$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa File: 323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa (raw, json) Hash identifier: Q+fiz0TmEY8gqI4YA1MbFzcQNWD+mWHIWKuDwngSLkQ= Subject key identifier: 77:45:ED:30:80:1B:93:C7:A1:5D:48:10:4D:82:10:6B:F2:58:75:C2 Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Certificate serial: 466269C1BDD3F93C983BCD970C963CBE999899C9 Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa Signing time: Mon 13 Apr 2026 08:06:59 +0000 ROA not before: Mon 13 Apr 2026 08:01:59 +0000 ROA not after: Mon 12 Apr 2027 08:06:59 +0000 asID: 63647 IP address blocks: 2400:a860:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:62:69:c1:bd:d3:f9:3c:98:3b:cd:97:0c:96:3c:be:99:98:99:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398 Validity Not Before: Apr 13 08:01:59 2026 GMT Not After : Apr 12 08:06:59 2027 GMT Subject: CN=7745ED30801B93C7A15D48104D82106BF25875C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c2:f7:c7:19:dc:84:fc:fa:dc:36:d1:09:c7: 1e:72:77:e0:04:5c:bf:d0:37:6e:af:f6:52:77:ea: ab:52:f6:1f:17:84:cc:81:b8:7f:d4:4d:e4:46:a3: 5f:e9:14:fa:42:fa:45:a7:e5:ae:5e:98:0a:3d:8f: 1c:93:49:1e:87:82:7c:bc:ad:33:95:1b:4c:1b:5b: 8b:5e:bb:81:1e:95:19:8d:67:44:d4:09:dc:d8:ce: f7:d8:14:ab:08:78:f4:ed:70:2a:8d:38:6c:6f:20: ad:f0:94:99:bf:e9:e7:4d:1c:76:ca:f4:27:66:ee: e4:58:8b:a9:44:5d:e6:d5:cc:28:6f:2b:b6:8d:e9: 5a:6c:c7:a0:af:41:38:ba:e1:01:79:6d:2a:8c:d9: d8:bc:f1:16:4d:49:73:f3:32:1a:dd:6a:5f:a9:eb: e5:60:60:75:4e:ca:04:63:75:af:46:fa:f8:e3:69: 0b:ce:ae:3a:0c:8f:b1:5e:30:d6:d4:b2:6e:3b:b0: 8b:2c:6b:d6:c6:b8:ad:29:2c:8c:71:7b:97:f9:9d: 7f:ac:0f:28:4e:c6:71:da:d8:a1:f3:7b:6a:20:e7: 69:df:6d:1e:2a:09:49:18:e3:8b:68:25:9e:12:a2: 99:92:f3:91:aa:d5:e5:67:c4:5c:f5:ec:25:31:e3: 64:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:45:ED:30:80:1B:93:C7:A1:5D:48:10:4D:82:10:6B:F2:58:75:C2 X509v3 Authority Key Identifier: keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/323430303a613836303a353a3a2f34382d3438203d3e203633363437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:a860:5::/48 Signature Algorithm: sha256WithRSAEncryption a2:82:db:f2:c2:bb:d0:d8:65:9d:69:c2:dd:a5:03:9b:d4:f0: 1a:af:cb:30:3d:2e:09:66:55:68:c5:2a:2e:99:b5:ba:d2:85: b2:e8:23:5a:71:9d:c4:a9:24:b6:63:92:26:0d:70:fc:c4:f0: b7:09:40:db:e8:20:5a:fd:5e:7a:cc:1f:f8:81:50:30:1d:5a: d9:c9:0e:b8:27:5a:dd:8e:cb:eb:cd:13:18:02:58:d8:17:83: 5f:99:dd:9a:a9:26:f3:ca:5d:88:2b:e8:7e:f2:30:5f:e9:34: 4d:9a:42:fb:4d:0b:a3:60:93:af:39:82:6a:4e:37:6e:5e:36: 46:02:c6:f2:05:99:bb:8c:d9:36:57:87:35:e7:2c:c0:89:f0: 2f:c7:5e:15:b2:ba:af:82:df:7a:31:77:e2:4f:83:42:1e:3b: 28:15:2f:9a:72:6b:40:26:74:e5:ac:0b:ef:a3:c8:b7:88:e7: bc:3c:cd:80:01:94:80:3d:f7:a4:a8:f2:53:25:99:3f:d7:c0: 37:97:14:39:b3:29:54:30:e8:8e:31:43:08:c1:12:b1:40:90: 8b:3c:fe:f7:07:96:51:e5:86:7b:4e:eb:09:8f:25:30:db:99: 3b:01:0a:fb:52:c2:bf:0d:0c:26:a3:a9:ac:67:b0:f3:94:36: 6f:27:17:39 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIURmJpwb3T+TyYO82XDJY8vpmYmckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1 QUQzRjM5ODAeFw0yNjA0MTMwODAxNTlaFw0yNzA0MTIwODA2NTlaMDMxMTAvBgNV BAMTKDc3NDVFRDMwODAxQjkzQzdBMTVENDgxMDREODIxMDZCRjI1ODc1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzwvfHGdyE/PrcNtEJxx5yd+AE XL/QN26v9lJ36qtS9h8XhMyBuH/UTeRGo1/pFPpC+kWn5a5emAo9jxyTSR6Hgny8 rTOVG0wbW4teu4EelRmNZ0TUCdzYzvfYFKsIePTtcCqNOGxvIK3wlJm/6edNHHbK 9Cdm7uRYi6lEXebVzChvK7aN6Vpsx6CvQTi64QF5bSqM2di88RZNSXPzMhrdal+p 6+VgYHVOygRjda9G+vjjaQvOrjoMj7FeMNbUsm47sIssa9bGuK0pLIxxe5f5nX+s DyhOxnHa2KHze2og52nfbR4qCUkY44toJZ4SopmS85Gq1eVnxFz17CUx42TFAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUd0XtMIAbk8ehXUgQTYIQa/JYdcIwHwYDVR0j BBgwFoAUwcSPlZPWoZ29P6ypxu+ltVrT85gwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk3ODMxNjg4NTY1NTU1NS8wL0MxQzQ4Rjk1OTNENkExOURCRDNGQUNBOUM2RUZB NUI1NUFEM0YzOTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzFDNDhGOTU5M0Q2QTE5REJEM0ZBQ0E5QzZFRkE1QjU1QUQzRjM5OC5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5NzgzMTY4ODU2NTU1NTUvMC8zMjM0MzAzMDNh NjEzODM2MzAzYTM1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzYzMzM2MzQzNy5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQAqGAABTANBgkqhkiG9w0BAQsFAAOCAQEAooLb8sK70NhlnWnC 3aUDm9TwGq/LMD0uCWZVaMUqLpm1utKFsugjWnGdxKkktmOSJg1w/MTwtwlA2+gg Wv1eeswf+IFQMB1a2ckOuCda3Y7L680TGAJY2BeDX5ndmqkm88pdiCvofvIwX+k0 TZpC+00Lo2CTrzmCak43bl42RgLG8gWZu4zZNleHNecswInwL8deFbK6r4LfejF3 4k+DQh47KBUvmnJrQCZ05awL76PIt4jnvDzNgAGUgD33pKjyUyWZP9fAN5cUObMp VDDojjFDCMESsUCQizz+9weWUeWGe07rCY8lMNuZOwEK+1LCvw0MJqOprGew85Q2 bycXOQ== -----END CERTIFICATE-----Generated at Sat Apr 18 04:15:19 2026 by rpki-client