$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e2034383038.roa File: 323430323a356563303a316630303a3a2f34302d3430203d3e2034383038.roa (raw, json) Hash identifier: 1NxMRjeIwL26ymMPCOPDnzXOZQPPwuMpqauiv65aLL8= Subject key identifier: E3:B2:4D:0B:16:B3:61:23:D3:C2:53:6C:52:F5:C6:5F:B8:0E:79:E5 Certificate issuer: /CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Certificate serial: 515058AABE123DBC90AB19123FACA7A2E110C015 Authority key identifier: 76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e2034383038.roa Signing time: Mon 29 Jun 2026 08:05:53 +0000 ROA not before: Mon 29 Jun 2026 08:00:53 +0000 ROA not after: Mon 28 Jun 2027 08:05:53 +0000 asID: 4808 IP address blocks: 2402:5ec0:1f00::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 12:11:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:50:58:aa:be:12:3d:bc:90:ab:19:12:3f:ac:a7:a2:e1:10:c0:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=765F117BE77ECC31BDAB953318E1A2F507E82481 Validity Not Before: Jun 29 08:00:53 2026 GMT Not After : Jun 28 08:05:53 2027 GMT Subject: CN=E3B24D0B16B36123D3C2536C52F5C65FB80E79E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a2:ad:47:f9:fd:e5:cf:dc:2f:e2:2d:44:3e: e5:dc:d3:b6:d5:0e:88:c3:f4:a9:0d:c1:32:ea:02: 7d:5d:47:db:24:0a:3a:d3:a1:88:ae:67:44:b3:d3: 5c:64:e3:e9:06:4c:1d:04:2d:38:a6:8c:11:0c:17: 3b:de:59:82:f4:4e:de:9f:7f:24:b6:d4:7c:b2:a3: 16:fa:06:9a:b7:b5:e6:a4:21:c8:e2:ee:9c:e9:b8: a6:a0:ad:46:7e:62:c7:ea:2e:b8:1c:c6:c3:b2:97: 98:4d:49:3e:29:3a:03:fb:02:e8:4b:64:44:e0:c8: b1:e1:cb:30:97:e4:cd:d1:38:0d:8a:f7:ef:b1:0b: ea:ab:94:6e:0a:6d:e4:f8:83:84:f9:ba:8a:d0:9f: 09:70:33:b0:6f:be:61:af:07:ea:ee:e0:65:b4:6c: 93:4f:87:f8:5a:1a:dd:2b:cf:e3:e0:31:f0:04:f8: 14:c7:f2:dc:3c:ef:7e:5f:97:cb:39:35:33:59:d0: d8:a8:f4:93:99:26:85:b4:38:db:7a:f6:48:fb:8c: b2:a5:8e:55:33:3d:02:82:40:7b:53:17:ee:4b:bc: 17:f5:23:00:db:f6:af:85:d5:53:9f:18:30:94:b1: e0:b6:67:c4:7d:32:72:8f:aa:cf:ef:e4:7a:50:94: c1:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B2:4D:0B:16:B3:61:23:D3:C2:53:6C:52:F5:C6:5F:B8:0E:79:E5 X509v3 Authority Key Identifier: keyid:76:5F:11:7B:E7:7E:CC:31:BD:AB:95:33:18:E1:A2:F5:07:E8:24:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/765F117BE77ECC31BDAB953318E1A2F507E82481.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/765F117BE77ECC31BDAB953318E1A2F507E82481.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1123881522907054117/0/323430323a356563303a316630303a3a2f34302d3430203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:5ec0:1f00::/40 Signature Algorithm: sha256WithRSAEncryption 44:ac:45:4a:fb:f1:21:a0:a1:82:5a:d5:84:b8:54:6a:d0:24: 9e:ec:a6:69:4b:72:0b:43:18:aa:88:3b:2e:c2:9d:d9:a2:8f: 6e:24:19:60:63:62:cf:a2:f5:e9:fd:a5:5d:69:08:00:2c:89: 82:05:ae:6e:99:36:ce:f7:78:ef:1a:98:cf:b4:23:3a:4f:44: b4:dc:de:5a:12:30:9a:f1:03:90:3d:3d:1e:58:51:db:cf:87: bc:9a:87:0a:55:44:00:b2:ed:3e:8b:b6:cf:a6:cd:a1:ae:12: de:0d:ab:c1:7d:4f:36:4b:70:c2:55:ff:47:81:8b:a3:97:7d: 3b:e8:17:aa:86:60:61:ca:04:af:df:22:64:83:2e:bb:4d:ba: 82:1e:c6:03:0a:7f:40:2a:e4:7f:04:97:2f:7f:7a:09:32:c9: 2a:6f:b8:40:23:58:60:78:31:aa:66:1b:1c:f4:53:e2:1c:ea: 32:1e:96:fb:97:b9:e8:53:42:e0:07:0b:32:d0:41:d5:ad:f7: 93:c0:27:28:59:61:54:ab:98:1f:9f:89:58:97:3d:4b:5e:3a: e9:ba:99:cc:7a:de:17:09:69:88:d5:74:12:67:97:7b:cb:05: 39:3b:ad:c8:90:f7:04:58:7d:f9:1d:b7:a4:44:57:4b:d9:f2: 4f:3b:22:6a -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgIUUVBYqr4SPbyQqxkSP6ynouEQwBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUw N0U4MjQ4MTAeFw0yNjA2MjkwODAwNTNaFw0yNzA2MjgwODA1NTNaMDMxMTAvBgNV BAMTKEUzQjI0RDBCMTZCMzYxMjNEM0MyNTM2QzUyRjVDNjVGQjgwRTc5RTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjoq1H+f3lz9wv4i1EPuXc07bV DojD9KkNwTLqAn1dR9skCjrToYiuZ0Sz01xk4+kGTB0ELTimjBEMFzveWYL0Tt6f fyS21Hyyoxb6Bpq3teakIcji7pzpuKagrUZ+YsfqLrgcxsOyl5hNST4pOgP7AuhL ZETgyLHhyzCX5M3ROA2K9++xC+qrlG4KbeT4g4T5uorQnwlwM7BvvmGvB+ru4GW0 bJNPh/haGt0rz+PgMfAE+BTH8tw8735fl8s5NTNZ0Nio9JOZJoW0ONt69kj7jLKl jlUzPQKCQHtTF+5LvBf1IwDb9q+F1VOfGDCUseC2Z8R9MnKPqs/v5HpQlMEfAgMB AAGjggIeMIICGjAdBgNVHQ4EFgQU47JNCxazYSPTwlNsUvXGX7gOeeUwHwYDVR0j BBgwFoAUdl8Re+d+zDG9q5UzGOGi9QfoJIEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEy Mzg4MTUyMjkwNzA1NDExNy8wLzc2NUYxMTdCRTc3RUNDMzFCREFCOTUzMzE4RTFB MkY1MDdFODI0ODEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNzY1RjExN0JFNzdFQ0MzMUJEQUI5NTMzMThFMUEyRjUwN0U4MjQ4MS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTIzODgxNTIyOTA3MDU0MTE3LzAvMzIzNDMwMzIz YTM1NjU2MzMwM2EzMTY2MzAzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM0Mzgz MDM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/ BBIwEDAOBAIAAjAIAwYAJAJewB8wDQYJKoZIhvcNAQELBQADggEBAESsRUr78SGg oYJa1YS4VGrQJJ7spmlLcgtDGKqIOy7Cndmij24kGWBjYs+i9en9pV1pCAAsiYIF rm6ZNs73eO8amM+0IzpPRLTc3loSMJrxA5A9PR5YUdvPh7yahwpVRACy7T6Lts+m zaGuEt4Nq8F9TzZLcMJV/0eBi6OXfTvoF6qGYGHKBK/fImSDLrtNuoIexgMKf0Aq 5H8Ely9/egkyySpvuEAjWGB4MapmGxz0U+Ic6jIelvuXuehTQuAHCzLQQdWt95PA JyhZYVSrmB+fiViXPUteOum6mcx63hcJaYjVdBJnl3vLBTk7rciQ9wRYffkdt6RE V0vZ8k87Imo= -----END CERTIFICATE-----Generated at Tue Jul 14 20:58:56 2026 by rpki-client