$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a666666663a3a2f34382d3438203d3e203338333535.roa File: 323430313a376530303a666666663a3a2f34382d3438203d3e203338333535.roa (raw, json) Hash identifier: B4BJlhUus8tyirjIaFKqqMplYcSijSoV1lH0TWBWjNw= Subject key identifier: 9C:C5:CD:A1:98:3A:10:99:3A:46:A1:BA:E6:B2:D0:9A:83:83:75:C7 Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Certificate serial: 3BF18E414A00B4307EA8CCD9A644E81DDAED824B Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a666666663a3a2f34382d3438203d3e203338333535.roa Signing time: Mon 01 Jun 2026 02:07:57 +0000 ROA not before: Mon 01 Jun 2026 02:02:57 +0000 ROA not after: Mon 31 May 2027 02:07:57 +0000 asID: 38355 IP address blocks: 2401:7e00:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 21:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f1:8e:41:4a:00:b4:30:7e:a8:cc:d9:a6:44:e8:1d:da:ed:82:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0 Validity Not Before: Jun 1 02:02:57 2026 GMT Not After : May 31 02:07:57 2027 GMT Subject: CN=9CC5CDA1983A10993A46A1BAE6B2D09A838375C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d9:82:ae:7a:e6:9d:36:35:8f:39:2e:cf:cc: 11:91:0a:a8:f8:62:fe:d2:0c:3a:92:4c:c7:5c:41: c2:2e:4f:fc:02:0b:e4:15:fd:1c:63:42:b9:25:bf: 03:57:ff:c9:e5:07:15:a0:4a:23:35:71:fd:b5:23: c2:f0:f5:77:0e:bc:b6:63:8f:6f:d2:c8:27:6f:2b: 85:cc:ae:66:d8:99:b3:41:6d:84:1d:ea:4a:f1:b4: ca:af:48:74:86:59:43:08:3e:6e:52:c6:b2:0a:10: 5e:c6:65:ce:2a:3e:63:26:65:85:8d:b0:3d:d4:ff: 26:0b:12:fd:a3:82:93:c6:c1:97:78:2d:54:72:00: 9f:61:ec:15:8b:b7:03:ba:a9:ff:b0:c1:71:7b:c6: 28:33:12:25:4e:e9:cd:d4:22:11:2d:07:f1:6a:ec: 4f:a5:72:88:bc:90:37:9a:0b:ad:b2:85:67:7c:59: 78:02:ad:fc:08:ff:a6:c2:8b:c7:9a:da:21:81:36: 91:4d:e4:3c:8d:38:1c:b2:d6:6a:3b:f1:c3:27:44: ec:75:ea:41:c5:7f:f3:ba:7c:77:b4:ad:7b:06:e8: 6b:0d:f0:0c:4c:d4:80:6b:5a:da:1f:b6:0d:bb:97: 2b:c8:7d:23:d8:eb:3b:80:52:11:b7:3b:f0:38:3f: 37:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C5:CD:A1:98:3A:10:99:3A:46:A1:BA:E6:B2:D0:9A:83:83:75:C7 X509v3 Authority Key Identifier: keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/323430313a376530303a666666663a3a2f34382d3438203d3e203338333535.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:7e00:ffff::/48 Signature Algorithm: sha256WithRSAEncryption b4:13:e9:70:bc:b5:82:5b:b9:58:ac:0d:f3:a8:46:29:d7:ef: 9f:11:44:a2:5d:89:4c:91:56:a2:86:b0:1e:ae:c2:7e:f6:92: 61:fd:f2:8b:9c:a8:94:17:81:63:12:35:17:b7:d1:3f:3d:8e: 9c:4b:1c:20:c4:a8:15:77:da:fd:de:6f:a4:3e:65:d8:39:b8: e7:2f:5c:d5:bf:61:2d:0f:90:8a:8c:73:2f:69:d3:c0:43:e7: 79:86:7d:54:85:e8:78:2e:f3:0f:48:fc:75:69:22:bf:74:8d: 9e:1c:e8:d1:5c:ec:c8:30:39:c5:5c:0e:bd:a1:e6:72:71:5e: 95:1c:f1:8a:b1:b5:1d:1d:0a:2f:7b:e2:fc:97:2f:d0:e5:75: c9:81:e4:02:06:56:5c:bd:43:12:d6:4d:6f:b5:67:41:18:87: c4:f7:7a:e6:68:47:e9:91:8a:3a:73:b3:85:fa:71:e2:c7:19: bc:d7:0e:2f:93:1e:d4:4b:ff:dd:ec:34:ae:8d:9c:f6:25:04: 93:e8:f6:c7:43:ff:6c:ad:94:46:ad:37:28:74:71:e6:84:fa: 36:9d:fa:72:11:13:dd:c6:a4:9a:cc:5b:46:98:88:3c:b7:3d: d8:44:59:8a:02:4b:26:3f:61:bd:da:9d:e9:39:63:59:52:c2: 9f:7f:4b:d1 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUO/GOQUoAtDB+qMzZpkToHdrtgkswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF Nzk5NUFFMDAeFw0yNjA2MDEwMjAyNTdaFw0yNzA1MzEwMjA3NTdaMDMxMTAvBgNV BAMTKDlDQzVDREExOTgzQTEwOTkzQTQ2QTFCQUU2QjJEMDlBODM4Mzc1QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq2YKueuadNjWPOS7PzBGRCqj4 Yv7SDDqSTMdcQcIuT/wCC+QV/RxjQrklvwNX/8nlBxWgSiM1cf21I8Lw9XcOvLZj j2/SyCdvK4XMrmbYmbNBbYQd6krxtMqvSHSGWUMIPm5SxrIKEF7GZc4qPmMmZYWN sD3U/yYLEv2jgpPGwZd4LVRyAJ9h7BWLtwO6qf+wwXF7xigzEiVO6c3UIhEtB/Fq 7E+lcoi8kDeaC62yhWd8WXgCrfwI/6bCi8ea2iGBNpFN5DyNOByy1mo78cMnROx1 6kHFf/O6fHe0rXsG6GsN8AxM1IBrWtoftg27lyvIfSPY6zuAUhG3O/A4PzdRAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUnMXNoZg6EJk6RqG65rLQmoODdccwHwYDVR0j BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODc4NDAzLzAvMzIzNDMwMzEz YTM3NjUzMDMwM2E2NjY2NjY2NjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzgz MzM1MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAX4A//8wDQYJKoZIhvcNAQELBQADggEBALQT6XC8 tYJbuVisDfOoRinX758RRKJdiUyRVqKGsB6uwn72kmH98oucqJQXgWMSNRe30T89 jpxLHCDEqBV32v3eb6Q+Zdg5uOcvXNW/YS0PkIqMcy9p08BD53mGfVSF6Hgu8w9I /HVpIr90jZ4c6NFc7MgwOcVcDr2h5nJxXpUc8YqxtR0dCi974vyXL9DldcmB5AIG Vly9QxLWTW+1Z0EYh8T3euZoR+mRijpzs4X6ceLHGbzXDi+THtRL/93sNK6NnPYl BJPo9sdD/2ytlEatNyh0ceaE+jad+nIRE93GpJrMW0aYiDy3PdhEWYoCSyY/Yb3a nek5Y1lSwp9/S9E= -----END CERTIFICATE-----Generated at Sun Jun 14 11:05:40 2026 by rpki-client