$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa File: 323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa (raw, json) Hash identifier: TVcdF/arW8w738tvKkvi8ma76os9r0OhW6sAsG52a5M= Subject key identifier: F5:E3:1E:E4:B9:3C:22:57:F3:40:CE:90:0F:34:53:12:B9:47:57:92 Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 18FAAF43414FB953E6019D1E3BA538960234158C Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:51:54 +0000 ROA not before: Wed 15 Apr 2026 07:46:54 +0000 ROA not after: Wed 14 Apr 2027 07:51:54 +0000 asID: 59078 IP address blocks: 2402:e7c0:1c0::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:fa:af:43:41:4f:b9:53:e6:01:9d:1e:3b:a5:38:96:02:34:15:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Apr 15 07:46:54 2026 GMT Not After : Apr 14 07:51:54 2027 GMT Subject: CN=F5E31EE4B93C2257F340CE900F345312B9475792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7f:80:5d:5e:f1:10:4a:63:82:58:df:79:06: 6d:33:f1:3a:8b:95:64:5b:df:15:ec:86:1d:28:8b: a3:c1:1b:db:6e:a7:ba:41:7b:5a:50:25:9b:82:2b: b5:2a:99:20:2a:8a:06:6d:59:8b:e6:b3:56:b2:b9: f9:cc:b1:03:c9:23:c4:48:c2:36:54:18:8c:a4:a4: 7e:99:4f:cd:f0:02:3f:82:f1:3f:3f:33:a9:1d:ff: a5:98:47:b1:ef:49:9c:3c:0a:37:57:1f:03:89:28: 47:f1:cd:d9:e2:9c:9d:ac:29:f9:1a:6c:5d:89:19: cf:71:c7:78:0e:b9:51:38:81:82:6b:9c:62:64:9d: 08:0d:14:71:b2:6a:df:95:31:84:78:0e:06:15:61: d8:ce:a8:25:c2:05:a5:d6:ce:e6:ed:32:38:40:30: d6:2c:39:bd:67:fa:3e:3c:c7:62:44:7c:81:d0:4c: f6:9c:28:4b:c3:24:14:e5:ed:91:be:d4:ce:ee:52: fa:ba:a7:2a:8c:0c:21:75:56:26:e1:80:e4:61:f8: 12:eb:6b:dd:91:dc:3e:50:37:69:1d:20:1d:26:64: 92:ef:6e:30:95:cc:c1:df:3f:89:ef:ea:2a:af:10: 6c:34:b5:6d:e2:68:ee:06:8c:e9:c3:e0:36:35:08: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:E3:1E:E4:B9:3C:22:57:F3:40:CE:90:0F:34:53:12:B9:47:57:92 X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3163303a3a2f34322d3432203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:e7c0:1c0::/42 Signature Algorithm: sha256WithRSAEncryption 4a:fd:7f:5e:05:9b:94:bd:00:61:73:de:b1:5f:1d:d2:41:f8: 46:6d:84:38:bf:9a:cf:13:81:35:3a:cf:31:07:2c:22:24:03: 5c:fe:50:63:c2:74:6e:eb:39:d3:0e:4b:6d:d3:56:08:a5:1f: cc:e9:fc:92:a7:01:fd:a9:db:40:cb:95:86:87:f1:4b:32:be: 4e:b5:c1:9e:01:6c:fc:00:99:df:29:8f:9a:89:db:eb:06:d0: 8e:99:f3:68:a2:b6:ec:53:41:11:9f:d7:dd:70:36:0f:a5:ea: a9:76:5e:68:ae:0c:1c:d4:3c:18:73:59:e3:9f:b9:bf:6a:46: 5d:b5:66:7b:b3:22:ca:4a:9b:f4:05:91:f9:df:09:15:ca:51: f4:e9:3c:de:03:0a:69:11:09:a6:98:55:66:cf:fd:31:93:ae: a4:3d:7e:56:b8:6e:9e:c3:1a:1f:32:77:f9:f6:e3:19:37:6f: 79:3b:75:38:b3:03:9a:9c:7d:bb:dc:c5:5c:0e:38:4b:24:98: 2e:ed:0e:64:c1:d2:5c:b5:15:88:f0:88:60:86:b6:bd:8e:ae: c3:cc:3c:86:49:7e:84:4f:d5:3c:ad:16:19:a9:3c:e6:d5:4d: 14:16:67:bf:26:1c:ff:2f:d9:67:e7:1c:4e:cd:ba:ed:f7:5e: ca:88:36:fa -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUGPqvQ0FPuVPmAZ0eO6U4lgI0FYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA0MTUwNzQ2NTRaFw0yNzA0MTQwNzUxNTRaMDMxMTAvBgNV BAMTKEY1RTMxRUU0QjkzQzIyNTdGMzQwQ0U5MDBGMzQ1MzEyQjk0NzU3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAf4BdXvEQSmOCWN95Bm0z8TqL lWRb3xXshh0oi6PBG9tup7pBe1pQJZuCK7UqmSAqigZtWYvms1ayufnMsQPJI8RI wjZUGIykpH6ZT83wAj+C8T8/M6kd/6WYR7HvSZw8CjdXHwOJKEfxzdninJ2sKfka bF2JGc9xx3gOuVE4gYJrnGJknQgNFHGyat+VMYR4DgYVYdjOqCXCBaXWzubtMjhA MNYsOb1n+j48x2JEfIHQTPacKEvDJBTl7ZG+1M7uUvq6pyqMDCF1VibhgORh+BLr a92R3D5QN2kdIB0mZJLvbjCVzMHfP4nv6iqvEGw0tW3iaO4GjOnD4DY1CAv/AgMB AAGjggIfMIICGzAdBgNVHQ4EFgQU9eMe5Lk8IlfzQM6QDzRTErlHV5IwHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzAvMzIzNDMwMzIz YTY1Mzc2MzMwM2EzMTYzMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNlMjAzNTM5MzAz NzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcGJALnwAHAMA0GCSqGSIb3DQEBCwUAA4IBAQBK/X9eBZuU vQBhc96xXx3SQfhGbYQ4v5rPE4E1Os8xBywiJANc/lBjwnRu6znTDktt01YIpR/M 6fySpwH9qdtAy5WGh/FLMr5OtcGeAWz8AJnfKY+aidvrBtCOmfNoorbsU0ERn9fd cDYPpeqpdl5orgwc1DwYc1njn7m/akZdtWZ7syLKSpv0BZH53wkVylH06TzeAwpp EQmmmFVmz/0xk66kPX5WuG6ewxofMnf59uMZN295O3U4swOanH273MVcDjhLJJgu 7Q5kwdJctRWI8Ihghra9jq7DzDyGSX6ET9U8rRYZqTzm1U0UFme/Jhz/L9ln5xxO zbrt917KiDb6 -----END CERTIFICATE-----Generated at Fri Apr 17 20:38:41 2026 by rpki-client