$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa File: 323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa (raw, json) Hash identifier: aEuTpvFsawhGYR75gpUyKUOhQ5r8nTqDdhAWiEV7TnE= Subject key identifier: 1F:73:2E:EB:17:9B:4D:97:1A:93:E8:BA:8E:2E:CB:BB:C2:7D:97:B0 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 0A3EF01A16A438209101FACCE4C46F007551651A Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa Signing time: Mon 13 Apr 2026 08:06:59 +0000 ROA not before: Mon 13 Apr 2026 08:01:59 +0000 ROA not after: Mon 12 Apr 2027 08:06:59 +0000 asID: 63647 IP address blocks: 2400:a860:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3e:f0:1a:16:a4:38:20:91:01:fa:cc:e4:c4:6f:00:75:51:65:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:01:59 2026 GMT Not After : Apr 12 08:06:59 2027 GMT Subject: CN=1F732EEB179B4D971A93E8BA8E2ECBBBC27D97B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:15:49:9f:78:72:bf:c0:00:87:67:37:ba: 20:5e:f7:83:c4:ee:97:4c:54:f4:ed:88:73:60:cd: 8d:ba:6e:f5:ab:3a:a9:f0:7a:da:15:4c:4f:b9:04: 59:fa:77:24:a4:be:ba:70:06:a0:23:14:76:d9:59: 2e:53:c1:ed:e0:bb:b7:70:d6:f0:f2:f6:d8:82:a0: 2b:0c:33:13:b0:37:16:80:ef:8f:ea:96:ea:92:ce: 2a:7b:12:7c:49:57:fd:db:60:3d:16:b8:c4:54:8f: 8c:e3:61:93:c0:f5:6e:87:b6:ee:b0:7d:83:01:e5: 24:47:32:93:3f:dd:17:c3:7d:7f:5d:4f:88:f7:5a: 1d:3b:d6:4f:2d:48:b5:fc:9d:a6:0d:24:f7:b0:fa: c3:a9:5d:10:c4:e7:e7:4e:e9:78:ef:b6:04:1b:ae: 09:2c:57:95:97:ab:93:8c:8c:06:09:dd:1f:65:a9: 80:25:4b:e8:de:b6:b2:0d:2c:f1:89:df:e1:19:99: 92:5d:0e:6a:6b:5b:21:3a:da:c7:42:b8:0f:d4:d1: 43:d5:8d:7d:c6:4f:19:f6:2d:2e:d7:b9:34:06:04: 3d:9b:ec:e5:96:71:71:8a:2c:19:b3:ec:34:6c:08: 7b:84:2f:7c:6f:7e:76:49:a0:f0:e4:1c:c1:77:c9: 70:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:73:2E:EB:17:9B:4D:97:1A:93:E8:BA:8E:2E:CB:BB:C2:7D:97:B0 X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a323a3a2f34382d3438203d3e203633363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:a860:2::/48 Signature Algorithm: sha256WithRSAEncryption 33:ab:85:b6:f4:37:98:e9:cb:16:07:85:7f:62:b1:65:a8:cb: cc:f3:0e:fe:8b:af:40:a3:48:31:66:6b:d4:92:d2:fd:ff:30: cc:e9:e0:e0:eb:99:b3:d3:3e:62:61:26:7d:1f:7c:8b:bb:ee: 42:f4:ff:8b:d4:a6:2e:9b:c3:b3:fd:df:79:6f:f7:a6:83:bd: 30:7d:02:1a:11:4e:7c:ef:39:75:8f:95:b2:a9:e7:cd:1b:96: b7:bf:c3:d4:c6:97:37:76:ee:db:8a:a5:cc:3c:03:75:d5:00: fd:56:64:be:66:66:7c:fc:5a:e9:87:5e:94:99:3b:45:d4:b8: a4:a7:e4:8e:dd:56:5f:b4:90:db:77:b4:ea:bc:0b:f5:fc:42: 74:d9:c6:9b:8c:80:fa:f1:3f:9a:f8:38:a9:38:3d:e9:37:4b: ce:dc:03:85:30:ac:e6:07:ee:4d:ae:c7:23:2a:85:8c:bc:02: 19:20:27:85:28:96:27:50:8c:63:2a:a6:16:ff:b3:5b:13:81: ff:2b:b9:ad:ff:c4:3d:f8:c9:80:49:c7:df:4b:56:f7:7c:4a: 0b:b6:b9:48:64:a5:e4:7d:2b:1d:f3:7a:8e:b2:e9:a9:d3:53: 4b:38:62:3a:5e:d9:d4:b3:41:b6:ee:64:d7:b1:04:27:fd:82: 3a:20:68:af -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUCj7wGhakOCCRAfrM5MRvAHVRZRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAxNTlaFw0yNzA0MTIwODA2NTlaMDMxMTAvBgNV BAMTKDFGNzMyRUVCMTc5QjREOTcxQTkzRThCQThFMkVDQkJCQzI3RDk3QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmPhVJn3hyv8AAh2c3uiBe94PE 7pdMVPTtiHNgzY26bvWrOqnwetoVTE+5BFn6dySkvrpwBqAjFHbZWS5Twe3gu7dw 1vDy9tiCoCsMMxOwNxaA74/qluqSzip7EnxJV/3bYD0WuMRUj4zjYZPA9W6Htu6w fYMB5SRHMpM/3RfDfX9dT4j3Wh071k8tSLX8naYNJPew+sOpXRDE5+dO6XjvtgQb rgksV5WXq5OMjAYJ3R9lqYAlS+jetrINLPGJ3+EZmZJdDmprWyE62sdCuA/U0UPV jX3GTxn2LS7XuTQGBD2b7OWWcXGKLBmz7DRsCHuEL3xvfnZJoPDkHMF3yXDJAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUH3Mu6xebTZcak+i6ji7Lu8J9l7AwHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5NzgzMTY4ODU2NTU1NTUvMC8zMjM0MzAzMDNh NjEzODM2MzAzYTMyM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMzM2MzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQAqGAAAjANBgkqhkiG9w0BAQsFAAOCAQEAM6uFtvQ3mOnLFgeF f2KxZajLzPMO/ouvQKNIMWZr1JLS/f8wzOng4OuZs9M+YmEmfR98i7vuQvT/i9Sm LpvDs/3feW/3poO9MH0CGhFOfO85dY+VsqnnzRuWt7/D1MaXN3bu24qlzDwDddUA /VZkvmZmfPxa6YdelJk7RdS4pKfkjt1WX7SQ23e06rwL9fxCdNnGm4yA+vE/mvg4 qTg96TdLztwDhTCs5gfuTa7HIyqFjLwCGSAnhSiWJ1CMYyqmFv+zWxOB/yu5rf/E PfjJgEnH30tW93xKC7a5SGSl5H0rHfN6jrLpqdNTSzhiOl7Z1LNBtu5k17EEJ/2C OiBorw== -----END CERTIFICATE-----Generated at Sat Apr 18 04:14:26 2026 by rpki-client