$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e2034383038.roa File: 323430323a356563303a313930303a3a2f34302d3430203d3e2034383038.roa (raw, json) Hash identifier: XGWw9jpwi3mPkXjERceBTOtStxBK6NuUJg6Wh5vUIcU= Subject key identifier: 82:91:F7:EF:D0:15:81:CD:3F:59:3B:BD:72:9F:AE:56:5B:BA:46:7C Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 06294B1AA105261850F571940F429C33C95837A3 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e2034383038.roa Signing time: Mon 29 Jun 2026 08:01:10 +0000 ROA not before: Mon 29 Jun 2026 07:56:10 +0000 ROA not after: Mon 28 Jun 2027 08:01:10 +0000 asID: 4808 IP address blocks: 2402:5ec0:1900::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:29:4b:1a:a1:05:26:18:50:f5:71:94:0f:42:9c:33:c9:58:37:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:56:10 2026 GMT Not After : Jun 28 08:01:10 2027 GMT Subject: CN=8291F7EFD01581CD3F593BBD729FAE565BBA467C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:98:6f:6b:b2:98:23:a2:db:a9:af:39:7c:99: 87:de:92:1e:af:0f:da:76:7a:a5:0b:90:2b:ee:74: 31:4e:8d:6d:55:61:31:7a:3c:b1:f8:d3:bb:8e:a3: f5:73:4c:6d:33:d8:68:e5:9b:b4:ba:bf:4b:8b:8e: 65:a0:35:00:88:13:5f:40:39:44:a0:26:51:04:02: f9:f3:25:db:2b:c8:57:10:9e:9d:ac:ed:e2:44:99: 33:68:76:86:93:bc:d3:99:57:ff:63:4a:73:77:19: 6f:41:ff:e7:b3:42:9f:c4:e7:ad:cc:b5:29:98:43: 29:3b:89:f0:93:15:21:fd:9b:78:ea:30:0e:5a:68: 3a:a4:b4:84:c9:97:00:b0:85:9b:c2:d1:6b:f2:7a: 39:f9:81:1c:81:0c:2a:a9:c5:08:3c:9c:4e:7a:e2: 50:73:f4:8f:1b:37:2b:ed:78:8e:09:d8:33:af:18: 55:a8:4a:37:67:0a:0b:8f:3b:e9:b4:c4:16:9d:c2: 0d:31:f5:33:34:ec:98:85:c2:74:fb:d9:f6:8a:60: aa:da:bc:bd:25:02:d5:c6:f1:bf:aa:9b:0c:c7:0e: 4f:75:5d:c3:e8:86:aa:e8:2c:c3:41:6e:21:22:39: dc:d8:9f:89:d6:e7:f8:85:c9:bc:49:69:0a:a7:8b: 3b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:91:F7:EF:D0:15:81:CD:3F:59:3B:BD:72:9F:AE:56:5B:BA:46:7C X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a313930303a3a2f34302d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1900::/40 Signature Algorithm: sha256WithRSAEncryption 1a:02:e4:05:c1:f5:2f:9c:dc:78:24:6d:cb:fe:76:8e:d1:19: 62:53:96:3e:55:ef:49:d0:88:8e:67:57:35:a7:bf:02:8a:f8: f1:55:a4:99:0c:9c:e0:03:4d:e3:1c:dd:ea:a1:21:e2:44:1b: db:22:99:19:51:ed:a8:4b:e1:6d:45:83:d0:22:a5:7a:d8:d9: d4:fa:14:0e:a0:48:d1:9d:f8:40:d9:52:76:59:cc:6a:0f:c9: e8:9e:0d:f2:fe:4b:80:b8:2b:ef:79:99:fa:41:81:c4:aa:f7: 95:05:15:74:56:69:62:01:df:12:2f:01:4e:5b:1d:bb:2f:e2: 34:f6:0e:09:ae:c2:fc:a1:2e:19:3e:8c:f4:4e:2c:63:93:d6: 58:c2:af:df:63:77:f4:c0:88:06:9e:91:be:1d:f2:28:44:fd: 89:e9:a0:5f:71:09:e2:6f:00:14:f1:54:3e:aa:cf:c6:c2:31: fa:22:c4:48:9d:75:7c:63:41:8e:80:4f:0c:b5:fb:89:72:f0: 29:a5:b9:0e:2f:ae:4d:64:94:78:d4:c5:c9:19:3d:3c:b5:db: 0d:ef:51:0f:1e:46:98:23:8c:0e:13:e0:56:34:ee:86:d2:ea: 90:98:f1:37:69:df:e6:09:69:3a:51:82:c7:73:7f:08:9f:16: 88:06:11:ae -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUBilLGqEFJhhQ9XGUD0KcM8lYN6MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU2MTBaFw0yNzA2MjgwODAxMTBaMDMxMTAvBgNV BAMTKDgyOTFGN0VGRDAxNTgxQ0QzRjU5M0JCRDcyOUZBRTU2NUJCQTQ2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmG9rspgjotuprzl8mYfekh6v D9p2eqULkCvudDFOjW1VYTF6PLH407uOo/VzTG0z2Gjlm7S6v0uLjmWgNQCIE19A OUSgJlEEAvnzJdsryFcQnp2s7eJEmTNodoaTvNOZV/9jSnN3GW9B/+ezQp/E563M tSmYQyk7ifCTFSH9m3jqMA5aaDqktITJlwCwhZvC0Wvyejn5gRyBDCqpxQg8nE56 4lBz9I8bNyvteI4J2DOvGFWoSjdnCguPO+m0xBadwg0x9TM07JiFwnT72faKYKra vL0lAtXG8b+qmwzHDk91XcPohqroLMNBbiEiOdzYn4nW5/iFybxJaQqnizu3AgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUgpH379AVgc0/WTu9cp+uVlu6RnwwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTM5MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAJAJewBkwDQYJKoZIhvcNAQELBQADggEBABoC5AXB9S+c 3Hgkbcv+do7RGWJTlj5V70nQiI5nVzWnvwKK+PFVpJkMnOADTeMc3eqhIeJEG9si mRlR7ahL4W1Fg9AipXrY2dT6FA6gSNGd+EDZUnZZzGoPyeieDfL+S4C4K+95mfpB gcSq95UFFXRWaWIB3xIvAU5bHbsv4jT2DgmuwvyhLhk+jPROLGOT1ljCr99jd/TA iAaekb4d8ihE/YnpoF9xCeJvABTxVD6qz8bCMfoixEiddXxjQY6ATwy1+4ly8Cml uQ4vrk1klHjUxckZPTy12w3vUQ8eRpgjjA4T4FY07obS6pCY8Tdp3+YJaTpRgsdz fwifFogGEa4= -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:23 2026 by rpki-client