$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313830303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a313830303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: be3sG03LaxELERjAmUXyLOYJdY7Gj7rx5+iGvR9ZIdo= Subject key identifier: 50:22:2C:F4:EF:F7:A0:DC:A3:A3:7A:D2:86:5E:A3:D3:5A:62:2B:FC Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 6B29169026BA79AA3B9B2EE6FF9EEAC2C7B041B1 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313830303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:01:11 +0000 ROA not before: Mon 29 Jun 2026 07:56:11 +0000 ROA not after: Mon 28 Jun 2027 08:01:11 +0000 asID: 131543 IP address blocks: 2402:5ec0:1800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:29:16:90:26:ba:79:aa:3b:9b:2e:e6:ff:9e:ea:c2:c7:b0:41:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:56:11 2026 GMT Not After : Jun 28 08:01:11 2027 GMT Subject: CN=50222CF4EFF7A0DCA3A37AD2865EA3D35A622BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ac:64:36:1c:10:60:95:a3:31:1e:5c:8e:94: fb:36:da:5d:95:ff:3a:f9:45:bc:9d:cf:7c:ba:cd: 2e:47:a7:19:e1:7a:bf:ac:f3:8e:e7:a5:8c:aa:4b: 62:b5:bc:6b:63:9d:dd:cb:df:e3:10:3b:8f:c9:01: 43:3a:91:8e:3f:39:cb:87:1c:b6:1e:18:09:38:17: af:fb:2f:ab:dc:8a:3e:2f:9e:d1:85:59:5d:09:1e: 4a:94:29:98:d7:a5:50:3c:76:aa:e4:87:d3:a1:53: 05:a1:8e:f8:05:9f:05:6d:a2:fc:da:48:5b:47:65: 37:cc:7b:fd:31:a7:fe:8a:99:2a:9a:fc:15:e7:3f: 89:48:e5:23:ee:65:69:68:22:95:5c:71:32:ff:06: ed:37:10:75:41:2a:88:0a:5a:a0:76:0f:22:ad:d8: 1d:74:5a:1b:8d:30:97:03:7e:73:8b:33:f2:fe:f1: 4c:b3:79:5b:c2:18:96:8b:09:fa:05:a3:fb:0b:13: 34:64:5a:83:4f:f6:4d:dd:87:7d:50:79:9d:78:e8: 8e:26:3d:dc:91:51:c1:ab:20:58:62:28:aa:81:ce: 84:29:25:20:06:df:a9:76:45:1d:76:2d:f7:d3:68: b1:c3:54:81:4e:4f:22:ed:5e:00:4e:35:1b:0b:88: 72:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:22:2C:F4:EF:F7:A0:DC:A3:A3:7A:D2:86:5E:A3:D3:5A:62:2B:FC X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313830303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1800::/40 Signature Algorithm: sha256WithRSAEncryption 2a:f2:68:48:60:f2:f6:97:25:1c:d9:5c:51:18:96:24:f7:b3: 43:61:08:74:44:35:50:0e:3d:1b:ac:96:83:ae:23:c2:b7:b9: 22:dd:39:0e:0b:21:0a:a4:09:51:6d:51:a4:78:ee:2d:d6:b8: 33:a2:b4:6b:33:8c:f0:9e:40:89:68:52:c2:ff:4f:52:b1:d2: c2:1d:65:b1:c7:f2:b9:67:a0:ad:de:6b:d2:8f:49:34:59:d6: df:2e:19:ba:29:29:4d:a1:14:7d:56:d8:7e:3d:54:45:b3:2d: b4:e0:c0:9c:2d:dc:ca:7f:d4:4a:c9:00:39:39:ec:77:41:61: ee:c8:39:78:07:a2:79:ea:57:4d:41:61:5e:43:ad:dc:7b:93: b3:b0:b1:cd:38:13:4f:a6:ea:fa:10:18:c6:f4:b2:c7:67:af: e2:26:c7:50:4a:3e:30:aa:1d:1f:43:3f:14:30:66:22:7c:92: 32:fa:fb:74:5d:3d:9e:67:74:05:43:01:0c:40:da:e2:9a:52: 32:e0:19:87:d9:de:b1:6c:bc:f1:b9:f5:e1:7d:e8:20:f3:10: 1b:81:e7:90:aa:47:39:8c:ee:ad:29:b5:b2:ff:f7:5f:ae:d8: 09:14:c9:cb:75:8f:f6:39:33:2e:1e:42:1b:91:b3:0d:50:dc: 61:99:26:6a -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUaykWkCa6eao7my7m/57qwsewQbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTFaFw0yNzA2MjgwODAxMTFaMDMxMTAvBgNV BAMTKDUwMjIyQ0Y0RUZGN0EwRENBM0EzN0FEMjg2NUVBM0QzNUE2MjJCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrGQ2HBBglaMxHlyOlPs22l2V /zr5Rbydz3y6zS5Hpxnher+s847npYyqS2K1vGtjnd3L3+MQO4/JAUM6kY4/OcuH HLYeGAk4F6/7L6vcij4vntGFWV0JHkqUKZjXpVA8dqrkh9OhUwWhjvgFnwVtovza SFtHZTfMe/0xp/6KmSqa/BXnP4lI5SPuZWloIpVccTL/Bu03EHVBKogKWqB2DyKt 2B10WhuNMJcDfnOLM/L+8UyzeVvCGJaLCfoFo/sLEzRkWoNP9k3dh31QeZ146I4m PdyRUcGrIFhiKKqBzoQpJSAG36l2RR12LffTaLHDVIFOTyLtXgBONRsLiHLtAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUUCIs9O/3oNyjo3rShl6j01piK/wwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAYMA0GCSqGSIb3DQEBCwUAA4IBAQAq8mhI YPL2lyUc2VxRGJYk97NDYQh0RDVQDj0brJaDriPCt7ki3TkOCyEKpAlRbVGkeO4t 1rgzorRrM4zwnkCJaFLC/09SsdLCHWWxx/K5Z6Ct3mvSj0k0WdbfLhm6KSlNoRR9 Vth+PVRFsy204MCcLdzKf9RKyQA5Oex3QWHuyDl4B6J56ldNQWFeQ63ce5OzsLHN OBNPpur6EBjG9LLHZ6/iJsdQSj4wqh0fQz8UMGYifJIy+vt0XT2eZ3QFQwEMQNri mlIy4BmH2d6xbLzxufXhfegg8xAbgeeQqkc5jO6tKbWy//dfrtgJFMnLdY/2OTMu HkIbkbMNUNxhmSZq -----END CERTIFICATE-----Generated at Tue Jul 14 21:58:29 2026 by rpki-client