$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663031303a3a2f34382d3438203d3e203233383438.roa File: 323430343a373138303a663031303a3a2f34382d3438203d3e203233383438.roa (raw, json) Hash identifier: Nf2hmN/krWx+EJjxtc/Ud3iYk7oYRMEGIrW6BTU44mQ= Subject key identifier: 2B:C9:8A:36:4A:C6:E2:C5:C1:7E:03:FB:1F:A5:EC:9C:E8:E2:C6:3E Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D Certificate serial: 1AF26306269B6F3BD7426737202960D8B8702216 Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663031303a3a2f34382d3438203d3e203233383438.roa Signing time: Thu 16 Apr 2026 09:17:58 +0000 ROA not before: Thu 16 Apr 2026 09:12:58 +0000 ROA not after: Thu 15 Apr 2027 09:17:58 +0000 asID: 23848 IP address blocks: 2404:7180:f010::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f2:63:06:26:9b:6f:3b:d7:42:67:37:20:29:60:d8:b8:70:22:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D Validity Not Before: Apr 16 09:12:58 2026 GMT Not After : Apr 15 09:17:58 2027 GMT Subject: CN=2BC98A364AC6E2C5C17E03FB1FA5EC9CE8E2C63E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5e:63:28:46:6b:91:3b:7b:5b:ee:dd:02:e0: 32:01:07:92:50:d7:05:cc:db:e2:83:45:65:7d:47: 4a:11:43:38:61:02:66:31:24:d6:b4:56:8e:7d:cd: f9:45:37:6a:88:d9:0b:76:2b:9d:14:04:48:37:4f: ae:c9:4f:d6:8f:d5:aa:7b:0a:05:89:fe:2e:50:c5: 0b:ca:24:19:22:6d:cd:c4:88:e7:bb:b9:e4:05:41: a9:b7:9d:95:41:6e:98:57:99:d3:86:0d:24:78:87: 57:1a:f7:5f:95:2a:51:27:34:83:2d:6b:02:78:94: 19:0e:f7:1c:df:6c:5f:b6:e9:ab:ed:e2:55:63:a8: 2b:42:21:7d:2c:9f:9e:af:ee:64:8f:fd:de:e8:fe: e2:03:4c:21:8c:ba:5a:d0:08:d5:a9:cb:ea:84:a8: 29:2c:a1:1e:68:34:74:38:f6:f7:d2:c2:74:f7:f6: 71:83:ca:ec:d0:90:c1:5a:ad:6c:12:54:0c:3f:ef: 63:b7:b6:ac:06:8f:12:f1:1b:51:f8:60:e4:17:58: b1:e1:62:a4:2a:92:b8:50:28:54:47:2b:7f:24:db: cb:45:7b:31:b3:62:8e:7c:3f:12:e7:70:0d:dc:8c: ce:36:8c:b9:bd:9e:e5:f0:80:4f:b6:88:9d:98:7b: 98:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:C9:8A:36:4A:C6:E2:C5:C1:7E:03:FB:1F:A5:EC:9C:E8:E2:C6:3E X509v3 Authority Key Identifier: keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/323430343a373138303a663031303a3a2f34382d3438203d3e203233383438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2404:7180:f010::/48 Signature Algorithm: sha256WithRSAEncryption bb:ab:f3:de:e4:46:5c:5d:7a:a4:ad:99:93:05:0d:54:35:07: 03:3d:dc:42:ee:8b:5a:c8:83:8b:3a:15:8c:5e:23:99:38:a8: 60:d2:5b:57:f4:d6:8a:2b:99:4e:46:3d:52:5d:b3:45:2f:c7: 42:7a:b0:29:5d:d1:a7:d1:ab:24:53:6a:a4:9b:c8:e6:38:88: b6:c5:e7:16:6c:68:17:22:71:77:15:2b:69:06:f3:72:6e:fd: ef:63:fb:ee:a4:42:47:9b:20:d0:93:46:36:d6:85:c1:28:c0: ef:fb:39:4a:e6:86:14:99:80:af:85:e9:ef:f9:72:bb:39:25: 29:69:ab:d2:ec:69:fa:26:17:30:c7:2a:09:50:b4:fe:74:b4: 73:33:eb:1e:63:06:ae:c6:1c:e2:54:ea:d5:32:e0:f7:c1:65: 79:ab:9e:39:19:1e:76:fa:96:fe:47:ab:cb:fb:9b:8f:8d:2e: b5:15:a0:4e:41:ee:6a:b0:6b:9b:5a:75:9f:d3:2f:79:ce:bd: 11:f1:b5:ab:e1:5b:1b:23:2f:f5:a0:fc:c9:6c:01:59:21:c0: 69:6d:1d:09:a0:84:40:60:53:27:7a:17:34:57:4b:68:49:7b: 95:4b:51:ac:44:06:81:9f:af:ef:1e:29:ec:d8:c0:e4:fb:af: 96:f4:f5:3f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUGvJjBiabbzvXQmc3IClg2LhwIhYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEw RTI3MDQyRDAeFw0yNjA0MTYwOTEyNThaFw0yNzA0MTUwOTE3NThaMDMxMTAvBgNV BAMTKDJCQzk4QTM2NEFDNkUyQzVDMTdFMDNGQjFGQTVFQzlDRThFMkM2M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYXmMoRmuRO3tb7t0C4DIBB5JQ 1wXM2+KDRWV9R0oRQzhhAmYxJNa0Vo59zflFN2qI2Qt2K50UBEg3T67JT9aP1ap7 CgWJ/i5QxQvKJBkibc3EiOe7ueQFQam3nZVBbphXmdOGDSR4h1ca91+VKlEnNIMt awJ4lBkO9xzfbF+26avt4lVjqCtCIX0sn56v7mSP/d7o/uIDTCGMulrQCNWpy+qE qCksoR5oNHQ49vfSwnT39nGDyuzQkMFarWwSVAw/72O3tqwGjxLxG1H4YOQXWLHh YqQqkrhQKFRHK38k28tFezGzYo58PxLncA3cjM42jLm9nuXwgE+2iJ2Ye5gNAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUK8mKNkrG4sXBfgP7H6XsnOjixj4wHwYDVR0j BBgwFoAU7aiEp5dI1X60k2ZwTLaoEQ4nBC0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzA4MzUzMjM1NTgyOTc2My8wL0VEQTg4NEE3OTc0OEQ1N0VCNDkzNjY3MDRDQjZB ODExMEUyNzA0MkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRURBODg0QTc5NzQ4RDU3RUI0OTM2NjcwNENCNkE4MTEwRTI3MDQyRC5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk3MDgzNTMyMzU1ODI5NzYzLzAvMzIzNDMwMzQz YTM3MzEzODMwM2E2NjMwMzEzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzMz ODM0Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkBHGA8BAwDQYJKoZIhvcNAQELBQADggEBALur897k RlxdeqStmZMFDVQ1BwM93ELui1rIg4s6FYxeI5k4qGDSW1f01oormU5GPVJds0Uv x0J6sCld0afRqyRTaqSbyOY4iLbF5xZsaBcicXcVK2kG83Ju/e9j++6kQkebINCT RjbWhcEowO/7OUrmhhSZgK+F6e/5crs5JSlpq9LsafomFzDHKglQtP50tHMz6x5j Bq7GHOJU6tUy4PfBZXmrnjkZHnb6lv5Hq8v7m4+NLrUVoE5B7mqwa5tadZ/TL3nO vRHxtavhWxsjL/Wg/MlsAVkhwGltHQmghEBgUyd6FzRXS2hJe5VLUaxEBoGfr+8e KezYwOT7r5b09T8= -----END CERTIFICATE-----Generated at Sat Apr 18 02:28:13 2026 by rpki-client