$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a316530303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: G22D4SVyRcurp3slZLJpdoskD0VKHZAwaeS2sXRR9TI= Subject key identifier: 54:9F:BA:C2:9D:86:79:1A:24:79:28:10:3D:C3:F9:00:5C:1D:30:7D Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 69BC2392297DE186A6FB62D39C4DE4F4BD1F5F1C Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:05:54 +0000 ROA not before: Mon 29 Jun 2026 08:00:54 +0000 ROA not after: Mon 28 Jun 2027 08:05:54 +0000 asID: 131543 IP address blocks: 2402:5ec0:1e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:bc:23:92:29:7d:e1:86:a6:fb:62:d3:9c:4d:e4:f4:bd:1f:5f:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 08:00:54 2026 GMT Not After : Jun 28 08:05:54 2027 GMT Subject: CN=549FBAC29D86791A247928103DC3F9005C1D307D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:b9:3a:f7:ab:98:30:9b:4a:82:fb:61:99: 0e:a9:ae:d0:28:5d:16:be:ec:08:85:4f:fc:a5:fd: f9:84:79:e6:4f:7b:af:17:b1:ee:ba:de:4a:97:5d: 76:ee:47:b7:f8:a2:d2:38:f6:d3:69:49:2e:c8:e0: c3:8c:90:fc:94:99:e6:ff:b3:ab:68:c3:9c:ea:d6: 7d:fa:60:44:ca:b2:64:53:01:84:68:d7:c6:88:ef: d8:8e:7f:b1:05:99:14:c2:34:f8:27:bb:cf:a3:06: 3b:b9:38:7f:50:be:b0:32:01:a3:d4:79:50:fd:25: c6:32:45:8f:8a:e3:aa:2f:a9:8b:7c:f7:21:4c:e7: a6:68:11:ed:9b:a6:65:82:69:e7:a5:66:86:7d:71: e2:6a:f2:09:c7:ac:2d:90:f3:16:24:44:de:4b:7d: 08:40:37:a0:e5:d5:46:33:e2:c7:23:a4:91:38:6c: 03:1e:ad:4b:27:bb:fc:2c:04:31:d3:e5:cf:5d:a8: 0c:8f:2d:d0:60:99:1a:03:b5:15:70:a7:b2:9e:c5: 1a:d4:2b:0b:32:0e:e3:9f:d7:71:f0:1b:63:00:bb: 62:91:5a:cd:6e:77:39:75:9a:9c:ae:4b:7e:95:e8: 31:75:17:b0:4b:d4:03:54:af:ae:45:c9:1f:02:4e: 92:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:9F:BA:C2:9D:86:79:1A:24:79:28:10:3D:C3:F9:00:5C:1D:30:7D X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1e00::/40 Signature Algorithm: sha256WithRSAEncryption 92:83:ec:77:b1:52:72:54:22:82:f5:60:fd:4c:f3:7e:ca:92: 22:70:46:e6:e3:6f:3a:f9:4d:30:32:da:4e:3b:c3:44:91:62: 65:92:03:56:ab:92:0f:9b:f2:25:6d:c8:85:91:ce:41:9d:81: ec:e0:f6:77:cc:84:32:77:85:cc:d9:52:af:96:43:b5:08:4a: eb:97:87:dd:60:ca:e2:54:59:0a:9c:9d:ac:ce:d5:a4:29:1a: 6c:ee:47:9f:17:0f:b5:9d:86:2a:c9:e9:3a:5f:c4:8a:c2:0c: c8:e7:df:e6:3f:2c:99:18:8e:e1:18:c8:78:67:eb:14:bf:09: c1:5b:94:a7:ae:84:83:e6:dd:4f:6c:fa:84:5e:c0:09:f7:3e: 9b:2a:00:0e:be:bd:97:a2:f9:26:ba:76:fd:2a:b0:ca:25:77: 36:09:38:f4:a8:84:ca:ff:a1:ba:9e:4f:07:33:57:92:f5:e8: cd:30:76:7c:d3:46:0b:b2:92:06:26:3e:16:13:c0:b1:c4:0b: a0:2e:21:fc:c3:bd:af:a1:c2:cd:dc:40:33:bc:ce:00:89:c7: 05:ec:71:b0:e1:81:a6:45:bf:ff:b6:0b:df:a8:01:f1:d6:a6: d8:e0:b1:24:05:b6:a5:d5:d6:94:52:28:b8:b6:af:46:e4:7d: 60:6b:8d:42 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUabwjkil94Yam+2LTnE3k9L0fXxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwODAwNTRaFw0yNzA2MjgwODA1NTRaMDMxMTAvBgNV BAMTKDU0OUZCQUMyOUQ4Njc5MUEyNDc5MjgxMDNEQzNGOTAwNUMxRDMwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJE7k696uYMJtKgvthmQ6prtAo XRa+7AiFT/yl/fmEeeZPe68Xse663kqXXXbuR7f4otI49tNpSS7I4MOMkPyUmeb/ s6tow5zq1n36YETKsmRTAYRo18aI79iOf7EFmRTCNPgnu8+jBju5OH9QvrAyAaPU eVD9JcYyRY+K46ovqYt89yFM56ZoEe2bpmWCaeelZoZ9ceJq8gnHrC2Q8xYkRN5L fQhAN6Dl1UYz4scjpJE4bAMerUsnu/wsBDHT5c9dqAyPLdBgmRoDtRVwp7KexRrU KwsyDuOf13HwG2MAu2KRWs1udzl1mpyuS36V6DF1F7BL1ANUr65FyR8CTpKFAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUVJ+6wp2GeRokeSgQPcP5AFwdMH0wHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTY1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAeMA0GCSqGSIb3DQEBCwUAA4IBAQCSg+x3 sVJyVCKC9WD9TPN+ypIicEbm4286+U0wMtpOO8NEkWJlkgNWq5IPm/IlbciFkc5B nYHs4PZ3zIQyd4XM2VKvlkO1CErrl4fdYMriVFkKnJ2sztWkKRps7kefFw+1nYYq yek6X8SKwgzI59/mPyyZGI7hGMh4Z+sUvwnBW5SnroSD5t1PbPqEXsAJ9z6bKgAO vr2Xovkmunb9KrDKJXc2CTj0qITK/6G6nk8HM1eS9ejNMHZ800YLspIGJj4WE8Cx xAugLiH8w72vocLN3EAzvM4AiccF7HGw4YGmRb//tgvfqAHx1qbY4LEkBbal1daU Uii4tq9G5H1ga41C -----END CERTIFICATE-----Generated at Tue Jul 14 21:57:22 2026 by rpki-client