$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e203535393632.roa File: 323430323a356563303a316330303a3a2f34302d3430203d3e203535393632.roa (raw, json) Hash identifier: i9aVKu7KBJQ6ndw1QeG/bTZ5yO23ybALXcJKe5hpEn0= Subject key identifier: 03:D9:B0:74:43:0E:B7:51:B5:A6:84:B6:A3:31:16:16:93:46:BA:CE Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 6D899D306DEB721C9DCDA2E72335DD7B955D94C3 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e203535393632.roa Signing time: Mon 29 Jun 2026 08:04:05 +0000 ROA not before: Mon 29 Jun 2026 07:59:05 +0000 ROA not after: Mon 28 Jun 2027 08:04:05 +0000 asID: 55962 IP address blocks: 2402:5ec0:1c00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:89:9d:30:6d:eb:72:1c:9d:cd:a2:e7:23:35:dd:7b:95:5d:94:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:59:05 2026 GMT Not After : Jun 28 08:04:05 2027 GMT Subject: CN=03D9B074430EB751B5A684B6A33116169346BACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b5:45:cb:43:c3:6d:46:c6:88:57:fb:af:b9: 6e:22:55:5c:71:25:76:cc:b3:1c:a5:0f:19:0c:7e: 0b:b6:2d:7c:72:8b:25:36:66:4a:94:d0:a8:c7:4a: a0:ca:d7:ea:bd:ed:1c:9c:4a:37:9f:67:bc:1e:33: 14:a8:d9:75:f7:76:1c:26:6f:f8:32:fb:9a:fa:7f: a3:38:33:0a:c8:7e:4a:d1:bb:bd:78:8e:91:94:a3: d3:fd:71:c5:04:29:22:33:85:c6:d0:da:16:50:86: 10:00:eb:29:52:a2:8c:39:16:ec:d6:55:15:a4:c1: 17:4a:54:66:bd:3f:57:cf:69:18:1a:f8:95:98:e9: 8b:73:1e:a5:a0:c2:a4:8c:cb:0b:20:cb:0e:79:49: 3b:9a:ec:30:6f:7b:c4:c7:89:fa:12:39:17:61:bc: a5:c9:85:c9:56:36:e7:0e:af:35:1f:04:89:6a:ee: 03:84:24:14:e7:df:f9:83:df:9c:10:eb:c6:65:3e: 43:4f:3e:20:2f:03:9d:85:9d:55:65:10:cc:8a:58: 6a:53:e5:41:ed:ce:2a:c8:66:fe:54:e5:7b:b8:bd: 16:aa:bc:f8:21:86:20:5a:0e:21:d3:5b:10:75:af: 00:90:6f:44:37:9c:38:11:c9:ce:6d:0c:5a:33:35: f3:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:D9:B0:74:43:0E:B7:51:B5:A6:84:B6:A3:31:16:16:93:46:BA:CE X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316330303a3a2f34302d3430203d3e203535393632.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1c00::/40 Signature Algorithm: sha256WithRSAEncryption 41:a3:d3:92:22:1e:ca:7c:d9:e1:8e:b9:cf:10:ec:8a:48:30: 52:6e:33:4a:1a:ad:52:cc:ee:fb:8c:b6:a0:63:a7:3c:49:63: 50:fe:5b:53:e2:c5:01:15:37:e8:5e:a1:8d:c4:b3:ca:b1:ae: 11:48:69:6d:7f:2a:34:af:ef:45:fc:0b:c5:15:99:55:2f:53: 6c:38:57:13:d0:1a:d0:8c:f6:78:16:0d:24:fa:69:ae:44:2a: 7f:6f:3e:16:ed:21:b4:8f:d5:36:cd:aa:92:7b:86:82:dc:7e: 8e:21:3c:fe:6e:7c:c3:e9:8c:bc:e3:2b:4d:bb:a4:a4:b7:8f: 93:9d:1c:de:4f:6d:5c:0d:3d:a1:ff:35:d4:98:42:89:1a:4a: ef:79:ec:9e:08:5f:28:16:43:a1:7e:f5:cb:a3:96:9a:5c:8c: d3:a2:83:45:45:90:fe:0c:01:e8:17:55:13:6b:ab:67:31:f8: ce:aa:71:3c:4e:47:40:1d:74:b1:77:42:db:d5:b8:8c:dd:6c: 96:29:14:86:b5:a1:d0:53:4c:3f:50:1b:c5:2b:da:00:da:01: cf:82:88:76:95:cb:6a:a1:b4:44:bc:d0:8f:91:ce:30:46:ee: 83:b3:30:b4:19:0b:d2:3b:88:96:dd:3a:39:22:2d:84:70:c4: b2:71:ae:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUbYmdMG3rchydzaLnIzXde5VdlMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU5MDVaFw0yNzA2MjgwODA0MDVaMDMxMTAvBgNV BAMTKDAzRDlCMDc0NDMwRUI3NTFCNUE2ODRCNkEzMzExNjE2OTM0NkJBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNtUXLQ8NtRsaIV/uvuW4iVVxx JXbMsxylDxkMfgu2LXxyiyU2ZkqU0KjHSqDK1+q97RycSjefZ7weMxSo2XX3dhwm b/gy+5r6f6M4MwrIfkrRu714jpGUo9P9ccUEKSIzhcbQ2hZQhhAA6ylSoow5FuzW VRWkwRdKVGa9P1fPaRga+JWY6YtzHqWgwqSMywsgyw55STua7DBve8THifoSORdh vKXJhclWNucOrzUfBIlq7gOEJBTn3/mD35wQ68ZlPkNPPiAvA52FnVVlEMyKWGpT 5UHtzirIZv5U5Xu4vRaqvPghhiBaDiHTWxB1rwCQb0Q3nDgRyc5tDFozNfOxAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUA9mwdEMOt1G1poS2ozEWFpNGus4wHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTYzMzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzUz OTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgAkAl7AHDANBgkqhkiG9w0BAQsFAAOCAQEAQaPTkiIe ynzZ4Y65zxDsikgwUm4zShqtUszu+4y2oGOnPEljUP5bU+LFARU36F6hjcSzyrGu EUhpbX8qNK/vRfwLxRWZVS9TbDhXE9Aa0Iz2eBYNJPpprkQqf28+Fu0htI/VNs2q knuGgtx+jiE8/m58w+mMvOMrTbukpLePk50c3k9tXA09of811JhCiRpK73nsnghf KBZDoX71y6OWmlyM06KDRUWQ/gwB6BdVE2urZzH4zqpxPE5HQB10sXdC29W4jN1s likUhrWh0FNMP1AbxSvaANoBz4KIdpXLaqG0RLzQj5HOMEbug7MwtBkL0juIlt06 OSIthHDEsnGuGg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:17 2026 by rpki-client