3b:00:fd:a1:57:e0:14:cd:c5: 13:9e:09:bb:b2:37:ee:aa:88:78:aa:30:52:61:92:9e:e9:40: 6b:2d:cc:7c:d8:04:05:87:ea:83:96:be:e2:cf:a6:91:fa:91: ec:f7:28:8d:bd:b2:5d:9e:c4:f0:da:30:5c:50:c2:d4:1f:7d: 72:af:74:0c:90:22:30:ad:74:54:d5:96:65:c8:c8:97:3d:6d: 27:b8:5a:bb:1e:20:f0:15:48:59:c1:30:bf:cd:4c:93:48:da: 94:5b:be:41:5c:af:88:63:e1:d4:0c:21:0d:15:9d:84:19:1d: 91:8e:66:34:6b:bf:fd:6a:7e:03:53:44:bc:56:28:b1:0e:79: 7f:f0:b8:dc:1b:d7:be:cc:d3:4b:e6:60:23:65:75:ae:d9:16: 68:c8:b0:7d -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUZndIWIRoZDRqadvUOUS5p0DwphYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTFaFw0yNzA2MjgwODAxMTFaMDMxMTAvBgNV BAMTKDhGQTE3QUFGMEMxRkM5MjgzQ0JCMEY3NTU5QjlGNEE1RjVCMDQ3RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8wTc2A1GmZF5j9/K0U4M5WK+ ZIVy1rMQI+4upAD5ebFzWQ9oq3rsageGpUjT8ZHUHwbOiNk+KImxb3OVEAKP23dz 7OalhxYNQ9og4eIHLukHrCAAFUVVYF7sa6L1S2ZGZYltHrRxmxM3iQpxOQCIJ09x FwUYSg1pLMGCyO1vqo1WAOqiWLKyL6DnXiK1N9IqRu5Nf/5RG0aTwvuLlhOUx6Ea I8q+hfaUpdDeMH8vlAsLUpOgADU7l8tGmAp2NsJnwTJzlsPxZYBBPRFhKq/Z4nGX NzxA7Fg6aDwCEicD+jnz9WXboVgh7dISRxF0SZYfZHx8xvgjYtYTUoEGKNDzAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUj6F6rwwfySg8uw91Wbn0pfWwR9IwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTM3MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAJAJewBcwDQYJKoZIhvcNAQELBQADggEBAHpBkkksW9E+ bvy2jkjjcA2noVOJSLKkwyr5r7h0+Ph0PkeFTF7OHzHpc9pksL2A4AkehhHRgFlB ClL2h9wkdRzCh2PZjtbBx6GYcZv7kS3esCwTmk5eM/qZi/SRe6E9LC2x8TsA/aFX 4BTNxROeCbuyN+6qiHiqMFJhkp7pQGstzHzYBAWH6oOWvuLPppH6kez3KI29sl2e xPDaMFxQwtQffXKvdAyQIjCtdFTVlmXIyJc9bSe4WrseIPAVSFnBML/NTJNI2pRb vkFcr4hj4dQMIQ0VnYQZHZGOZjRrv/1qfgNTRLxWKLEOeX/wuNwb177M00vmYCNl da7ZFmjIsH0= -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:23 2026 by rpki-client