$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a383a3a2f34382d3438203d3e203536303431.roa File: 323430323a396238303a383a3a2f34382d3438203d3e203536303431.roa (raw, json) Hash identifier: L7WXrZBR5AMwIFeHxfEUvPgAt/FgcA0XXycf9y6UZdA= Subject key identifier: E7:59:A3:EE:87:64:32:E1:74:68:F4:4C:26:90:C8:BF:C1:E9:66:7F Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 57B6F35E0FA199838F22F0AA204D23FE3B65649A Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a383a3a2f34382d3438203d3e203536303431.roa Signing time: Wed 15 Apr 2026 09:35:29 +0000 ROA not before: Wed 15 Apr 2026 09:30:29 +0000 ROA not after: Wed 14 Apr 2027 09:35:29 +0000 asID: 56041 IP address blocks: 2402:9b80:8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:b6:f3:5e:0f:a1:99:83:8f:22:f0:aa:20:4d:23:fe:3b:65:64:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:30:29 2026 GMT Not After : Apr 14 09:35:29 2027 GMT Subject: CN=E759A3EE876432E17468F44C2690C8BFC1E9667F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:87:22:b7:bb:31:d8:94:d5:6e:de:e4:f4:fb: 95:0e:2b:21:ed:f9:0a:a9:9f:55:30:af:6a:c9:20: 88:2a:cd:c4:db:7a:d8:c2:6c:ae:a0:70:71:ba:d8: 8e:ba:05:f8:70:4a:f0:34:80:e7:95:46:fe:44:21: 25:d8:62:d9:9f:2d:8b:78:64:69:25:ae:67:d1:b3: da:e8:cb:30:e4:d5:9f:c7:25:76:37:b7:a3:88:0b: 8b:b1:ec:e1:6b:f3:b0:c5:38:36:47:3c:16:c7:9f: 24:93:56:dc:d3:4f:87:0d:16:d7:c0:86:66:b3:e1: 06:62:9c:15:5c:a2:f5:3d:40:ff:1d:1e:aa:19:be: 39:83:e7:7b:fd:dc:ab:2f:45:85:88:14:97:f1:d6: 92:ed:c6:05:ea:67:d0:cd:62:9a:f7:cf:59:33:69: 39:22:26:16:53:45:a1:d5:21:2a:76:00:55:a0:3c: 50:10:e1:f1:f2:66:61:74:df:55:11:e6:6c:33:02: 21:97:13:33:21:c8:f6:25:57:69:26:b0:1c:92:de: f3:63:0b:50:ff:fb:35:0a:4b:f1:7c:3a:80:88:4b: d4:89:cc:2e:ef:f1:8e:15:c7:40:7b:c6:10:55:7b: a2:f6:86:d6:8a:7d:24:19:02:42:eb:a1:05:4b:81: 69:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:59:A3:EE:87:64:32:E1:74:68:F4:4C:26:90:C8:BF:C1:E9:66:7F X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a383a3a2f34382d3438203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:8::/48 Signature Algorithm: sha256WithRSAEncryption 3a:19:37:b1:d3:ef:01:68:a3:0d:99:04:4f:67:fb:22:98:a3: fe:58:e5:df:a4:2e:45:d0:86:0e:79:05:0c:52:b5:79:5d:81: 39:fc:2d:19:53:e1:df:78:e3:ff:e8:bb:7f:19:79:e7:8c:6d: 02:a7:f2:b8:aa:fe:9c:a7:f4:0a:52:4b:f8:ef:45:dd:7f:aa: 8b:5c:aa:0e:ed:35:01:31:f3:7b:09:93:8d:e9:c0:60:68:f5: 8c:65:d8:07:b1:68:b1:b1:5c:8e:8e:7e:c8:2b:6e:0e:80:ef: 54:89:43:2d:c6:23:94:8f:9a:e5:c7:4f:34:5e:05:59:35:c4: 2a:40:fc:e3:34:a2:7a:24:47:66:16:b4:22:0a:d1:7b:68:4b: 5a:e2:48:4c:4b:9a:1a:de:ae:2a:74:68:4f:95:c4:4d:e2:a4: 46:ae:9e:ae:6f:35:c6:36:26:5b:5f:84:88:82:43:44:68:88: 7c:58:5b:9b:1d:a5:e4:e7:cf:0e:de:9f:01:09:87:d8:42:0a: e1:1a:02:1d:67:4c:98:1d:df:ae:46:74:ac:e9:3c:12:7f:fb: 4f:28:34:17:e6:5f:38:9c:6b:2c:21:58:04:67:0b:a2:56:a8: 07:6f:dd:82:05:bb:dc:6c:c3:3c:68:e7:b6:2c:00:ce:47:55: ab:ee:6b:e1 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUV7bzXg+hmYOPIvCqIE0j/jtlZJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTMwMjlaFw0yNzA0MTQwOTM1MjlaMDMxMTAvBgNV BAMTKEU3NTlBM0VFODc2NDMyRTE3NDY4RjQ0QzI2OTBDOEJGQzFFOTY2N0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmhyK3uzHYlNVu3uT0+5UOKyHt +Qqpn1Uwr2rJIIgqzcTbetjCbK6gcHG62I66BfhwSvA0gOeVRv5EISXYYtmfLYt4 ZGklrmfRs9royzDk1Z/HJXY3t6OIC4ux7OFr87DFODZHPBbHnySTVtzTT4cNFtfA hmaz4QZinBVcovU9QP8dHqoZvjmD53v93KsvRYWIFJfx1pLtxgXqZ9DNYpr3z1kz aTkiJhZTRaHVISp2AFWgPFAQ4fHyZmF031UR5mwzAiGXEzMhyPYlV2kmsByS3vNj C1D/+zUKS/F8OoCIS9SJzC7v8Y4Vx0B7xhBVe6L2htaKfSQZAkLroQVLgWkZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQU51mj7odkMuF0aPRMJpDIv8HpZn8wHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTM4M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AACDANBgkqhkiG9w0BAQsFAAOCAQEAOhk3sdPvAWijDZkE T2f7Ipij/ljl36QuRdCGDnkFDFK1eV2BOfwtGVPh33jj/+i7fxl554xtAqfyuKr+ nKf0ClJL+O9F3X+qi1yqDu01ATHzewmTjenAYGj1jGXYB7FosbFcjo5+yCtuDoDv VIlDLcYjlI+a5cdPNF4FWTXEKkD84zSieiRHZha0IgrRe2hLWuJITEuaGt6uKnRo T5XETeKkRq6erm81xjYmW1+EiIJDRGiIfFhbmx2l5OfPDt6fAQmH2EIK4RoCHWdM mB3frkZ0rOk8En/7Tyg0F+ZfOJxrLCFYBGcLolaoB2/dggW73GzDPGjntiwAzkdV q+5r4Q== -----END CERTIFICATE-----Generated at Sat Apr 18 01:01:43 2026 by rpki-client