$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316230303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a316230303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: 3TOUTPx08Mw9MpaoYToYuDesFE2tcgCfZxjolqf8SMg= Subject key identifier: 45:ED:08:CA:71:43:22:80:BA:15:43:FE:24:DD:06:F4:22:9D:17:11 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 1557FD4A34976D399DF4071935D954404EC9EFC4 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316230303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:04:05 +0000 ROA not before: Mon 29 Jun 2026 07:59:05 +0000 ROA not after: Mon 28 Jun 2027 08:04:05 +0000 asID: 131543 IP address blocks: 2402:5ec0:1b00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:57:fd:4a:34:97:6d:39:9d:f4:07:19:35:d9:54:40:4e:c9:ef:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:59:05 2026 GMT Not After : Jun 28 08:04:05 2027 GMT Subject: CN=45ED08CA71432280BA1543FE24DD06F4229D1711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:34:ad:47:40:35:b7:71:ec:f3:2e:2f:ab:66: 30:3f:d4:1e:98:1f:25:ea:c8:8b:c0:77:28:ae:c4: a5:3d:93:95:45:43:a6:17:d0:cf:8d:3d:dc:d4:d2: 59:de:d5:6d:57:ac:3b:7c:6b:30:30:2f:b7:61:0b: 3c:4a:77:13:c2:56:e0:47:84:65:45:4c:18:03:f2: c9:3a:5d:7e:5d:e2:1b:d8:73:1d:17:f3:8f:b6:55: a7:89:6e:ce:57:30:91:13:23:7a:14:fb:dd:f0:bc: 6b:41:48:8d:3a:69:d4:bc:82:73:b3:62:4f:e8:ef: 46:5d:5a:6a:60:1b:6e:e0:05:42:cf:74:a5:46:36: 03:f0:a9:37:03:30:e9:a2:1b:4e:79:6d:b2:a2:10: 83:f0:bc:2f:52:25:6f:01:de:76:57:08:0c:64:29: ce:24:29:4f:e5:3e:bd:8e:58:87:fe:3d:eb:e6:84: 5c:27:54:94:e3:ff:dd:a3:5f:fc:d9:60:ac:1a:c9: ff:39:b1:ef:05:52:be:eb:a6:23:a1:98:e4:c8:c5: e8:14:eb:b1:52:9a:ae:70:b3:03:9a:de:0f:15:63: 2b:1e:03:13:3e:8b:df:f0:3e:38:23:37:63:9b:db: 82:b4:13:7b:11:0f:ab:56:bd:f0:86:51:d0:c7:f1: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:ED:08:CA:71:43:22:80:BA:15:43:FE:24:DD:06:F4:22:9D:17:11 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316230303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1b00::/40 Signature Algorithm: sha256WithRSAEncryption 78:c6:62:f3:2b:91:d0:9c:e7:b2:78:c8:ea:ce:b2:0e:86:4f: a8:08:d5:30:33:e2:53:82:7e:f8:52:4a:91:f9:e6:9d:d5:5c: 66:6e:6b:43:3c:4a:db:4c:17:7b:36:75:e5:c6:b7:1b:da:42: 0b:8a:68:dd:41:51:13:25:af:e5:e1:bd:7e:49:17:1d:26:89: 93:f3:ec:56:fa:38:2b:82:d2:54:f3:42:ba:be:da:fe:4b:85: 6f:0c:ea:f9:35:42:8a:ff:cd:61:0c:2c:2e:b5:2c:06:e7:26: cd:12:53:4d:eb:78:4c:7c:56:be:e1:fd:f0:03:21:c2:a3:db: fe:0f:17:bd:0c:ff:62:38:0c:90:a9:0a:99:2d:32:7b:ce:77: 03:c3:45:7c:cb:6c:08:8a:11:a4:a1:3c:85:9c:dc:c4:45:b2: dd:93:09:9b:ac:97:85:d9:2a:1b:1b:5e:04:d9:5c:f4:9a:e3: 87:dd:61:39:20:56:ae:8b:91:6c:1c:ac:15:be:f5:b9:3d:9c: 36:61:22:37:99:6b:a2:9b:6d:dd:fc:26:bb:fc:8e:97:b6:c4: 83:b0:12:27:bf:29:0e:2c:7c:40:4a:38:01:a3:49:ce:64:16: f2:e4:6d:a2:be:95:d3:47:89:11:9b:96:7f:38:ac:cf:c6:03: 5a:c6:f1:4c -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUFVf9SjSXbTmd9AcZNdlUQE7J78QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU5MDVaFw0yNzA2MjgwODA0MDVaMDMxMTAvBgNV BAMTKDQ1RUQwOENBNzE0MzIyODBCQTE1NDNGRTI0REQwNkY0MjI5RDE3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0NK1HQDW3cezzLi+rZjA/1B6Y HyXqyIvAdyiuxKU9k5VFQ6YX0M+NPdzU0lne1W1XrDt8azAwL7dhCzxKdxPCVuBH hGVFTBgD8sk6XX5d4hvYcx0X84+2VaeJbs5XMJETI3oU+93wvGtBSI06adS8gnOz Yk/o70ZdWmpgG27gBULPdKVGNgPwqTcDMOmiG055bbKiEIPwvC9SJW8B3nZXCAxk Kc4kKU/lPr2OWIf+PevmhFwnVJTj/92jX/zZYKwayf85se8FUr7rpiOhmOTIxegU 67FSmq5wswOa3g8VYyseAxM+i9/wPjgjN2Ob24K0E3sRD6tWvfCGUdDH8ezLAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQURe0IynFDIoC6FUP+JN0G9CKdFxEwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTYyMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAbMA0GCSqGSIb3DQEBCwUAA4IBAQB4xmLz K5HQnOeyeMjqzrIOhk+oCNUwM+JTgn74UkqR+ead1VxmbmtDPErbTBd7NnXlxrcb 2kILimjdQVETJa/l4b1+SRcdJomT8+xW+jgrgtJU80K6vtr+S4VvDOr5NUKK/81h DCwutSwG5ybNElNN63hMfFa+4f3wAyHCo9v+Dxe9DP9iOAyQqQqZLTJ7zncDw0V8 y2wIihGkoTyFnNzERbLdkwmbrJeF2SobG14E2Vz0muOH3WE5IFaui5FsHKwVvvW5 PZw2YSI3mWuim23d/Ca7/I6XtsSDsBInvykOLHxASjgBo0nOZBby5G2ivpXTR4kR m5Z/OKzPxgNaxvFM -----END CERTIFICATE-----Generated at Tue Jul 14 21:00:09 2026 by rpki-client