$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a316130303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: I4hcdIfOIEMZeeQ7Sczntw3PjkPWTYwydPwsQDU/R2E= Subject key identifier: 6C:B5:D3:32:6A:E7:86:1B:99:BD:94:32:A8:DF:53:7D:12:5C:12:F8 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 2CD87B9E4D9F1931D1E628F5168FDD59964D2726 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:04:04 +0000 ROA not before: Mon 29 Jun 2026 07:59:04 +0000 ROA not after: Mon 28 Jun 2027 08:04:04 +0000 asID: 131543 IP address blocks: 2402:5ec0:1a00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:d8:7b:9e:4d:9f:19:31:d1:e6:28:f5:16:8f:dd:59:96:4d:27:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:59:04 2026 GMT Not After : Jun 28 08:04:04 2027 GMT Subject: CN=6CB5D3326AE7861B99BD9432A8DF537D125C12F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:53:32:5a:44:ed:40:6b:6f:76:4f:2f:df:30: 80:da:ef:6d:bd:c1:38:9e:80:4c:16:cc:3a:77:eb: fd:06:e0:8b:a0:fc:ba:99:fc:7f:19:1b:97:e2:58: b0:d3:e4:4e:2f:7b:49:c1:95:90:e3:12:f0:b9:2c: 02:9b:bd:1b:00:a3:6c:01:5f:e7:f4:cd:e8:b8:55: 0c:43:b2:6d:0a:ee:20:d6:91:87:72:9d:36:49:85: 77:e7:ff:89:eb:3b:32:6a:5f:8b:05:0c:ce:f1:a0: 93:9e:00:4f:17:2f:42:d6:cf:37:b4:1a:61:0d:10: 7e:fd:43:af:4f:0f:9c:8f:f7:85:c7:41:61:95:65: 42:6e:e4:28:28:d4:40:51:ac:e8:dd:95:5e:e3:26: 37:e2:45:3e:0d:22:5c:ff:36:af:0c:dd:57:7e:29: 2d:70:bf:4b:a9:34:6b:db:94:6c:4e:35:b6:a9:ff: f1:9a:24:07:1c:96:fc:41:1d:65:85:f3:f9:67:c6: 3a:b4:b5:de:8f:3f:5e:a1:a9:5a:8c:47:1b:1c:bb: da:1f:39:ad:aa:58:a1:15:13:94:8b:83:be:49:69: ef:05:a8:4c:53:33:3b:c4:0b:8c:57:d0:32:50:81: d7:74:c4:35:70:80:eb:ac:f3:62:0e:00:6c:18:70: 30:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:B5:D3:32:6A:E7:86:1B:99:BD:94:32:A8:DF:53:7D:12:5C:12:F8 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316130303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1a00::/40 Signature Algorithm: sha256WithRSAEncryption 7d:86:53:da:4f:19:fd:28:89:d4:4e:22:c4:dd:26:69:ee:46: 20:a6:c1:03:de:cc:b6:00:97:e6:03:ab:d1:cf:bf:f7:c0:10: f0:26:b1:19:65:96:8c:a5:d6:2e:3a:6f:d1:36:c3:05:18:bc: 9d:d3:4d:9a:97:a8:94:89:6c:e7:7d:aa:87:65:1f:9c:34:a5: cf:c0:1a:24:77:4b:6b:29:47:45:41:f8:0d:50:e2:61:ef:f6: 4d:8c:ca:58:77:ab:b8:cc:a5:77:ff:f4:fa:e3:50:95:41:bb: f9:ba:70:79:62:fb:64:01:07:93:7e:9f:b9:a7:18:22:df:7d: f0:f7:b8:7b:d8:c9:56:d5:5e:22:41:96:46:c8:5f:65:36:ee: 69:c5:ce:96:78:fb:49:2f:ea:52:29:a3:8d:7f:05:15:9d:c9: b8:12:ce:f2:b7:dd:ba:86:b4:8d:da:e2:61:01:8d:6f:c6:87: c4:4f:2e:ba:28:dd:6c:0b:22:64:0a:5d:f6:99:57:b4:ef:b1: d2:e8:59:8a:3a:c4:22:13:61:30:fd:f5:6d:ae:11:08:29:84: 33:fe:78:36:f0:35:3a:dd:36:2d:02:dc:57:43:28:ec:24:e4: c9:2e:5f:8d:bd:0e:b6:95:34:c8:06:89:45:42:f8:dd:e5:a8: 96:3c:10:77 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIULNh7nk2fGTHR5ij1Fo/dWZZNJyYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU5MDRaFw0yNzA2MjgwODA0MDRaMDMxMTAvBgNV BAMTKDZDQjVEMzMyNkFFNzg2MUI5OUJEOTQzMkE4REY1MzdEMTI1QzEyRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQUzJaRO1Aa292Ty/fMIDa7229 wTiegEwWzDp36/0G4Iug/LqZ/H8ZG5fiWLDT5E4ve0nBlZDjEvC5LAKbvRsAo2wB X+f0zei4VQxDsm0K7iDWkYdynTZJhXfn/4nrOzJqX4sFDM7xoJOeAE8XL0LWzze0 GmENEH79Q69PD5yP94XHQWGVZUJu5Cgo1EBRrOjdlV7jJjfiRT4NIlz/Nq8M3Vd+ KS1wv0upNGvblGxONbap//GaJAcclvxBHWWF8/lnxjq0td6PP16hqVqMRxscu9of Oa2qWKEVE5SLg75Jae8FqExTMzvEC4xX0DJQgdd0xDVwgOus82IOAGwYcDC/AgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUbLXTMmrnhhuZvZQyqN9TfRJcEvgwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTYxMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAaMA0GCSqGSIb3DQEBCwUAA4IBAQB9hlPa Txn9KInUTiLE3SZp7kYgpsED3sy2AJfmA6vRz7/3wBDwJrEZZZaMpdYuOm/RNsMF GLyd002al6iUiWznfaqHZR+cNKXPwBokd0trKUdFQfgNUOJh7/ZNjMpYd6u4zKV3 //T641CVQbv5unB5YvtkAQeTfp+5pxgi333w97h72MlW1V4iQZZGyF9lNu5pxc6W ePtJL+pSKaONfwUVncm4Es7yt926hrSN2uJhAY1vxofETy66KN1sCyJkCl32mVe0 77HS6FmKOsQiE2Ew/fVtrhEIKYQz/ng28DU63TYtAtxXQyjsJOTJLl+NvQ62lTTI BolFQvjd5aiWPBB3 -----END CERTIFICATE-----Generated at Tue Jul 14 21:00:08 2026 by rpki-client