$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa File: 323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa (raw, json) Hash identifier: 6vHTtwTsWa/I8/f0+eUaN4fbssfyrhXnJFU69YNLczs= Subject key identifier: A5:A3:FC:4F:FC:51:F3:3D:06:8A:F5:FE:D6:C5:18:05:01:77:88:18 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 49A8AF1820000E59A3194BA9B4E1D0EF3B34EE88 Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa Signing time: Mon 13 Apr 2026 08:06:59 +0000 ROA not before: Mon 13 Apr 2026 08:01:59 +0000 ROA not after: Mon 12 Apr 2027 08:06:59 +0000 asID: 63647 IP address blocks: 2400:a860:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a8:af:18:20:00:0e:59:a3:19:4b:a9:b4:e1:d0:ef:3b:34:ee:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:01:59 2026 GMT Not After : Apr 12 08:06:59 2027 GMT Subject: CN=A5A3FC4FFC51F33D068AF5FED6C5180501778818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:53:22:c0:f7:e4:44:6a:f5:c1:d7:92:f4:0d: 1f:b3:48:2d:f9:3e:80:67:b5:f2:20:7e:ed:b1:e0: 8b:87:60:cb:9f:25:88:01:aa:fa:5d:67:b1:f7:1c: 00:c3:fc:ec:fb:3c:b9:8a:b8:ee:15:1e:1e:1e:7b: 97:d8:87:72:1d:e1:4e:a5:00:93:d9:da:93:46:03: 02:09:84:0f:6f:73:3a:0a:2c:43:9c:f1:1f:de:b5: 54:33:48:93:c7:a8:2b:3c:70:86:b7:56:8a:6a:21: 76:15:98:59:1e:50:50:5b:c1:6c:3e:4c:8d:48:6f: 05:a1:22:47:fd:23:e0:b9:50:b4:45:19:4a:67:f8: b4:be:b9:ec:a0:9a:3e:4a:8b:ad:ca:18:5a:72:e4: 65:2d:36:6d:fa:97:f7:3e:2e:29:3b:ec:52:a6:42: bb:78:c3:73:84:53:cf:69:24:34:1d:93:21:7c:b3: db:a9:7a:e5:c4:a8:b5:21:f1:4e:f7:d0:b1:60:8f: 57:70:b6:ec:92:c1:d5:8b:4f:b4:23:0e:98:78:a1: 2d:33:90:4c:40:f2:dd:1e:d2:e0:1c:be:7a:52:09: 0a:1a:f9:56:db:bb:e4:78:ce:87:86:a9:e0:ec:7b: 23:a7:dc:af:88:98:99:34:d1:10:94:77:60:d8:4e: 4f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A3:FC:4F:FC:51:F3:3D:06:8A:F5:FE:D6:C5:18:05:01:77:88:18 X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a333a3a2f34382d3438203d3e203633363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:a860:3::/48 Signature Algorithm: sha256WithRSAEncryption 89:2f:38:eb:42:bd:3e:7a:52:87:35:c8:92:8d:f1:ac:02:c8: 6e:e9:23:a4:7b:4e:fc:92:f4:e9:3a:a4:70:3f:9b:6b:31:d8: 84:a3:1a:72:3f:8a:83:6f:c6:e1:7b:1a:ae:4a:29:56:01:9d: 97:69:d3:b9:e8:f8:ef:de:86:15:d3:fc:63:57:a0:b8:85:83: 4b:98:93:e7:43:c7:51:e7:e0:58:4d:66:1e:79:83:cd:c6:e0: 43:6c:0b:cb:e3:09:96:7c:01:21:4f:4b:a3:4a:5d:c2:69:9b: ea:18:db:66:38:54:42:d9:5c:f7:83:01:0c:ac:22:1b:26:08: 8b:76:bd:1b:96:e7:ea:52:80:10:e6:11:57:df:28:0a:e8:2a: 55:54:d8:13:d2:19:59:d5:18:87:e9:4c:cd:77:b5:6c:35:43: 6d:b2:3c:f5:ed:24:fc:4f:ee:aa:b5:b8:cd:44:d5:1b:01:69: 2e:d5:0f:82:3f:d4:5d:bb:69:cf:c1:7f:f8:1e:02:c1:0d:68: 42:05:80:6f:b8:48:a9:65:11:d5:e3:54:55:03:af:02:39:de: 0e:4f:3f:09:97:ba:54:aa:a6:8c:db:b0:2c:8e:82:9a:1f:6b: 62:29:ce:72:bc:31:da:69:58:6b:2f:a2:ba:9c:1c:58:f5:f7: 86:36:cd:b8 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUSaivGCAADlmjGUuptOHQ7zs07ogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAxNTlaFw0yNzA0MTIwODA2NTlaMDMxMTAvBgNV BAMTKEE1QTNGQzRGRkM1MUYzM0QwNjhBRjVGRUQ2QzUxODA1MDE3Nzg4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUyLA9+REavXB15L0DR+zSC35 PoBntfIgfu2x4IuHYMufJYgBqvpdZ7H3HADD/Oz7PLmKuO4VHh4ee5fYh3Id4U6l AJPZ2pNGAwIJhA9vczoKLEOc8R/etVQzSJPHqCs8cIa3VopqIXYVmFkeUFBbwWw+ TI1IbwWhIkf9I+C5ULRFGUpn+LS+ueygmj5Ki63KGFpy5GUtNm36l/c+Lik77FKm Qrt4w3OEU89pJDQdkyF8s9upeuXEqLUh8U730LFgj1dwtuySwdWLT7QjDph4oS0z kExA8t0e0uAcvnpSCQoa+Vbbu+R4zoeGqeDseyOn3K+ImJk00RCUd2DYTk9fAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUpaP8T/xR8z0GivX+1sUYBQF3iBgwHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5NzgzMTY4ODU2NTU1NTUvMC8zMjM0MzAzMDNh NjEzODM2MzAzYTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMzM2MzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQAqGAAAzANBgkqhkiG9w0BAQsFAAOCAQEAiS8460K9PnpShzXI ko3xrALIbukjpHtO/JL06TqkcD+bazHYhKMacj+Kg2/G4XsarkopVgGdl2nTuej4 796GFdP8Y1eguIWDS5iT50PHUefgWE1mHnmDzcbgQ2wLy+MJlnwBIU9Lo0pdwmmb 6hjbZjhUQtlc94MBDKwiGyYIi3a9G5bn6lKAEOYRV98oCugqVVTYE9IZWdUYh+lM zXe1bDVDbbI89e0k/E/uqrW4zUTVGwFpLtUPgj/UXbtpz8F/+B4CwQ1oQgWAb7hI qWUR1eNUVQOvAjneDk8/CZe6VKqmjNuwLI6Cmh9rYinOcrwx2mlYay+iupwcWPX3 hjbNuA== -----END CERTIFICATE-----Generated at Sat Apr 18 04:15:17 2026 by rpki-client