$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa File: 323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa (raw, json) Hash identifier: CZQtid6OUKfI0xx6nayxaGhGv7w/jHQ1gR3Mg2MVhKI= Subject key identifier: 1F:F9:A2:09:A7:D4:11:92:BE:D0:7C:B8:BC:5F:33:8A:69:C4:B4:16 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 2B046E438E045FE511CAD10B84DDA80123B18603 Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa Signing time: Fri 05 Jun 2026 07:20:59 +0000 ROA not before: Fri 05 Jun 2026 07:15:59 +0000 ROA not after: Fri 04 Jun 2027 07:20:59 +0000 asID: 23724 IP address blocks: 2400:89c0:1051::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:04:6e:43:8e:04:5f:e5:11:ca:d1:0b:84:dd:a8:01:23:b1:86:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Jun 5 07:15:59 2026 GMT Not After : Jun 4 07:20:59 2027 GMT Subject: CN=1FF9A209A7D41192BED07CB8BC5F338A69C4B416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:d4:01:de:1c:e7:23:fa:86:bb:f0:7d:df: 3f:06:9f:f1:07:11:c5:c7:30:9d:e7:d8:c9:26:39: b9:ea:ba:5e:ce:d4:b1:9c:1e:93:7e:c0:0c:1e:ff: d5:79:98:c7:c3:2d:51:4c:d0:79:8f:3d:79:35:ab: ae:94:25:76:9c:0d:1c:80:30:9b:02:bf:d3:e1:22: 11:cb:b3:bb:33:26:97:af:e1:2f:82:65:1e:60:64: ec:da:2a:fa:d1:ca:99:2e:9e:f2:b0:2e:81:70:19: 95:b9:07:a2:41:d8:37:32:a0:bd:73:db:61:f4:5a: 5f:71:59:d5:e0:8f:a1:eb:19:29:ef:48:d1:3b:84: 04:4f:f5:b8:4a:c4:59:d0:62:47:8d:68:13:b5:83: 74:a4:23:d9:98:31:15:a9:e4:fd:bf:8e:f4:ae:73: 69:d4:0e:3a:c0:1b:88:87:67:f0:c4:d8:7b:ad:ae: 12:da:82:ac:0a:98:83:ee:19:be:38:b8:cc:b7:80: b0:45:cf:7d:fa:2e:69:3c:81:6c:1b:52:06:38:af: 0d:63:f3:d9:87:30:5b:39:13:38:a4:ad:6d:08:85: 0a:fb:79:c4:72:40:47:a3:df:e5:17:94:f7:cf:af: d1:7c:20:41:7e:ed:99:ff:2e:d8:33:4b:d7:4b:30: d1:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F9:A2:09:A7:D4:11:92:BE:D0:7C:B8:BC:5F:33:8A:69:C4:B4:16 X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313035313a3a2f34382d3438203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:89c0:1051::/48 Signature Algorithm: sha256WithRSAEncryption 82:39:70:8f:c9:fd:75:48:3e:53:e5:04:64:89:ac:18:c3:38: 82:e2:64:d2:d4:d0:1f:39:30:4e:19:28:f5:30:b9:fd:6e:8e: 9c:00:b6:08:63:1e:30:7b:82:78:f5:8d:ed:20:c4:4f:4b:4c: 85:8e:54:b7:b1:13:e0:d1:ae:d5:3d:67:05:ee:6d:ab:10:0d: 49:32:b3:9a:23:c0:60:5e:15:dc:17:af:e6:6b:c0:21:7a:d9: 01:6c:a3:e5:48:3d:5c:da:c0:37:7a:66:bb:44:72:b2:78:18: 34:d1:3a:12:3b:a8:8c:7a:12:00:86:8f:59:5b:33:e1:5f:8b: 5d:6c:52:55:03:8f:c2:36:3d:7f:0a:bb:e4:b3:e4:16:c0:fe: 41:fc:7a:c1:65:91:ed:3c:f6:fb:7e:26:dc:99:a8:92:be:d9: f9:6b:b4:08:66:1e:81:89:ba:b7:ec:ee:b1:82:26:06:8b:3b: d7:d2:4b:3a:1c:13:5d:cd:33:52:3c:fb:22:ed:8b:82:96:ba: ff:d5:2a:b0:43:d9:61:26:4a:b1:ab:4d:5f:4c:78:36:e6:e6: 32:ed:40:6d:6b:67:57:6d:09:e3:81:ee:ce:d9:5a:d1:40:6a: ce:12:f7:2a:a6:ce:e1:f6:3d:34:1b:d4:a7:d9:d0:8b:10:9b: 20:45:c2:b5 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUKwRuQ44EX+URytELhN2oASOxhgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjA2MDUwNzE1NTlaFw0yNzA2MDQwNzIwNTlaMDMxMTAvBgNV BAMTKDFGRjlBMjA5QTdENDExOTJCRUQwN0NCOEJDNUYzMzhBNjlDNEI0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2z9QB3hznI/qGu/B93z8Gn/EH EcXHMJ3n2MkmObnqul7O1LGcHpN+wAwe/9V5mMfDLVFM0HmPPXk1q66UJXacDRyA MJsCv9PhIhHLs7szJpev4S+CZR5gZOzaKvrRypkunvKwLoFwGZW5B6JB2DcyoL1z 22H0Wl9xWdXgj6HrGSnvSNE7hARP9bhKxFnQYkeNaBO1g3SkI9mYMRWp5P2/jvSu c2nUDjrAG4iHZ/DE2HutrhLagqwKmIPuGb44uMy3gLBFz336Lmk8gWwbUgY4rw1j 89mHMFs5EzikrW0IhQr7ecRyQEej3+UXlPfPr9F8IEF+7Zn/LtgzS9dLMNGBAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUH/miCafUEZK+0Hy4vF8zimnEtBYwHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA3NTY0MTY5NjQyNjM5Mzc5LzAvMzIzNDMwMzAz YTM4Mzk2MzMwM2EzMTMwMzUzMTNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMyMzMz NzMyMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAInAEFEwDQYJKoZIhvcNAQELBQADggEBAII5cI/J /XVIPlPlBGSJrBjDOILiZNLU0B85ME4ZKPUwuf1ujpwAtghjHjB7gnj1je0gxE9L TIWOVLexE+DRrtU9ZwXubasQDUkys5ojwGBeFdwXr+ZrwCF62QFso+VIPVzawDd6 ZrtEcrJ4GDTROhI7qIx6EgCGj1lbM+Ffi11sUlUDj8I2PX8Ku+Sz5BbA/kH8esFl ke089vt+JtyZqJK+2flrtAhmHoGJurfs7rGCJgaLO9fSSzocE13NM1I8+yLti4KW uv/VKrBD2WEmSrGrTV9MeDbm5jLtQG1rZ1dtCeOB7s7ZWtFAas4S9yqmzuH2PTQb 1KfZ0IsQmyBFwrU= -----END CERTIFICATE-----Generated at Sun Jun 14 01:13:20 2026 by rpki-client