$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a313a3a2f34382d3438203d3e203536303431.roa File: 323430323a396238303a313a3a2f34382d3438203d3e203536303431.roa (raw, json) Hash identifier: S6nSfiLOEY1GtO/YxXR5xolo7BFEpbXbX8iqePfWTcQ= Subject key identifier: E7:38:5B:E2:EC:5E:45:72:DC:00:30:27:CF:B8:F1:2B:DA:D9:3D:21 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 529031F113DBCC93D946B6FB3529C74163509141 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a313a3a2f34382d3438203d3e203536303431.roa Signing time: Wed 15 Apr 2026 09:35:30 +0000 ROA not before: Wed 15 Apr 2026 09:30:30 +0000 ROA not after: Wed 14 Apr 2027 09:35:30 +0000 asID: 56041 IP address blocks: 2402:9b80:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:90:31:f1:13:db:cc:93:d9:46:b6:fb:35:29:c7:41:63:50:91:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:30:30 2026 GMT Not After : Apr 14 09:35:30 2027 GMT Subject: CN=E7385BE2EC5E4572DC003027CFB8F12BDAD93D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e1:00:d8:20:db:2a:20:92:ce:9b:ce:37:d8: 97:d8:69:4a:30:bb:18:f2:f1:14:5d:cd:11:a5:15: ae:23:f6:2c:6d:11:83:4b:40:bc:54:24:09:c5:f1: 49:f9:9b:4f:42:88:99:7a:cf:f4:ca:42:ce:9d:13: fe:19:be:a6:d2:75:2e:24:96:74:14:c6:a9:f1:4c: 12:ae:36:e8:11:35:af:35:9c:5b:ec:c9:83:e7:6b: 94:8e:28:8a:76:45:0a:24:82:8d:11:94:8f:0b:e0: 46:87:b1:f0:d0:79:2f:19:bf:ca:38:8f:b4:61:4c: 83:58:b3:7f:e4:e6:4f:67:1e:49:01:1e:d8:06:05: 72:d0:46:f0:3b:b6:e5:66:38:c0:9b:8b:e9:b8:dd: fe:3a:6c:ac:f3:c9:5f:1f:d1:75:e8:d9:58:15:5a: 33:8c:47:05:09:53:eb:22:24:af:c5:ee:c2:ee:94: 64:97:72:e2:c1:d4:03:96:06:19:50:a6:7f:68:95: ef:21:98:10:72:07:06:82:2a:20:f4:4a:d9:e8:40: 59:12:b8:ca:58:ea:b8:36:97:8d:f5:36:83:03:b6: 29:b1:06:bb:c3:ea:ca:ea:9f:f9:94:c1:6b:e0:7d: 4c:23:9c:f8:e2:7d:a9:43:08:d0:2e:7d:cc:31:e8: 59:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:38:5B:E2:EC:5E:45:72:DC:00:30:27:CF:B8:F1:2B:DA:D9:3D:21 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a313a3a2f34382d3438203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:1::/48 Signature Algorithm: sha256WithRSAEncryption d4:2f:3b:09:77:10:93:3a:01:7d:4d:ab:cd:70:41:bf:a2:df: cc:ca:74:8b:e2:07:b2:04:bf:d4:17:44:f2:90:16:0d:c8:b7: 7a:86:ea:a9:3d:56:ab:13:69:0a:92:84:c2:a5:21:42:b5:fb: 2a:78:d7:d7:f2:cd:21:fa:43:ff:ac:c3:0b:25:3b:d5:2c:6e: 9b:a1:e2:11:74:02:c9:6d:f2:23:43:f8:f3:dc:ed:d9:6f:6d: bb:60:c6:cf:93:57:bf:8b:14:83:62:01:04:56:cf:97:44:e5: 11:7b:be:46:25:97:6b:bf:5a:e5:66:5a:86:09:d8:37:fd:ad: f3:74:63:d9:d0:d7:48:87:0f:84:5e:c2:ce:08:16:e6:77:bc: 82:a0:2e:7d:ec:2e:ff:13:ac:31:5c:ef:47:1a:44:24:6e:f9: 36:cd:68:17:91:83:f3:f1:c9:89:b0:f9:76:c8:12:c6:4b:24: ff:ca:dd:8e:d0:4a:d5:d7:b2:f2:34:8a:91:3f:a3:a2:ff:55: 18:55:c8:43:76:c0:f8:9d:07:69:9d:ba:40:7a:27:b3:6b:67: 06:0e:86:4d:e1:83:1d:dd:94:aa:1c:ca:3a:61:c5:98:33:b7: 57:44:d4:76:3a:f3:82:22:b2:52:15:1b:14:2a:33:13:b5:e2: f3:8c:8d:43 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUUpAx8RPbzJPZRrb7NSnHQWNQkUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTMwMzBaFw0yNzA0MTQwOTM1MzBaMDMxMTAvBgNV BAMTKEU3Mzg1QkUyRUM1RTQ1NzJEQzAwMzAyN0NGQjhGMTJCREFEOTNEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC04QDYINsqIJLOm8432JfYaUow uxjy8RRdzRGlFa4j9ixtEYNLQLxUJAnF8Un5m09CiJl6z/TKQs6dE/4ZvqbSdS4k lnQUxqnxTBKuNugRNa81nFvsyYPna5SOKIp2RQokgo0RlI8L4EaHsfDQeS8Zv8o4 j7RhTINYs3/k5k9nHkkBHtgGBXLQRvA7tuVmOMCbi+m43f46bKzzyV8f0XXo2VgV WjOMRwUJU+siJK/F7sLulGSXcuLB1AOWBhlQpn9ole8hmBByBwaCKiD0StnoQFkS uMpY6rg2l431NoMDtimxBrvD6srqn/mUwWvgfUwjnPjifalDCNAufcwx6FkrAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU5zhb4uxeRXLcADAnz7jxK9rZPSEwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTMxM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AAATANBgkqhkiG9w0BAQsFAAOCAQEA1C87CXcQkzoBfU2r zXBBv6LfzMp0i+IHsgS/1BdE8pAWDci3eobqqT1WqxNpCpKEwqUhQrX7KnjX1/LN IfpD/6zDCyU71Sxum6HiEXQCyW3yI0P489zt2W9tu2DGz5NXv4sUg2IBBFbPl0Tl EXu+RiWXa79a5WZahgnYN/2t83Rj2dDXSIcPhF7CzggW5ne8gqAufewu/xOsMVzv RxpEJG75Ns1oF5GD8/HJibD5dsgSxksk/8rdjtBK1dey8jSKkT+jov9VGFXIQ3bA +J0HaZ26QHons2tnBg6GTeGDHd2UqhzKOmHFmDO3V0TUdjrzgiKyUhUbFCozE7Xi 84yNQw== -----END CERTIFICATE-----Generated at Fri Apr 17 20:32:24 2026 by rpki-client