$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a663a3a2f34382d3438203d3e203137343930.roa File: 323430313a396130303a663a3a2f34382d3438203d3e203137343930.roa (raw, json) Hash identifier: /ojxASI/6dDTqH6qfVIU2lQSV/GcqOusYyU5C9w541I= Subject key identifier: 43:57:E6:BB:67:A3:6E:36:88:F7:FF:77:AD:82:74:C1:99:AB:2E:87 Certificate issuer: /CN=5253565A27C06C800009631402F5A6EE85C46456 Certificate serial: 74F0E26D04FF038F8363288EDF4ED1FE4BC65CA3 Authority key identifier: 52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a663a3a2f34382d3438203d3e203137343930.roa Signing time: Mon 01 Jun 2026 02:17:12 +0000 ROA not before: Mon 01 Jun 2026 02:12:12 +0000 ROA not after: Mon 31 May 2027 02:17:12 +0000 asID: 17490 IP address blocks: 2401:9a00:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f0:e2:6d:04:ff:03:8f:83:63:28:8e:df:4e:d1:fe:4b:c6:5c:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5253565A27C06C800009631402F5A6EE85C46456 Validity Not Before: Jun 1 02:12:12 2026 GMT Not After : May 31 02:17:12 2027 GMT Subject: CN=4357E6BB67A36E3688F7FF77AD8274C199AB2E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:54:df:c7:d0:bb:67:5f:44:3d:5b:ec:ac:5d: 23:a3:1c:37:5d:e5:07:45:03:04:18:1a:05:56:32: e8:4a:7f:81:58:f6:17:ca:c4:19:70:4f:c0:2a:07: 10:96:d2:1f:50:d6:9c:70:34:03:b1:3f:8a:f7:2f: 8d:61:9a:fa:64:ea:56:a4:a8:ef:10:9f:4f:bb:66: 4e:c4:2e:2b:19:ca:68:75:73:f4:e8:dd:d0:fa:6b: a0:65:8c:6e:e9:6e:75:94:7d:bb:07:af:28:95:0d: 85:bc:fa:cf:2e:e6:92:24:6d:51:60:ba:4f:58:4a: 35:69:d1:6b:e7:40:6e:76:a6:8d:70:74:b7:c0:68: 79:ab:ec:08:80:28:39:2b:f8:a5:3d:d8:c7:ac:4f: dc:a9:36:37:a6:42:a9:ec:e6:ae:57:6e:ae:a7:a4: 94:9d:0f:3c:7b:61:d9:31:0e:17:0f:80:0e:42:33: 55:b9:b4:5e:47:d5:40:ec:eb:ed:63:bf:5b:2c:ca: 78:03:72:05:b5:04:ff:a8:56:22:19:a7:6e:25:ef: 1e:66:b1:a8:39:ad:a8:44:a2:5a:cb:5b:44:a4:cc: e7:70:3a:a8:bc:bf:7e:3f:2d:80:24:a2:4b:1b:21: 94:73:5b:ce:3a:f3:e9:0f:1b:e7:8c:2e:d1:79:f6: c5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:57:E6:BB:67:A3:6E:36:88:F7:FF:77:AD:82:74:C1:99:AB:2E:87 X509v3 Authority Key Identifier: keyid:52:53:56:5A:27:C0:6C:80:00:09:63:14:02:F5:A6:EE:85:C4:64:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/5253565A27C06C800009631402F5A6EE85C46456.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5253565A27C06C800009631402F5A6EE85C46456.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094865295295643651/0/323430313a396130303a663a3a2f34382d3438203d3e203137343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:9a00:f::/48 Signature Algorithm: sha256WithRSAEncryption ca:d0:63:94:97:b5:0a:50:cf:f3:d7:17:f6:4d:69:f5:b6:10: 13:2f:6a:c0:41:45:0b:5a:f9:84:53:c6:c7:74:4a:20:24:2a: f6:9b:d3:48:8d:96:28:d7:c0:ca:ad:bc:94:1f:2d:70:75:0f: f2:9c:96:cb:27:3a:18:a0:2d:e7:a7:b4:fa:2e:62:08:6c:56: 89:3e:68:cb:e7:26:88:46:97:d3:73:2b:fd:20:88:a9:3d:37: c1:70:9b:ea:8a:d3:af:b2:28:00:84:3a:96:42:ce:40:f0:02: 04:f5:af:2d:bb:e8:97:94:6e:ff:e1:1d:d9:d3:50:f9:4b:e2: 55:b1:f7:76:f9:89:08:ff:dc:30:18:29:0f:34:70:c7:09:3b: ea:1e:f9:e0:b4:84:62:f2:d3:49:b3:13:f1:6e:9c:f8:ac:a0: ea:db:cc:dd:60:e3:d2:95:d1:15:b2:2f:be:51:47:a0:d8:ef: 66:f4:a2:be:9d:18:a0:d5:c7:b7:6a:d1:b3:78:5c:39:62:4c: bf:f7:c5:df:3f:94:8d:78:5a:5e:6d:d3:4e:e3:63:27:33:c9: b3:6c:15:8a:8f:c0:fe:51:e3:70:e0:43:53:f4:af:5e:67:1e: a3:f4:69:ea:b9:b1:13:de:04:8e:20:1b:16:ba:f4:aa:88:4d: dd:c8:6d:f3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUdPDibQT/A4+DYyiO307R/kvGXKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4 NUM0NjQ1NjAeFw0yNjA2MDEwMjEyMTJaFw0yNzA1MzEwMjE3MTJaMDMxMTAvBgNV BAMTKDQzNTdFNkJCNjdBMzZFMzY4OEY3RkY3N0FEODI3NEMxOTlBQjJFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVN/H0LtnX0Q9W+ysXSOjHDdd 5QdFAwQYGgVWMuhKf4FY9hfKxBlwT8AqBxCW0h9Q1pxwNAOxP4r3L41hmvpk6lak qO8Qn0+7Zk7ELisZymh1c/To3dD6a6BljG7pbnWUfbsHryiVDYW8+s8u5pIkbVFg uk9YSjVp0WvnQG52po1wdLfAaHmr7AiAKDkr+KU92MesT9ypNjemQqns5q5Xbq6n pJSdDzx7YdkxDhcPgA5CM1W5tF5H1UDs6+1jv1ssyngDcgW1BP+oViIZp24l7x5m sag5rahEolrLW0SkzOdwOqi8v34/LYAkoksbIZRzW8468+kPG+eMLtF59sWnAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUQ1fmu2ejbjaI9/93rYJ0wZmrLocwHwYDVR0j BBgwFoAUUlNWWifAbIAACWMUAvWm7oXEZFYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg2NTI5NTI5NTY0MzY1MS8wLzUyNTM1NjVBMjdDMDZDODAwMDA5NjMxNDAyRjVB NkVFODVDNDY0NTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTI1MzU2NUEyN0MwNkM4MDAwMDk2MzE0MDJGNUE2RUU4NUM0NjQ1Ni5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ4NjUyOTUyOTU2NDM2NTEvMC8zMjM0MzAzMTNh Mzk2MTMwMzAzYTY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEzNzM0MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBmgAADzANBgkqhkiG9w0BAQsFAAOCAQEAytBjlJe1ClDP89cX 9k1p9bYQEy9qwEFFC1r5hFPGx3RKICQq9pvTSI2WKNfAyq28lB8tcHUP8pyWyyc6 GKAt56e0+i5iCGxWiT5oy+cmiEaX03Mr/SCIqT03wXCb6orTr7IoAIQ6lkLOQPAC BPWvLbvol5Ru/+Ed2dNQ+UviVbH3dvmJCP/cMBgpDzRwxwk76h754LSEYvLTSbMT 8W6c+Kyg6tvM3WDj0pXRFbIvvlFHoNjvZvSivp0YoNXHt2rRs3hcOWJMv/fF3z+U jXhaXm3TTuNjJzPJs2wVio/A/lHjcOBDU/SvXmceo/Rp6rmxE94EjiAbFrr0qohN 3cht8w== -----END CERTIFICATE-----Generated at Sun Jun 14 02:13:01 2026 by rpki-client