$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203435313135.roa File: 323430323a356563303a316430303a3a2f34302d3430203d3e203435313135.roa (raw, json) Hash identifier: 0YBJB4p6a1O0ngZnA7zsCyeIQ0sI12q1+DQWtg5yH+E= Subject key identifier: C8:20:02:88:7B:9F:40:06:D8:67:96:AB:4C:47:9E:55:68:96:47:70 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 7F1B2D238B0742E93CC2D9455B76FE5E00A17945 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203435313135.roa Signing time: Mon 29 Jun 2026 08:04:05 +0000 ROA not before: Mon 29 Jun 2026 07:59:05 +0000 ROA not after: Mon 28 Jun 2027 08:04:05 +0000 asID: 45115 IP address blocks: 2402:5ec0:1d00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:1b:2d:23:8b:07:42:e9:3c:c2:d9:45:5b:76:fe:5e:00:a1:79:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 07:59:05 2026 GMT Not After : Jun 28 08:04:05 2027 GMT Subject: CN=C82002887B9F4006D86796AB4C479E5568964770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e4:11:82:69:bf:65:2f:5a:3b:25:8e:70:8b: af:18:8e:ca:e8:22:36:ba:ea:6f:c6:21:55:44:50: ef:58:67:a7:22:1d:5a:db:de:42:bb:f8:f3:b6:41: 53:47:94:97:6a:4c:6c:ed:d4:83:90:7e:09:a7:34: a1:06:c9:6a:a5:e1:70:c4:99:69:2a:64:42:64:b0: 7f:5f:2d:fb:d0:7f:86:4a:0c:1b:54:65:60:53:f1: eb:84:e5:dd:51:51:0a:74:1b:97:54:08:ca:82:ab: 4c:71:8c:32:f2:ab:60:3d:96:ee:4d:65:29:e5:2b: f6:46:d6:f1:dc:5b:78:04:ae:3d:82:85:d2:50:e8: 5a:f2:a9:a1:10:fe:46:9a:c6:b2:e8:77:4e:46:c8: a2:c8:4d:4a:a8:a2:03:bb:d2:e6:38:d6:2d:1f:c8: ff:ed:a4:de:df:5e:f7:31:95:b5:d5:32:9e:14:f6: ec:fa:3f:94:2b:6c:f9:59:d8:27:21:1f:d5:d2:ba: 45:54:34:17:12:60:79:6f:7d:b5:33:9b:b1:0d:97: 0e:fc:04:11:67:99:fd:00:2a:98:d9:c1:c7:f3:f5: 12:38:0a:de:0b:f5:06:bf:5e:84:81:b9:61:8a:a2: 53:2f:6a:80:93:30:81:51:d6:2d:92:39:68:5f:9c: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:20:02:88:7B:9F:40:06:D8:67:96:AB:4C:47:9E:55:68:96:47:70 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316430303a3a2f34302d3430203d3e203435313135.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1d00::/40 Signature Algorithm: sha256WithRSAEncryption 0c:74:ce:52:5d:35:98:b5:e6:78:ce:3e:26:c9:31:b6:b5:a4: 17:2a:bc:61:40:fe:09:88:b1:d2:20:11:82:62:1c:4c:02:3a: 14:29:cc:2d:ec:fa:a7:0c:56:ac:cf:1e:39:2f:45:78:63:db: 91:a7:e6:ff:46:44:c5:9a:29:e6:92:9c:49:89:dd:75:c5:21: d5:92:ce:70:a0:18:4a:5e:b3:dd:e1:58:e0:1d:13:98:a2:47: 5d:74:b3:ba:6b:33:94:88:b3:00:af:f9:b4:da:1f:0e:fa:68: 28:1e:51:d2:93:f4:ef:d5:2b:1c:38:5c:ca:13:10:30:c3:11: 88:ce:fa:fe:df:86:f0:10:31:1d:66:e6:17:1f:d2:2b:a1:ed: eb:71:04:71:c0:b0:e0:b9:cd:b8:8c:87:39:a1:03:e3:9d:79: df:69:aa:ac:bd:0f:11:3f:0b:26:92:21:4b:92:a1:2d:0c:17: be:ef:f9:d0:9a:8d:df:10:93:41:1e:1d:d9:b5:e0:f3:61:61: 27:65:01:9f:40:d4:e2:e2:13:d6:58:63:79:9d:38:94:da:65: 06:f3:d0:1e:a5:7a:57:e5:9d:6c:4d:67:a1:01:b8:53:9a:fb: 3d:48:5b:23:04:dd:55:49:5b:48:1e:c3:03:2a:2e:2e:c8:20: 2a:98:3b:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUfxstI4sHQuk8wtlFW3b+XgCheUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwNzU5MDVaFw0yNzA2MjgwODA0MDVaMDMxMTAvBgNV BAMTKEM4MjAwMjg4N0I5RjQwMDZEODY3OTZBQjRDNDc5RTU1Njg5NjQ3NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs5BGCab9lL1o7JY5wi68Yjsro Ija66m/GIVVEUO9YZ6ciHVrb3kK7+PO2QVNHlJdqTGzt1IOQfgmnNKEGyWql4XDE mWkqZEJksH9fLfvQf4ZKDBtUZWBT8euE5d1RUQp0G5dUCMqCq0xxjDLyq2A9lu5N ZSnlK/ZG1vHcW3gErj2ChdJQ6FryqaEQ/kaaxrLod05GyKLITUqoogO70uY41i0f yP/tpN7fXvcxlbXVMp4U9uz6P5QrbPlZ2CchH9XSukVUNBcSYHlvfbUzm7ENlw78 BBFnmf0AKpjZwcfz9RI4Ct4L9Qa/XoSBuWGKolMvaoCTMIFR1i2SOWhfnA13AgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUyCACiHufQAbYZ5arTEeeVWiWR3AwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTY0MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0MzUz MTMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgAkAl7AHTANBgkqhkiG9w0BAQsFAAOCAQEADHTOUl01 mLXmeM4+JskxtrWkFyq8YUD+CYix0iARgmIcTAI6FCnMLez6pwxWrM8eOS9FeGPb kafm/0ZExZop5pKcSYnddcUh1ZLOcKAYSl6z3eFY4B0TmKJHXXSzumszlIizAK/5 tNofDvpoKB5R0pP079UrHDhcyhMQMMMRiM76/t+G8BAxHWbmFx/SK6Ht63EEccCw 4LnNuIyHOaED451532mqrL0PET8LJpIhS5KhLQwXvu/50JqN3xCTQR4d2bXg82Fh J2UBn0DU4uIT1lhjeZ04lNplBvPQHqV6V+WdbE1noQG4U5r7PUhbIwTdVUlbSB7D AyouLsggKpg7Dw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:59:16 2026 by rpki-client