$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030323a3a2f34382d3438203d3e203233383438.roa File: 323430343a373138303a633030323a3a2f34382d3438203d3e203233383438.roa (raw, json) Hash identifier: TJOdV0PdfaN5MVo1i5jRESuaYLSVjBY47qTWq8QCSh0= Subject key identifier: EC:87:88:6E:47:24:D9:94:04:AE:71:46:75:22:0E:BA:C0:2D:7B:5E Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D Certificate serial: 0D89EE4E224012886D3547AF12AB260AB0FAB4E3 Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030323a3a2f34382d3438203d3e203233383438.roa Signing time: Thu 16 Apr 2026 09:17:57 +0000 ROA not before: Thu 16 Apr 2026 09:12:57 +0000 ROA not after: Thu 15 Apr 2027 09:17:57 +0000 asID: 23848 IP address blocks: 2404:7180:c002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:89:ee:4e:22:40:12:88:6d:35:47:af:12:ab:26:0a:b0:fa:b4:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D Validity Not Before: Apr 16 09:12:57 2026 GMT Not After : Apr 15 09:17:57 2027 GMT Subject: CN=EC87886E4724D99404AE714675220EBAC02D7B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:13:57:fa:83:e0:34:ff:2c:d3:02:c3:e0: 5a:3e:9a:46:4d:70:28:bc:c2:5d:a6:14:83:b8:d4: d9:6c:3f:c6:51:30:cd:d6:8f:3b:a5:f3:f9:51:32: 35:1b:e4:d6:32:48:26:bc:10:a9:d8:83:0a:38:02: 28:62:3f:43:f4:0f:35:e2:f8:2b:5c:88:24:a9:28: b7:5a:95:1e:ea:67:ff:bb:27:2f:6d:17:01:da:c1: e1:0a:d4:6a:d0:ec:28:7a:cf:58:67:5d:5f:98:54: cb:3e:2a:92:bc:ae:57:38:9c:f8:57:7f:11:26:bd: 8a:dc:76:22:86:25:90:e3:3e:65:88:e6:f6:4d:5c: da:b3:3e:f0:17:25:f3:61:88:f3:49:ee:83:a1:4d: 2a:38:f2:d3:89:53:37:2d:9a:c6:aa:12:f6:97:61: 77:a1:22:3e:04:55:a4:18:8b:78:93:f0:ca:9e:a2: 37:5f:3d:c8:a7:64:af:f1:26:a5:17:55:96:ca:6b: 80:53:75:3d:09:76:12:0e:f2:45:f1:15:e8:c3:2c: 28:f6:6f:15:bc:99:dc:88:3c:93:d8:77:51:f4:41: ce:52:1f:23:70:c1:f6:4d:35:03:b3:24:40:a9:af: 7d:dc:38:0c:fe:0b:d7:10:65:63:fd:32:00:96:a0: 1e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:87:88:6E:47:24:D9:94:04:AE:71:46:75:22:0E:BA:C0:2D:7B:5E X509v3 Authority Key Identifier: keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a633030323a3a2f34382d3438203d3e203233383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7180:c002::/48 Signature Algorithm: sha256WithRSAEncryption 39:1c:e7:84:df:7d:e5:ef:87:f9:d1:b0:e8:ca:31:0f:5a:18: eb:63:f0:63:2d:ab:4c:65:64:fe:ea:90:97:c4:52:bc:91:00: b5:21:cd:d0:94:1f:a0:2e:f9:45:d9:4d:7f:b9:58:12:96:71: 7d:24:98:c5:de:79:f5:7e:3f:a3:f5:37:d4:55:dd:e7:ae:9d: a3:63:e0:d7:10:9e:02:af:29:42:5e:fa:f7:99:1c:1d:69:08: 02:d1:9b:e3:b6:88:ec:1b:b6:e5:e3:7a:50:a1:5f:e3:61:b8: e2:8b:db:0b:f7:c7:58:4f:c1:5b:1e:a9:34:65:80:60:aa:bc: 23:ff:4d:fc:77:12:2a:74:cb:29:86:d3:2e:01:da:a9:6e:00: 47:ad:11:55:a6:ec:cd:ce:34:ef:48:f9:a0:d2:4f:6e:d0:77: e6:55:ea:e0:b7:26:c9:fd:39:12:95:59:b1:26:0f:d5:cf:15: bc:78:c5:d9:62:ff:15:bb:04:a4:89:ad:cd:96:2e:0b:86:53: e0:fa:39:a4:6b:64:c5:fb:18:be:ed:67:bc:9f:7e:b9:a2:83: 0a:6a:0d:c4:70:bd:72:eb:de:c6:e4:a7:d5:39:f7:02:8c:6d: 25:ee:2d:76:ff:20:b1:b3:68:b6:07:5b:0b:c2:15:85:e7:c5: a3:d4:01:50 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUDYnuTiJAEohtNUevEqsmCrD6tOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw RTI3MDQyRDAeFw0yNjA0MTYwOTEyNTdaFw0yNzA0MTUwOTE3NTdaMDMxMTAvBgNV BAMTKEVDODc4ODZFNDcyNEQ5OTQwNEFFNzE0Njc1MjIwRUJBQzAyRDdCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0xNX+oPgNP8s0wLD4Fo+mkZN cCi8wl2mFIO41NlsP8ZRMM3Wjzul8/lRMjUb5NYySCa8EKnYgwo4AihiP0P0DzXi +CtciCSpKLdalR7qZ/+7Jy9tFwHaweEK1GrQ7Ch6z1hnXV+YVMs+KpK8rlc4nPhX fxEmvYrcdiKGJZDjPmWI5vZNXNqzPvAXJfNhiPNJ7oOhTSo48tOJUzctmsaqEvaX YXehIj4EVaQYi3iT8MqeojdfPcinZK/xJqUXVZbKa4BTdT0JdhIO8kXxFejDLCj2 bxW8mdyIPJPYd1H0Qc5SHyNwwfZNNQOzJECpr33cOAz+C9cQZWP9MgCWoB45AgMB AAGjggIhMIICHTAdBgNVHQ4EFgQU7IeIbkck2ZQErnFGdSIOusAte14wHwYDVR0j BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3MDgzNTMyMzU1ODI5NzYzLzAvMzIzNDMwMzQz YTM3MzEzODMwM2E2MzMwMzAzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzMz ODM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkBHGAwAIwDQYJKoZIhvcNAQELBQADggEBADkc54Tf feXvh/nRsOjKMQ9aGOtj8GMtq0xlZP7qkJfEUryRALUhzdCUH6Au+UXZTX+5WBKW cX0kmMXeefV+P6P1N9RV3eeunaNj4NcQngKvKUJe+veZHB1pCALRm+O2iOwbtuXj elChX+NhuOKL2wv3x1hPwVseqTRlgGCqvCP/Tfx3Eip0yymG0y4B2qluAEetEVWm 7M3ONO9I+aDST27Qd+ZV6uC3Jsn9ORKVWbEmD9XPFbx4xdli/xW7BKSJrc2WLguG U+D6OaRrZMX7GL7tZ7yffrmigwpqDcRwvXLr3sbkp9U59wKMbSXuLXb/ILGzaLYH WwvCFYXnxaPUAVA= -----END CERTIFICATE-----Generated at Sat Apr 18 02:28:25 2026 by rpki-client