$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa File: 323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa (raw, json) Hash identifier: sugTkKdGLP+eMIetqzRTYoojUOQuvS9GIrb4IXdoo8A= Subject key identifier: 08:BE:6A:67:41:5D:8A:D5:AF:9E:0B:49:41:69:B8:0B:8F:D6:34:7B Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 240A133D05C91F397DEFDFB792ED46DD38829FF7 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa Signing time: Wed 15 Apr 2026 07:51:54 +0000 ROA not before: Wed 15 Apr 2026 07:46:54 +0000 ROA not after: Wed 14 Apr 2027 07:51:54 +0000 asID: 59078 IP address blocks: 2402:e7c0:200::/42 maxlen: 42 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:0a:13:3d:05:c9:1f:39:7d:ef:df:b7:92:ed:46:dd:38:82:9f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: Apr 15 07:46:54 2026 GMT Not After : Apr 14 07:51:54 2027 GMT Subject: CN=08BE6A67415D8AD5AF9E0B494169B80B8FD6347B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:48:71:c3:31:94:96:c6:fb:8b:ef:0d:00:18: a0:5a:37:10:94:b5:84:6a:43:1e:02:0a:ca:4e:66: 05:fc:0b:ca:46:98:8e:18:6f:62:d0:b4:4e:45:e5: ee:83:99:0d:89:9c:94:74:d9:4a:82:03:ce:79:50: 5f:6d:51:07:69:d8:72:d5:d9:f7:0d:ad:4c:90:28: 79:21:f9:d1:09:22:c3:9a:48:a5:39:51:5d:34:2e: 8d:37:b0:9e:82:53:24:a2:95:e2:bf:b4:64:f8:ef: 90:0d:f4:a9:49:5d:37:e9:a0:fd:10:6c:d4:25:9b: 50:db:3a:df:b0:be:07:39:01:1e:3e:ba:49:65:dc: 57:69:bc:34:3f:e2:45:e8:ee:32:eb:ff:58:77:a0: c3:8b:48:ce:59:c7:b7:98:b9:f3:75:0d:95:bf:e2: 8b:a4:8a:59:c4:48:f3:21:30:26:d9:29:2e:bb:b8: 60:2e:49:ba:9c:d2:f4:df:c9:63:76:23:a3:3b:69: 9f:41:a6:27:b9:9d:01:c6:2d:30:0f:ae:6b:f9:52: 11:7f:3a:dc:4d:fc:73:bd:3a:2c:3f:df:df:48:fe: 65:df:63:fd:22:60:fa:fc:fe:28:d2:bd:01:e9:b2: 3b:3a:58:49:46:8b:36:c3:19:11:7b:64:ed:32:f8: 09:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:BE:6A:67:41:5D:8A:D5:AF:9E:0B:49:41:69:B8:0B:8F:D6:34:7B X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/323430323a653763303a3230303a3a2f34322d3432203d3e203539303738.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:e7c0:200::/42 Signature Algorithm: sha256WithRSAEncryption 3e:76:ef:b0:b7:17:e4:6d:c5:e4:97:1b:8d:bb:50:54:9a:41: 6d:24:e1:d0:3e:13:b2:14:6a:37:e4:0d:14:7a:e4:ed:52:59: 2b:93:7d:fb:e2:24:14:ef:22:f6:16:14:4c:be:8e:98:a1:f6: aa:1d:c5:b2:83:ae:01:80:31:7f:b4:9a:1c:a3:c1:b8:f2:b5: c4:b2:0c:04:a2:8f:8f:6a:cd:e6:9d:ff:ce:4a:a6:32:01:e6: 5b:8c:7c:48:2a:64:53:e6:fd:ac:b8:96:3a:4f:9e:b4:1d:97: 1b:63:42:64:97:43:5a:2f:69:4a:18:cd:d9:00:e1:a1:45:26: 4d:c0:37:29:26:2b:6c:87:5b:6c:be:14:5a:e8:79:bf:de:d9: 0e:bf:9b:64:36:9c:da:c4:35:31:66:de:ee:67:28:b0:0d:b3: a3:5f:1b:da:4c:b5:3b:e3:94:73:a8:59:66:58:f2:e3:52:c9: 53:b3:28:8e:4c:e0:75:8d:69:3e:a0:36:5c:86:3e:b1:e0:28: bd:10:4e:dd:b9:e0:d6:14:9d:61:12:4d:6b:21:32:5d:a5:71: 43:ad:d4:6f:8a:8d:6d:dd:d7:e4:96:1d:d3:37:63:35:00:86: c8:dc:43:0e:9c:6f:19:59:9c:db:52:8a:14:82:38:59:71:7b: 8d:53:00:6e -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUJAoTPQXJHzl979+3ku1G3TiCn/cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0Iy NjVGOTZDRTAeFw0yNjA0MTUwNzQ2NTRaFw0yNzA0MTQwNzUxNTRaMDMxMTAvBgNV BAMTKDA4QkU2QTY3NDE1RDhBRDVBRjlFMEI0OTQxNjlCODBCOEZENjM0N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSHHDMZSWxvuL7w0AGKBaNxCU tYRqQx4CCspOZgX8C8pGmI4Yb2LQtE5F5e6DmQ2JnJR02UqCA855UF9tUQdp2HLV 2fcNrUyQKHkh+dEJIsOaSKU5UV00Lo03sJ6CUySileK/tGT475AN9KlJXTfpoP0Q bNQlm1DbOt+wvgc5AR4+ukll3FdpvDQ/4kXo7jLr/1h3oMOLSM5Zx7eYufN1DZW/ 4oukilnESPMhMCbZKS67uGAuSbqc0vTfyWN2I6M7aZ9Bpie5nQHGLTAPrmv5UhF/ OtxN/HO9Oiw/399I/mXfY/0iYPr8/ijSvQHpsjs6WElGizbDGRF7ZO0y+AknAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUCL5qZ0FditWvngtJQWm4C4/WNHswHwYDVR0j BBgwFoAUNoXayIKLPrSYl2FCKneqeyZfls4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDUyMzY1MS8wLzM2ODVEQUM4ODI4QjNFQjQ5ODk3NjE0MjJBNzdB QTdCMjY1Rjk2Q0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FBN0IyNjVGOTZDRS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzAvMzIzNDMwMzIz YTY1Mzc2MzMwM2EzMjMwMzAzYTNhMmYzNDMyMmQzNDMyMjAzZDNlMjAzNTM5MzAz NzM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcGJALnwAIAMA0GCSqGSIb3DQEBCwUAA4IBAQA+du+wtxfk bcXklxuNu1BUmkFtJOHQPhOyFGo35A0UeuTtUlkrk3374iQU7yL2FhRMvo6Yofaq HcWyg64BgDF/tJoco8G48rXEsgwEoo+Pas3mnf/OSqYyAeZbjHxIKmRT5v2suJY6 T560HZcbY0Jkl0NaL2lKGM3ZAOGhRSZNwDcpJitsh1tsvhRa6Hm/3tkOv5tkNpza xDUxZt7uZyiwDbOjXxvaTLU745RzqFlmWPLjUslTsyiOTOB1jWk+oDZchj6x4Ci9 EE7dueDWFJ1hEk1rITJdpXFDrdRvio1t3dfklh3TN2M1AIbI3EMOnG8ZWZzbUooU gjhZcXuNUwBu -----END CERTIFICATE-----Generated at Fri Apr 17 20:39:18 2026 by rpki-client