$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098790076852207617/1/AS3460.roa File: AS3460.roa (raw, json) Hash identifier: 4+sYZc5isl8CSbCgD53in0pt+eKcGW6HRYe6bgqwhLQ= Subject key identifier: AD:54:2F:AA:46:7D:07:79:B8:2D:E8:2E:15:C4:0B:61:0A:32:0C:11 Certificate issuer: /CN=A91A58AA0001/serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162 Certificate serial: 64FAC593E51C29E6C2E268FFBCC1EDED172FBFB3 Authority key identifier: 8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/AS3460.roa Signing time: Fri 05 Jun 2026 02:37:03 +0000 ROA not before: Fri 05 Jun 2026 02:32:03 +0000 ROA not after: Fri 04 Jun 2027 02:37:03 +0000 asID: 3460 IP address blocks: 210.72.11.128/27 maxlen: 27 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Jun 2026 06:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fa:c5:93:e5:1c:29:e6:c2:e2:68:ff:bc:c1:ed:ed:17:2f:bf:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A58AA0001, serialNumber=8C0965B62E08A9FD16FB7F9A185FAD4438547162 Validity Not Before: Jun 5 02:32:03 2026 GMT Not After : Jun 4 02:37:03 2027 GMT Subject: CN=AD542FAA467D0779B82DE82E15C40B610A320C11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:81:2d:6e:4e:a6:a3:40:ad:2e:e9:dc:38:56: 7e:6e:cc:05:0d:38:51:e5:8a:1d:71:0b:8e:3a:9d: c5:59:6e:af:ff:04:42:52:65:1b:e0:ed:f4:e2:de: 8a:27:47:ce:eb:5f:2d:5e:46:99:94:1d:18:ec:f2: 24:c5:cc:b2:f2:88:03:77:d5:a6:87:9a:45:00:cb: 6f:2b:81:be:0e:74:fc:49:6a:eb:9b:c9:64:bc:4e: 15:11:d7:be:ac:2b:c9:6c:8a:10:c3:d7:12:8a:6d: 22:d8:26:32:e9:2a:a1:f9:0e:aa:aa:dd:73:cc:13: 87:d6:4c:2a:f8:e2:49:f4:7a:5d:87:63:ef:7c:f2: 84:f5:a8:3e:34:5e:69:c5:99:64:8d:ce:99:e3:25: c1:78:fe:71:3d:9e:ab:24:6f:03:8d:37:26:fc:69: 03:85:7e:14:2b:7b:0e:74:8f:29:75:dc:5e:0b:41: 98:d7:94:e5:1a:5e:48:dd:2e:2c:e0:e1:62:b7:16: d9:a0:c4:b8:49:da:f1:7d:41:fa:87:49:ce:0a:6a: 55:0f:8c:63:0a:39:77:b5:cf:35:30:b3:f9:07:30: 4c:21:87:e2:91:e2:fa:04:11:5b:22:09:88:a9:77: 99:e3:3a:e7:a0:1d:cd:2e:52:90:41:be:6c:03:37: 64:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:54:2F:AA:46:7D:07:79:B8:2D:E8:2E:15:C4:0B:61:0A:32:0C:11 X509v3 Authority Key Identifier: keyid:8C:09:65:B6:2E:08:A9:FD:16:FB:7F:9A:18:5F:AD:44:38:54:71:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/8C0965B62E08A9FD16FB7F9A185FAD4438547162.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jAllti4Iqf0W-3-aGF-tRDhUcWI.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098790076852207617/1/AS3460.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 210.72.11.128/27 Signature Algorithm: sha256WithRSAEncryption b8:58:1b:b3:ce:71:26:5e:ff:be:db:40:7f:c8:ff:b6:7d:6b: 01:ad:c4:0b:ab:92:19:c5:f0:32:ed:60:bf:c8:77:02:be:62: e9:44:08:c9:79:a5:fa:af:60:0a:d6:a0:25:f5:e0:09:be:56: bc:91:17:65:07:94:7f:97:29:98:39:5a:ff:d1:de:cc:3e:2e: 49:fd:53:15:02:be:bc:40:82:bc:0b:4d:b1:e1:63:77:59:25: 1f:c2:1c:28:0e:1a:93:6f:71:8d:2f:4c:eb:dd:b3:ee:7e:b1: b3:26:eb:40:bd:a1:29:37:57:75:3e:9d:3b:d1:39:3f:a9:fd: 4d:20:f0:74:1b:05:62:c1:7f:d5:dc:44:04:9c:5d:b3:73:13: 3e:64:fc:fa:fb:cc:22:de:5e:51:cf:a8:d4:eb:81:02:bf:f1: d5:80:b1:ea:54:ff:cc:d3:96:ae:13:05:d7:26:ae:c9:1e:cf: 48:6c:fe:c5:07:4e:16:3f:16:ea:59:e6:48:97:81:d2:ca:b1: 52:6b:c2:da:e5:5d:9f:00:c8:96:70:a2:a3:f2:bc:59:81:5c: da:b1:af:b0:de:ab:d5:89:0d:83:0a:2e:fa:73:21:9e:e3:2b: 21:ba:13:9f:99:75:6b:66:79:a7:62:71:4b:e3:b7:76:0f:a6: f3:b4:fb:1c -----BEGIN CERTIFICATE----- MIIE8DCCA9igAwIBAgIUZPrFk+UcKebC4mj/vMHt7Rcvv7MwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxQTU4QUEwMDAxMTEwLwYDVQQFEyg4QzA5NjVCNjJF MDhBOUZEMTZGQjdGOUExODVGQUQ0NDM4NTQ3MTYyMB4XDTI2MDYwNTAyMzIwM1oX DTI3MDYwNDAyMzcwM1owMzExMC8GA1UEAxMoQUQ1NDJGQUE0NjdEMDc3OUI4MkRF ODJFMTVDNDBCNjEwQTMyMEMxMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKuBLW5OpqNArS7p3DhWfm7MBQ04UeWKHXELjjqdxVlur/8EQlJlG+Dt9OLe iidHzutfLV5GmZQdGOzyJMXMsvKIA3fVpoeaRQDLbyuBvg50/Elq65vJZLxOFRHX vqwryWyKEMPXEoptItgmMukqofkOqqrdc8wTh9ZMKvjiSfR6XYdj73zyhPWoPjRe acWZZI3OmeMlwXj+cT2eqyRvA403JvxpA4V+FCt7DnSPKXXcXgtBmNeU5RpeSN0u LODhYrcW2aDEuEna8X1B+odJzgpqVQ+MYwo5d7XPNTCz+QcwTCGH4pHi+gQRWyIJ iKl3meM656AdzS5SkEG+bAM3ZCUCAwEAAaOCAeMwggHfMB0GA1UdDgQWBBStVC+q Rn0Hebgt6C4VxAthCjIMETAfBgNVHSMEGDAWgBSMCWW2Lgip/Rb7f5oYX61EOFRx YjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk4NzkwMDc2ODUyMjA3NjE3LzEvOEMwOTY1 QjYyRTA4QTlGRDE2RkI3RjlBMTg1RkFENDQzODU0NzE2Mi5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvakFsbHRpNElx ZjBXLTMtYUdGLXRSRGhVY1dJLmNlcjBcBggrBgEFBQcBCwRQME4wTAYIKwYBBQUH MAuGQHJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5ODc5MDA3Njg1 MjIwNzYxNy8xL0FTMzQ2MC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg BggrBgEFBQcBBwEB/wQRMA8wDQQCAAEwBwMFBdJIC4AwDQYJKoZIhvcNAQELBQAD ggEBALhYG7POcSZe/77bQH/I/7Z9awGtxAurkhnF8DLtYL/IdwK+YulECMl5pfqv YArWoCX14Am+VryRF2UHlH+XKZg5Wv/R3sw+Lkn9UxUCvrxAgrwLTbHhY3dZJR/C HCgOGpNvcY0vTOvds+5+sbMm60C9oSk3V3U+nTvROT+p/U0g8HQbBWLBf9XcRASc XbNzEz5k/Pr7zCLeXlHPqNTrgQK/8dWAsepU/8zTlq4TBdcmrskez0hs/sUHThY/ FupZ5kiXgdLKsVJrwtrlXZ8AyJZwoqPyvFmBXNqxr7Deq9WJDYMKLvpzIZ7jKyG6 E5+ZdWtmeadicUvjt3YPpvO0+xw= -----END CERTIFICATE-----Generated at Sun Jun 14 11:40:50 2026 by rpki-client