$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a393030303a3a2f34382d3634203d3e20313331353136.roa File: 323430373a323363303a393030303a3a2f34382d3634203d3e20313331353136.roa (raw, json) Hash identifier: r7RuRxDknaWXm06Dy5betKYQwsDUO7ouhImWyjv2B6g= Subject key identifier: 2F:DE:49:8E:A3:8B:64:85:94:62:15:58:34:22:85:00:E9:91:D7:82 Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D Certificate serial: 7EF39DAB8AF4F2A3F4EFE11609A1D2285FE2F2E0 Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a393030303a3a2f34382d3634203d3e20313331353136.roa Signing time: Tue 14 Apr 2026 09:21:47 +0000 ROA not before: Tue 14 Apr 2026 09:16:47 +0000 ROA not after: Tue 13 Apr 2027 09:21:47 +0000 asID: 131516 IP address blocks: 2407:23c0:9000::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 14:52:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f3:9d:ab:8a:f4:f2:a3:f4:ef:e1:16:09:a1:d2:28:5f:e2:f2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D Validity Not Before: Apr 14 09:16:47 2026 GMT Not After : Apr 13 09:21:47 2027 GMT Subject: CN=2FDE498EA38B64859462155834228500E991D782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:64:04:89:40:79:e9:a8:44:e9:73:ee:82:b0: 02:db:57:04:8e:15:37:59:03:95:9c:32:e5:57:80: 9c:eb:5d:39:b6:db:59:13:62:c8:e7:59:8e:23:3b: 09:e9:4d:f4:52:6b:e6:58:82:a8:3d:0f:95:c2:fe: a7:91:e6:f8:5e:04:6e:03:4e:68:68:e6:11:48:ea: 6b:56:d8:a5:17:e5:5d:48:9b:17:1b:ce:c8:8c:1b: e6:7b:35:0b:56:99:b1:ec:c2:7f:c0:34:e4:5d:16: 4c:19:fe:16:fa:96:2c:3d:1c:ed:27:82:b9:64:02: b7:24:38:0c:df:6d:ff:f9:d9:e8:e7:5d:e0:ac:51: 35:d6:e7:f0:f1:f2:be:89:ca:8b:a0:a9:5d:a6:b3: f1:9d:ea:83:1a:57:23:c3:6f:6b:27:fb:51:ee:a5: 62:96:51:37:6e:61:65:d3:d0:c7:dd:f5:d4:9a:5c: 1a:f6:b1:84:32:d8:8d:87:18:f3:84:99:f9:a5:09: 40:ac:8a:63:18:37:bd:57:b1:12:e6:07:5d:78:89: 34:52:67:42:2b:2e:3c:8d:c2:42:a9:be:43:59:e9: a1:41:f2:50:4d:af:4a:6a:11:e4:5d:00:4a:87:90: d5:3d:7b:35:e1:f4:0c:72:80:fd:20:8d:c7:8f:48: 4a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:DE:49:8E:A3:8B:64:85:94:62:15:58:34:22:85:00:E9:91:D7:82 X509v3 Authority Key Identifier: keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/323430373a323363303a393030303a3a2f34382d3634203d3e20313331353136.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:23c0:9000::/48 Signature Algorithm: sha256WithRSAEncryption 32:dc:55:f7:41:d3:8c:d9:38:11:aa:09:10:97:12:2a:a3:e9: 73:f5:61:a9:11:db:eb:63:18:e6:a4:d3:73:35:95:e1:d5:ca: cd:cc:23:db:d1:5c:46:c4:30:de:6e:94:29:21:22:71:69:d1: 81:a0:c6:21:cf:19:64:1e:63:59:1a:e2:c4:6f:57:1f:3b:76: c2:9f:37:e4:c0:68:05:b6:f4:75:3e:0a:86:06:cd:d3:52:0f: 96:23:e1:39:69:df:89:40:67:a5:36:30:ee:92:5f:e7:fb:92: 1c:35:89:93:19:8f:6d:6b:7e:31:64:38:12:c0:f4:ba:4d:4a: 0c:fd:e3:a2:29:2a:e7:46:ae:35:c9:61:fd:93:ca:04:66:0c: ad:90:f4:8e:7b:fe:c4:75:ae:95:53:35:69:5d:de:dc:d4:28: 5f:d0:ef:aa:33:f3:b6:53:5f:f1:65:7f:ea:6f:a5:1b:3c:39: e2:ad:e5:1b:9d:5b:ff:77:4c:3b:27:c2:f8:a9:c4:0d:d2:49: 5b:70:f7:d8:a6:ca:11:75:3b:0c:8e:0f:ff:8b:8b:69:ba:b7: 45:b6:14:f6:52:90:be:c0:1e:71:97:32:de:00:ab:31:a7:95: b7:14:12:69:5b:af:7c:46:e0:18:69:f7:3f:2a:8e:e4:0e:06: 8e:de:8f:d6 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUfvOdq4r08qP07+EWCaHSKF/i8uAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThC QUQzQzQyRDAeFw0yNjA0MTQwOTE2NDdaFw0yNzA0MTMwOTIxNDdaMDMxMTAvBgNV BAMTKDJGREU0OThFQTM4QjY0ODU5NDYyMTU1ODM0MjI4NTAwRTk5MUQ3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZASJQHnpqETpc+6CsALbVwSO FTdZA5WcMuVXgJzrXTm221kTYsjnWY4jOwnpTfRSa+ZYgqg9D5XC/qeR5vheBG4D Tmho5hFI6mtW2KUX5V1ImxcbzsiMG+Z7NQtWmbHswn/ANORdFkwZ/hb6liw9HO0n grlkArckOAzfbf/52ejnXeCsUTXW5/Dx8r6JyougqV2ms/Gd6oMaVyPDb2sn+1Hu pWKWUTduYWXT0Mfd9dSaXBr2sYQy2I2HGPOEmfmlCUCsimMYN71XsRLmB114iTRS Z0IrLjyNwkKpvkNZ6aFB8lBNr0pqEeRdAEqHkNU9ezXh9AxygP0gjcePSErNAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQUL95JjqOLZIWUYhVYNCKFAOmR14IwHwYDVR0j BBgwFoAUJcZZYZWxYkCaWvqpJXDyWLrTxC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTkxMTIxNjk5NjM1NS8wLzI1QzY1OTYxOTVCMTYyNDA5QTVBRkFBOTI1NzBG MjU4QkFEM0M0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjVDNjU5NjE5NUIxNjI0MDlBNUFGQUE5MjU3MEYyNThCQUQzQzQyRC5jZXIw gZkGCCsGAQUFBwELBIGMMIGJMIGGBggrBgEFBQcwC4Z6cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE2OTk2MzU1LzAvMzIzNDMwMzcz YTMyMzM2MzMwM2EzOTMwMzAzMDNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMxMzMz MTM1MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB BwEB/wQTMBEwDwQCAAIwCQMHACQHI8CQADANBgkqhkiG9w0BAQsFAAOCAQEAMtxV 90HTjNk4EaoJEJcSKqPpc/VhqRHb62MY5qTTczWV4dXKzcwj29FcRsQw3m6UKSEi cWnRgaDGIc8ZZB5jWRrixG9XHzt2wp835MBoBbb0dT4KhgbN01IPliPhOWnfiUBn pTYw7pJf5/uSHDWJkxmPbWt+MWQ4EsD0uk1KDP3joikq50auNclh/ZPKBGYMrZD0 jnv+xHWulVM1aV3e3NQoX9DvqjPztlNf8WV/6m+lGzw54q3lG51b/3dMOyfC+KnE DdJJW3D32KbKEXU7DI4P/4uLabq3RbYU9lKQvsAecZcy3gCrMaeVtxQSaVuvfEbg GGn3PyqO5A4Gjt6P1g== -----END CERTIFICATE-----Generated at Fri Apr 17 20:32:48 2026 by rpki-client