$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a316430303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: hyaT3msabU2hJDdoWEcvDq6JajZVQJupV2wXunkApy0= Subject key identifier: 77:B1:8F:93:94:00:0B:5B:7E:E6:8A:5A:B6:43:A9:7A:46:24:CF:67 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 7C022E8EA9E6396D4B6E06959A3FA924E01C1B2D Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:04:04 +0000 ROA not before: Mon 29 Jun 2026 07:59:04 +0000 ROA not after: Mon 28 Jun 2027 08:04:04 +0000 asID: 131543 IP address blocks: 2402:5ec0:1d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:02:2e:8e:a9:e6:39:6d:4b:6e:06:95:9a:3f:a9:24:e0:1c:1b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:59:04 2026 GMT Not After : Jun 28 08:04:04 2027 GMT Subject: CN=77B18F9394000B5B7EE68A5AB643A97A4624CF67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:61:54:b1:31:84:c9:b4:79:4c:f5:29:08: 6b:6d:8c:30:7a:94:56:78:59:56:48:f9:9f:81:6d: 19:7a:84:b3:20:8e:01:fd:0a:6d:81:3a:5b:b0:1f: 8c:d4:a8:74:c3:9f:ce:82:9c:b5:55:3f:56:2e:46: 9e:8d:ba:81:1d:da:a8:e1:13:d2:ba:ce:97:19:f3: f7:8b:80:3b:b2:a1:8b:c6:52:3b:be:e7:56:cb:99: cf:2f:7d:49:29:06:5d:40:52:f6:d9:c4:30:45:57: 88:ec:62:87:38:cf:ac:bf:0e:29:f6:d3:63:f4:db: 9e:22:84:e8:09:c7:6b:c0:0a:e0:2d:f5:51:02:e5: 43:f5:ad:9a:16:aa:2b:98:81:9f:11:dc:f7:77:49: 16:e2:cc:f8:b9:63:4b:dd:b8:18:6f:2a:25:b3:2f: 63:8d:3c:5e:39:31:c1:68:9c:3f:60:f6:6a:79:40: 10:21:87:99:a3:fd:99:e9:67:49:fc:02:80:be:a0: b8:2c:31:7f:01:e8:39:0f:f9:15:eb:20:09:fb:35: 44:67:ee:1d:7e:0e:fa:29:74:dc:38:ac:d3:ac:ea: 1a:35:b3:21:35:69:df:ec:9f:36:61:d8:1e:ab:37: 14:cd:a9:83:d5:99:92:b5:b1:49:b4:9b:9a:da:9f: b7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B1:8F:93:94:00:0B:5B:7E:E6:8A:5A:B6:43:A9:7A:46:24:CF:67 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1d00::/40 Signature Algorithm: sha256WithRSAEncryption a0:61:bc:30:5d:7c:83:b5:b2:98:e7:84:18:9d:6f:84:a8:89: 6c:4d:f3:f9:17:d4:f8:a0:e4:da:79:07:f1:5b:db:17:52:f6: 94:01:4e:e5:79:cb:05:33:bf:83:83:9b:f4:d6:5f:26:a0:9b: 5a:36:36:80:c6:29:d5:e4:28:7e:89:16:4e:68:f7:8f:06:55: 4b:d4:f1:a8:a9:e5:70:bf:2d:12:b2:54:2f:9f:27:f0:55:48: ed:14:85:8b:20:1d:a6:c6:20:f4:5a:cf:e6:3c:91:9e:3f:91: 9a:a4:cb:83:77:42:3b:aa:41:75:f7:fb:1d:ff:26:d3:f9:7b: e9:03:c8:f8:98:52:be:c3:d6:17:5f:55:1f:1a:38:1c:1a:a0: c3:de:f1:bb:9b:d0:1b:17:f5:9c:07:a1:38:6d:f3:33:fe:b4: fb:67:ee:00:60:6e:67:12:13:e3:3c:86:c2:70:18:b6:89:8b: 5e:4b:fd:ef:e4:b7:78:da:da:d2:40:fc:e7:c9:d3:05:02:80: 19:93:51:5a:fb:03:77:2a:db:23:65:9f:0f:98:57:bb:c0:79: 97:d1:16:96:8a:33:6c:74:7b:75:53:db:78:19:74:3e:b2:13: 04:43:99:7a:93:fd:68:b6:53:3e:fb:55:61:f2:94:31:af:2b: 63:36:f0:9e -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUfAIujqnmOW1LbgaVmj+pJOAcGy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU5MDRaFw0yNzA2MjgwODA0MDRaMDMxMTAvBgNV BAMTKDc3QjE4RjkzOTQwMDBCNUI3RUU2OEE1QUI2NDNBOTdBNDYyNENGNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdNWFUsTGEybR5TPUpCGttjDB6 lFZ4WVZI+Z+BbRl6hLMgjgH9Cm2BOluwH4zUqHTDn86CnLVVP1YuRp6NuoEd2qjh E9K6zpcZ8/eLgDuyoYvGUju+51bLmc8vfUkpBl1AUvbZxDBFV4jsYoc4z6y/Din2 02P0254ihOgJx2vACuAt9VEC5UP1rZoWqiuYgZ8R3Pd3SRbizPi5Y0vduBhvKiWz L2ONPF45McFonD9g9mp5QBAhh5mj/ZnpZ0n8AoC+oLgsMX8B6DkP+RXrIAn7NURn 7h1+DvopdNw4rNOs6ho1syE1ad/snzZh2B6rNxTNqYPVmZK1sUm0m5ran7eDAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUd7GPk5QAC1t+5opatkOpekYkz2cwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTY0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAdMA0GCSqGSIb3DQEBCwUAA4IBAQCgYbww XXyDtbKY54QYnW+EqIlsTfP5F9T4oOTaeQfxW9sXUvaUAU7lecsFM7+Dg5v01l8m oJtaNjaAxinV5Ch+iRZOaPePBlVL1PGoqeVwvy0SslQvnyfwVUjtFIWLIB2mxiD0 Ws/mPJGeP5GapMuDd0I7qkF19/sd/ybT+XvpA8j4mFK+w9YXX1UfGjgcGqDD3vG7 m9AbF/WcB6E4bfMz/rT7Z+4AYG5nEhPjPIbCcBi2iYteS/3v5Ld42trSQPznydMF AoAZk1Fa+wN3KtsjZZ8PmFe7wHmX0RaWijNsdHt1U9t4GXQ+shMEQ5l6k/1otlM+ +1Vh8pQxrytjNvCe -----END CERTIFICATE-----Generated at Tue Jul 14 21:57:56 2026 by rpki-client