$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa File: 323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa (raw, json) Hash identifier: LaJeeoBUe/P+sI6f8xjykw99r3pVPdodKbOl30xyWF0= Subject key identifier: 92:E2:0B:50:5D:D4:8C:2C:74:9D:87:7E:0D:62:02:A8:91:54:33:C1 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 42C970E4AF86A662619054FB1259103D28B0DB2E Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa Signing time: Mon 13 Apr 2026 08:06:59 +0000 ROA not before: Mon 13 Apr 2026 08:01:59 +0000 ROA not after: Mon 12 Apr 2027 08:06:59 +0000 asID: 63647 IP address blocks: 2400:a860:4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c9:70:e4:af:86:a6:62:61:90:54:fb:12:59:10:3d:28:b0:db:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:01:59 2026 GMT Not After : Apr 12 08:06:59 2027 GMT Subject: CN=92E20B505DD48C2C749D877E0D6202A8915433C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:54:ce:ee:a8:00:7b:26:8d:ee:e7:d9:65:71: 5b:6c:50:16:f9:e7:f8:c9:8d:0d:33:26:70:6e:ce: 02:b1:5d:90:29:e6:84:ff:b8:f9:9d:1b:e0:c3:7e: 7d:2e:25:a7:65:d5:2f:68:57:86:c4:b5:60:26:57: 63:fa:48:b8:04:8d:7c:d7:68:8a:8d:cb:ca:c2:4a: b6:7b:e9:b1:87:1f:6e:7d:e7:3f:9a:75:bb:94:2c: fe:87:18:2c:f6:b4:38:25:f7:d3:0f:cd:a7:c2:83: f3:75:04:e9:46:32:0f:a0:48:a5:98:e3:ec:01:08: a4:75:cd:bc:ee:6e:b6:86:a0:16:7b:02:b1:7e:33: b3:4e:08:8e:e6:73:7a:f4:1d:20:73:0c:42:6c:eb: 2d:d9:c7:68:b8:b6:27:54:3c:13:40:bc:15:5e:95: 80:39:58:58:8f:a7:7c:74:e3:0d:da:19:4d:60:bb: e2:73:aa:2d:36:27:56:c6:7f:a7:a4:85:f1:fc:9f: 6e:9b:6a:75:49:93:2e:ff:b6:5c:2f:48:26:c7:5d: cc:42:e7:49:b2:2a:af:b6:13:8a:87:8b:63:ff:57: d7:d9:cc:3d:6c:c2:f2:c4:35:2c:e8:96:09:a0:13: 12:23:40:dd:82:5b:01:cb:e1:47:ef:60:69:70:e9: 97:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:E2:0B:50:5D:D4:8C:2C:74:9D:87:7E:0D:62:02:A8:91:54:33:C1 X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a343a3a2f34382d3438203d3e203633363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:a860:4::/48 Signature Algorithm: sha256WithRSAEncryption 56:3d:68:e7:17:41:bf:60:14:e3:f8:99:71:ae:6a:11:f3:96: 4f:e0:63:43:dc:fd:55:51:9c:6e:c3:66:80:c7:47:4e:ac:3f: f3:5e:2f:66:15:f9:81:5d:ec:25:c5:21:0e:e5:47:26:af:c5: bc:80:7b:9d:da:10:73:c0:e3:8c:ad:ae:cc:27:7a:4a:05:76: 1e:a0:28:84:f1:fd:38:9a:a2:d6:12:16:3a:4b:4f:1d:9b:bf: 8b:27:83:3e:00:15:f6:a2:14:88:ef:9d:a4:53:e7:2f:59:79: df:6f:a4:52:41:4c:cc:ee:6f:86:29:20:a6:6c:6c:94:94:31: 57:11:1e:da:48:0a:a6:21:82:ac:49:77:1e:4c:ca:23:1e:3a: 68:50:47:6d:70:0c:5e:73:55:7d:60:cb:ce:17:50:e2:cd:30: fa:cd:50:6c:56:95:b3:73:2e:51:2d:e4:fb:b3:89:cc:4d:40: 76:84:b2:34:1e:47:7a:02:14:0f:b0:4c:f3:3d:34:0b:35:11: da:6a:86:d2:91:fd:ea:d3:a3:c8:68:43:69:0e:70:70:45:d3: c7:ca:93:be:8a:d4:73:8e:37:b9:61:52:57:1b:21:cf:3f:6d: a1:36:6f:19:c1:a4:8c:e9:fe:5b:42:d6:1b:68:16:1e:6d:0d: f4:35:a4:e3 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUQslw5K+GpmJhkFT7ElkQPSiw2y4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAxNTlaFw0yNzA0MTIwODA2NTlaMDMxMTAvBgNV BAMTKDkyRTIwQjUwNURENDhDMkM3NDlEODc3RTBENjIwMkE4OTE1NDMzQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4VM7uqAB7Jo3u59llcVtsUBb5 5/jJjQ0zJnBuzgKxXZAp5oT/uPmdG+DDfn0uJadl1S9oV4bEtWAmV2P6SLgEjXzX aIqNy8rCSrZ76bGHH2595z+adbuULP6HGCz2tDgl99MPzafCg/N1BOlGMg+gSKWY 4+wBCKR1zbzubraGoBZ7ArF+M7NOCI7mc3r0HSBzDEJs6y3Zx2i4tidUPBNAvBVe lYA5WFiPp3x04w3aGU1gu+Jzqi02J1bGf6ekhfH8n26banVJky7/tlwvSCbHXcxC 50myKq+2E4qHi2P/V9fZzD1swvLENSzolgmgExIjQN2CWwHL4UfvYGlw6ZdBAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUkuILUF3UjCx0nYd+DWICqJFUM8EwHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5NzgzMTY4ODU2NTU1NTUvMC8zMjM0MzAzMDNh NjEzODM2MzAzYTM0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMzM2MzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQAqGAABDANBgkqhkiG9w0BAQsFAAOCAQEAVj1o5xdBv2AU4/iZ ca5qEfOWT+BjQ9z9VVGcbsNmgMdHTqw/814vZhX5gV3sJcUhDuVHJq/FvIB7ndoQ c8DjjK2uzCd6SgV2HqAohPH9OJqi1hIWOktPHZu/iyeDPgAV9qIUiO+dpFPnL1l5 32+kUkFMzO5vhikgpmxslJQxVxEe2kgKpiGCrEl3HkzKIx46aFBHbXAMXnNVfWDL zhdQ4s0w+s1QbFaVs3MuUS3k+7OJzE1AdoSyNB5HegIUD7BM8z00CzUR2mqG0pH9 6tOjyGhDaQ5wcEXTx8qTvorUc443uWFSVxshzz9toTZvGcGkjOn+W0LWG2gWHm0N 9DWk4w== -----END CERTIFICATE-----Generated at Sat Apr 18 04:14:27 2026 by rpki-client