$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096962404895424515/0/323430353a393738303a3a2f33322d313238203d3e2030.roa File: 323430353a393738303a3a2f33322d313238203d3e2030.roa (raw, json) Hash identifier: wsAlE1QEtrkyozdia6LocJwjVZkBAeHQ4PonEVzYZn4= Subject key identifier: EA:E8:DE:6B:DC:F2:D2:39:2A:A1:1D:E1:29:6F:17:36:1A:FD:D6:47 Certificate issuer: /CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Certificate serial: 578DC7C0BC104913B3E8C405DD2278FE70A9A33E Authority key identifier: 40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/323430353a393738303a3a2f33322d313238203d3e2030.roa Signing time: Thu 16 Apr 2026 07:21:42 +0000 ROA not before: Thu 16 Apr 2026 07:16:42 +0000 ROA not after: Thu 15 Apr 2027 07:21:42 +0000 asID: 0 IP address blocks: 2405:9780::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 10:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8d:c7:c0:bc:10:49:13:b3:e8:c4:05:dd:22:78:fe:70:a9:a3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71 Validity Not Before: Apr 16 07:16:42 2026 GMT Not After : Apr 15 07:21:42 2027 GMT Subject: CN=EAE8DE6BDCF2D2392AA11DE1296F17361AFDD647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:af:fc:5a:a5:5e:67:78:34:d1:fa:b3:ef: a8:9e:46:f2:7e:64:6b:fa:44:d7:b5:e9:2a:cd:2e: 2a:83:d6:5b:61:48:d5:3c:9a:dd:5f:ef:e6:c0:36: ad:d8:aa:84:05:fb:ae:46:b5:09:f3:5e:00:0f:f4: c3:8e:2f:15:4a:d5:8c:86:46:1f:b9:94:33:1d:d5: 84:b6:bd:fe:5a:9a:73:06:01:48:cf:51:96:32:a6: 29:96:91:84:c1:83:fc:79:22:21:20:2a:53:18:5e: 90:b6:05:30:04:31:86:fb:1e:e4:1e:6a:d6:4f:0f: e0:74:b9:3c:ca:f4:65:2d:fa:a4:31:dd:2b:67:b3: 5b:ab:10:13:a7:97:20:dc:54:92:b6:36:8a:3f:fe: 4a:7d:6b:d4:b1:c2:1b:15:f6:09:67:83:61:a2:ab: ff:7b:c5:14:ad:f2:11:2f:67:05:09:59:90:5a:61: dc:89:c6:dd:7e:ae:68:17:c8:19:36:cb:3a:fe:ca: 5a:d8:bf:ea:b7:23:54:03:1a:ea:6f:d5:2a:ce:b6: 4a:8b:5c:8d:d5:18:5c:1f:13:a4:29:cb:66:97:ae: bc:19:dc:b8:f1:99:ec:f2:b2:0e:4c:03:b9:0c:73: 96:4f:28:cc:05:a2:c0:db:39:98:89:86:94:83:8a: f9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E8:DE:6B:DC:F2:D2:39:2A:A1:1D:E1:29:6F:17:36:1A:FD:D6:47 X509v3 Authority Key Identifier: keyid:40:AB:F4:13:CD:33:0E:0A:4D:2B:AE:8F:1E:66:AF:8B:FC:B7:3D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40ABF413CD330E0A4D2BAE8F1E66AF8BFCB73D71.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096962404895424515/0/323430353a393738303a3a2f33322d313238203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:9780::/32 Signature Algorithm: sha256WithRSAEncryption ac:9a:a1:74:e3:97:d6:a1:42:f0:7b:be:38:f9:28:25:ce:98: c0:a6:d8:56:7b:50:f4:34:6e:18:ea:ba:a7:b5:60:15:79:ea: 4b:d4:b9:a1:0a:03:0e:58:18:93:91:c0:5f:84:d1:88:b7:1a: 36:d3:8b:35:e5:84:07:6b:19:30:b5:91:33:70:05:6e:23:79: e9:4d:c0:a8:a3:34:fd:7d:8c:b4:8a:4a:c6:a0:97:ca:de:33: 0a:5c:8c:71:ef:7f:a2:27:be:90:17:7f:88:0b:fd:02:d7:70: ba:f8:f9:27:a3:a5:ea:d0:d4:6f:61:7c:e2:b8:79:d7:58:e6: 05:bd:d6:c0:50:aa:7b:58:3a:21:c2:b8:99:64:dc:ed:35:6c: 0e:17:a3:c1:62:2e:cb:16:8e:3f:2f:dd:d7:e9:5f:30:bf:8e: ed:a2:77:4f:49:f9:c4:c2:1a:cf:d1:23:5f:e9:d4:09:f8:ef: 55:9d:f9:a9:07:f6:2c:6f:60:12:ad:29:6e:76:87:1d:08:01: a8:8a:e6:61:21:db:36:27:1e:11:a2:d8:57:a9:71:ab:c8:e9: ab:40:f1:36:fe:6b:78:d4:52:c4:23:80:34:49:e8:77:26:57: ae:73:bf:57:2d:df:90:4b:8b:c3:8f:92:72:ea:39:f9:42:c4: cc:1e:88:67 -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUV43HwLwQSROz6MQF3SJ4/nCpoz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJG Q0I3M0Q3MTAeFw0yNjA0MTYwNzE2NDJaFw0yNzA0MTUwNzIxNDJaMDMxMTAvBgNV BAMTKEVBRThERTZCRENGMkQyMzkyQUExMURFMTI5NkYxNzM2MUFGREQ2NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7uq/8WqVeZ3g00fqz76ieRvJ+ ZGv6RNe16SrNLiqD1lthSNU8mt1f7+bANq3YqoQF+65GtQnzXgAP9MOOLxVK1YyG Rh+5lDMd1YS2vf5amnMGAUjPUZYypimWkYTBg/x5IiEgKlMYXpC2BTAEMYb7HuQe atZPD+B0uTzK9GUt+qQx3Stns1urEBOnlyDcVJK2Noo//kp9a9SxwhsV9glng2Gi q/97xRSt8hEvZwUJWZBaYdyJxt1+rmgXyBk2yzr+ylrYv+q3I1QDGupv1SrOtkqL XI3VGFwfE6Qpy2aXrrwZ3Ljxmezysg5MA7kMc5ZPKMwFosDbOZiJhpSDivkvAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQU6ujea9zy0jkqoR3hKW8XNhr91kcwHwYDVR0j BBgwFoAUQKv0E80zDgpNK66PHmavi/y3PXEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 Njk2MjQwNDg5NTQyNDUxNS8wLzQwQUJGNDEzQ0QzMzBFMEE0RDJCQUU4RjFFNjZB RjhCRkNCNzNENzEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBBQkY0MTNDRDMzMEUwQTREMkJBRThGMUU2NkFGOEJGQ0I3M0Q3MS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2OTYyNDA0ODk1NDI0NTE1LzAvMzIzNDMwMzUzYTM5 MzczODMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQF l4AwDQYJKoZIhvcNAQELBQADggEBAKyaoXTjl9ahQvB7vjj5KCXOmMCm2FZ7UPQ0 bhjquqe1YBV56kvUuaEKAw5YGJORwF+E0Yi3GjbTizXlhAdrGTC1kTNwBW4jeelN wKijNP19jLSKSsagl8reMwpcjHHvf6InvpAXf4gL/QLXcLr4+SejperQ1G9hfOK4 eddY5gW91sBQqntYOiHCuJlk3O01bA4Xo8FiLssWjj8v3dfpXzC/ju2id09J+cTC Gs/RI1/p1An471Wd+akH9ixvYBKtKW52hx0IAaiK5mEh2zYnHhGi2FepcavI6atA 8Tb+a3jUUsQjgDRJ6HcmV65zv1ct35BLi8OPknLqOflCxMweiGc= -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:04 2026 by rpki-client