$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a373a3a2f34382d3438203d3e203137343930.roa File: 323430313a396130303a373a3a2f34382d3438203d3e203137343930.roa (raw, json) Hash identifier: Ejzf6ECRZr8TMMbk9Fcen/daT4ZIbkgFcVAHvCYvUzY= Subject key identifier: 61:F8:D2:74:12:F1:7D:04:91:33:EF:2B:96:0C:7D:65:33:27:7F:C9 Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456 Certificate serial: 760AD284425836C5240B22E8F833CBB71DBDAF04 Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a373a3a2f34382d3438203d3e203137343930.roa Signing time: Mon 01 Jun 2026 02:14:48 +0000 ROA not before: Mon 01 Jun 2026 02:09:48 +0000 ROA not after: Mon 31 May 2027 02:14:48 +0000 asID: 17490 IP address blocks: 2401:9a00:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0a:d2:84:42:58:36:c5:24:0b:22:e8:f8:33:cb:b7:1d:bd:af:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456 Validity Not Before: Jun 1 02:09:48 2026 GMT Not After : May 31 02:14:48 2027 GMT Subject: CN=61F8D27412F17D049133EF2B960C7D6533277FC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:da:2d:ca:8a:c2:22:c0:51:d5:2d:f1:a3: 43:4d:05:cf:16:ad:b0:8e:f2:6e:58:aa:82:a3:ad: ff:4e:89:79:ac:78:e8:7c:66:66:26:7f:f5:e7:ad: bc:21:93:d6:ca:00:ec:e3:b0:70:57:8d:89:90:a5: bb:0e:8a:e8:d3:e8:c2:44:39:a6:22:92:f6:fd:b6: 6b:09:f5:3a:64:c1:83:f5:63:3e:11:b7:8d:2a:97: de:7b:f9:e7:84:58:da:5c:3e:96:c3:31:e3:c6:79: 67:7b:d7:73:52:0d:25:45:74:35:05:1f:43:32:11: af:10:23:27:f0:d5:ff:ec:01:14:0b:58:85:e3:dc: 90:1a:5d:35:20:a4:ee:ae:f7:5d:45:1e:a9:6d:64: d9:d5:91:15:17:5a:67:a7:d4:ca:fa:70:48:60:7b: 54:30:be:0c:68:a8:ad:02:75:69:e7:13:97:79:97: 07:b7:0e:86:be:ec:a4:fb:07:d5:90:a0:54:fa:0a: 50:53:98:86:81:04:fd:94:6d:ec:4a:3c:d3:02:02: ee:ce:ad:64:dc:21:8f:d2:d2:4a:f6:c1:9c:1c:2a: bc:fc:a5:6f:71:d8:bc:41:1e:ac:68:cc:80:13:31: 1c:d3:99:38:51:84:a0:45:f1:6c:17:9b:c9:49:9d: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F8:D2:74:12:F1:7D:04:91:33:EF:2B:96:0C:7D:65:33:27:7F:C9 X509v3 Authority Key Identifier: keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a373a3a2f34382d3438203d3e203137343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:9a00:7::/48 Signature Algorithm: sha256WithRSAEncryption 85:f5:52:d3:02:49:53:83:31:e4:b7:5a:79:f2:fa:2f:57:22: bf:5f:78:07:c9:b4:8b:a7:be:13:2c:a1:13:8b:8a:cb:36:45: 00:cc:b1:55:62:56:fb:3b:e6:d1:64:99:51:c7:9e:b0:03:bf: 93:91:d3:f1:cf:6a:d2:1d:38:bb:f2:08:c1:0f:a0:fa:46:f3: f2:8d:8d:f5:77:49:88:05:72:9f:5f:d6:58:10:0c:b5:c5:b3: 2b:26:45:8e:d4:a4:da:bd:8b:1f:5d:4c:e8:c6:32:20:7a:69: e2:40:06:85:eb:d4:03:c9:f0:2c:d2:51:69:23:37:32:2b:16: 16:88:9d:b3:5b:3c:8e:2d:f0:ca:47:6d:15:b3:95:5e:8d:f2: a7:c5:2b:08:03:3d:b9:8f:4d:8e:d2:fb:27:67:89:90:4b:3c: 39:b2:ef:88:4b:87:08:23:03:61:95:72:c2:b7:5f:2e:75:6f: eb:10:1b:69:86:ea:26:9e:91:69:a6:1d:e0:c5:7e:cc:63:08: 63:d1:31:23:77:de:6e:05:4e:f8:4d:0b:c0:b9:ae:d6:ad:cb: 28:b2:b0:50:1e:55:f3:37:ae:45:1c:63:19:19:1d:31:39:ad: 48:19:7a:c6:77:73:ef:04:ce:62:82:bf:90:ef:5c:e6:1a:e9: 4c:fb:9b:a2 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUdgrShEJYNsUkCyLo+DPLtx29rwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4 NUM0NjQ1NjAeFw0yNjA2MDEwMjA5NDhaFw0yNzA1MzEwMjE0NDhaMDMxMTAvBgNV BAMTKDYxRjhEMjc0MTJGMTdEMDQ5MTMzRUYyQjk2MEM3RDY1MzMyNzdGQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX1totyorCIsBR1S3xo0NNBc8W rbCO8m5YqoKjrf9OiXmseOh8ZmYmf/Xnrbwhk9bKAOzjsHBXjYmQpbsOiujT6MJE OaYikvb9tmsJ9TpkwYP1Yz4Rt40ql957+eeEWNpcPpbDMePGeWd713NSDSVFdDUF H0MyEa8QIyfw1f/sARQLWIXj3JAaXTUgpO6u911FHqltZNnVkRUXWmen1Mr6cEhg e1QwvgxoqK0CdWnnE5d5lwe3Doa+7KT7B9WQoFT6ClBTmIaBBP2UbexKPNMCAu7O rWTcIY/S0kr2wZwcKrz8pW9x2LxBHqxozIATMRzTmThRhKBF8WwXm8lJnc1HAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUYfjSdBLxfQSRM+8rlgx9ZTMnf8kwHwYDVR0j BBgwFoAUUlNWWifAbIAACWMUAvWm7oXEZFYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTY0MzY1MS8wLzUyNTM1NjVBMjdDMDZDODAwMDA5NjMxNDAyRjVB NkVFODVDNDY0NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4NUM0NjQ1Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU2NDM2NTEvMC8zMjM0MzAzMTNh Mzk2MTMwMzAzYTM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNzM0MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBmgAABzANBgkqhkiG9w0BAQsFAAOCAQEAhfVS0wJJU4Mx5Lda efL6L1civ194B8m0i6e+EyyhE4uKyzZFAMyxVWJW+zvm0WSZUceesAO/k5HT8c9q 0h04u/IIwQ+g+kbz8o2N9XdJiAVyn1/WWBAMtcWzKyZFjtSk2r2LH11M6MYyIHpp 4kAGhevUA8nwLNJRaSM3MisWFoids1s8ji3wykdtFbOVXo3yp8UrCAM9uY9NjtL7 J2eJkEs8ObLviEuHCCMDYZVywrdfLnVv6xAbaYbqJp6RaaYd4MV+zGMIY9ExI3fe bgVO+E0LwLmu1q3LKLKwUB5V8zeuRRxjGRkdMTmtSBl6xndz7wTOYoK/kO9c5hrp TPubog== -----END CERTIFICATE-----Generated at Sun Jun 14 03:36:45 2026 by rpki-client