$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430303a313763303a3a2f33322d313238203d3e20313337373935.roa File: 323430303a313763303a3a2f33322d313238203d3e20313337373935.roa (raw, json) Hash identifier: yzONsYi5N+SM+OLZBFdqRCr3ZLEz27kAoxggpJWW9UI= Subject key identifier: 30:61:FF:95:F7:42:B1:42:E4:B4:BB:7B:8E:EF:E0:57:C9:A2:A4:33 Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF Certificate serial: 39AE1A78AB6E29B1A5B1EA389CF1E693D19F2A03 Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430303a313763303a3a2f33322d313238203d3e20313337373935.roa Signing time: Wed 15 Apr 2026 07:41:23 +0000 ROA not before: Wed 15 Apr 2026 07:36:23 +0000 ROA not after: Wed 14 Apr 2027 07:41:23 +0000 asID: 137795 IP address blocks: 2400:17c0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ae:1a:78:ab:6e:29:b1:a5:b1:ea:38:9c:f1:e6:93:d1:9f:2a:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF Validity Not Before: Apr 15 07:36:23 2026 GMT Not After : Apr 14 07:41:23 2027 GMT Subject: CN=3061FF95F742B142E4B4BB7B8EEFE057C9A2A433 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:11:bb:04:3d:aa:fd:d1:1b:fd:25:c5:ae: a4:b1:48:d0:1f:ac:dd:77:8c:ca:c3:7c:a0:0e:65: f1:bc:60:66:05:e9:b1:4b:3d:2e:b5:14:51:7f:ed: fa:b1:1d:ed:ed:fa:6f:49:8b:1e:9e:d5:0a:cb:bf: 6d:67:05:81:0e:8c:d2:36:e7:2b:44:70:41:c4:b0: 38:a9:e1:8f:f5:cc:61:2c:cf:aa:f5:db:f2:b8:97: 70:33:0b:d5:5c:ef:0c:db:a7:fe:05:09:e5:84:39: 88:e2:50:94:2e:9c:7d:99:4f:7c:12:0a:df:57:6b: de:41:38:38:89:ff:13:01:f1:f9:a3:27:97:b4:da: c0:e4:f3:3b:a3:40:df:42:5b:cf:33:b0:e0:03:3b: e2:45:40:b3:74:f6:d7:62:92:5d:08:ee:5b:a4:e0: a8:06:b9:f1:a7:43:0c:ab:0b:27:71:47:ef:ad:fe: 68:19:b0:7c:f5:97:5e:5d:d4:6f:a0:2c:33:03:62: f4:f5:aa:a6:40:a4:f1:a1:13:55:1e:1b:d3:c9:53: c8:5f:22:4d:d1:3d:38:45:f3:e7:8e:09:d7:a9:6e: 47:fd:16:9a:a1:f9:39:1d:8d:cb:68:84:57:48:14: e1:f7:04:ac:c5:04:c4:f0:c6:b9:6a:5c:f7:cf:c0: 1b:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:61:FF:95:F7:42:B1:42:E4:B4:BB:7B:8E:EF:E0:57:C9:A2:A4:33 X509v3 Authority Key Identifier: keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/323430303a313763303a3a2f33322d313238203d3e20313337373935.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:17c0::/32 Signature Algorithm: sha256WithRSAEncryption bf:d5:b8:79:dc:d1:3a:ea:79:a3:0c:98:ca:f4:d4:88:77:0a: af:82:a6:ad:20:56:c3:8c:0c:b7:eb:96:e5:f2:c7:94:e1:c5: b7:2b:25:da:36:91:59:00:17:2e:f3:e1:d7:dc:e5:89:ee:ce: 1b:6e:29:2a:b1:db:b7:56:16:d1:53:6c:01:28:10:f4:83:ae: 9c:41:fa:17:7f:7c:30:fc:40:2e:b4:66:95:5e:c8:d3:47:8d: 9b:7e:41:3c:73:40:18:64:53:e3:36:f5:89:22:2a:7e:95:f5: 79:17:51:17:4b:24:24:04:bf:bb:75:45:3e:7b:7f:3c:40:a3: fc:18:03:92:34:f2:09:6b:b2:f4:38:cd:b0:ae:2a:30:5d:1d: 9b:8c:96:9d:67:df:72:35:2f:9f:d7:e8:36:a3:07:7e:f1:58: ff:e6:0a:4e:81:e1:a4:d8:8f:13:36:3b:11:d0:b6:d7:de:a6: b1:6a:0f:86:cb:f1:89:21:0c:f8:15:93:e6:01:b8:a7:4f:e5: 59:63:db:14:1a:1c:5f:69:06:4a:4a:4c:5f:b1:92:49:da:69: 84:5a:57:bc:96:bd:0a:e7:0d:04:85:f9:7e:fd:65:cf:75:97: 11:fb:39:62:4f:57:a1:7d:1e:59:81:2b:2b:eb:10:c6:ed:14: 21:b4:7a:08 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUOa4aeKtuKbGlseo4nPHmk9GfKgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThG QkRCMTlERjAeFw0yNjA0MTUwNzM2MjNaFw0yNzA0MTQwNzQxMjNaMDMxMTAvBgNV BAMTKDMwNjFGRjk1Rjc0MkIxNDJFNEI0QkI3QjhFRUZFMDU3QzlBMkE0MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXWBG7BD2q/dEb/SXFrqSxSNAf rN13jMrDfKAOZfG8YGYF6bFLPS61FFF/7fqxHe3t+m9Jix6e1QrLv21nBYEOjNI2 5ytEcEHEsDip4Y/1zGEsz6r12/K4l3AzC9Vc7wzbp/4FCeWEOYjiUJQunH2ZT3wS Ct9Xa95BODiJ/xMB8fmjJ5e02sDk8zujQN9CW88zsOADO+JFQLN09tdikl0I7luk 4KgGufGnQwyrCydxR++t/mgZsHz1l15d1G+gLDMDYvT1qqZApPGhE1UeG9PJU8hf Ik3RPThF8+eOCdepbkf9Fpqh+TkdjctohFdIFOH3BKzFBMTwxrlqXPfPwBtfAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQUMGH/lfdCsULktLt7ju/gV8mipDMwHwYDVR0j BBgwFoAUlKBAB8GJNO79d5RFulNJqPvbGd8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcwMDQwMDIwNTAzNzU3MC8wLzk0QTA0MDA3QzE4OTM0RUVGRDc3OTQ0NUJBNTM0 OUE4RkJEQjE5REYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTRBMDQwMDdDMTg5MzRFRUZENzc5NDQ1QkE1MzQ5QThGQkRCMTlERi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3MDA0MDAyMDUwMzc1NzAvMC8zMjM0MzAzMDNh MzEzNzYzMzAzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMxMzMzNzM3MzkzNS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQAF8AwDQYJKoZIhvcNAQELBQADggEBAL/VuHnc0TrqeaMMmMr0 1Ih3Cq+Cpq0gVsOMDLfrluXyx5ThxbcrJdo2kVkAFy7z4dfc5YnuzhtuKSqx27dW FtFTbAEoEPSDrpxB+hd/fDD8QC60ZpVeyNNHjZt+QTxzQBhkU+M29YkiKn6V9XkX URdLJCQEv7t1RT57fzxAo/wYA5I08glrsvQ4zbCuKjBdHZuMlp1n33I1L5/X6Daj B37xWP/mCk6B4aTYjxM2OxHQttfeprFqD4bL8YkhDPgVk+YBuKdP5Vlj2xQaHF9p BkpKTF+xkknaaYRaV7yWvQrnDQSF+X79Zc91lxH7OWJPV6F9HlmBKyvrEMbtFCG0 egg= -----END CERTIFICATE-----Generated at Sat Apr 18 04:14:26 2026 by rpki-client