$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1088651015181303810/0/323430303a353430303a3a2f33322d3332203d3e2030.roa File: 323430303a353430303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: GHsGrth7ip4IuQtwHI1hcsguA2fNuYO4g2UTrLkxeMU= Subject key identifier: FE:0F:19:B8:BF:49:5E:E7:03:D9:85:C8:DB:5A:71:C4:70:56:66:D0 Certificate issuer: /CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Certificate serial: 09F3606A29E6DFC193B8E443C5DA1C1D2275A4AA Authority key identifier: D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/323430303a353430303a3a2f33322d3332203d3e2030.roa Signing time: Mon 13 Apr 2026 10:06:55 +0000 ROA not before: Mon 13 Apr 2026 10:01:55 +0000 ROA not after: Mon 12 Apr 2027 10:06:55 +0000 asID: 0 IP address blocks: 2400:5400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 12:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:f3:60:6a:29:e6:df:c1:93:b8:e4:43:c5:da:1c:1d:22:75:a4:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D5EF2A792166F94FBE33377E0239034ED2FC2F80 Validity Not Before: Apr 13 10:01:55 2026 GMT Not After : Apr 12 10:06:55 2027 GMT Subject: CN=FE0F19B8BF495EE703D985C8DB5A71C4705666D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:01:47:31:92:ab:e9:d8:b1:15:f6:05:ec: 13:aa:8d:ef:83:81:41:72:6c:0b:52:2b:0d:ab:94: 26:1a:8c:1f:15:c9:8a:b9:37:bc:94:20:7e:2a:48: 2d:dc:fc:af:35:78:45:12:48:4e:5c:8b:4f:9f:10: ea:80:ed:b5:60:94:1f:90:5c:e2:04:2a:0c:be:f2: 56:82:ad:93:d1:81:d1:27:e8:94:af:01:ad:36:ae: 18:80:f0:b9:2a:ed:5c:8a:1a:f4:d3:78:bc:d3:4b: 87:5b:c6:18:07:0e:e8:bd:60:d5:74:c6:7b:5a:d7: 33:b6:cb:3c:14:8c:c8:74:c0:12:dc:2e:57:74:29: 1e:f4:63:95:ac:7d:80:2b:74:82:8a:3c:dc:f0:4e: fc:74:b1:d7:5d:c5:90:fa:34:65:d3:a7:d0:b7:a6: d2:ac:af:08:24:ea:70:74:fd:f8:74:63:22:7e:18: 44:a1:ff:a6:70:05:cf:48:5d:c5:48:f5:82:90:66: 90:86:e6:f4:82:0c:67:ff:70:b8:4c:f9:7b:c7:06: 98:41:c7:81:bb:a2:de:0f:e7:d1:64:fd:b9:9a:9a: 32:ef:5c:db:1b:a4:a4:2f:09:13:6f:d5:49:ff:59: 65:95:24:6b:51:03:b1:5b:72:19:60:60:2d:46:a5: 38:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0F:19:B8:BF:49:5E:E7:03:D9:85:C8:DB:5A:71:C4:70:56:66:D0 X509v3 Authority Key Identifier: keyid:D5:EF:2A:79:21:66:F9:4F:BE:33:37:7E:02:39:03:4E:D2:FC:2F:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/D5EF2A792166F94FBE33377E0239034ED2FC2F80.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D5EF2A792166F94FBE33377E0239034ED2FC2F80.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1088651015181303810/0/323430303a353430303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:5400::/32 Signature Algorithm: sha256WithRSAEncryption 69:75:72:d7:c3:32:0b:f1:e8:d0:ab:67:c3:f0:27:3d:14:85: 4f:10:fb:a7:57:39:59:3e:22:98:a3:3b:e7:4c:51:bd:2d:b0: 16:c5:13:06:79:80:84:8f:36:19:5b:bf:67:d5:f8:53:62:3c: 01:ec:5b:14:18:da:12:78:ea:fa:af:0f:ef:09:0b:39:de:56: b6:07:bc:84:71:52:a9:42:dc:44:3f:ff:e6:26:ab:56:46:b7: 17:18:fa:2d:6e:a4:ff:53:8b:6a:1c:a6:49:d1:74:2f:34:ff: fc:32:72:99:1d:5b:a6:b2:3e:1a:e5:c5:32:66:58:0e:1d:82: d1:53:e4:48:71:de:03:47:38:38:5d:15:38:6b:eb:de:fc:25: 19:91:81:b7:5a:27:2d:e2:84:e8:e7:1f:8d:ba:f5:f7:bb:d9: ae:ce:e0:95:85:a9:6a:12:5a:2a:10:bc:77:33:68:31:4f:4a: 36:1e:20:29:58:af:6a:4d:9b:89:17:29:33:36:f7:f3:c9:e0: f1:6a:4e:66:94:e2:1a:d9:02:38:13:f3:e5:d9:f5:ee:7d:90: 95:59:38:5c:b4:d1:6e:c6:d0:ed:3f:a1:b4:34:36:ad:36:50: 01:87:b8:be:d0:b7:c7:2d:a8:79:7e:07:0a:81:37:57:8c:3f: 51:d0:8d:f5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUCfNgainm38GTuORDxdocHSJ1pKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVE MkZDMkY4MDAeFw0yNjA0MTMxMDAxNTVaFw0yNzA0MTIxMDA2NTVaMDMxMTAvBgNV BAMTKEZFMEYxOUI4QkY0OTVFRTcwM0Q5ODVDOERCNUE3MUM0NzA1NjY2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzwFHMZKr6dixFfYF7BOqje+D gUFybAtSKw2rlCYajB8VyYq5N7yUIH4qSC3c/K81eEUSSE5ci0+fEOqA7bVglB+Q XOIEKgy+8laCrZPRgdEn6JSvAa02rhiA8Lkq7VyKGvTTeLzTS4dbxhgHDui9YNV0 xnta1zO2yzwUjMh0wBLcLld0KR70Y5WsfYArdIKKPNzwTvx0sdddxZD6NGXTp9C3 ptKsrwgk6nB0/fh0YyJ+GESh/6ZwBc9IXcVI9YKQZpCG5vSCDGf/cLhM+XvHBphB x4G7ot4P59Fk/bmamjLvXNsbpKQvCRNv1Un/WWWVJGtRA7FbchlgYC1GpTgfAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU/g8ZuL9JXucD2YXI21pxxHBWZtAwHwYDVR0j BBgwFoAU1e8qeSFm+U++Mzd+AjkDTtL8L4AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 ODY1MTAxNTE4MTMwMzgxMC8wL0Q1RUYyQTc5MjE2NkY5NEZCRTMzMzc3RTAyMzkw MzRFRDJGQzJGODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDVFRjJBNzkyMTY2Rjk0RkJFMzMzNzdFMDIzOTAzNEVEMkZDMkY4MC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg4NjUxMDE1MTgxMzAzODEwLzAvMzIzNDMwMzAzYTM1 MzQzMDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAFQA MA0GCSqGSIb3DQEBCwUAA4IBAQBpdXLXwzIL8ejQq2fD8Cc9FIVPEPunVzlZPiKY ozvnTFG9LbAWxRMGeYCEjzYZW79n1fhTYjwB7FsUGNoSeOr6rw/vCQs53la2B7yE cVKpQtxEP//mJqtWRrcXGPotbqT/U4tqHKZJ0XQvNP/8MnKZHVumsj4a5cUyZlgO HYLRU+RIcd4DRzg4XRU4a+ve/CUZkYG3Wict4oTo5x+NuvX3u9muzuCVhalqEloq ELx3M2gxT0o2HiApWK9qTZuJFykzNvfzyeDxak5mlOIa2QI4E/Pl2fXufZCVWThc tNFuxtDtP6G0NDatNlABh7i+0LfHLah5fgcKgTdXjD9R0I31 -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:03 2026 by rpki-client