$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a313930303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: +ZCxSgKQSg+1WNt9LafGetQwmallNXTaZe3uwUf1x1k= Subject key identifier: 13:3C:FF:9F:A8:CC:89:49:88:83:E3:71:EB:B2:F1:A0:13:BA:13:D0 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 56405FDA98441CF3EBE6FCEB4485C24160142919 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:01:11 +0000 ROA not before: Mon 29 Jun 2026 07:56:11 +0000 ROA not after: Mon 28 Jun 2027 08:01:11 +0000 asID: 131543 IP address blocks: 2402:5ec0:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:40:5f:da:98:44:1c:f3:eb:e6:fc:eb:44:85:c2:41:60:14:29:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:56:11 2026 GMT Not After : Jun 28 08:01:11 2027 GMT Subject: CN=133CFF9FA8CC89498883E371EBB2F1A013BA13D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:88:7b:d5:85:96:3e:25:5f:9a:14:8d:8f:f5: 36:d7:0d:8d:08:80:fc:75:0c:35:14:5b:3e:0f:45: 0c:8a:be:88:d5:cb:80:14:b0:a3:8f:7c:36:a0:6b: 1f:0f:f4:31:fd:6c:fd:af:b7:8f:d1:39:de:98:f1: 7d:8c:3a:51:5a:d9:44:78:f0:ec:53:ef:8e:02:84: 83:71:5a:9c:c8:3f:3b:cf:51:9d:f6:4f:1c:a2:89: 3d:3c:c9:aa:f8:04:56:a0:5f:61:0e:62:a7:24:98: 36:17:fd:be:d9:8d:97:6a:da:c2:b7:d1:09:5d:d5: 13:cc:ec:ff:c9:c2:1f:22:d3:dd:cc:ac:31:0f:7a: cc:36:1c:8d:53:c9:33:31:bc:32:25:92:d6:d0:06: 90:9f:cd:00:6a:53:cc:20:20:a4:b4:2a:e8:f5:73: eb:1a:76:57:b7:9c:ef:85:40:51:8a:7c:a7:ca:4c: 61:0e:c5:fb:3b:a9:98:c6:40:32:ca:9e:c2:c0:d1: aa:7b:58:b1:77:23:21:88:1d:a0:50:00:29:11:5e: 6a:ab:76:f0:8f:19:a5:2e:9b:d7:49:6b:55:03:a4: 75:0e:fa:42:64:12:af:dc:b1:d3:b6:ca:f3:ef:08: 36:b4:88:bf:a0:06:37:b3:99:0a:e8:71:47:93:ea: b2:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:3C:FF:9F:A8:CC:89:49:88:83:E3:71:EB:B2:F1:A0:13:BA:13:D0 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1900::/40 Signature Algorithm: sha256WithRSAEncryption 38:fd:36:d2:97:36:18:e5:ca:3c:5d:bd:45:32:5f:a1:73:48: 8a:48:61:be:9c:a2:91:73:4c:b3:43:a9:5b:bc:29:1c:36:21: ef:f6:da:8c:08:4e:56:92:3c:c7:3a:4a:51:5a:21:1a:38:e2: a7:9f:3c:89:6c:98:cb:c8:9e:6e:69:fc:6f:5d:4f:e5:30:14: cd:8c:fd:c1:37:c4:ac:03:6a:41:35:22:30:bb:23:7f:c9:55: 06:ff:6b:70:69:f4:63:45:72:c0:ff:6a:89:9c:13:0a:95:2a: 2a:bd:14:7c:19:45:c6:0b:65:c2:30:6d:96:57:ca:5b:b0:90: fe:3a:11:d6:0b:8b:4b:c6:92:6d:07:3f:22:96:03:1b:22:63: bc:b6:df:35:4e:8a:18:c2:e7:f3:a6:11:24:b4:07:c7:00:25: 1c:78:3f:1c:f7:b4:fb:f2:d7:10:38:12:5c:bf:47:1c:9f:28: b7:c2:e8:62:a3:b6:16:9a:2e:b0:7d:6e:5e:a4:4c:6b:63:34: fe:27:97:6d:1c:b0:cb:b1:45:62:17:ae:43:3a:7f:df:33:47: 54:12:cb:f7:b0:d8:07:50:1c:7e:ee:9f:73:e4:9d:5c:ca:3f: fc:ef:f3:8e:a7:c1:57:0b:ac:1f:16:77:08:9d:c6:48:31:1c: db:61:6a:52 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUVkBf2phEHPPr5vzrRIXCQWAUKRkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTFaFw0yNzA2MjgwODAxMTFaMDMxMTAvBgNV BAMTKDEzM0NGRjlGQThDQzg5NDk4ODgzRTM3MUVCQjJGMUEwMTNCQTEzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCniHvVhZY+JV+aFI2P9TbXDY0I gPx1DDUUWz4PRQyKvojVy4AUsKOPfDagax8P9DH9bP2vt4/ROd6Y8X2MOlFa2UR4 8OxT744ChINxWpzIPzvPUZ32TxyiiT08yar4BFagX2EOYqckmDYX/b7ZjZdq2sK3 0Qld1RPM7P/Jwh8i093MrDEPesw2HI1TyTMxvDIlktbQBpCfzQBqU8wgIKS0Kuj1 c+sadle3nO+FQFGKfKfKTGEOxfs7qZjGQDLKnsLA0ap7WLF3IyGIHaBQACkRXmqr dvCPGaUum9dJa1UDpHUO+kJkEq/csdO2yvPvCDa0iL+gBjezmQrocUeT6rIfAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUEzz/n6jMiUmIg+Nx67LxoBO6E9AwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAZMA0GCSqGSIb3DQEBCwUAA4IBAQA4/TbS lzYY5co8Xb1FMl+hc0iKSGG+nKKRc0yzQ6lbvCkcNiHv9tqMCE5WkjzHOkpRWiEa OOKnnzyJbJjLyJ5uafxvXU/lMBTNjP3BN8SsA2pBNSIwuyN/yVUG/2twafRjRXLA /2qJnBMKlSoqvRR8GUXGC2XCMG2WV8pbsJD+OhHWC4tLxpJtBz8ilgMbImO8tt81 TooYwufzphEktAfHACUceD8c97T78tcQOBJcv0ccnyi3wuhio7YWmi6wfW5epExr YzT+J5dtHLDLsUViF65DOn/fM0dUEsv3sNgHUBx+7p9z5J1cyj/87/OOp8FXC6wf FncIncZIMRzbYWpS -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:40 2026 by rpki-client