$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a643a3a2f34382d3438203d3e203536303431.roa File: 323430323a396238303a643a3a2f34382d3438203d3e203536303431.roa (raw, json) Hash identifier: pSS+8WrncL7gMhHph33iDDmEOABRyPheej9s9qZAT0U= Subject key identifier: 82:41:70:CC:44:40:2C:9A:A5:6B:FF:5B:68:E0:2C:3D:B6:54:18:6A Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 6DDC67F9B0BFD50B933DBB12BC755588424AE270 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a643a3a2f34382d3438203d3e203536303431.roa Signing time: Wed 15 Apr 2026 09:35:31 +0000 ROA not before: Wed 15 Apr 2026 09:30:31 +0000 ROA not after: Wed 14 Apr 2027 09:35:31 +0000 asID: 56041 IP address blocks: 2402:9b80:d::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:dc:67:f9:b0:bf:d5:0b:93:3d:bb:12:bc:75:55:88:42:4a:e2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:30:31 2026 GMT Not After : Apr 14 09:35:31 2027 GMT Subject: CN=824170CC44402C9AA56BFF5B68E02C3DB654186A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:2d:74:ef:30:a9:39:6f:ce:33:2d:53:b9: a3:dd:a7:16:51:79:bf:df:8a:9f:2e:3a:c0:f9:23: 6d:cd:0c:bb:3f:91:8f:d4:ea:38:68:8c:fb:0a:6e: c1:2b:94:eb:e9:2c:f0:0e:8c:02:84:be:7f:81:b6: cc:d7:24:f0:bf:e8:be:ed:b0:86:be:2c:cb:25:cd: 67:a8:9d:36:36:06:68:27:9e:2b:42:99:f8:84:69: c6:95:63:d4:ad:71:cf:44:72:b8:b0:bf:10:0c:11: df:c0:74:c4:b9:ea:ae:68:4f:7e:82:9a:8d:4c:53: 64:89:db:e7:4c:b1:78:09:a8:3a:5b:bd:14:6b:5e: ad:7a:6b:19:f2:e1:11:61:10:fc:d5:5a:99:7e:28: d6:4c:aa:8f:fc:04:e7:57:8e:de:e8:1c:68:7b:fc: 24:2a:76:f1:10:a7:b3:ea:aa:86:df:4c:cc:b4:6f: bd:ce:a6:af:00:82:21:ed:f6:05:5b:61:d1:b3:a3: 79:35:a1:1d:82:e4:ac:25:b2:6d:bc:9d:4d:a4:83: a0:32:f6:41:1c:aa:8b:3e:01:f3:b8:c8:ca:18:98: f2:81:0a:3c:39:f4:e7:b6:57:38:60:76:a2:92:99: cb:c0:e6:1c:d5:59:42:bd:cb:9d:88:7c:32:5a:6f: a2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:41:70:CC:44:40:2C:9A:A5:6B:FF:5B:68:E0:2C:3D:B6:54:18:6A X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a643a3a2f34382d3438203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:d::/48 Signature Algorithm: sha256WithRSAEncryption 7c:77:6a:d6:55:c7:3e:70:13:8f:45:ac:4d:99:d6:01:13:3b: 29:8a:00:92:55:f4:b4:c8:73:ad:22:d0:59:cd:ff:68:93:50: 76:ca:3c:03:29:e5:c1:f1:48:98:8d:5b:e0:b5:75:d2:82:42: 7b:6c:7c:3c:15:73:ed:df:94:9d:58:8c:83:b3:fb:39:45:7e: 57:f9:38:50:d1:88:ce:4d:a9:1f:43:bc:7f:8b:6c:ff:dd:52: 67:f8:e8:8b:82:15:d8:61:65:9e:5d:cd:cf:05:75:88:5d:48: 37:4e:19:b9:5e:2d:f6:00:98:3c:e2:69:a4:3f:d1:8e:13:d4: f1:ae:2e:12:af:c0:61:05:1f:c3:fb:bf:cb:90:9e:6a:ce:b0: d8:55:07:57:38:f8:1a:28:19:77:8d:a7:c5:f7:1f:a6:e2:61: db:b3:9a:ab:89:b7:10:75:38:8a:94:e0:78:fb:b6:10:78:e4: 2f:36:8c:33:ed:1d:f5:f0:67:fb:8e:96:70:f7:2d:47:04:80: 5c:39:9a:30:f8:01:f9:8f:d0:f8:8d:04:00:37:d6:44:00:f0: be:67:92:93:a8:73:a8:83:a3:45:c9:c8:a4:a3:76:9a:fb:ab: ea:4a:4a:06:61:27:c2:22:b1:5b:5b:85:18:4d:ae:63:ce:eb: 0d:fb:df:f7 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUbdxn+bC/1QuTPbsSvHVViEJK4nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTMwMzFaFw0yNzA0MTQwOTM1MzFaMDMxMTAvBgNV BAMTKDgyNDE3MENDNDQ0MDJDOUFBNTZCRkY1QjY4RTAyQzNEQjY1NDE4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMby107zCpOW/OMy1TuaPdpxZR eb/fip8uOsD5I23NDLs/kY/U6jhojPsKbsErlOvpLPAOjAKEvn+BtszXJPC/6L7t sIa+LMslzWeonTY2BmgnnitCmfiEacaVY9Stcc9EcriwvxAMEd/AdMS56q5oT36C mo1MU2SJ2+dMsXgJqDpbvRRrXq16axny4RFhEPzVWpl+KNZMqo/8BOdXjt7oHGh7 /CQqdvEQp7PqqobfTMy0b73Opq8AgiHt9gVbYdGzo3k1oR2C5Kwlsm28nU2kg6Ay 9kEcqos+AfO4yMoYmPKBCjw59Oe2VzhgdqKSmcvA5hzVWUK9y52IfDJab6L7AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUgkFwzERALJqla/9baOAsPbZUGGowHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTY0M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AADTANBgkqhkiG9w0BAQsFAAOCAQEAfHdq1lXHPnATj0Ws TZnWARM7KYoAklX0tMhzrSLQWc3/aJNQdso8AynlwfFImI1b4LV10oJCe2x8PBVz 7d+UnViMg7P7OUV+V/k4UNGIzk2pH0O8f4ts/91SZ/joi4IV2GFlnl3NzwV1iF1I N04ZuV4t9gCYPOJppD/RjhPU8a4uEq/AYQUfw/u/y5Ceas6w2FUHVzj4GigZd42n xfcfpuJh27Oaq4m3EHU4ipTgePu2EHjkLzaMM+0d9fBn+46WcPctRwSAXDmaMPgB +Y/Q+I0EADfWRADwvmeSk6hzqIOjRcnIpKN2mvur6kpKBmEnwiKxW1uFGE2uY87r Dfvf9w== -----END CERTIFICATE-----Generated at Fri Apr 17 22:26:51 2026 by rpki-client