$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099622320097460225/0/323430323a373034303a3a2f33322d3332203d3e203633373034.roa File: 323430323a373034303a3a2f33322d3332203d3e203633373034.roa (raw, json) Hash identifier: w+g9wQkDb0VlDHE2aSmGRHmwlxlq/Mlg8oiK0CsqESk= Subject key identifier: BF:E7:8D:D5:91:8C:D0:9F:18:BC:AF:E2:7C:A6:AC:01:F7:4F:75:BB Certificate issuer: /CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Certificate serial: 13ACE2277BF4717321260C9AE7692B7EB02D3D9D Authority key identifier: 49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/323430323a373034303a3a2f33322d3332203d3e203633373034.roa Signing time: Mon 08 Jun 2026 01:36:39 +0000 ROA not before: Mon 08 Jun 2026 01:31:39 +0000 ROA not after: Mon 07 Jun 2027 01:36:39 +0000 asID: 63704 IP address blocks: 2402:7040::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ac:e2:27:7b:f4:71:73:21:26:0c:9a:e7:69:2b:7e:b0:2d:3d:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49343D2BE4A543AC3AFE9189955CC08AAB3BF772 Validity Not Before: Jun 8 01:31:39 2026 GMT Not After : Jun 7 01:36:39 2027 GMT Subject: CN=BFE78DD5918CD09F18BCAFE27CA6AC01F74F75BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:17:13:a1:e6:f5:b5:da:bd:9f:e2:49:7a: 86:0a:c6:bb:87:09:c2:fc:0c:cd:f0:36:05:ac:5a: 08:f7:b3:d4:83:bc:4b:d2:0e:89:a0:1e:ad:b0:1e: 9b:a6:53:f1:35:02:2f:0f:05:43:7e:21:9a:ef:d3: 70:76:16:0c:49:eb:fb:1d:c3:06:0f:f2:ed:ee:28: d9:2b:87:fa:76:e7:13:51:19:cf:2d:1c:d8:9d:29: f5:e2:54:17:1d:41:c3:5f:6b:55:c0:ac:a1:05:aa: f4:d0:9c:a2:a5:27:8c:f1:33:26:04:16:f7:17:11: 8b:20:5e:09:43:d2:83:40:d5:09:d2:9a:52:ef:44: 4e:b4:18:f7:f4:54:e5:80:94:31:eb:0b:08:a2:f6: 99:52:47:11:66:68:dc:43:b6:b5:bd:24:0d:ab:43: e8:c1:be:33:63:8c:7b:64:d5:91:16:31:43:16:51: 86:08:6a:5c:ba:32:11:e1:f1:23:1e:f9:67:04:43: dd:9b:0a:2b:bb:8e:87:a9:d8:ac:a3:1a:de:db:05: e0:59:5b:36:4f:eb:c5:44:60:f0:21:65:f3:71:1f: d9:94:87:7a:4d:f3:65:e6:d2:77:5c:a2:d8:98:e9: 8a:98:5d:ae:c1:96:54:f0:6a:f6:6d:dc:f6:49:10: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E7:8D:D5:91:8C:D0:9F:18:BC:AF:E2:7C:A6:AC:01:F7:4F:75:BB X509v3 Authority Key Identifier: keyid:49:34:3D:2B:E4:A5:43:AC:3A:FE:91:89:95:5C:C0:8A:AB:3B:F7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/49343D2BE4A543AC3AFE9189955CC08AAB3BF772.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099622320097460225/0/323430323a373034303a3a2f33322d3332203d3e203633373034.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:7040::/32 Signature Algorithm: sha256WithRSAEncryption 1d:6e:94:ac:34:4d:aa:e2:e5:0f:a4:d8:da:20:4c:8c:12:6d: 41:4f:3b:a5:aa:ee:1c:f1:a7:36:b1:6b:a3:bb:b3:1d:42:45: 27:2d:fc:bf:40:ab:20:a0:ce:c4:d3:9a:f3:50:80:4a:97:28: 91:e9:f0:6b:7c:ef:24:5f:c8:2c:36:5b:64:a5:ab:b9:3f:68: 44:13:12:59:fd:23:33:fc:77:4d:f0:f3:04:dd:5d:cf:ed:34: c0:69:5d:be:28:39:23:99:bd:2f:72:70:fc:35:f7:f0:d3:25: f4:b5:37:20:7c:94:86:df:37:7a:46:e7:9c:e0:82:70:d1:4e: a0:24:d9:56:9f:ac:41:72:90:db:4b:25:c1:ff:e0:41:81:fa: 1c:63:4d:30:ee:c7:d9:07:18:f7:dc:c5:b0:71:da:5f:15:33: 01:ac:d6:08:e8:ae:4e:60:8d:57:39:bc:34:c8:a1:2e:58:cf: e2:22:54:21:13:7f:11:25:5f:30:3d:34:f9:3f:9c:12:88:e2: 68:f2:a6:9c:ff:fb:a6:82:64:72:d8:85:99:c1:c7:d0:6f:35: 1f:58:bf:e4:a1:6a:06:65:8c:b9:90:c6:7a:aa:34:40:ae:d0: de:a3:80:92:54:76:6d:56:6f:58:53:ea:8e:b0:4a:0c:55:b8: bc:57:fc:ce -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUE6ziJ3v0cXMhJgya52krfrAtPZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFB QjNCRjc3MjAeFw0yNjA2MDgwMTMxMzlaFw0yNzA2MDcwMTM2MzlaMDMxMTAvBgNV BAMTKEJGRTc4REQ1OTE4Q0QwOUYxOEJDQUZFMjdDQTZBQzAxRjc0Rjc1QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1xcToeb1tdq9n+JJeoYKxruH CcL8DM3wNgWsWgj3s9SDvEvSDomgHq2wHpumU/E1Ai8PBUN+IZrv03B2FgxJ6/sd wwYP8u3uKNkrh/p25xNRGc8tHNidKfXiVBcdQcNfa1XArKEFqvTQnKKlJ4zxMyYE FvcXEYsgXglD0oNA1QnSmlLvRE60GPf0VOWAlDHrCwii9plSRxFmaNxDtrW9JA2r Q+jBvjNjjHtk1ZEWMUMWUYYIaly6MhHh8SMe+WcEQ92bCiu7joep2KyjGt7bBeBZ WzZP68VEYPAhZfNxH9mUh3pN82Xm0ndcotiY6YqYXa7BllTwavZt3PZJEP3BAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUv+eN1ZGM0J8YvK/ifKasAfdPdbswHwYDVR0j BBgwFoAUSTQ9K+SlQ6w6/pGJlVzAiqs793IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYyMjMyMDA5NzQ2MDIyNS8wLzQ5MzQzRDJCRTRBNTQzQUMzQUZFOTE4OTk1NUND MDhBQUIzQkY3NzIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDkzNDNEMkJFNEE1NDNBQzNBRkU5MTg5OTU1Q0MwOEFBQjNCRjc3Mi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjIyMzIwMDk3NDYwMjI1LzAvMzIzNDMwMzIzYTM3 MzAzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMzM3MzAzNC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQCcEAwDQYJKoZIhvcNAQELBQADggEBAB1ulKw0Tari5Q+k2NogTIwSbUFP O6Wq7hzxpzaxa6O7sx1CRSct/L9AqyCgzsTTmvNQgEqXKJHp8Gt87yRfyCw2W2Sl q7k/aEQTEln9IzP8d03w8wTdXc/tNMBpXb4oOSOZvS9ycPw19/DTJfS1NyB8lIbf N3pG55zggnDRTqAk2VafrEFykNtLJcH/4EGB+hxjTTDux9kHGPfcxbBx2l8VMwGs 1gjork5gjVc5vDTIoS5Yz+IiVCETfxElXzA9NPk/nBKI4mjyppz/+6aCZHLYhZnB x9BvNR9Yv+ShagZljLmQxnqqNECu0N6jgJJUdm1Wb1hT6o6wSgxVuLxX/M4= -----END CERTIFICATE-----Generated at Sun Jun 14 09:53:03 2026 by rpki-client