$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e2034383038.roa File: 323430323a356563303a316530303a3a2f34302d3430203d3e2034383038.roa (raw, json) Hash identifier: 9GRSo/ptppXtqY0vd3Cy2JgXM9qURiwAncFEbBzWilk= Subject key identifier: 3C:C8:30:E8:C1:AB:F5:7D:E7:DA:83:3B:05:52:D5:F5:34:7D:9C:7D Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 08B7EC3ED050F037C13459C94199DE0A5A592ACF Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e2034383038.roa Signing time: Mon 29 Jun 2026 08:05:54 +0000 ROA not before: Mon 29 Jun 2026 08:00:54 +0000 ROA not after: Mon 28 Jun 2027 08:05:54 +0000 asID: 4808 IP address blocks: 2402:5ec0:1e00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:b7:ec:3e:d0:50:f0:37:c1:34:59:c9:41:99:de:0a:5a:59:2a:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 08:00:54 2026 GMT Not After : Jun 28 08:05:54 2027 GMT Subject: CN=3CC830E8C1ABF57DE7DA833B0552D5F5347D9C7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:de:d1:cd:66:e8:6e:ea:a4:6c:81:fe:ca:b9: 11:bb:c7:6c:11:36:e2:d3:2b:d9:3b:53:96:b4:2d: ca:a5:37:0b:8b:38:c7:b9:1e:2b:70:43:d0:f4:3c: 94:95:80:59:0c:2c:6e:88:b2:77:9d:52:7b:24:20: 89:21:03:95:62:c3:72:f5:a3:d8:4d:70:67:7d:c1: fb:3e:9f:44:f9:59:79:4e:c4:06:f8:ed:ab:d0:7a: e2:f9:ec:84:2e:3b:53:6b:95:56:75:84:5a:16:62: 31:aa:d0:11:85:ab:4d:0e:29:0d:29:ea:e7:e3:a5: 09:81:76:b5:a4:82:d0:5d:46:e4:2c:89:26:19:02: f0:bc:e1:86:55:4c:3a:1c:63:ec:39:bf:1e:d1:c9: 52:cb:8f:88:c8:a1:1b:94:31:00:14:86:9c:a7:0c: e5:9c:81:96:72:ad:40:83:0a:dd:8d:29:5b:f8:92: 87:0c:d9:4f:8b:52:67:26:a9:a5:5a:4f:bc:dd:f6: f5:cc:e1:91:50:3b:0a:99:4a:20:a5:f4:4a:90:1b: 12:aa:e6:4a:66:bf:2f:78:d7:62:c5:4e:9b:de:d8: da:1b:c0:d8:02:ea:9c:07:6c:e4:d1:66:1c:c1:f6: 95:20:70:39:0c:22:85:ff:b0:3f:9d:df:5b:1b:2e: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C8:30:E8:C1:AB:F5:7D:E7:DA:83:3B:05:52:D5:F5:34:7D:9C:7D X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316530303a3a2f34302d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1e00::/40 Signature Algorithm: sha256WithRSAEncryption 62:22:a2:49:a1:4c:11:bc:f3:88:03:51:cb:c2:aa:cd:5a:e9: 9a:90:d7:a6:8e:29:ad:d5:8d:dd:77:ff:fc:37:2a:ac:fd:a2: 90:53:de:13:c3:6a:f3:c7:d4:93:88:23:19:c3:16:b3:3a:23: d7:8d:e1:ba:54:b9:ea:20:5a:ba:29:c0:b7:9b:a5:12:88:58: 04:df:fb:68:15:82:4b:b5:ce:42:fc:16:70:93:eb:2a:aa:ca: 2c:4a:f4:00:86:8c:ac:2f:ec:b9:c8:56:87:e9:08:54:b9:e5: 4f:d5:36:1a:4c:ec:87:91:10:7a:65:c5:3b:d5:76:23:a0:81: 16:48:b5:0f:c2:a9:1d:84:fe:f1:a1:81:37:70:09:52:33:9d: ce:2d:43:d8:1e:a4:48:35:05:b3:1f:5e:58:58:8d:b2:4e:df: 44:f6:89:45:07:72:a1:fa:b2:f3:ae:fb:dd:86:b2:a4:b1:de: a7:30:a9:26:7a:fc:dc:46:f5:9a:02:0b:2c:45:d6:35:a1:e3: 49:f6:b7:86:be:b7:e0:9a:7b:bc:0f:42:4e:a3:db:e9:58:96: 99:5a:3b:53:b1:84:fa:f3:4d:f6:07:e2:12:ff:d5:7b:0a:14: c5:7d:6a:75:61:2c:10:c1:2b:03:87:78:a3:ca:cd:68:c1:dc: ce:62:30:e6 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUCLfsPtBQ8DfBNFnJQZneClpZKs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwODAwNTRaFw0yNzA2MjgwODA1NTRaMDMxMTAvBgNV BAMTKDNDQzgzMEU4QzFBQkY1N0RFN0RBODMzQjA1NTJENUY1MzQ3RDlDN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl3tHNZuhu6qRsgf7KuRG7x2wR NuLTK9k7U5a0LcqlNwuLOMe5HitwQ9D0PJSVgFkMLG6IsnedUnskIIkhA5Viw3L1 o9hNcGd9wfs+n0T5WXlOxAb47avQeuL57IQuO1NrlVZ1hFoWYjGq0BGFq00OKQ0p 6ufjpQmBdrWkgtBdRuQsiSYZAvC84YZVTDocY+w5vx7RyVLLj4jIoRuUMQAUhpyn DOWcgZZyrUCDCt2NKVv4kocM2U+LUmcmqaVaT7zd9vXM4ZFQOwqZSiCl9EqQGxKq 5kpmvy9412LFTpve2NobwNgC6pwHbOTRZhzB9pUgcDkMIoX/sD+d31sbLsvZAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQUPMgw6MGr9X3n2oM7BVLV9TR9nH0wHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTY1MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAJAJewB4wDQYJKoZIhvcNAQELBQADggEBAGIiokmhTBG8 84gDUcvCqs1a6ZqQ16aOKa3Vjd13//w3Kqz9opBT3hPDavPH1JOIIxnDFrM6I9eN 4bpUueogWropwLebpRKIWATf+2gVgku1zkL8FnCT6yqqyixK9ACGjKwv7LnIVofp CFS55U/VNhpM7IeREHplxTvVdiOggRZItQ/CqR2E/vGhgTdwCVIznc4tQ9gepEg1 BbMfXlhYjbJO30T2iUUHcqH6svOu+92GsqSx3qcwqSZ6/NxG9ZoCCyxF1jWh40n2 t4a+t+Cae7wPQk6j2+lYlplaO1OxhPrzTfYH4hL/1XsKFMV9anVhLBDBKwOHeKPK zWjB3M5iMOY= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:57 2026 by rpki-client