$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a31303a3a2f34382d3438203d3e203338333831.roa File: 323430323a643334303a31303a3a2f34382d3438203d3e203338333831.roa (raw, json) Hash identifier: FID9fBrgIFrwuoj80CW+t9Pk30WYJLQ8Ezq9Nf4YGeU= Subject key identifier: 3D:A6:E5:D1:07:8C:C9:27:DF:6B:AC:6D:B3:7F:22:4A:36:83:D0:9C Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Certificate serial: 5FEF5B77C0E9F464C99B0683856F3E218359405B Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a31303a3a2f34382d3438203d3e203338333831.roa Signing time: Mon 01 Jun 2026 06:08:32 +0000 ROA not before: Mon 01 Jun 2026 06:03:32 +0000 ROA not after: Mon 31 May 2027 06:08:32 +0000 asID: 38381 IP address blocks: 2402:d340:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:ef:5b:77:c0:e9:f4:64:c9:9b:06:83:85:6f:3e:21:83:59:40:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D Validity Not Before: Jun 1 06:03:32 2026 GMT Not After : May 31 06:08:32 2027 GMT Subject: CN=3DA6E5D1078CC927DF6BAC6DB37F224A3683D09C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:52:46:25:69:ab:c9:fd:74:ed:ef:ce:b8:14: 71:ef:fe:e2:57:8c:96:f3:d7:d2:39:58:51:8d:21: 20:6e:4d:98:7d:2c:fc:53:bc:8a:11:9c:77:ec:bc: fe:6f:ef:94:df:a3:21:6f:38:b9:fb:b3:38:36:e1: 49:34:2b:fb:94:a1:cf:58:89:6e:ea:91:72:b4:e0: 60:31:45:e7:7b:2e:e1:4a:59:41:2a:56:ff:46:96: e8:5a:17:ea:2a:6e:83:9b:c7:d3:2d:a5:89:68:4e: 15:48:3b:9b:6b:a7:6a:04:4e:b8:e7:d4:21:ca:99: 66:03:20:29:37:81:e3:9e:97:ca:12:8e:d9:dc:b7: 69:8e:e7:70:e9:f1:df:bc:61:90:c7:fd:c0:17:2f: 09:ed:f1:b5:8f:d7:bc:8b:90:03:ab:28:0a:e1:71: 80:a9:f4:21:fa:f6:8a:d4:ba:33:62:ea:59:37:69: b5:f4:96:9e:8a:aa:42:10:a2:19:6b:c5:12:6e:16: 78:b5:28:32:72:96:53:8b:d1:a7:bc:94:60:3f:53: be:07:50:f6:a4:01:77:61:f9:39:61:50:8e:40:88: 47:85:dd:69:81:eb:99:f8:fc:55:98:8d:48:a6:fa: 2e:c5:93:a4:40:49:02:1a:3f:2f:21:97:af:f5:be: 32:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:A6:E5:D1:07:8C:C9:27:DF:6B:AC:6D:B3:7F:22:4A:36:83:D0:9C X509v3 Authority Key Identifier: keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/323430323a643334303a31303a3a2f34382d3438203d3e203338333831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:d340:10::/48 Signature Algorithm: sha256WithRSAEncryption 03:ea:6b:27:f0:2d:3f:8d:bf:c1:c5:42:a2:79:54:3c:05:09: 6d:df:1f:65:81:00:fa:67:c3:c8:9e:b4:95:9c:e7:48:0b:16: 20:4c:2a:57:cd:04:37:cc:1c:f1:25:0b:01:e0:d4:cb:0d:cf: 12:13:63:69:af:d0:6c:9e:12:9c:fa:86:e3:b6:ac:e6:0f:e3: d5:60:cf:d8:8a:43:57:d4:e6:87:4f:1d:b4:89:46:25:5b:5c: f6:4a:96:41:ca:99:d0:26:5e:3f:65:0f:16:59:32:4e:14:b3: 99:15:87:5f:cd:cf:e8:1d:74:f5:41:bd:82:47:56:5e:2b:3a: 2a:3f:96:83:cf:a9:45:eb:5e:d3:f4:36:f8:4d:0e:7f:bd:51: 35:e6:76:b9:26:fb:a6:2f:fa:10:02:dd:4b:33:f1:f6:ad:4b: 25:c6:06:74:c6:4c:fb:29:c4:b6:50:e0:85:99:45:6d:fa:db: 85:d8:1f:17:65:7e:3f:53:6b:69:8a:47:37:88:f6:67:9d:45: 25:1a:e2:53:67:5c:3c:ca:00:19:b3:70:84:93:62:64:4d:2d: 84:b5:ee:e9:cb:cd:5b:bc:1a:ed:12:b7:e0:d1:6c:f6:5d:4a: d2:37:1e:f5:07:71:03:51:90:94:6d:a0:51:24:de:db:e1:da: d6:fe:36:36 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUX+9bd8Dp9GTJmwaDhW8+IYNZQFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAy MDgxMUQ4RDAeFw0yNjA2MDEwNjAzMzJaFw0yNzA1MzEwNjA4MzJaMDMxMTAvBgNV BAMTKDNEQTZFNUQxMDc4Q0M5MjdERjZCQUM2REIzN0YyMjRBMzY4M0QwOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjUkYlaavJ/XTt7864FHHv/uJX jJbz19I5WFGNISBuTZh9LPxTvIoRnHfsvP5v75TfoyFvOLn7szg24Uk0K/uUoc9Y iW7qkXK04GAxRed7LuFKWUEqVv9GluhaF+oqboObx9MtpYloThVIO5trp2oETrjn 1CHKmWYDICk3geOel8oSjtnct2mO53Dp8d+8YZDH/cAXLwnt8bWP17yLkAOrKArh cYCp9CH69orUujNi6lk3abX0lp6KqkIQohlrxRJuFni1KDJyllOL0ae8lGA/U74H UPakAXdh+TlhUI5AiEeF3WmB65n4/FWYjUim+i7Fk6RASQIaPy8hl6/1vjITAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUPabl0QeMySffa6xts38iSjaD0JwwHwYDVR0j BBgwFoAUURWWb7YqK9tNZdl03w3ZsCCBHY0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkwMzg0MTMyMjI3MDcyMS8wLzUxMTU5NjZGQjYyQTJCREI0RDY1RDk3NERGMERE OUIwMjA4MTFEOEQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNTExNTk2NkZCNjJBMkJEQjRENjVEOTc0REYwREQ5QjAyMDgxMUQ4RC5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1OTAzODQxMzIyMjcwNzIxLzAvMzIzNDMwMzIz YTY0MzMzNDMwM2EzMTMwM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzMzODMzMzgz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQC00AAEDANBgkqhkiG9w0BAQsFAAOCAQEAA+prJ/AtP42/ wcVConlUPAUJbd8fZYEA+mfDyJ60lZznSAsWIEwqV80EN8wc8SULAeDUyw3PEhNj aa/QbJ4SnPqG47as5g/j1WDP2IpDV9Tmh08dtIlGJVtc9kqWQcqZ0CZeP2UPFlky ThSzmRWHX83P6B109UG9gkdWXis6Kj+Wg8+pRete0/Q2+E0Of71RNeZ2uSb7pi/6 EALdSzPx9q1LJcYGdMZM+ynEtlDghZlFbfrbhdgfF2V+P1NraYpHN4j2Z51FJRri U2dcPMoAGbNwhJNiZE0thLXu6cvNW7wa7RK34NFs9l1K0jce9QdxA1GQlG2gUSTe 2+Ha1v42Ng== -----END CERTIFICATE-----Generated at Sun Jun 14 09:52:29 2026 by rpki-client