$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096336767583256578/0/323430313a643932303a3a2f32382d313238203d3e203633373138.roa File: 323430313a643932303a3a2f32382d313238203d3e203633373138.roa (raw, json) Hash identifier: wqKyq4CT7ZBhjVas93N8o2f4ItHVxa4rAXSDsabJnzU= Subject key identifier: 80:74:AD:42:ED:E4:D6:BF:BA:62:3C:75:5A:8F:E6:C1:F1:6F:67:D9 Certificate issuer: /CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Certificate serial: 53CD25540CAEF683379F360183EA809C02D187FF Authority key identifier: 2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/323430313a643932303a3a2f32382d313238203d3e203633373138.roa Signing time: Wed 15 Apr 2026 06:53:27 +0000 ROA not before: Wed 15 Apr 2026 06:48:27 +0000 ROA not after: Wed 14 Apr 2027 06:53:27 +0000 asID: 63718 IP address blocks: 2401:d920::/28 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:55:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cd:25:54:0c:ae:f6:83:37:9f:36:01:83:ea:80:9c:02:d1:87:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BB6173D81890E4789E1B4BA6A2E3A916C38A34B Validity Not Before: Apr 15 06:48:27 2026 GMT Not After : Apr 14 06:53:27 2027 GMT Subject: CN=8074AD42EDE4D6BFBA623C755A8FE6C1F16F67D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:17:17:70:f3:f5:ae:0b:00:d3:21:95:df: 3a:79:0d:61:e2:3b:80:5d:d1:78:67:bf:d5:f2:b7: df:a8:32:0c:6c:00:54:8e:e1:78:a0:ae:c7:3f:db: de:45:bd:57:86:6f:f4:b2:2f:fa:43:a1:5e:18:5c: f8:59:73:8c:96:62:47:5c:c2:22:e3:5d:39:96:eb: 61:53:3f:d5:91:ed:73:f7:9d:47:26:dd:8e:47:29: 29:8e:d7:52:8d:eb:cd:77:d9:b2:12:9a:2a:af:3f: 78:96:30:a6:95:df:e2:f6:0e:5a:a0:86:c7:5f:36: 1a:f7:12:1f:54:99:a3:06:33:a6:15:b6:4f:8f:85: aa:a5:25:6d:a6:d4:b2:7f:27:0c:af:ef:9c:55:a5: 56:0c:4a:14:00:f0:a5:16:8b:c2:41:3b:92:23:5a: 36:72:d8:9b:d6:4f:97:e2:37:92:ef:20:73:0f:71: 51:ca:83:b5:e5:69:13:94:ce:b7:6d:c4:3d:68:e9: 58:17:93:11:90:ba:8b:79:ca:f1:9d:a4:c9:c7:a4: 33:01:27:57:65:73:13:97:7b:8d:34:6a:92:0e:cc: ad:39:b7:8e:92:57:ff:6b:1f:ae:ca:de:14:f7:d8: 64:58:d3:bd:65:51:df:1a:2b:e4:8a:ec:e6:e6:94: af:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:74:AD:42:ED:E4:D6:BF:BA:62:3C:75:5A:8F:E6:C1:F1:6F:67:D9 X509v3 Authority Key Identifier: keyid:2B:B6:17:3D:81:89:0E:47:89:E1:B4:BA:6A:2E:3A:91:6C:38:A3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2BB6173D81890E4789E1B4BA6A2E3A916C38A34B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096336767583256578/0/323430313a643932303a3a2f32382d313238203d3e203633373138.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:d920::/28 Signature Algorithm: sha256WithRSAEncryption 63:c3:95:12:82:3c:ea:2a:b7:03:35:05:f7:96:44:f3:55:69: 3c:cb:fd:cc:34:d8:2f:a5:3c:8f:2e:78:36:2a:89:b7:40:3f: 4a:13:8d:ec:49:cc:09:4d:68:64:26:15:35:c6:c7:e3:f0:03: 8e:a1:96:1e:40:26:14:2f:22:66:2f:04:fe:ff:47:ec:bb:30: 91:02:08:9a:7a:4d:d5:e7:c9:0c:53:79:03:e4:d5:95:95:e6: 18:4d:62:2e:c6:84:97:18:fd:7e:5d:8d:6f:36:6a:ff:d9:e9: 6a:86:63:62:85:97:bc:85:5b:cb:8f:bb:6e:39:96:77:8b:ff: e6:e5:fb:d3:5a:d6:70:99:b7:ce:97:cc:9c:92:29:02:d6:7d: d8:c4:df:29:74:04:37:e3:ac:e1:59:b1:68:8b:4a:e7:c1:e0: 92:ef:b7:58:0f:32:34:ec:56:a1:fb:4f:70:38:10:5d:aa:04: 19:91:d3:57:54:46:1e:85:02:6c:89:3c:58:56:53:00:8c:ef: 7f:8c:90:48:82:74:03:38:c6:d0:d0:85:65:28:bd:fb:51:55: 57:6b:c5:dc:c7:40:e5:d9:99:01:46:a3:37:f8:33:38:6a:6b: c8:8e:86:a3:2f:2c:b9:dd:22:a2:bf:69:13:19:41:73:65:c0: c5:d1:d9:2e -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUU80lVAyu9oM3nzYBg+qAnALRh/8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2 QzM4QTM0QjAeFw0yNjA0MTUwNjQ4MjdaFw0yNzA0MTQwNjUzMjdaMDMxMTAvBgNV BAMTKDgwNzRBRDQyRURFNEQ2QkZCQTYyM0M3NTVBOEZFNkMxRjE2RjY3RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5RcXcPP1rgsA0yGV3zp5DWHi O4Bd0Xhnv9Xyt9+oMgxsAFSO4Xigrsc/295FvVeGb/SyL/pDoV4YXPhZc4yWYkdc wiLjXTmW62FTP9WR7XP3nUcm3Y5HKSmO11KN68132bISmiqvP3iWMKaV3+L2Dlqg hsdfNhr3Eh9UmaMGM6YVtk+PhaqlJW2m1LJ/Jwyv75xVpVYMShQA8KUWi8JBO5Ij WjZy2JvWT5fiN5LvIHMPcVHKg7XlaROUzrdtxD1o6VgXkxGQuot5yvGdpMnHpDMB J1dlcxOXe400apIOzK05t46SV/9rH67K3hT32GRY071lUd8aK+SK7ObmlK9hAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUgHStQu3k1r+6Yjx1Wo/mwfFvZ9kwHwYDVR0j BBgwFoAUK7YXPYGJDkeJ4bS6ai46kWw4o0swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMzNjc2NzU4MzI1NjU3OC8wLzJCQjYxNzNEODE4OTBFNDc4OUUxQjRCQTZBMkUz QTkxNkMzOEEzNEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkJCNjE3M0Q4MTg5MEU0Nzg5RTFCNEJBNkEyRTNBOTE2QzM4QTM0Qi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMzNjc2NzU4MzI1NjU3OC8wLzMyMzQzMDMxM2E2 NDM5MzIzMDNhM2EyZjMyMzgyZDMxMzIzODIwM2QzZTIwMzYzMzM3MzEzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFBCQB2SAwDQYJKoZIhvcNAQELBQADggEBAGPDlRKCPOoqtwM1BfeWRPNV aTzL/cw02C+lPI8ueDYqibdAP0oTjexJzAlNaGQmFTXGx+PwA46hlh5AJhQvImYv BP7/R+y7MJECCJp6TdXnyQxTeQPk1ZWV5hhNYi7GhJcY/X5djW82av/Z6WqGY2KF l7yFW8uPu245lneL/+bl+9Na1nCZt86XzJySKQLWfdjE3yl0BDfjrOFZsWiLSufB 4JLvt1gPMjTsVqH7T3A4EF2qBBmR01dURh6FAmyJPFhWUwCM73+MkEiCdAM4xtDQ hWUovftRVVdrxdzHQOXZmQFGozf4Mzhqa8iOhqMvLLndIqK/aRMZQXNlwMXR2S4= -----END CERTIFICATE-----Generated at Fri Apr 17 23:30:50 2026 by rpki-client