$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a623030313a3a2f34382d3438203d3e203233383438.roa File: 323430343a373138303a623030313a3a2f34382d3438203d3e203233383438.roa (raw, json) Hash identifier: /MFBD0he6t/FVnLJXr4P2FJY+/4EgfjBJ/aHLdEcyd4= Subject key identifier: 21:26:6E:F2:FE:21:04:9D:17:3C:54:71:60:C0:66:74:50:5D:95:6C Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D Certificate serial: 0BF7E859289526503F96C09110429125E1EF764F Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a623030313a3a2f34382d3438203d3e203233383438.roa Signing time: Thu 16 Apr 2026 09:17:57 +0000 ROA not before: Thu 16 Apr 2026 09:12:57 +0000 ROA not after: Thu 15 Apr 2027 09:17:57 +0000 asID: 23848 IP address blocks: 2404:7180:b001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:f7:e8:59:28:95:26:50:3f:96:c0:91:10:42:91:25:e1:ef:76:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D Validity Not Before: Apr 16 09:12:57 2026 GMT Not After : Apr 15 09:17:57 2027 GMT Subject: CN=21266EF2FE21049D173C547160C06674505D956C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9e:2e:1a:2e:6a:9b:1c:ff:f8:5d:3e:e3:9a: a5:12:bb:e4:7d:77:15:b6:5a:16:28:fc:bd:7d:6b: 2a:50:bf:ab:61:4f:82:79:96:c1:65:a7:1b:cf:fd: 4a:f3:1e:79:8b:b7:80:2c:d2:bc:6f:21:df:2a:b9: 79:d8:2f:41:71:31:66:fb:e6:35:01:72:bc:17:ed: 54:50:7d:4b:62:2d:bf:c3:4a:6a:63:c8:60:a9:34: b2:3d:c4:48:eb:26:25:d2:47:8a:07:95:94:8f:f6: fe:48:be:af:a1:be:67:93:42:8e:81:b1:ae:88:c2: 3d:81:f7:5b:4e:14:19:b3:81:08:52:12:99:11:00: d0:67:78:c3:28:40:53:61:25:a8:a6:b6:74:95:1b: bc:6f:5f:1f:d8:7a:23:83:81:df:2a:07:95:5a:8e: 44:cf:e0:1a:e3:ad:b2:d6:65:79:6f:b8:bc:40:50: ae:25:59:0e:90:0a:a0:c6:99:c5:ec:07:2c:dc:7f: 6e:c4:b1:88:b4:9b:ab:63:62:0e:c8:83:a2:d2:66: df:b0:fc:a3:b6:e5:52:9c:94:ca:e1:0d:bc:e5:34: 68:bd:e0:90:d7:20:35:27:6a:b6:66:26:ca:ae:e7: 0d:cb:f0:0d:02:72:09:a0:29:59:93:fd:b9:c6:bc: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:26:6E:F2:FE:21:04:9D:17:3C:54:71:60:C0:66:74:50:5D:95:6C X509v3 Authority Key Identifier: keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a623030313a3a2f34382d3438203d3e203233383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7180:b001::/48 Signature Algorithm: sha256WithRSAEncryption 29:af:93:b9:7b:11:0f:9d:66:26:ff:22:2e:7a:0e:9c:62:da: 43:58:d2:1f:bf:29:d0:f2:3a:16:28:da:f2:da:da:e6:3b:b1: 0d:92:b5:17:9e:06:53:cc:cc:62:c0:6b:79:30:00:b5:5b:91: 04:3a:7e:d8:6e:cd:45:4d:b4:aa:56:fd:81:de:00:db:4e:12: 4e:5a:a3:96:b4:df:fa:04:3f:c9:fb:86:2f:b3:18:a6:d5:0e: 03:98:72:12:01:1c:95:49:32:31:93:1b:f4:20:03:21:94:79: 4c:8c:1d:74:0a:19:26:6f:7f:cf:7f:8a:27:9c:f6:dd:dc:49: e4:c1:ff:e2:fb:4d:78:36:83:11:08:43:40:23:d3:51:dc:1b: 69:89:72:bb:9d:06:2e:6b:94:7e:32:d6:b3:1a:9f:47:25:70: d5:22:71:c6:91:5e:b4:78:52:6c:b9:f3:77:ae:f1:4b:dc:4f: 38:a2:5f:5e:fe:57:ba:d8:ed:6d:83:85:0b:00:7f:d8:9a:29: d0:4c:fd:16:ca:56:85:67:87:57:fa:6d:4e:21:26:f2:e2:29: b7:03:83:97:4b:26:6e:ed:a6:15:a5:54:db:a2:61:ad:f7:78: 62:a1:41:35:5f:a1:f7:a8:0e:2f:6a:d0:17:98:e2:ec:f5:d1: 15:a8:5c:8d -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUC/foWSiVJlA/lsCREEKRJeHvdk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw RTI3MDQyRDAeFw0yNjA0MTYwOTEyNTdaFw0yNzA0MTUwOTE3NTdaMDMxMTAvBgNV BAMTKDIxMjY2RUYyRkUyMTA0OUQxNzNDNTQ3MTYwQzA2Njc0NTA1RDk1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOni4aLmqbHP/4XT7jmqUSu+R9 dxW2WhYo/L19aypQv6thT4J5lsFlpxvP/UrzHnmLt4As0rxvId8quXnYL0FxMWb7 5jUBcrwX7VRQfUtiLb/DSmpjyGCpNLI9xEjrJiXSR4oHlZSP9v5Ivq+hvmeTQo6B sa6Iwj2B91tOFBmzgQhSEpkRANBneMMoQFNhJaimtnSVG7xvXx/YeiODgd8qB5Va jkTP4BrjrbLWZXlvuLxAUK4lWQ6QCqDGmcXsByzcf27EsYi0m6tjYg7Ig6LSZt+w /KO25VKclMrhDbzlNGi94JDXIDUnarZmJsqu5w3L8A0CcgmgKVmT/bnGvGOLAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUISZu8v4hBJ0XPFRxYMBmdFBdlWwwHwYDVR0j BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3MDgzNTMyMzU1ODI5NzYzLzAvMzIzNDMwMzQz YTM3MzEzODMwM2E2MjMwMzAzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzMz ODM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkBHGAsAEwDQYJKoZIhvcNAQELBQADggEBACmvk7l7 EQ+dZib/Ii56Dpxi2kNY0h+/KdDyOhYo2vLa2uY7sQ2StReeBlPMzGLAa3kwALVb kQQ6fthuzUVNtKpW/YHeANtOEk5ao5a03/oEP8n7hi+zGKbVDgOYchIBHJVJMjGT G/QgAyGUeUyMHXQKGSZvf89/iiec9t3cSeTB/+L7TXg2gxEIQ0Aj01HcG2mJcrud Bi5rlH4y1rMan0clcNUiccaRXrR4Umy583eu8UvcTziiX17+V7rY7W2DhQsAf9ia KdBM/RbKVoVnh1f6bU4hJvLiKbcDg5dLJm7tphWlVNuiYa33eGKhQTVfofeoDi9q 0BeY4uz10RWoXI0= -----END CERTIFICATE-----Generated at Sat Apr 18 02:27:58 2026 by rpki-client