$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a333a3a2f34382d3438203d3e203536303431.roa File: 323430323a396238303a333a3a2f34382d3438203d3e203536303431.roa (raw, json) Hash identifier: gRikpwtln/DHeVtiPs+53WSVM0uMdoNkbmtv3n27IWo= Subject key identifier: 6E:61:75:22:EB:D0:8F:25:79:0D:A2:0B:11:F8:BC:00:E1:92:A4:AF Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 5EDED63072CD447635BEB0DE8CE8890B4A589E0C Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a333a3a2f34382d3438203d3e203536303431.roa Signing time: Wed 15 Apr 2026 09:35:31 +0000 ROA not before: Wed 15 Apr 2026 09:30:31 +0000 ROA not after: Wed 14 Apr 2027 09:35:31 +0000 asID: 56041 IP address blocks: 2402:9b80:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:de:d6:30:72:cd:44:76:35:be:b0:de:8c:e8:89:0b:4a:58:9e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:30:31 2026 GMT Not After : Apr 14 09:35:31 2027 GMT Subject: CN=6E617522EBD08F25790DA20B11F8BC00E192A4AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:ec:10:07:98:58:a1:21:ba:8e:ce:05:10: d8:d9:9c:ac:fe:a5:5a:9e:21:0c:27:35:ec:1c:bc: 96:22:36:62:cb:97:44:0a:1f:a7:67:6d:cd:27:70: 22:82:7c:49:13:dd:58:e2:cb:c3:0e:dc:c1:54:e2: e8:22:f6:b9:fe:5d:f2:d9:9f:ae:d8:9b:4f:36:b2: ce:70:6c:91:bb:38:96:df:69:59:93:f9:c8:fc:4b: 98:4f:eb:70:02:89:93:e5:0c:09:e0:1c:72:a0:81: 9b:b9:06:64:ba:f5:da:f1:f1:ad:6b:42:3f:f6:a9: 10:8b:8c:77:58:8a:bd:20:cd:df:4a:da:a6:0c:e7: b4:89:2d:d5:cf:6c:b0:38:85:2d:a5:d0:be:14:72: 3e:63:7a:05:88:87:6d:7b:bd:08:5e:eb:f4:0c:1f: 80:25:91:a8:63:6c:0b:4f:b5:11:5d:76:60:bb:b1: 56:8e:c7:14:1c:6e:36:e3:68:2a:5a:b0:09:00:29: 0b:ab:47:1d:7d:e5:1b:76:25:ed:1a:f2:29:35:4a: a7:3b:f8:9d:0c:86:25:0f:74:52:dd:b0:75:c0:bc: 1d:af:c0:ce:1f:63:cf:77:9f:c9:93:cc:eb:1f:5c: 82:8f:bc:a8:1d:23:04:4a:da:aa:ae:19:c9:96:20: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:61:75:22:EB:D0:8F:25:79:0D:A2:0B:11:F8:BC:00:E1:92:A4:AF X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a333a3a2f34382d3438203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:3::/48 Signature Algorithm: sha256WithRSAEncryption ca:01:ad:9c:52:c1:b7:33:cd:7e:9e:6a:cd:26:f4:68:e0:b0: 50:db:3a:8b:b0:9c:83:ea:e1:56:de:cf:2b:67:76:0a:1b:e8: f1:bb:20:7e:c5:9e:d4:71:37:18:17:df:18:85:01:9d:4c:b9: 36:0d:5c:68:03:12:fc:f6:14:5a:e4:21:8c:ab:e8:2d:6c:19: 37:52:d2:93:af:df:ca:22:d2:10:5c:82:d4:4b:b0:78:47:01: 28:5b:ee:d6:9b:8e:54:bb:19:c7:c7:d7:b4:e3:db:ee:6f:46: 2e:40:58:d0:58:03:ed:61:9b:93:c3:33:45:6f:d2:b6:aa:ec: 17:4b:6f:a2:af:60:38:80:07:54:5f:86:2a:a0:1a:e6:f8:9c: 42:12:dd:95:28:47:9d:1a:54:fa:ac:1b:b6:b1:83:05:5f:a2: 4a:29:b3:89:c8:a4:42:4a:54:fb:94:8b:58:fe:0f:09:bd:c1: 89:f7:9a:d4:4d:00:ea:30:f2:65:3c:7d:c8:04:fa:08:61:60: 51:33:db:99:d0:71:a3:13:1e:bc:c6:6c:e3:42:1b:79:1d:ee: 92:15:10:87:3c:20:97:f8:86:b3:62:27:18:cb:22:39:27:6d: 24:f7:9b:24:03:fc:75:7d:51:65:5c:2a:fd:3c:11:db:b7:e9: 86:56:c7:d4 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUXt7WMHLNRHY1vrDejOiJC0pYngwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTMwMzFaFw0yNzA0MTQwOTM1MzFaMDMxMTAvBgNV BAMTKDZFNjE3NTIyRUJEMDhGMjU3OTBEQTIwQjExRjhCQzAwRTE5MkE0QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCobewQB5hYoSG6js4FENjZnKz+ pVqeIQwnNewcvJYiNmLLl0QKH6dnbc0ncCKCfEkT3Vjiy8MO3MFU4ugi9rn+XfLZ n67Ym082ss5wbJG7OJbfaVmT+cj8S5hP63ACiZPlDAngHHKggZu5BmS69drx8a1r Qj/2qRCLjHdYir0gzd9K2qYM57SJLdXPbLA4hS2l0L4Ucj5jegWIh217vQhe6/QM H4AlkahjbAtPtRFddmC7sVaOxxQcbjbjaCpasAkAKQurRx195Rt2Je0a8ik1Sqc7 +J0MhiUPdFLdsHXAvB2vwM4fY893n8mTzOsfXIKPvKgdIwRK2qquGcmWIBI5AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUbmF1IuvQjyV5DaILEfi8AOGSpK8wHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AAAzANBgkqhkiG9w0BAQsFAAOCAQEAygGtnFLBtzPNfp5q zSb0aOCwUNs6i7Ccg+rhVt7PK2d2Chvo8bsgfsWe1HE3GBffGIUBnUy5Ng1caAMS /PYUWuQhjKvoLWwZN1LSk6/fyiLSEFyC1EuweEcBKFvu1puOVLsZx8fXtOPb7m9G LkBY0FgD7WGbk8MzRW/StqrsF0tvoq9gOIAHVF+GKqAa5vicQhLdlShHnRpU+qwb trGDBV+iSimzicikQkpU+5SLWP4PCb3Bifea1E0A6jDyZTx9yAT6CGFgUTPbmdBx oxMevMZs40IbeR3ukhUQhzwgl/iGs2InGMsiOSdtJPebJAP8dX1RZVwq/TwR27fp hlbH1A== -----END CERTIFICATE-----Generated at Sat Apr 18 01:01:17 2026 by rpki-client