$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e20313337373032.roa File: 323430343a333730303a3a2f33322d3634203d3e20313337373032.roa (raw, json) Hash identifier: qs2qxnTmOlEyVS6Qau2xA7nlczXR/QB+A2OlVAzfu34= Subject key identifier: 1D:1F:88:7E:48:0F:41:5C:CF:A2:68:8D:FA:FF:AD:63:D8:9F:74:DC Certificate issuer: /CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Certificate serial: 32F8ECB18A40915FBFEB3BBA71F340EACFF4816F Authority key identifier: F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e20313337373032.roa Signing time: Thu 16 Apr 2026 00:21:03 +0000 ROA not before: Thu 16 Apr 2026 00:16:03 +0000 ROA not after: Thu 15 Apr 2027 00:21:03 +0000 asID: 137702 IP address blocks: 2404:3700::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 12:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f8:ec:b1:8a:40:91:5f:bf:eb:3b:ba:71:f3:40:ea:cf:f4:81:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8 Validity Not Before: Apr 16 00:16:03 2026 GMT Not After : Apr 15 00:21:03 2027 GMT Subject: CN=1D1F887E480F415CCFA2688DFAFFAD63D89F74DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:66:2d:f2:b0:2d:9f:65:ff:56:f4:a3:9e:6a: fc:04:b3:8e:f5:63:cb:fa:0b:22:79:35:ab:5a:9d: 1b:30:59:90:92:73:c2:74:1f:83:42:56:82:80:b9: a6:22:0e:04:69:52:96:bc:31:9c:ce:67:73:56:2e: 3a:89:02:1c:28:3f:22:d5:16:6a:27:30:38:76:2e: 51:3b:30:74:3b:33:74:36:4a:a4:49:5f:2b:95:3f: 2d:7e:64:3b:6d:79:56:70:85:ab:b7:5f:c2:a6:1a: 95:15:00:cc:25:e8:97:41:55:01:f2:53:d3:36:cd: 0e:c4:4c:1b:89:da:5b:06:93:a0:68:dc:ae:d4:66: c9:87:a0:3a:8b:4d:30:29:a6:e5:93:24:ad:2d:a4: c6:fd:50:5f:b3:e8:cd:df:67:88:c2:e0:c7:a4:12: 35:d3:be:1d:f6:92:f4:bd:aa:a4:61:90:2b:b1:e1: ba:79:d0:17:92:9d:2b:94:55:35:db:e9:56:18:7e: 97:08:e0:a9:36:22:8c:10:52:4b:8a:0e:e7:92:ae: 37:51:e6:de:ca:33:e4:6c:9c:a8:4b:3d:d4:a0:89: 13:d5:b4:33:de:b8:1a:a3:f6:e0:7e:32:9c:eb:02: 3a:ba:1f:64:c8:41:98:61:bf:9a:5c:a8:64:85:cc: 6c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:1F:88:7E:48:0F:41:5C:CF:A2:68:8D:FA:FF:AD:63:D8:9F:74:DC X509v3 Authority Key Identifier: keyid:F8:B4:FC:29:FE:F2:0A:DF:AF:B2:4A:6D:AF:5F:44:15:22:6E:F8:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F8B4FC29FEF20ADFAFB24A6DAF5F4415226EF8A8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096586764014845955/0/323430343a333730303a3a2f33322d3634203d3e20313337373032.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:3700::/32 Signature Algorithm: sha256WithRSAEncryption 16:6f:51:86:ba:2a:44:8e:f3:3e:38:ac:42:29:01:d0:ce:b7: 95:1d:42:67:9d:73:3b:16:d3:c9:9a:d5:b9:ef:2c:f5:89:33: 18:47:59:4d:f3:34:c1:fe:ac:50:de:52:55:e1:da:1d:82:c3: 43:2c:19:37:a8:25:6b:b5:b6:2e:dd:aa:4f:28:7a:ea:d5:c6: ea:c7:2d:d8:16:87:82:95:27:e7:a1:59:ef:1e:26:69:a9:59: 57:63:22:8e:59:87:ee:22:cc:61:b5:c8:be:de:15:62:d6:30: 1a:46:fb:c5:1c:f6:89:c0:0c:1d:a0:11:b3:76:1b:86:7a:10: d9:08:8f:41:eb:bb:65:6d:03:52:c0:c5:d4:ee:a4:63:bc:b8: 41:e9:24:f4:7c:2e:55:e9:ea:f8:63:5e:c9:1b:87:59:7d:5d: 82:5c:d0:66:ea:c3:5e:d4:86:79:b7:92:8d:3c:5c:a3:d1:58: 13:7a:82:cb:2f:44:e5:4c:33:85:ec:50:f3:31:d7:00:61:c5: e3:c3:a5:8d:97:fd:5c:f8:e1:c0:79:2b:cf:7c:22:4d:ca:c1: 87:8f:bb:f0:b0:91:7a:2f:3a:54:ce:94:70:b8:27:d4:dc:8d: e2:bb:ed:74:1a:17:d7:2f:62:fa:79:c7:35:6e:cd:a5:d9:71: 46:4e:26:93 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUMvjssYpAkV+/6zu6cfNA6s/0gW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUy MjZFRjhBODAeFw0yNjA0MTYwMDE2MDNaFw0yNzA0MTUwMDIxMDNaMDMxMTAvBgNV BAMTKDFEMUY4ODdFNDgwRjQxNUNDRkEyNjg4REZBRkZBRDYzRDg5Rjc0REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwZi3ysC2fZf9W9KOeavwEs471 Y8v6CyJ5NatanRswWZCSc8J0H4NCVoKAuaYiDgRpUpa8MZzOZ3NWLjqJAhwoPyLV FmonMDh2LlE7MHQ7M3Q2SqRJXyuVPy1+ZDtteVZwhau3X8KmGpUVAMwl6JdBVQHy U9M2zQ7ETBuJ2lsGk6Bo3K7UZsmHoDqLTTAppuWTJK0tpMb9UF+z6M3fZ4jC4Mek EjXTvh32kvS9qqRhkCux4bp50BeSnSuUVTXb6VYYfpcI4Kk2IowQUkuKDueSrjdR 5t7KM+RsnKhLPdSgiRPVtDPeuBqj9uB+MpzrAjq6H2TIQZhhv5pcqGSFzGzPAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUHR+IfkgPQVzPomiN+v+tY9ifdNwwHwYDVR0j BBgwFoAU+LT8Kf7yCt+vskptr19EFSJu+KgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjU4Njc2NDAxNDg0NTk1NS8wL0Y4QjRGQzI5RkVGMjBBREZBRkIyNEE2REFGNUY0 NDE1MjI2RUY4QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRjhCNEZDMjlGRUYyMEFERkFGQjI0QTZEQUY1RjQ0MTUyMjZFRjhBOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjU4Njc2NDAxNDg0NTk1NS8wLzMyMzQzMDM0M2Ez MzM3MzAzMDNhM2EyZjMzMzIyZDM2MzQyMDNkM2UyMDMxMzMzNzM3MzAzMi5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQENwAwDQYJKoZIhvcNAQELBQADggEBABZvUYa6KkSO8z44rEIpAdDO t5UdQmedczsW08ma1bnvLPWJMxhHWU3zNMH+rFDeUlXh2h2Cw0MsGTeoJWu1ti7d qk8oeurVxurHLdgWh4KVJ+ehWe8eJmmpWVdjIo5Zh+4izGG1yL7eFWLWMBpG+8Uc 9onADB2gEbN2G4Z6ENkIj0Hru2VtA1LAxdTupGO8uEHpJPR8LlXp6vhjXskbh1l9 XYJc0Gbqw17Uhnm3ko08XKPRWBN6gssvROVMM4XsUPMx1wBhxePDpY2X/Vz44cB5 K898Ik3KwYePu/CwkXovOlTOlHC4J9TcjeK77XQaF9cvYvp5xzVuzaXZcUZOJpM= -----END CERTIFICATE-----Generated at Fri Apr 17 21:36:40 2026 by rpki-client