$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a393030303a3a2f34382d3438203d3e20313331353136.roa File: 323430373a323363303a393030303a3a2f34382d3438203d3e20313331353136.roa (raw, json) Hash identifier: HooXl0STL7+vA4y5loKAhiQ0ttCXS6FWqk90oFrQCFE= Subject key identifier: FF:AA:CD:1D:39:5B:73:A1:6E:D5:51:24:06:0B:7E:13:56:63:8C:16 Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 145ED3EFDA8B78CEC7528A182A288A4560ACC264 Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a393030303a3a2f34382d3438203d3e20313331353136.roa Signing time: Fri 12 Jun 2026 17:53:41 +0000 ROA not before: Fri 12 Jun 2026 17:48:41 +0000 ROA not after: Fri 11 Jun 2027 17:53:41 +0000 asID: 131516 IP address blocks: 2407:23c0:9000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 14:06:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:5e:d3:ef:da:8b:78:ce:c7:52:8a:18:2a:28:8a:45:60:ac:c2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Jun 12 17:48:41 2026 GMT Not After : Jun 11 17:53:41 2027 GMT Subject: CN=FFAACD1D395B73A16ED55124060B7E1356638C16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:cb:c1:7f:83:3b:cc:cc:5b:8d:ba:0b:e2: 33:c4:1c:aa:50:f9:92:d6:40:c9:88:1d:2a:cc:27: 81:89:53:3c:46:9c:79:04:07:ef:85:70:7b:6d:a0: ba:dc:c6:74:97:fc:ae:e0:c9:25:3f:8a:60:1e:08: 50:ac:b3:9f:d8:19:02:09:2a:22:57:95:ab:ea:a1: 5e:02:3b:4b:07:e2:6e:08:33:de:1f:d8:fc:0b:88: 01:ab:45:e6:89:0e:02:1f:12:12:69:34:41:77:6d: ed:e9:18:35:cc:82:62:ba:40:f4:6f:ee:48:9e:8a: 75:06:e5:4f:08:c5:fe:22:42:31:aa:0b:f2:bf:d9: da:df:d9:e4:08:0d:eb:d6:c7:a4:77:53:05:72:45: c1:49:98:78:02:f8:fe:a4:53:59:9b:52:54:a1:fd: 31:ac:d7:5b:7c:67:56:48:99:55:5f:2f:e2:eb:35: 16:fb:16:b2:e6:55:2d:ec:fc:1b:75:73:b5:d5:4e: 26:30:6b:bf:a2:a4:40:3b:ab:5e:f5:7b:1b:28:6f: cc:4d:73:d2:90:af:65:35:e4:08:e4:7a:1c:e9:fc: 11:55:28:e1:bf:9e:f7:04:f6:6f:5b:71:37:b4:e5: 21:6e:54:12:7e:f7:03:ec:6a:24:6f:7f:fe:93:32: d3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:AA:CD:1D:39:5B:73:A1:6E:D5:51:24:06:0B:7E:13:56:63:8C:16 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a393030303a3a2f34382d3438203d3e20313331353136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:23c0:9000::/48 Signature Algorithm: sha256WithRSAEncryption 2a:1e:d2:8e:d8:d1:e4:a9:3a:8d:82:c4:9a:af:e3:5e:88:21: 15:9d:fd:a5:2e:57:61:69:37:36:99:25:78:d0:fd:0e:bc:8c: 7a:08:94:a1:e4:3e:79:fa:22:07:b9:44:90:9a:85:a6:c9:06: b0:80:d6:fb:37:98:a1:03:fa:b2:73:4b:98:e3:14:25:04:a5: 84:66:d2:be:9b:5f:9c:bc:ff:2f:10:4c:49:9b:4b:16:04:b7: 80:be:25:52:6d:1d:57:65:3c:75:4d:04:c8:07:ca:4a:00:a9: b2:5a:09:3e:e5:6b:c1:a2:5f:8e:e4:76:03:c7:bd:e9:97:c0: 54:25:33:64:af:cf:98:ef:ca:3f:95:ca:bd:5c:d7:95:bf:a3: 79:4d:10:83:84:b0:1a:a9:aa:4f:a9:9a:04:cd:6c:a6:8e:b3: eb:70:81:73:b5:6f:56:86:d0:49:c2:f9:1f:9b:c6:94:2b:93: 5d:a5:9d:2f:b3:a5:ec:20:2b:f9:07:c2:fa:f6:a6:f4:89:95: a3:d9:d0:01:73:f7:21:70:96:0a:22:90:a8:9a:87:3d:b3:b0: 81:3f:88:57:18:23:bc:ce:a1:d2:e0:8e:e4:e9:d9:bd:82:4e: d0:12:c9:c0:e6:f0:1c:b3:ee:74:a7:b8:f0:e5:d7:09:c9:ec: 8e:33:01:e9 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUFF7T79qLeM7HUooYKiiKRWCswmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA2MTIxNzQ4NDFaFw0yNzA2MTExNzUzNDFaMDMxMTAvBgNV BAMTKEZGQUFDRDFEMzk1QjczQTE2RUQ1NTEyNDA2MEI3RTEzNTY2MzhDMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMiMvBf4M7zMxbjboL4jPEHKpQ +ZLWQMmIHSrMJ4GJUzxGnHkEB++FcHttoLrcxnSX/K7gySU/imAeCFCss5/YGQIJ KiJXlavqoV4CO0sH4m4IM94f2PwLiAGrReaJDgIfEhJpNEF3be3pGDXMgmK6QPRv 7kieinUG5U8Ixf4iQjGqC/K/2drf2eQIDevWx6R3UwVyRcFJmHgC+P6kU1mbUlSh /TGs11t8Z1ZImVVfL+LrNRb7FrLmVS3s/Bt1c7XVTiYwa7+ipEA7q171exsob8xN c9KQr2U15Ajkehzp/BFVKOG/nvcE9m9bcTe05SFuVBJ+9wPsaiRvf/6TMtMDAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQU/6rNHTlbc6Fu1VEkBgt+E1ZjjBYwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE2OTk2MzU1LzAvMzIzNDMwMzcz YTMyMzM2MzMwM2EzOTMwMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMz MTM1MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQHI8CQADANBgkqhkiG9w0BAQsFAAOCAQEAKh7S jtjR5Kk6jYLEmq/jXoghFZ39pS5XYWk3NpkleND9DryMegiUoeQ+efoiB7lEkJqF pskGsIDW+zeYoQP6snNLmOMUJQSlhGbSvptfnLz/LxBMSZtLFgS3gL4lUm0dV2U8 dU0EyAfKSgCpsloJPuVrwaJfjuR2A8e96ZfAVCUzZK/PmO/KP5XKvVzXlb+jeU0Q g4SwGqmqT6maBM1spo6z63CBc7VvVobQScL5H5vGlCuTXaWdL7Ol7CAr+QfC+vam 9ImVo9nQAXP3IXCWCiKQqJqHPbOwgT+IVxgjvM6h0uCO5OnZvYJO0BLJwObwHLPu dKe48OXXCcnsjjMB6Q== -----END CERTIFICATE-----Generated at Sun Jun 14 02:48:36 2026 by rpki-client