$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3438203d3e203536303431.roa File: 323430323a396238303a653a3a2f34382d3438203d3e203536303431.roa (raw, json) Hash identifier: joIfUNIagug3utmWGbwcUi6W+tiWM+qQZv7eORG8W6Q= Subject key identifier: 23:36:0A:D2:9C:DA:FB:AA:6F:71:DD:B9:3D:11:A2:33:22:99:53:E1 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 501CFCC74FEE8FC1A25CEABDA47B19EEEF3D6B49 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3438203d3e203536303431.roa Signing time: Wed 15 Apr 2026 09:35:29 +0000 ROA not before: Wed 15 Apr 2026 09:30:29 +0000 ROA not after: Wed 14 Apr 2027 09:35:29 +0000 asID: 56041 IP address blocks: 2402:9b80:e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1c:fc:c7:4f:ee:8f:c1:a2:5c:ea:bd:a4:7b:19:ee:ef:3d:6b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:30:29 2026 GMT Not After : Apr 14 09:35:29 2027 GMT Subject: CN=23360AD29CDAFBAA6F71DDB93D11A233229953E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1a:db:57:48:10:25:3d:1c:19:0c:e4:ba:64: e7:77:15:87:2b:c2:bc:b1:7e:d3:5d:d3:99:37:4b: d7:84:c2:be:9d:b8:69:a6:78:8b:af:cb:31:00:1f: 5b:9a:27:a0:54:4c:9d:f4:e0:08:aa:2f:58:f8:ef: a4:4b:c7:24:8c:a5:27:21:ae:c8:80:be:22:34:5f: f8:ed:fe:d1:ed:9a:b0:fc:56:ec:0d:65:31:75:9c: 70:fc:ce:70:87:fc:db:f3:65:06:62:d5:9c:d3:ef: 4e:45:92:02:d1:37:06:2c:dc:77:be:90:ee:cf:80: 43:b7:bc:e9:55:da:71:9a:c8:8a:3f:55:51:9c:36: f5:15:7f:4b:a1:37:d4:19:58:8f:cb:fe:c8:bb:22: 89:49:53:ae:41:ce:4d:d9:c0:bd:ce:cb:d1:9a:1b: 74:52:ec:f6:ba:9f:3a:ec:64:26:6a:ce:ad:7c:50: a1:76:01:e3:d2:d2:af:53:72:00:98:eb:2e:6d:8f: 35:3e:29:8a:55:c7:b5:55:21:71:90:36:7b:1a:84: d7:ed:77:ff:d8:25:be:9f:d2:f1:e6:d7:35:3e:d1: 18:65:f5:e1:f6:6e:07:36:20:a4:7b:f6:72:05:87: 96:ef:0d:3b:6c:46:f2:49:1a:fc:4d:b2:04:4d:0e: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:36:0A:D2:9C:DA:FB:AA:6F:71:DD:B9:3D:11:A2:33:22:99:53:E1 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a653a3a2f34382d3438203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:e::/48 Signature Algorithm: sha256WithRSAEncryption 3e:43:72:79:cd:bc:22:be:a0:4f:6d:29:43:a0:8e:02:29:89: d9:5e:1c:d8:60:18:23:bc:98:4c:2c:c3:eb:a4:c9:f0:a4:72: 2b:b9:81:ac:d0:7f:e6:f2:8d:9d:df:38:d7:0f:3e:11:ba:14: 9b:b6:9c:10:6e:15:79:dc:f3:de:30:33:34:85:ae:9c:76:b5: ea:d2:3e:0b:fb:8c:32:76:ab:d2:21:65:64:61:2a:e3:75:ba: e9:fa:b2:1f:a8:aa:73:3b:4c:82:39:09:d1:28:f9:ca:11:72: fb:85:c0:87:eb:9e:93:2a:64:91:3f:90:75:48:80:e8:83:cd: bf:7c:dc:a8:d6:60:95:ab:18:c6:ee:a9:7f:02:25:ac:ba:51: 32:0b:fc:9a:c9:a0:f3:86:ca:9a:77:0d:e9:fe:ea:0d:5e:7b: 7e:0e:15:94:40:d9:e9:5b:83:9f:c4:98:86:99:b6:a0:68:9d: c9:c5:f4:1e:f4:10:21:5d:f2:8b:3c:07:5e:e5:f9:c8:76:2d: 5d:15:18:6f:96:61:d7:04:81:ee:20:b3:3b:cb:3f:40:27:85: 8a:c1:8d:fd:fd:6c:d5:dc:98:e5:44:a3:62:55:b8:aa:d1:a4: 62:ab:18:8c:84:23:28:ad:a5:93:ac:9d:77:23:d4:bb:b9:e8: b5:2c:1e:42 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUUBz8x0/uj8GiXOq9pHsZ7u89a0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTMwMjlaFw0yNzA0MTQwOTM1MjlaMDMxMTAvBgNV BAMTKDIzMzYwQUQyOUNEQUZCQUE2RjcxRERCOTNEMTFBMjMzMjI5OTUzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGttXSBAlPRwZDOS6ZOd3FYcr wryxftNd05k3S9eEwr6duGmmeIuvyzEAH1uaJ6BUTJ304AiqL1j476RLxySMpSch rsiAviI0X/jt/tHtmrD8VuwNZTF1nHD8znCH/NvzZQZi1ZzT705FkgLRNwYs3He+ kO7PgEO3vOlV2nGayIo/VVGcNvUVf0uhN9QZWI/L/si7IolJU65Bzk3ZwL3Oy9Ga G3RS7Pa6nzrsZCZqzq18UKF2AePS0q9TcgCY6y5tjzU+KYpVx7VVIXGQNnsahNft d//YJb6f0vHm1zU+0Rhl9eH2bgc2IKR79nIFh5bvDTtsRvJJGvxNsgRNDr1ZAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUIzYK0pza+6pvcd25PRGiMyKZU+EwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTY1M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AADjANBgkqhkiG9w0BAQsFAAOCAQEAPkNyec28Ir6gT20p Q6COAimJ2V4c2GAYI7yYTCzD66TJ8KRyK7mBrNB/5vKNnd841w8+EboUm7acEG4V edzz3jAzNIWunHa16tI+C/uMMnar0iFlZGEq43W66fqyH6iqcztMgjkJ0Sj5yhFy +4XAh+uekypkkT+QdUiA6IPNv3zcqNZglasYxu6pfwIlrLpRMgv8msmg84bKmncN 6f7qDV57fg4VlEDZ6VuDn8SYhpm2oGidycX0HvQQIV3yizwHXuX5yHYtXRUYb5Zh 1wSB7iCzO8s/QCeFisGN/f1s1dyY5USjYlW4qtGkYqsYjIQjKK2lk6yddyPUu7no tSweQg== -----END CERTIFICATE-----Generated at Fri Apr 17 21:43:55 2026 by rpki-client