$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a616131303a3a2f34382d3438203d3e203233383438.roa File: 323430343a373138303a616131303a3a2f34382d3438203d3e203233383438.roa (raw, json) Hash identifier: JvEG1PxIFyQTI6EiFQPY82J0XoF1O/z5yuprcJwdL8Q= Subject key identifier: D0:76:A5:15:75:19:27:A3:E2:A2:C4:FD:D4:42:F8:CB:05:9F:92:9A Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D Certificate serial: 357676FD1CB88B229907D33EAF5DF9598982BE43 Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a616131303a3a2f34382d3438203d3e203233383438.roa Signing time: Thu 16 Apr 2026 09:17:57 +0000 ROA not before: Thu 16 Apr 2026 09:12:57 +0000 ROA not after: Thu 15 Apr 2027 09:17:57 +0000 asID: 23848 IP address blocks: 2404:7180:aa10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:76:76:fd:1c:b8:8b:22:99:07:d3:3e:af:5d:f9:59:89:82:be:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D Validity Not Before: Apr 16 09:12:57 2026 GMT Not After : Apr 15 09:17:57 2027 GMT Subject: CN=D076A515751927A3E2A2C4FDD442F8CB059F929A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:79:57:02:0d:45:e6:2c:96:2c:02:ad:cb:01: 56:f4:53:48:c1:8e:1c:e8:ed:7d:3e:3d:c2:fc:b1: 28:59:e6:3e:80:72:54:54:7f:23:49:0e:36:87:96: 4c:91:09:1e:df:f3:e9:1a:42:cc:27:c7:51:27:43: a8:fe:97:7d:56:b7:61:1c:20:12:be:ed:d7:11:03: 81:e4:9a:eb:b8:fd:32:c2:3c:9d:f1:d3:0b:e8:36: 4c:ef:2d:37:5f:69:f9:a7:28:b3:15:9b:a6:79:54: 52:77:38:0b:47:4a:6d:b4:5b:44:e0:26:ac:df:b2: a1:13:86:63:cf:9f:f5:5a:18:8b:cc:c3:28:57:4c: 6b:bf:65:4e:80:3a:99:df:ab:13:b3:5c:e9:6b:1b: fe:ee:56:df:a8:52:13:cb:37:e2:b8:aa:37:79:b4: 01:79:61:29:aa:b0:c2:51:9b:83:30:53:ea:cf:3b: 0b:d0:d1:61:36:b6:9a:0c:a2:35:19:f9:23:a1:1e: 91:a1:df:aa:69:74:05:ad:cd:43:1b:31:7a:84:f0: 73:70:75:27:a1:51:8d:40:47:d7:ab:e8:27:42:d5: db:ba:1e:f5:6a:7d:b8:ce:c9:28:3a:6a:48:c9:2d: 24:af:1e:c5:5a:ef:a9:55:74:41:cd:99:ba:e5:5f: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:76:A5:15:75:19:27:A3:E2:A2:C4:FD:D4:42:F8:CB:05:9F:92:9A X509v3 Authority Key Identifier: keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a616131303a3a2f34382d3438203d3e203233383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7180:aa10::/48 Signature Algorithm: sha256WithRSAEncryption a3:4d:3e:4b:78:c8:68:86:e1:d1:41:51:be:08:c9:fc:89:75: 0a:45:ae:9b:4a:11:83:d9:7b:3d:cc:52:4d:ba:44:34:47:ed: 70:73:2b:74:9f:8f:28:50:96:97:64:d4:75:cd:3c:88:c6:fb: 3e:1e:48:3b:97:4f:0d:fe:bd:14:3d:d5:2b:17:e2:db:3c:a9: ef:36:60:c2:a5:9e:cb:5d:11:8c:90:15:54:b2:c0:eb:85:a4: 54:90:98:5f:fe:ce:19:81:bb:f4:8d:cf:74:15:65:43:6e:c7: 4e:c9:50:75:f9:d3:33:87:3b:44:0e:80:e1:88:6d:66:7a:9c: 40:fb:42:13:a0:31:8c:f4:07:92:64:e9:c6:36:8d:ff:62:80: 06:02:e4:66:6a:1a:17:54:06:63:c2:20:ce:9c:38:e7:ae:b6: 59:ca:aa:6e:93:07:bf:17:93:5d:42:ee:97:0d:bd:8a:8d:d0: 94:22:5e:c6:78:c2:24:7a:3e:da:db:18:d6:5a:18:d9:b9:ea: 05:be:83:7a:d1:1f:b4:8f:74:2f:ff:1d:70:a7:47:1d:35:2f: 8b:40:df:66:3d:9e:c1:3b:ff:7b:97:d5:68:b2:14:1b:29:9a: a0:d3:ee:f2:d2:dd:fc:ac:fa:8a:58:17:f7:27:1c:da:2d:7b: 99:c4:ab:0e -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUNXZ2/Ry4iyKZB9M+r135WYmCvkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw RTI3MDQyRDAeFw0yNjA0MTYwOTEyNTdaFw0yNzA0MTUwOTE3NTdaMDMxMTAvBgNV BAMTKEQwNzZBNTE1NzUxOTI3QTNFMkEyQzRGREQ0NDJGOENCMDU5RjkyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdeVcCDUXmLJYsAq3LAVb0U0jB jhzo7X0+PcL8sShZ5j6AclRUfyNJDjaHlkyRCR7f8+kaQswnx1EnQ6j+l31Wt2Ec IBK+7dcRA4Hkmuu4/TLCPJ3x0wvoNkzvLTdfafmnKLMVm6Z5VFJ3OAtHSm20W0Tg JqzfsqEThmPPn/VaGIvMwyhXTGu/ZU6AOpnfqxOzXOlrG/7uVt+oUhPLN+K4qjd5 tAF5YSmqsMJRm4MwU+rPOwvQ0WE2tpoMojUZ+SOhHpGh36ppdAWtzUMbMXqE8HNw dSehUY1AR9er6CdC1du6HvVqfbjOySg6akjJLSSvHsVa76lVdEHNmbrlX5VfAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQU0HalFXUZJ6PiosT91EL4ywWfkpowHwYDVR0j BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3MDgzNTMyMzU1ODI5NzYzLzAvMzIzNDMwMzQz YTM3MzEzODMwM2E2MTYxMzEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzMz ODM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkBHGAqhAwDQYJKoZIhvcNAQELBQADggEBAKNNPkt4 yGiG4dFBUb4IyfyJdQpFrptKEYPZez3MUk26RDRH7XBzK3SfjyhQlpdk1HXNPIjG +z4eSDuXTw3+vRQ91SsX4ts8qe82YMKlnstdEYyQFVSywOuFpFSQmF/+zhmBu/SN z3QVZUNux07JUHX50zOHO0QOgOGIbWZ6nED7QhOgMYz0B5Jk6cY2jf9igAYC5GZq GhdUBmPCIM6cOOeutlnKqm6TB78Xk11C7pcNvYqN0JQiXsZ4wiR6PtrbGNZaGNm5 6gW+g3rRH7SPdC//HXCnRx01L4tA32Y9nsE7/3uX1WiyFBspmqDT7vLS3fys+opY F/cnHNote5nEqw4= -----END CERTIFICATE-----Generated at Sat Apr 18 01:01:39 2026 by rpki-client