$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31333a3a2f34382d3438203d3e203536303431.roa File: 323430323a396238303a31333a3a2f34382d3438203d3e203536303431.roa (raw, json) Hash identifier: 6SldQ49C886uGNiu5FT+AB4vdv27SBu83QEB9iYz0v4= Subject key identifier: 95:1B:00:25:6F:0B:03:86:92:F7:D0:6C:44:E0:A4:45:00:DF:D0:28 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 5BDC3D89C5A517E19875A9F5B430BCB9B0A58E24 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31333a3a2f34382d3438203d3e203536303431.roa Signing time: Wed 15 Apr 2026 09:35:29 +0000 ROA not before: Wed 15 Apr 2026 09:30:29 +0000 ROA not after: Wed 14 Apr 2027 09:35:29 +0000 asID: 56041 IP address blocks: 2402:9b80:13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:dc:3d:89:c5:a5:17:e1:98:75:a9:f5:b4:30:bc:b9:b0:a5:8e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:30:29 2026 GMT Not After : Apr 14 09:35:29 2027 GMT Subject: CN=951B00256F0B038692F7D06C44E0A44500DFD028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6e:2a:c4:5c:8b:9d:b0:44:14:12:4e:b4:af: 41:a3:8a:c5:66:d8:4e:98:9b:0f:b6:3f:3f:44:f0: f4:1c:d2:b8:9b:e1:a9:8f:d5:90:12:4d:c8:45:4d: fe:82:a3:6b:9d:72:44:ad:4a:a6:da:dc:25:ba:25: 44:fc:3c:96:01:bd:e8:ce:c6:ca:56:95:e8:1f:e7: 76:51:a4:b1:9b:da:4a:70:44:39:17:dc:52:c7:e7: 96:2f:08:c7:9b:be:f5:b5:76:5b:5c:bb:f7:d6:b3: c6:27:87:55:b5:34:72:b7:76:40:c2:87:6f:40:83: 3a:b0:0d:a5:92:d0:f1:40:c6:7f:9e:f3:2e:4a:d0: 13:ca:97:b7:0c:49:cd:4b:5d:dd:d9:c5:3f:10:c2: 1a:57:c6:67:11:ac:55:48:50:35:fb:19:cd:69:5a: 46:73:81:ce:de:82:d0:32:9a:5c:77:59:ad:95:27: 11:f2:89:1d:ce:0b:dd:36:6e:ad:7f:6e:e1:ee:52: 77:28:fa:86:b9:4d:14:6c:a3:14:65:b9:78:83:b0: 3c:0a:4c:9b:ea:9e:c0:35:34:0e:10:73:4d:5d:a1: 5a:32:a3:c4:00:0e:79:cf:b1:eb:fe:bf:4a:b8:a2: 4e:4c:5f:8a:28:a8:12:37:67:d4:08:76:17:f1:e1: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1B:00:25:6F:0B:03:86:92:F7:D0:6C:44:E0:A4:45:00:DF:D0:28 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a31333a3a2f34382d3438203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:13::/48 Signature Algorithm: sha256WithRSAEncryption 2e:96:18:84:8c:3d:8b:a9:6e:26:63:de:e8:5d:6c:c4:19:31: c9:ae:b6:2d:4e:67:21:1f:ed:5c:23:a1:84:70:52:3b:3c:c4: e1:06:ba:c1:57:8d:10:0e:ec:c4:f9:ab:99:5d:a7:74:08:6c: cf:4a:89:e1:23:d8:8e:6f:b0:2d:51:34:f7:83:5c:34:40:d4: 9a:2a:64:f7:16:2a:ef:6c:6f:8c:40:89:ed:ce:19:22:d5:71: 84:7e:b6:50:03:f8:ee:cc:f3:29:a5:56:b9:d0:bb:10:6e:2c: 9e:55:d4:bd:35:6f:6c:95:08:20:f5:cd:c9:c6:c4:62:11:a6: b8:13:f3:21:bf:34:94:4d:a0:f6:6a:f0:76:58:f0:8c:75:7d: 02:b4:a4:b7:6e:18:c5:ed:57:34:09:2c:81:47:50:25:3e:25: 0e:91:1c:24:d3:79:2f:8e:64:85:cb:e8:b2:f9:ce:d5:52:e1: e7:e6:0f:92:52:1a:40:12:cd:c6:e3:bd:56:de:05:34:26:c2: 54:fc:55:22:26:1f:e0:c0:d0:4c:be:c4:07:bd:ad:b6:86:02: cf:3b:f5:d1:48:7d:45:20:f7:aa:12:cd:68:ae:04:f0:a8:bc: a7:2b:cf:2d:41:6f:a6:ef:f2:9f:94:99:c1:07:5b:89:64:72: 50:dd:88:5f -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUW9w9icWlF+GYdan1tDC8ubCljiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTMwMjlaFw0yNzA0MTQwOTM1MjlaMDMxMTAvBgNV BAMTKDk1MUIwMDI1NkYwQjAzODY5MkY3RDA2QzQ0RTBBNDQ1MDBERkQwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubirEXIudsEQUEk60r0GjisVm 2E6Ymw+2Pz9E8PQc0rib4amP1ZASTchFTf6Co2udckStSqba3CW6JUT8PJYBvejO xspWlegf53ZRpLGb2kpwRDkX3FLH55YvCMebvvW1dltcu/fWs8Ynh1W1NHK3dkDC h29AgzqwDaWS0PFAxn+e8y5K0BPKl7cMSc1LXd3ZxT8QwhpXxmcRrFVIUDX7Gc1p WkZzgc7egtAymlx3Wa2VJxHyiR3OC902bq1/buHuUnco+oa5TRRsoxRluXiDsDwK TJvqnsA1NA4Qc01doVoyo8QADnnPsev+v0q4ok5MX4ooqBI3Z9QIdhfx4U5lAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUlRsAJW8LA4aS99BsROCkRQDf0CgwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk2NzI3NzUyMzUxOTQwNjA5LzAvMzIzNDMwMzIz YTM5NjIzODMwM2EzMTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQCm4AAEzANBgkqhkiG9w0BAQsFAAOCAQEALpYYhIw9i6lu JmPe6F1sxBkxya62LU5nIR/tXCOhhHBSOzzE4Qa6wVeNEA7sxPmrmV2ndAhsz0qJ 4SPYjm+wLVE094NcNEDUmipk9xYq72xvjECJ7c4ZItVxhH62UAP47szzKaVWudC7 EG4snlXUvTVvbJUIIPXNycbEYhGmuBPzIb80lE2g9mrwdljwjHV9ArSkt24Yxe1X NAksgUdQJT4lDpEcJNN5L45khcvosvnO1VLh5+YPklIaQBLNxuO9Vt4FNCbCVPxV IiYf4MDQTL7EB72ttoYCzzv10Uh9RSD3qhLNaK4E8Ki8pyvPLUFvpu/yn5SZwQdb iWRyUN2IXw== -----END CERTIFICATE-----Generated at Sat Apr 18 01:01:39 2026 by rpki-client