$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a663a3a2f34382d3438203d3e203536303431.roa File: 323430323a396238303a663a3a2f34382d3438203d3e203536303431.roa (raw, json) Hash identifier: I8i9DS7irp8+hU+rLx7YI1L/lTw30evJli+qUzpEKT4= Subject key identifier: 1A:A9:F3:81:08:24:6D:25:31:B5:DC:44:F8:2B:BA:9E:3D:27:03:75 Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Certificate serial: 7AE0FEDF4B8E9B20E08FD92286ADFA804531E0A3 Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a663a3a2f34382d3438203d3e203536303431.roa Signing time: Wed 15 Apr 2026 09:35:30 +0000 ROA not before: Wed 15 Apr 2026 09:30:30 +0000 ROA not after: Wed 14 Apr 2027 09:35:30 +0000 asID: 56041 IP address blocks: 2402:9b80:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:e0:fe:df:4b:8e:9b:20:e0:8f:d9:22:86:ad:fa:80:45:31:e0:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F Validity Not Before: Apr 15 09:30:30 2026 GMT Not After : Apr 14 09:35:30 2027 GMT Subject: CN=1AA9F38108246D2531B5DC44F82BBA9E3D270375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:53:c1:7c:f1:1c:c4:66:2c:5b:ec:81:8e: 15:c6:28:b5:5e:e6:88:95:07:a1:dc:05:02:75:62: d8:69:d9:51:b7:d9:f1:0a:3c:e7:f6:c7:6c:2d:01: e6:6d:76:41:b1:2e:b7:70:fa:32:2f:6f:a4:66:35: b5:3f:c6:57:00:bb:04:09:52:d0:d2:38:c7:c3:d1: c3:63:2b:5e:ab:f5:c2:02:2f:eb:79:a2:c6:f5:5d: 3d:24:9f:21:05:42:e0:b0:69:b3:1b:34:d2:f8:fc: 24:e2:12:09:67:3f:4c:25:a7:49:f8:ef:a5:1c:eb: 72:01:4f:31:da:7a:43:f8:31:6f:16:6c:be:16:ad: a9:83:4e:05:25:e5:2a:d7:60:29:1e:9c:0d:0f:24: 92:3d:73:48:26:82:15:07:9e:c5:d0:71:dd:9f:36: ed:8d:e8:53:66:96:30:27:1b:e5:6e:fd:ff:49:01: ec:d5:55:bd:bf:83:75:af:56:f6:2e:b9:e1:ee:cb: 34:2c:4e:15:91:74:d4:48:b2:13:19:f8:f0:0a:d3: 0b:80:fa:df:47:3d:d4:35:62:9e:61:31:48:bd:76: 72:98:38:ea:b4:09:24:0f:ba:ad:74:c1:4f:dd:37: f2:43:6f:cf:2b:e8:d7:d5:70:00:ab:96:44:de:48: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:A9:F3:81:08:24:6D:25:31:B5:DC:44:F8:2B:BA:9E:3D:27:03:75 X509v3 Authority Key Identifier: keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/323430323a396238303a663a3a2f34382d3438203d3e203536303431.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:9b80:f::/48 Signature Algorithm: sha256WithRSAEncryption 7f:dc:24:ec:2e:5f:c5:2f:14:69:46:86:38:ae:d7:6b:49:36: 93:42:84:64:87:be:7f:71:ad:2a:5d:67:fd:a7:c3:e6:eb:5f: 9d:c8:a6:10:1b:20:3a:f9:9b:f7:4a:df:f3:f9:5d:ba:ac:0e: 36:83:ff:fa:fe:6b:28:dd:b9:77:d3:b6:1a:b3:0b:89:14:2d: c2:e1:5f:8b:45:99:c3:c2:35:a2:ec:ce:98:2f:3e:a8:91:fb: b5:4f:fa:8c:df:f9:51:74:0d:be:e9:e8:d7:11:31:9b:7a:3e: fd:04:c5:00:b2:e3:59:d7:22:7d:15:cd:b6:93:42:dc:24:69: f5:53:77:29:0c:b2:26:a3:b9:3d:78:a8:18:43:7f:ae:d8:88: 87:5f:3f:c1:db:4a:11:3b:b5:1c:93:c3:33:b0:d8:1a:85:b6: 76:4e:c2:31:37:dc:3f:b8:fb:64:0d:e0:c6:8a:ad:78:67:c3: b7:76:b7:6c:6f:eb:bc:64:2f:30:60:98:5c:6a:38:4a:78:8b: e0:8e:86:1e:74:ce:82:dc:e9:6a:2c:7e:1f:a2:6e:02:a5:f2: 1b:08:41:4f:8e:56:da:9a:c9:32:9a:25:a7:91:f8:23:9f:66: 46:ff:01:b1:53:4d:b2:4c:6e:3c:a3:f0:6a:6e:c5:42:bc:ba: 42:77:54:87 -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUeuD+30uOmyDgj9kihq36gEUx4KMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2 RUZERDAwRjAeFw0yNjA0MTUwOTMwMzBaFw0yNzA0MTQwOTM1MzBaMDMxMTAvBgNV BAMTKDFBQTlGMzgxMDgyNDZEMjUzMUI1REM0NEY4MkJCQTlFM0QyNzAzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKD1PBfPEcxGYsW+yBjhXGKLVe 5oiVB6HcBQJ1Ythp2VG32fEKPOf2x2wtAeZtdkGxLrdw+jIvb6RmNbU/xlcAuwQJ UtDSOMfD0cNjK16r9cICL+t5osb1XT0knyEFQuCwabMbNNL4/CTiEglnP0wlp0n4 76Uc63IBTzHaekP4MW8WbL4WramDTgUl5SrXYCkenA0PJJI9c0gmghUHnsXQcd2f Nu2N6FNmljAnG+Vu/f9JAezVVb2/g3WvVvYuueHuyzQsThWRdNRIshMZ+PAK0wuA +t9HPdQ1Yp5hMUi9dnKYOOq0CSQPuq10wU/dN/JDb88r6NfVcACrlkTeSD/HAgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUGqnzgQgkbSUxtdxE+Cu6nj0nA3UwHwYDVR0j BBgwFoAUEGXp5U0cFTfONLXuRFuTR2790A8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjcyNzc1MjM1MTk0MDYwOS8wLzEwNjVFOUU1NEQxQzE1MzdDRTM0QjVFRTQ0NUI5 MzQ3NkVGREQwMEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTA2NUU5RTU0RDFDMTUzN0NFMzRCNUVFNDQ1QjkzNDc2RUZERDAwRi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTY3Mjc3NTIzNTE5NDA2MDkvMC8zMjM0MzAzMjNh Mzk2MjM4MzAzYTY2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzUzNjMwMzQzMS5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQCm4AADzANBgkqhkiG9w0BAQsFAAOCAQEAf9wk7C5fxS8UaUaG OK7Xa0k2k0KEZIe+f3GtKl1n/afD5utfncimEBsgOvmb90rf8/lduqwONoP/+v5r KN25d9O2GrMLiRQtwuFfi0WZw8I1ouzOmC8+qJH7tU/6jN/5UXQNvuno1xExm3o+ /QTFALLjWdcifRXNtpNC3CRp9VN3KQyyJqO5PXioGEN/rtiIh18/wdtKETu1HJPD M7DYGoW2dk7CMTfcP7j7ZA3gxoqteGfDt3a3bG/rvGQvMGCYXGo4SniL4I6GHnTO gtzpaix+H6JuAqXyGwhBT45W2prJMpolp5H4I59mRv8BsVNNskxuPKPwam7FQry6 QndUhw== -----END CERTIFICATE-----Generated at Sat Apr 18 05:29:35 2026 by rpki-client