$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313830303a3a2f34302d3430203d3e2034383038.roa File: 323430323a356563303a313830303a3a2f34302d3430203d3e2034383038.roa (raw, json) Hash identifier: +k5SegkBmnJmHJPXa3v+ugC2++Y7NNqXvd73mnD//o4= Subject key identifier: 1B:70:3C:FE:19:5D:86:3B:F2:4E:69:CB:7B:FE:74:E8:B0:6E:E7:7E Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 706CD3C3CFD6656F1F888FBECB8219043FC1BF8B Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313830303a3a2f34302d3430203d3e2034383038.roa Signing time: Mon 29 Jun 2026 08:01:10 +0000 ROA not before: Mon 29 Jun 2026 07:56:10 +0000 ROA not after: Mon 28 Jun 2027 08:01:10 +0000 asID: 4808 IP address blocks: 2402:5ec0:1800::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:6c:d3:c3:cf:d6:65:6f:1f:88:8f:be:cb:82:19:04:3f:c1:bf:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:56:10 2026 GMT Not After : Jun 28 08:01:10 2027 GMT Subject: CN=1B703CFE195D863BF24E69CB7BFE74E8B06EE77E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:77:b0:16:5a:b7:57:43:57:50:55:d7:4d:df: 02:19:48:20:f6:38:de:4e:ee:a1:d1:29:a9:a7:4b: 4d:66:af:4c:75:9b:82:66:d7:23:3d:e4:2f:94:80: a4:35:e3:bb:34:40:0d:27:1f:0b:6e:9f:c9:20:e4: 94:67:2c:7d:a9:3b:ef:4e:30:a8:01:0b:be:91:f5: f2:11:75:82:ca:45:a8:a2:f6:b5:0c:86:24:7d:ef: 25:97:a2:68:e1:ce:21:23:e6:a0:9d:a0:79:07:cc: 50:ee:ab:e2:aa:cc:c5:6a:81:ef:17:cf:9a:ba:7f: b5:cb:d8:b4:75:af:41:3d:29:bf:4b:38:8f:7f:c9: ef:eb:27:20:d1:ff:47:fb:f5:a9:48:7e:91:d1:87: 8b:fc:cb:aa:2a:a3:3a:c7:fa:6d:ba:cf:81:59:df: f2:41:eb:71:61:80:37:1c:02:a1:80:6b:08:36:8a: af:a2:55:f4:35:db:e7:fb:b6:36:ec:33:cf:45:c4: 18:fb:cf:83:85:a1:6d:e1:60:25:e6:7a:23:e3:3c: 55:0b:89:81:33:75:22:58:a7:01:b3:ae:d4:fc:d1: a5:87:b2:5b:8f:af:13:d7:93:b0:15:d2:14:c3:74: d8:64:84:7b:dd:85:26:ab:ea:93:d8:25:1e:62:e2: c6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:70:3C:FE:19:5D:86:3B:F2:4E:69:CB:7B:FE:74:E8:B0:6E:E7:7E X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313830303a3a2f34302d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1800::/40 Signature Algorithm: sha256WithRSAEncryption 6d:6f:9e:fb:6c:e1:3b:61:f4:35:05:40:70:4b:23:21:43:19: f2:40:dc:11:f3:ea:04:a4:c1:3a:58:ac:d4:4d:70:f5:e7:93: a8:4b:76:f1:ef:26:7e:43:90:50:60:ad:3a:12:b2:57:9c:31: 51:55:48:69:96:c7:da:30:dc:1e:d7:8a:14:4f:dd:b0:3f:73: 0d:15:d9:0e:14:04:91:fc:65:8b:a2:18:a2:7a:21:39:43:e5: c6:35:74:f7:42:13:bc:1f:0a:a1:a3:e5:26:19:aa:39:53:c4: fb:87:aa:4d:06:df:c0:00:b5:43:ac:49:c3:9f:04:51:91:05: 32:89:9f:15:d4:c3:77:d1:07:75:f5:b5:92:17:a3:4d:11:7b: 63:92:af:7c:f0:94:15:34:eb:7f:4c:d0:91:40:df:ed:da:64: e9:28:86:be:c5:eb:aa:f8:56:2f:b7:0e:44:d3:56:8e:6d:47: e7:e7:7b:c8:56:94:02:e5:5d:97:9d:14:76:c8:4e:d4:63:c0: ea:7e:d0:e0:bd:bd:28:04:74:55:8d:5b:87:c2:d8:1c:d8:c1: 96:ef:35:df:fe:bd:72:70:d4:44:e7:8b:1f:bd:e9:97:fe:fc: 5b:90:e9:01:25:a6:40:81:08:e6:93:2d:29:8f:b8:6b:a8:c8: df:8f:68:4a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUcGzTw8/WZW8fiI++y4IZBD/Bv4swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTBaFw0yNzA2MjgwODAxMTBaMDMxMTAvBgNV BAMTKDFCNzAzQ0ZFMTk1RDg2M0JGMjRFNjlDQjdCRkU3NEU4QjA2RUU3N0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHd7AWWrdXQ1dQVddN3wIZSCD2 ON5O7qHRKamnS01mr0x1m4Jm1yM95C+UgKQ147s0QA0nHwtun8kg5JRnLH2pO+9O MKgBC76R9fIRdYLKRaii9rUMhiR97yWXomjhziEj5qCdoHkHzFDuq+KqzMVqge8X z5q6f7XL2LR1r0E9Kb9LOI9/ye/rJyDR/0f79alIfpHRh4v8y6oqozrH+m26z4FZ 3/JB63FhgDccAqGAawg2iq+iVfQ12+f7tjbsM89FxBj7z4OFoW3hYCXmeiPjPFUL iYEzdSJYpwGzrtT80aWHsluPrxPXk7AV0hTDdNhkhHvdhSar6pPYJR5i4saJAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUG3A8/hldhjvyTmnLe/506LBu534wHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTM4MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAJAJewBgwDQYJKoZIhvcNAQELBQADggEBAG1vnvts4Tth 9DUFQHBLIyFDGfJA3BHz6gSkwTpYrNRNcPXnk6hLdvHvJn5DkFBgrToSslecMVFV SGmWx9ow3B7XihRP3bA/cw0V2Q4UBJH8ZYuiGKJ6ITlD5cY1dPdCE7wfCqGj5SYZ qjlTxPuHqk0G38AAtUOsScOfBFGRBTKJnxXUw3fRB3X1tZIXo00Re2OSr3zwlBU0 639M0JFA3+3aZOkohr7F66r4Vi+3DkTTVo5tR+fne8hWlALlXZedFHbITtRjwOp+ 0OC9vSgEdFWNW4fC2BzYwZbvNd/+vXJw1ETnix+96Zf+/FuQ6QElpkCBCOaTLSmP uGuoyN+PaEo= -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:26 2026 by rpki-client