$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097036124037054466/0/323430373a393138303a3a2f33322d3332203d3e2030.roa File: 323430373a393138303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: 3NmcDbpjTnffqOtrfI15amacSrhcqJHAdKVsMfTU3oQ= Subject key identifier: 25:C9:36:B1:7F:63:1A:1D:B1:9F:82:38:2A:86:0E:04:D8:FC:65:92 Certificate issuer: /CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Certificate serial: 195BD87352A35730F366B5AE35F0A4193CACCD71 Authority key identifier: 9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/323430373a393138303a3a2f33322d3332203d3e2030.roa Signing time: Thu 16 Apr 2026 05:55:33 +0000 ROA not before: Thu 16 Apr 2026 05:50:33 +0000 ROA not after: Thu 15 Apr 2027 05:55:33 +0000 asID: 0 IP address blocks: 2407:9180::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 17 Apr 2026 07:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:5b:d8:73:52:a3:57:30:f3:66:b5:ae:35:f0:a4:19:3c:ac:cd:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22 Validity Not Before: Apr 16 05:50:33 2026 GMT Not After : Apr 15 05:55:33 2027 GMT Subject: CN=25C936B17F631A1DB19F82382A860E04D8FC6592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d7:91:47:22:7a:3a:73:94:c4:92:37:37:97: 2e:5f:4c:52:bc:27:fe:4d:20:d5:4f:05:4f:1c:d6: f2:d7:5c:78:7f:70:a9:4b:4f:2b:58:e9:d3:dc:84: 42:4f:c6:4f:6f:40:b7:5c:91:99:7e:2f:02:c8:9c: a1:10:3e:94:75:3a:ec:84:ae:6e:a7:db:3c:70:e5: e8:78:4a:43:a5:f4:f2:2d:9b:e1:30:91:1f:4f:d3: ca:ca:fc:73:3a:54:a5:7b:74:ee:f8:c6:d7:5d:c8: 00:60:4f:3e:9c:cb:11:96:c6:f3:50:6c:47:af:15: 4b:a5:2f:15:a6:b7:fc:6c:08:0b:4e:4a:89:a0:51: ed:c6:74:b1:30:a9:6e:fe:6e:2a:d9:61:93:60:a8: fc:58:2c:2c:d7:43:5f:ae:97:d3:86:94:2e:f9:15: 82:39:81:d8:88:10:0d:85:55:67:80:4a:f3:de:97: 0a:84:ff:16:9a:5e:1f:22:cf:83:0c:d0:8b:f7:cb: 97:23:34:c3:bf:04:94:1f:4e:e8:cc:84:3f:55:a0: c0:09:5f:97:98:67:71:da:a6:55:d5:ec:c3:ad:75: 0b:7e:f7:9f:8b:24:e7:8d:3c:4b:1d:0c:ed:d3:05: 21:6a:97:01:c5:84:51:70:56:2a:b0:a0:fb:4b:d4: 8e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C9:36:B1:7F:63:1A:1D:B1:9F:82:38:2A:86:0E:04:D8:FC:65:92 X509v3 Authority Key Identifier: keyid:9A:2C:DA:A9:66:FD:96:CB:EC:CC:40:BC:FC:3D:E1:B2:23:26:3C:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9A2CDAA966FD96CBECCC40BCFC3DE1B223263C22.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097036124037054466/0/323430373a393138303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2407:9180::/32 Signature Algorithm: sha256WithRSAEncryption 9a:22:a9:60:30:c1:6b:11:da:83:b3:d7:62:f0:6a:07:75:8b: 0e:11:ad:d6:bb:db:2b:8c:ab:87:ba:3b:c6:5a:ae:61:b7:c1: 9c:ef:e3:79:ea:16:96:0e:c8:72:1c:df:7f:f5:f3:9a:02:25: 0d:2b:b1:2a:50:8a:9d:d9:f7:34:d7:c5:02:d4:c9:eb:a9:7e: 8a:92:e4:f6:8d:32:b8:5e:3a:25:7e:e2:5b:df:76:b2:f2:34: 77:6e:ff:35:83:f5:80:07:f2:95:a2:ed:ed:64:fb:d1:37:d8: 66:06:2b:d8:c2:39:22:36:0a:f9:02:08:ff:0e:ab:a4:8f:55: 39:ea:b3:27:f1:4a:13:91:59:d0:13:88:4a:cd:68:2d:fd:25: fd:e6:20:e9:a9:e7:52:a4:5c:94:82:20:bb:34:ee:b3:65:78: da:63:36:4b:73:e3:75:e3:85:68:14:4b:1d:f4:46:cb:f7:3d: 5d:92:c0:33:52:cc:ca:46:e8:e3:21:26:24:9f:46:68:da:cb: 41:b2:07:c0:a3:f5:5f:59:0b:e2:4d:2b:21:73:a7:c3:37:04: 73:02:31:f6:6e:47:01:5d:f9:e5:1e:27:ed:d9:e2:dd:59:fb: 07:00:3b:21:19:45:f4:52:17:cc:76:1c:47:8d:20:05:da:e8: 3c:84:61:42 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUGVvYc1KjVzDzZrWuNfCkGTyszXEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIy MzI2M0MyMjAeFw0yNjA0MTYwNTUwMzNaFw0yNzA0MTUwNTU1MzNaMDMxMTAvBgNV BAMTKDI1QzkzNkIxN0Y2MzFBMURCMTlGODIzODJBODYwRTA0RDhGQzY1OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo15FHIno6c5TEkjc3ly5fTFK8 J/5NINVPBU8c1vLXXHh/cKlLTytY6dPchEJPxk9vQLdckZl+LwLInKEQPpR1OuyE rm6n2zxw5eh4SkOl9PItm+EwkR9P08rK/HM6VKV7dO74xtddyABgTz6cyxGWxvNQ bEevFUulLxWmt/xsCAtOSomgUe3GdLEwqW7+birZYZNgqPxYLCzXQ1+ul9OGlC75 FYI5gdiIEA2FVWeASvPelwqE/xaaXh8iz4MM0Iv3y5cjNMO/BJQfTujMhD9VoMAJ X5eYZ3HaplXV7MOtdQt+95+LJOeNPEsdDO3TBSFqlwHFhFFwViqwoPtL1I5XAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUJck2sX9jGh2xn4I4KoYOBNj8ZZIwHwYDVR0j BBgwFoAUmizaqWb9lsvszEC8/D3hsiMmPCIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzAzNjEyNDAzNzA1NDQ2Ni8wLzlBMkNEQUE5NjZGRDk2Q0JFQ0NDNDBCQ0ZDM0RF MUIyMjMyNjNDMjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUEyQ0RBQTk2NkZEOTZDQkVDQ0M0MEJDRkMzREUxQjIyMzI2M0MyMi5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3MDM2MTI0MDM3MDU0NDY2LzAvMzIzNDMwMzczYTM5 MzEzODMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkB5GA MA0GCSqGSIb3DQEBCwUAA4IBAQCaIqlgMMFrEdqDs9di8GoHdYsOEa3Wu9srjKuH ujvGWq5ht8Gc7+N56haWDshyHN9/9fOaAiUNK7EqUIqd2fc018UC1MnrqX6KkuT2 jTK4XjolfuJb33ay8jR3bv81g/WAB/KVou3tZPvRN9hmBivYwjkiNgr5Agj/Dquk j1U56rMn8UoTkVnQE4hKzWgt/SX95iDpqedSpFyUgiC7NO6zZXjaYzZLc+N144Vo FEsd9EbL9z1dksAzUszKRujjISYkn0Zo2stBsgfAo/VfWQviTSshc6fDNwRzAjH2 bkcBXfnlHift2eLdWfsHADshGUX0UhfMdhxHjSAF2ug8hGFC -----END CERTIFICATE-----Generated at Thu Apr 16 22:36:03 2026 by rpki-client