$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096362190622949377/0/323430323a313963303a3a2f33322d3332203d3e2030.roa File: 323430323a313963303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: rSqBjexqKcYyKYw2gWh34opzqrNoLhQFwHdXPpRt88w= Subject key identifier: AB:59:B8:27:5C:14:9C:94:F8:8C:1F:7B:B1:92:2C:8F:01:FD:CE:48 Certificate issuer: /CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Certificate serial: 137200A6E884597754DFA5073B2934DEE071B292 Authority key identifier: 68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/323430323a313963303a3a2f33322d3332203d3e2030.roa Signing time: Wed 15 Apr 2026 02:56:39 +0000 ROA not before: Wed 15 Apr 2026 02:51:39 +0000 ROA not after: Wed 14 Apr 2027 02:56:39 +0000 asID: 0 IP address blocks: 2402:19c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 16:32:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:72:00:a6:e8:84:59:77:54:df:a5:07:3b:29:34:de:e0:71:b2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68CB6218926BF4E6F2F6B817C0200EEBDF56700E Validity Not Before: Apr 15 02:51:39 2026 GMT Not After : Apr 14 02:56:39 2027 GMT Subject: CN=AB59B8275C149C94F88C1F7BB1922C8F01FDCE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c1:c0:ba:58:2f:f6:1a:c2:3f:ca:a1:d2:ce: f1:67:5a:d6:c2:ea:c1:1c:e8:ea:bf:f5:4d:1b:17: 75:6a:a8:ff:e8:ba:95:3f:39:a4:64:54:f2:31:ef: da:c3:95:4b:ee:64:18:fd:f6:0a:2c:da:b9:9b:35: 8b:ac:07:c6:72:c0:67:95:76:9c:ab:de:60:03:5c: 57:34:47:fd:0e:9c:4e:24:13:bd:62:30:25:0b:f8: 03:26:96:0d:8a:5e:da:46:5e:6a:da:af:1c:d7:99: 76:09:f2:01:cb:d3:cd:df:c6:96:fb:47:93:a2:10: 82:4c:87:e0:e8:c2:8d:b8:5e:64:73:d0:e5:c4:b6: 9d:97:2a:09:08:53:86:a2:d1:75:09:3e:0a:50:97: 24:53:5a:b7:da:e1:83:93:d8:30:eb:d2:ae:86:d8: 47:02:e6:d5:8e:66:e2:87:80:eb:65:99:f7:89:0b: f3:b8:39:a2:cb:5d:d5:f1:26:e2:59:7a:7f:95:7a: 05:98:bc:76:b9:60:b1:4d:ef:1b:a3:08:64:7b:93: 92:6e:47:45:87:50:11:7f:fa:32:f3:a5:35:73:a4: 48:03:e5:15:84:47:ac:0e:fc:98:5c:5e:90:59:92: 69:0a:b6:a1:c8:80:d3:7e:57:2e:49:38:ca:57:d1: c1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:59:B8:27:5C:14:9C:94:F8:8C:1F:7B:B1:92:2C:8F:01:FD:CE:48 X509v3 Authority Key Identifier: keyid:68:CB:62:18:92:6B:F4:E6:F2:F6:B8:17:C0:20:0E:EB:DF:56:70:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/68CB6218926BF4E6F2F6B817C0200EEBDF56700E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096362190622949377/0/323430323a313963303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:19c0::/32 Signature Algorithm: sha256WithRSAEncryption 3e:68:ad:95:19:2c:7f:a6:96:b3:8c:2a:bc:8a:15:02:29:50: f8:0c:a5:5a:84:7f:89:98:5e:ff:61:e8:0e:47:07:3f:95:51: b8:04:97:8f:77:55:60:6d:24:77:08:e2:01:9d:a1:e1:87:e2: 66:df:9d:51:9d:02:1a:ea:0b:ad:07:07:1c:22:13:6f:e7:17: 88:6d:f1:8b:6c:b9:4c:53:62:6a:0d:43:2f:df:6f:43:33:4a: ec:5b:9c:71:5a:bd:2b:e1:12:64:76:92:31:ca:48:9c:1d:ce: 7d:6a:9e:ff:64:3b:be:e9:2a:84:53:5b:89:9e:54:a5:7c:8c: cc:e5:b1:89:b4:a6:01:6e:cf:51:ec:f4:a1:3d:49:30:8c:3e: e6:34:01:ed:1b:1f:2b:0c:90:82:34:ee:54:c4:7b:83:d9:a1: 17:c8:d6:e4:a1:bf:0b:80:0d:02:cb:44:db:a9:29:0e:6d:13: b6:1f:05:3a:3c:8d:98:e4:c9:aa:90:9a:79:6b:ee:d8:35:f8: 56:6c:b2:b7:94:41:a5:7e:b9:4b:19:30:13:c6:7a:7f:e1:a2: 7f:6a:46:2e:95:71:96:23:34:3e:dd:87:28:31:27:72:39:22: c6:87:63:1c:8f:98:13:d6:58:54:8c:72:cf:fd:39:01:f4:31: 5f:41:9a:cd -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUE3IApuiEWXdU36UHOyk03uBxspIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJE RjU2NzAwRTAeFw0yNjA0MTUwMjUxMzlaFw0yNzA0MTQwMjU2MzlaMDMxMTAvBgNV BAMTKEFCNTlCODI3NUMxNDlDOTRGODhDMUY3QkIxOTIyQzhGMDFGRENFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrwcC6WC/2GsI/yqHSzvFnWtbC 6sEc6Oq/9U0bF3VqqP/oupU/OaRkVPIx79rDlUvuZBj99gos2rmbNYusB8ZywGeV dpyr3mADXFc0R/0OnE4kE71iMCUL+AMmlg2KXtpGXmrarxzXmXYJ8gHL083fxpb7 R5OiEIJMh+Dowo24XmRz0OXEtp2XKgkIU4ai0XUJPgpQlyRTWrfa4YOT2DDr0q6G 2EcC5tWOZuKHgOtlmfeJC/O4OaLLXdXxJuJZen+VegWYvHa5YLFN7xujCGR7k5Ju R0WHUBF/+jLzpTVzpEgD5RWER6wO/JhcXpBZkmkKtqHIgNN+Vy5JOMpX0cFPAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUq1m4J1wUnJT4jB97sZIsjwH9zkgwHwYDVR0j BBgwFoAUaMtiGJJr9Oby9rgXwCAO699WcA4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjM2MjE5MDYyMjk0OTM3Ny8wLzY4Q0I2MjE4OTI2QkY0RTZGMkY2QjgxN0MwMjAw RUVCREY1NjcwMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjhDQjYyMTg5MjZCRjRFNkYyRjZCODE3QzAyMDBFRUJERjU2NzAwRS5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MzYyMTkwNjIyOTQ5Mzc3LzAvMzIzNDMwMzIzYTMx Mzk2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAhnA MA0GCSqGSIb3DQEBCwUAA4IBAQA+aK2VGSx/ppazjCq8ihUCKVD4DKVahH+JmF7/ YegORwc/lVG4BJePd1VgbSR3COIBnaHhh+Jm351RnQIa6gutBwccIhNv5xeIbfGL bLlMU2JqDUMv329DM0rsW5xxWr0r4RJkdpIxykicHc59ap7/ZDu+6SqEU1uJnlSl fIzM5bGJtKYBbs9R7PShPUkwjD7mNAHtGx8rDJCCNO5UxHuD2aEXyNbkob8LgA0C y0TbqSkObRO2HwU6PI2Y5MmqkJp5a+7YNfhWbLK3lEGlfrlLGTATxnp/4aJ/akYu lXGWIzQ+3YcoMSdyOSLGh2Mcj5gT1lhUjHLP/TkB9DFfQZrN -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:04 2026 by rpki-client