$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e20313331353433.roa File: 323430323a356563303a316630303a3a2f34302d3430203d3e20313331353433.roa (raw, json) Hash identifier: ymO9EHf4Vi7AYwAExfGeunSSeqhhQBckb5j0sk5fIlk= Subject key identifier: A2:69:38:CC:31:4C:FA:EF:4C:52:7B:80:31:DC:7B:F1:DD:BA:F2:E7 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 412511C621A3BC451157FAB45310A9B08E8888DF Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e20313331353433.roa Signing time: Mon 29 Jun 2026 08:05:54 +0000 ROA not before: Mon 29 Jun 2026 08:00:54 +0000 ROA not after: Mon 28 Jun 2027 08:05:54 +0000 asID: 131543 IP address blocks: 2402:5ec0:1f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:25:11:c6:21:a3:bc:45:11:57:fa:b4:53:10:a9:b0:8e:88:88:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 08:00:54 2026 GMT Not After : Jun 28 08:05:54 2027 GMT Subject: CN=A26938CC314CFAEF4C527B8031DC7BF1DDBAF2E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:ea:0d:20:5b:94:34:00:9e:6c:50:cd:9d: ba:1c:8d:a2:90:0c:d1:25:4d:e5:52:f2:50:d9:63: 14:0e:74:e7:f3:a6:66:82:b5:18:f3:4d:74:27:6d: fd:82:07:88:79:25:82:1a:2a:13:d4:cb:3a:67:8b: 0a:e8:13:67:a9:fa:e8:ae:59:88:69:1f:1a:0d:1e: 30:1d:4b:8b:5a:ed:8d:fc:cd:02:50:c5:f9:cf:c1: 6b:55:a6:f7:19:d1:8c:81:a8:80:61:a9:09:1e:db: b6:66:e9:42:8a:41:e2:24:32:53:d3:25:c6:e8:d9: ed:8d:ae:2a:7a:8b:9f:ba:9a:cf:17:6a:35:25:5e: f5:92:59:7b:53:79:b6:2d:bf:75:78:8e:53:60:26: fe:0e:bb:e3:1e:cd:03:ac:2b:62:49:a9:47:87:9f: 74:ef:42:f3:3c:c1:11:21:2a:93:3a:ad:a2:b7:39: ec:e8:28:40:29:26:e5:a4:c2:b4:a9:7b:c6:60:ad: 9b:52:12:52:c2:3a:6f:b1:32:15:3b:91:00:72:28: 52:94:5b:59:c5:90:a3:e0:88:04:d4:6f:c8:fe:a0: d1:55:a6:b1:99:1b:9b:af:a2:eb:8e:ff:4d:11:4a: 7b:49:f4:8a:bb:b8:35:7b:c8:82:e9:2d:ed:16:1b: 83:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:69:38:CC:31:4C:FA:EF:4C:52:7B:80:31:DC:7B:F1:DD:BA:F2:E7 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e20313331353433.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 8b:9a:b4:de:b6:4a:b4:ac:e9:58:81:97:8c:1e:4d:a8:44:18: d7:ee:56:8f:53:1d:f6:a2:96:91:b9:d9:25:6e:4a:4f:f7:13: a2:3b:15:1d:19:d4:96:8d:a3:79:65:e9:04:b9:00:19:4c:d3: b2:e1:91:97:66:85:5f:6c:56:94:dd:53:78:bc:69:55:8a:46: 48:97:60:86:13:ce:29:86:fc:93:ef:83:e7:28:5d:fa:d9:7f: c6:56:79:52:b6:92:3d:ee:e6:d4:44:ca:ac:7d:c2:e9:06:34: f1:b2:bd:e5:9d:25:5b:64:7b:41:bb:70:7a:22:be:15:99:a8: 10:f3:9e:0f:13:f4:47:19:1c:a7:7e:6c:02:0e:c6:81:82:4e: 79:d0:3f:0f:3a:3e:34:aa:55:b3:3f:73:fe:08:07:5f:86:df: 21:68:2d:a5:14:61:4f:f5:7f:54:6d:3a:fe:b8:ef:73:ac:a8: 2d:96:7c:97:e2:b1:3e:eb:c4:db:68:af:8f:90:04:80:fc:d0: 2e:60:ac:7e:7e:9b:73:7c:9d:32:4a:58:37:02:92:f4:d8:7f: 07:73:1a:cb:ec:1a:98:9e:6a:f7:be:99:f2:12:49:01:08:16: 3a:c9:50:d9:ce:25:20:40:ff:90:3c:2a:07:ce:65:38:82:87: 33:70:a4:c4 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgIUQSURxiGjvEURV/q0UxCpsI6IiN8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwODAwNTRaFw0yNzA2MjgwODA1NTRaMDMxMTAvBgNV BAMTKEEyNjkzOENDMzE0Q0ZBRUY0QzUyN0I4MDMxREM3QkYxRERCQUYyRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMOoNIFuUNACebFDNnbocjaKQ DNElTeVS8lDZYxQOdOfzpmaCtRjzTXQnbf2CB4h5JYIaKhPUyzpniwroE2ep+uiu WYhpHxoNHjAdS4ta7Y38zQJQxfnPwWtVpvcZ0YyBqIBhqQke27Zm6UKKQeIkMlPT Jcbo2e2Nrip6i5+6ms8XajUlXvWSWXtTebYtv3V4jlNgJv4Ou+MezQOsK2JJqUeH n3TvQvM8wREhKpM6raK3OezoKEApJuWkwrSpe8ZgrZtSElLCOm+xMhU7kQByKFKU W1nFkKPgiATUb8j+oNFVprGZG5uvouuO/00RSntJ9Iq7uDV7yILpLe0WG4PlAgMB AAGjggIiMIICHjAdBgNVHQ4EFgQUomk4zDFM+u9MUnuAMdx78d268ucwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMz MTM1MzQzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB BwEB/wQSMBAwDgQCAAIwCAMGACQCXsAfMA0GCSqGSIb3DQEBCwUAA4IBAQCLmrTe tkq0rOlYgZeMHk2oRBjX7laPUx32opaRudklbkpP9xOiOxUdGdSWjaN5ZekEuQAZ TNOy4ZGXZoVfbFaU3VN4vGlVikZIl2CGE84phvyT74PnKF362X/GVnlStpI97ubU RMqsfcLpBjTxsr3lnSVbZHtBu3B6Ir4VmagQ854PE/RHGRynfmwCDsaBgk550D8P Oj40qlWzP3P+CAdfht8haC2lFGFP9X9UbTr+uO9zrKgtlnyX4rE+68TbaK+PkASA /NAuYKx+fptzfJ0ySlg3ApL02H8HcxrL7BqYnmr3vpnyEkkBCBY6yVDZziUgQP+Q PCoHzmU4goczcKTE -----END CERTIFICATE-----Generated at Tue Jul 14 21:57:22 2026 by rpki-client