$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430373a626330303a3a2f33322d3438203d3e203337393633.roa File: 323430373a626330303a3a2f33322d3438203d3e203337393633.roa (raw, json) Hash identifier: +haY8UqkEWYU9s9FGkdagnnD2aOzR+OUWWpUy84haQI= Subject key identifier: 19:17:61:36:5C:82:3F:90:28:57:86:20:7F:FD:A9:49:38:A5:78:98 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 196C12AF23C432C3B9EECE5843DEA8F2F70E5780 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430373a626330303a3a2f33322d3438203d3e203337393633.roa Signing time: Thu 26 Feb 2026 03:39:41 +0000 ROA not before: Thu 26 Feb 2026 03:34:41 +0000 ROA not after: Thu 25 Feb 2027 03:39:41 +0000 asID: 37963 IP address blocks: 2407:bc00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Mar 2026 23:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:6c:12:af:23:c4:32:c3:b9:ee:ce:58:43:de:a8:f2:f7:0e:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Feb 26 03:34:41 2026 GMT Not After : Feb 25 03:39:41 2027 GMT Subject: CN=191761365C823F90285786207FFDA94938A57898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:88:6e:ae:4f:78:7b:be:48:f0:05:94:22: 5e:ce:f8:30:46:72:c9:be:99:24:dc:ed:74:a3:7e: 90:b1:17:c2:5a:39:92:cd:cd:01:95:b7:1a:27:ac: d0:0c:0f:88:54:96:32:3e:6a:e6:b7:96:11:89:b3: aa:52:ab:a6:e2:0a:4d:bb:52:77:a0:0c:65:39:4d: 6b:3f:ef:0d:0a:54:20:bf:af:de:02:d6:23:6b:53: b6:d0:19:c1:94:c3:7c:35:bd:71:fd:6a:fc:54:c8: 74:72:34:72:f0:0f:05:9e:d8:e7:86:bd:39:55:36: da:cf:9c:53:8b:2e:5d:75:24:a3:c5:13:1b:bf:e3: 5b:58:ce:c0:42:5c:4b:4d:47:a7:a4:0f:fd:ae:d8: 75:85:5c:a3:11:98:dd:3e:6f:21:b6:5d:84:cd:84: ca:78:1b:1e:d6:28:a7:2f:ff:cf:b2:f0:f4:84:19: 5c:e1:f2:7e:18:2e:99:9f:32:b2:5d:c0:e5:ab:4c: ed:46:61:41:86:bf:0a:db:3b:10:0f:46:e6:1a:3b: 28:49:42:4c:ea:89:36:06:e7:40:f7:90:2e:9f:93: 53:41:1e:24:a1:43:34:a4:2d:eb:30:df:16:35:c4: 4d:ca:6b:f8:cf:56:43:58:8c:33:3b:54:97:c0:13: b0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:17:61:36:5C:82:3F:90:28:57:86:20:7F:FD:A9:49:38:A5:78:98 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/323430373a626330303a3a2f33322d3438203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:bc00::/32 Signature Algorithm: sha256WithRSAEncryption 1a:ca:25:6a:20:96:d9:09:c7:1d:aa:04:23:56:37:6a:7a:4e: ad:dd:ac:ba:69:0e:b6:41:11:36:33:1d:1a:af:59:4b:95:15: ef:a0:da:5d:77:6f:19:1d:f9:3f:23:0a:87:3b:36:75:67:c0: 80:5d:3b:6a:61:66:a4:49:2e:18:c5:d6:7d:9b:ed:ee:b8:63: d5:51:3f:ee:7c:f6:ac:09:31:15:5e:84:20:18:d6:3b:39:6e: d0:0a:f7:53:ad:08:d6:2c:28:ba:50:a0:e6:8b:b4:0f:b0:66: a1:dd:78:28:f1:62:44:97:4d:25:2c:a8:12:c7:27:58:dc:d7: 33:54:36:df:61:1e:c2:f1:a0:21:e4:83:4b:82:19:25:8b:75: 0f:3a:2d:cf:95:d9:14:9e:c8:76:88:b2:4a:f4:95:d1:c4:18: 63:97:82:a3:64:36:e0:f3:83:70:2d:29:78:61:87:ea:0c:fb: 0a:3a:31:a2:75:bd:a0:79:0a:a8:42:54:ec:67:d9:39:d2:5e: 5c:46:b6:ab:76:c6:9e:44:73:98:ff:f6:05:e2:6f:3a:3a:9a: 6b:66:45:75:e2:12:f4:bf:94:0c:21:8e:5c:bd:66:70:d0:ee: e5:b3:5c:70:06:a7:3a:8e:bf:24:e9:fe:19:da:a6:ed:ca:f3: b8:a5:4c:ba -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUGWwSryPEMsO57s5YQ96o8vcOV4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjAyMjYwMzM0NDFaFw0yNzAyMjUwMzM5NDFaMDMxMTAvBgNV BAMTKDE5MTc2MTM2NUM4MjNGOTAyODU3ODYyMDdGRkRBOTQ5MzhBNTc4OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJP4hurk94e75I8AWUIl7O+DBG csm+mSTc7XSjfpCxF8JaOZLNzQGVtxonrNAMD4hUljI+aua3lhGJs6pSq6biCk27 UnegDGU5TWs/7w0KVCC/r94C1iNrU7bQGcGUw3w1vXH9avxUyHRyNHLwDwWe2OeG vTlVNtrPnFOLLl11JKPFExu/41tYzsBCXEtNR6ekD/2u2HWFXKMRmN0+byG2XYTN hMp4Gx7WKKcv/8+y8PSEGVzh8n4YLpmfMrJdwOWrTO1GYUGGvwrbOxAPRuYaOyhJ QkzqiTYG50D3kC6fk1NBHiShQzSkLesw3xY1xE3Ka/jPVkNYjDM7VJfAE7BfAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUGRdhNlyCP5AoV4Ygf/2pSTileJgwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzIzNDMwMzczYTYy NjMzMDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQHvAAwDQYJKoZIhvcNAQELBQADggEBABrKJWogltkJxx2qBCNWN2p6Tq3d rLppDrZBETYzHRqvWUuVFe+g2l13bxkd+T8jCoc7NnVnwIBdO2phZqRJLhjF1n2b 7e64Y9VRP+589qwJMRVehCAY1js5btAK91OtCNYsKLpQoOaLtA+wZqHdeCjxYkSX TSUsqBLHJ1jc1zNUNt9hHsLxoCHkg0uCGSWLdQ86Lc+V2RSeyHaIskr0ldHEGGOX gqNkNuDzg3AtKXhhh+oM+wo6MaJ1vaB5CqhCVOxn2TnSXlxGtqt2xp5Ec5j/9gXi bzo6mmtmRXXiEvS/lAwhjly9ZnDQ7uWzXHAGpzqOvyTp/hnapu3K87ilTLo= -----END CERTIFICATE-----Generated at Mon Mar 2 16:23:10 2026 by rpki-client