$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430343a373234303a323030383a3a2f34382d3438203d3e203539303734.roa File: 323430343a373234303a323030383a3a2f34382d3438203d3e203539303734.roa (raw, json) Hash identifier: XPRCCZsT1P5a73kfa0XZLO8NAMJJOtMoz7/y88FSMOQ= Subject key identifier: B6:65:EC:4D:0C:E6:A9:45:57:67:F8:F8:07:FB:FD:43:9D:7C:11:9F Certificate issuer: /CN=185BC8F795FC60E163D641A01BAA510BF953C375 Certificate serial: 17ECDAD2E45A81C5AF7200087EB5A0F8FF7881EB Authority key identifier: 18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430343a373234303a323030383a3a2f34382d3438203d3e203539303734.roa Signing time: Tue 08 Sep 2026 04:00:00 +0000 ROA not before: Tue 08 Sep 2026 03:55:00 +0000 ROA not after: Tue 07 Sep 2027 04:00:00 +0000 asID: 59074 IP address blocks: 2404:7240:2008::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 12:22:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ec:da:d2:e4:5a:81:c5:af:72:00:08:7e:b5:a0:f8:ff:78:81:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=185BC8F795FC60E163D641A01BAA510BF953C375 Validity Not Before: Sep 8 03:55:00 2026 GMT Not After : Sep 7 04:00:00 2027 GMT Subject: CN=B665EC4D0CE6A9455767F8F807FBFD439D7C119F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:fc:fd:0b:f8:0b:4c:c1:11:40:8a:8d:3e: 47:83:9c:cc:93:a0:b5:ae:bf:a7:aa:31:73:05:fe: 57:b3:d3:11:e6:6d:e0:17:fb:71:06:40:52:1f:24: 36:c5:96:b2:f0:7b:11:d3:df:dd:e4:a1:9e:3b:ef: a2:e5:a0:8f:f0:6c:83:82:03:62:63:75:78:b2:d1: 26:78:50:1e:fd:8e:c4:6c:a6:c8:f4:38:0c:74:81: 56:2b:ce:66:53:77:1d:6d:13:28:99:d2:08:cb:20: 5a:4a:23:52:32:77:2a:a4:09:ba:fb:f8:1c:5a:e6: 8a:83:53:e4:65:42:1a:7f:b7:77:94:a8:94:ba:74: a6:27:f1:1a:ce:2e:8f:a0:2a:16:b9:0b:b4:ce:30: 31:01:f1:63:b1:04:fe:7a:26:b5:70:64:fb:60:d4: 6b:f3:39:f0:be:ed:f7:22:ae:fb:b5:80:1b:12:f9: 8a:16:59:5f:6c:8c:2f:33:d4:58:5f:1d:ee:16:2a: 76:5c:fc:71:f5:de:a3:26:ec:ca:83:0a:6e:3b:83: e4:dc:69:e2:9f:ea:08:69:d3:7d:e3:fd:58:72:cc: 78:0a:70:e2:86:20:94:26:a5:0d:f3:6f:d3:bb:44: 90:12:d8:76:4b:c1:dd:f5:e0:49:1b:ee:18:63:70: 13:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:65:EC:4D:0C:E6:A9:45:57:67:F8:F8:07:FB:FD:43:9D:7C:11:9F X509v3 Authority Key Identifier: keyid:18:5B:C8:F7:95:FC:60:E1:63:D6:41:A0:1B:AA:51:0B:F9:53:C3:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/185BC8F795FC60E163D641A01BAA510BF953C375.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/185BC8F795FC60E163D641A01BAA510BF953C375.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1135050512157114409/0/323430343a373234303a323030383a3a2f34382d3438203d3e203539303734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7240:2008::/48 Signature Algorithm: sha256WithRSAEncryption a9:25:ef:0c:d5:da:21:27:f1:a1:16:0f:5d:8b:29:c2:77:a0: 27:09:65:c3:b9:9e:4d:14:6f:2a:70:8b:2d:6f:26:31:d5:23: 49:f8:c3:3d:54:ab:77:2e:ac:9c:b9:3f:a0:18:85:05:ed:72: 91:02:60:95:29:2a:cd:0b:79:39:a2:2b:43:b7:70:3c:d9:ed: 79:eb:68:5a:8f:b7:b3:fc:40:e8:42:68:f4:2d:2b:30:03:52: c3:4b:75:f0:75:06:1d:56:f8:7d:08:43:35:d2:44:27:d8:cb: 87:c2:0a:b0:cd:4b:23:70:63:a4:25:df:5c:e3:f6:a9:9e:91: 69:d7:ae:db:e6:6d:11:7c:88:b2:72:95:81:6e:d7:93:60:5b: a2:df:73:73:b8:16:cc:ce:5c:9a:a2:36:a9:a5:fe:ff:01:00: 75:52:cc:78:34:5a:d0:e0:7f:cf:40:15:45:07:b7:f7:6a:c2: da:bd:c3:8c:4f:ab:99:4a:fd:1a:c9:23:cf:e8:6f:70:ec:e1: 05:5a:d0:17:5f:93:48:f2:d3:3e:2f:bd:be:01:ca:dd:3b:48: 12:9b:29:b1:65:57:92:23:ab:50:85:ed:51:9e:ec:49:2b:0d: 2b:de:e7:a2:f9:0f:ff:14:d5:57:65:e5:4f:20:3b:6a:3d:d0: a6:f9:a2:86 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUF+za0uRagcWvcgAIfrWg+P94geswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTg1QkM4Rjc5NUZDNjBFMTYzRDY0MUEwMUJBQTUxMEJG OTUzQzM3NTAeFw0yNjA5MDgwMzU1MDBaFw0yNzA5MDcwNDAwMDBaMDMxMTAvBgNV BAMTKEI2NjVFQzREMENFNkE5NDU1NzY3RjhGODA3RkJGRDQzOUQ3QzExOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdPz9C/gLTMERQIqNPkeDnMyT oLWuv6eqMXMF/lez0xHmbeAX+3EGQFIfJDbFlrLwexHT393koZ4776LloI/wbIOC A2JjdXiy0SZ4UB79jsRspsj0OAx0gVYrzmZTdx1tEyiZ0gjLIFpKI1IydyqkCbr7 +Bxa5oqDU+RlQhp/t3eUqJS6dKYn8RrOLo+gKha5C7TOMDEB8WOxBP56JrVwZPtg 1GvzOfC+7fcirvu1gBsS+YoWWV9sjC8z1FhfHe4WKnZc/HH13qMm7MqDCm47g+Tc aeKf6ghp033j/VhyzHgKcOKGIJQmpQ3zb9O7RJAS2HZLwd314Ekb7hhjcBNFAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUtmXsTQzmqUVXZ/j4B/v9Q518EZ8wHwYDVR0j BBgwFoAUGFvI95X8YOFj1kGgG6pRC/lTw3UwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEz NTA1MDUxMjE1NzExNDQwOS8wLzE4NUJDOEY3OTVGQzYwRTE2M0Q2NDFBMDFCQUE1 MTBCRjk1M0MzNzUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTg1QkM4Rjc5NUZDNjBFMTYzRDY0MUEwMUJBQTUxMEJGOTUzQzM3NS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTM1MDUwNTEyMTU3MTE0NDA5LzAvMzIzNDMwMzQz YTM3MzIzNDMwM2EzMjMwMzAzODNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDM1Mzkz MDM3MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkBHJAIAgwDQYJKoZIhvcNAQELBQADggEBAKkl7wzV 2iEn8aEWD12LKcJ3oCcJZcO5nk0Ubypwiy1vJjHVI0n4wz1Uq3curJy5P6AYhQXt cpECYJUpKs0LeTmiK0O3cDzZ7XnraFqPt7P8QOhCaPQtKzADUsNLdfB1Bh1W+H0I QzXSRCfYy4fCCrDNSyNwY6Ql31zj9qmekWnXrtvmbRF8iLJylYFu15NgW6Lfc3O4 FszOXJqiNqml/v8BAHVSzHg0WtDgf89AFUUHt/dqwtq9w4xPq5lK/RrJI8/ob3Ds 4QVa0Bdfk0jy0z4vvb4Byt07SBKbKbFlV5Ijq1CF7VGe7EkrDSve56L5D/8U1Vdl 5U8gO2o90Kb5ooY= -----END CERTIFICATE-----Generated at Wed Oct 14 16:14:33 2026 by rpki-client