$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a316330303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: S1yU7WKIq1B/5/sITd2jRKb3cnjXj934yAZPAbjoglU= Subject key identifier: 66:9F:E0:C3:82:E3:F2:45:1F:95:E3:DC:C7:93:46:A9:64:8A:B0:88 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 7981AA5BCBC75B78AF1C2673322D9121A95B8398 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:04:05 +0000 ROA not before: Mon 29 Jun 2026 07:59:05 +0000 ROA not after: Mon 28 Jun 2027 08:04:05 +0000 asID: 131543 IP address blocks: 2402:5ec0:1c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:81:aa:5b:cb:c7:5b:78:af:1c:26:73:32:2d:91:21:a9:5b:83:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:59:05 2026 GMT Not After : Jun 28 08:04:05 2027 GMT Subject: CN=669FE0C382E3F2451F95E3DCC79346A9648AB088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d4:49:5d:1c:dc:20:68:9c:e2:67:19:4d:08: c1:ae:fc:c4:c5:6a:c3:23:00:8d:8b:3c:2a:a7:7c: 36:82:32:2d:96:76:e9:1a:ef:46:f5:89:5b:15:4f: ae:9f:ec:64:83:8f:77:e2:47:4c:cc:20:57:e2:30: 74:ae:cd:63:ad:d2:94:4c:c9:d1:d2:b4:72:21:ec: 27:25:eb:d9:69:6d:bc:26:3b:53:45:72:b9:a2:4b: b8:40:7d:95:49:bf:6b:dd:bf:d3:ad:6e:e0:53:d9: 60:9a:b5:d2:5b:74:05:ce:96:3a:f5:ae:1d:1f:90: 88:99:53:c0:e9:48:9e:be:ed:07:5d:c4:14:73:5d: 65:a1:ce:ab:24:7d:ad:b6:42:22:ab:f7:d4:f7:67: dd:79:c5:35:c3:4e:1a:9a:f8:ef:b5:c8:1f:b3:a0: c8:bc:06:64:fe:ea:d9:58:07:66:7b:e4:41:ba:5b: 89:72:20:36:e9:ed:2e:73:6b:34:5a:5c:19:c7:14: cb:05:40:94:ea:96:bc:bd:7c:93:d6:fd:d6:20:2f: 21:c7:f4:52:43:d9:55:11:fa:e7:28:9f:40:82:25: 7a:8b:74:34:04:fd:b5:d0:49:64:b1:35:39:a6:17: 6f:a2:81:14:5b:35:cc:c4:cf:2c:8d:14:19:a0:e7: 41:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:E0:C3:82:E3:F2:45:1F:95:E3:DC:C7:93:46:A9:64:8A:B0:88 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1c00::/40 Signature Algorithm: sha256WithRSAEncryption 1f:00:64:a1:cf:8c:62:7b:3f:bb:32:5f:6e:8c:26:bb:4b:46: 1e:7d:df:a6:15:d1:ca:f0:10:20:8e:54:dd:a2:d5:2e:64:c4: 52:7d:ae:7c:9a:be:89:34:06:80:d3:2b:9d:5f:a9:f5:c6:e2: 48:c5:68:63:a8:84:fe:9f:ea:0a:9a:f3:40:79:1d:97:5a:9f: 3b:65:93:08:92:e2:58:04:b9:e4:ab:65:c3:de:64:7b:d2:a0: 29:a8:eb:bd:b0:9e:6b:3e:44:4c:72:5e:e0:d9:31:70:18:06: fd:a9:2f:0e:30:65:bb:55:54:6e:98:57:18:47:be:dc:cc:ad: 19:61:a5:35:4b:98:1b:42:94:ff:7f:e7:71:38:b2:ce:a5:bc: d3:9a:15:b8:54:ea:e5:fb:51:2a:b8:86:7c:6f:b5:12:ff:e9: 3f:59:2d:0b:6a:c5:0f:56:e0:c8:e2:82:2c:78:9a:d3:7a:b1: 8d:d8:15:d8:d8:70:cb:a8:67:7f:1f:60:60:8a:eb:fa:91:86: 4c:b8:ff:f6:07:37:b4:cd:24:94:d8:4b:6a:21:09:92:25:c6: a8:5a:a5:60:cd:9c:f4:3d:2f:0a:d1:b5:04:4e:da:31:72:14: c6:3a:cb:4d:3e:4d:12:38:06:80:9a:bd:d2:c9:a0:43:c9:3e: 1f:39:c0:ea -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUeYGqW8vHW3ivHCZzMi2RIalbg5gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU5MDVaFw0yNzA2MjgwODA0MDVaMDMxMTAvBgNV BAMTKDY2OUZFMEMzODJFM0YyNDUxRjk1RTNEQ0M3OTM0NkE5NjQ4QUIwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK1EldHNwgaJziZxlNCMGu/MTF asMjAI2LPCqnfDaCMi2Wduka70b1iVsVT66f7GSDj3fiR0zMIFfiMHSuzWOt0pRM ydHStHIh7Ccl69lpbbwmO1NFcrmiS7hAfZVJv2vdv9OtbuBT2WCatdJbdAXOljr1 rh0fkIiZU8DpSJ6+7QddxBRzXWWhzqskfa22QiKr99T3Z915xTXDThqa+O+1yB+z oMi8BmT+6tlYB2Z75EG6W4lyIDbp7S5zazRaXBnHFMsFQJTqlry9fJPW/dYgLyHH 9FJD2VUR+ucon0CCJXqLdDQE/bXQSWSxNTmmF2+igRRbNczEzyyNFBmg50HbAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUZp/gw4Lj8kUflePcx5NGqWSKsIgwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAcMA0GCSqGSIb3DQEBCwUAA4IBAQAfAGSh z4xiez+7Ml9ujCa7S0Yefd+mFdHK8BAgjlTdotUuZMRSfa58mr6JNAaA0yudX6n1 xuJIxWhjqIT+n+oKmvNAeR2XWp87ZZMIkuJYBLnkq2XD3mR70qApqOu9sJ5rPkRM cl7g2TFwGAb9qS8OMGW7VVRumFcYR77czK0ZYaU1S5gbQpT/f+dxOLLOpbzTmhW4 VOrl+1EquIZ8b7US/+k/WS0LasUPVuDI4oIseJrTerGN2BXY2HDLqGd/H2Bgiuv6 kYZMuP/2Bze0zSSU2EtqIQmSJcaoWqVgzZz0PS8K0bUETtoxchTGOstNPk0SOAaA mr3SyaBDyT4fOcDq -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:39 2026 by rpki-client