$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa File: 323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa (raw, json) Hash identifier: pZpdRX7n5J7x6Set2Y9xvxRBrhsl2gkcGem/wjyiuSQ= Subject key identifier: 29:B4:71:3A:88:99:BD:5A:60:2B:53:7E:1C:A6:BD:F0:E2:1E:AF:02 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 1EDDF8ABA694B91B5CCFE9BD618C4376B6A6F85F Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa Signing time: Fri 05 Jun 2026 07:23:17 +0000 ROA not before: Fri 05 Jun 2026 07:18:17 +0000 ROA not after: Fri 04 Jun 2027 07:23:17 +0000 asID: 37936 IP address blocks: 2400:89c0:1130::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:dd:f8:ab:a6:94:b9:1b:5c:cf:e9:bd:61:8c:43:76:b6:a6:f8:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Jun 5 07:18:17 2026 GMT Not After : Jun 4 07:23:17 2027 GMT Subject: CN=29B4713A8899BD5A602B537E1CA6BDF0E21EAF02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fd:1b:f0:b3:41:34:20:2f:b5:5b:d7:71:81: 26:5d:7e:c1:23:55:bc:5c:45:2f:dd:f6:5a:30:a5: 36:f3:b3:26:72:01:54:4c:d2:4a:4c:e1:30:82:51: 40:05:95:3b:3c:37:43:4e:14:84:50:3f:c8:0d:fc: 43:b7:9e:de:f3:fc:15:87:fe:42:7c:ac:8c:20:97: 59:22:31:dc:62:33:f8:9b:56:b5:77:d1:fa:f8:7f: 96:17:f7:ae:fc:93:55:be:46:59:ad:0f:b8:67:cb: 41:b0:5a:5c:82:94:13:6b:a7:ca:bd:54:8e:28:34: fe:87:77:85:d7:91:f1:3c:18:28:06:3a:ec:79:a7: 11:8f:55:3e:0d:57:d8:6a:a0:93:fc:28:91:af:06: a2:b4:46:3c:a3:a1:5a:15:9e:d0:19:75:fb:5b:d3: c7:9a:c5:aa:07:4d:e9:91:76:7d:dc:92:2e:a4:86: 20:68:91:8f:71:f1:d5:9c:3f:2d:e7:99:91:62:69: 97:80:12:57:da:8e:10:8f:5f:42:f5:3c:64:50:89: a5:a6:b6:3a:a2:94:6b:91:bc:e2:59:3e:54:dd:50: 07:92:7b:12:2d:c0:47:ad:13:d2:19:e7:0a:34:1b: 86:87:2f:85:9a:86:b1:10:cb:f9:3b:77:df:99:89: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:B4:71:3A:88:99:BD:5A:60:2B:53:7E:1C:A6:BD:F0:E2:1E:AF:02 X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a313133303a3a2f34342d3434203d3e203337393336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:89c0:1130::/44 Signature Algorithm: sha256WithRSAEncryption b3:18:b8:ed:8b:55:a7:ad:cd:1c:37:38:9a:b5:a6:c4:a3:7b: a7:c0:b5:a5:a4:15:1a:3a:1c:ef:20:72:70:e2:c7:5d:41:e7: 99:73:1d:18:c2:07:3c:c7:f2:d7:71:25:d5:56:2a:ad:ce:40: 6b:cd:4c:32:d0:b1:90:32:6f:5e:c9:42:d2:fc:e0:8d:38:ac: dc:90:ef:80:0a:9e:f5:fc:56:03:cb:78:7c:3a:18:30:d2:ca: d9:c2:a5:df:da:ed:33:6b:52:fc:6c:f8:3b:61:c2:e4:24:98: 77:59:19:01:76:b0:83:f9:54:37:d2:12:f3:6c:bd:af:3c:f1: ea:29:bd:0b:a9:f7:53:74:28:c6:56:18:b7:ea:f5:03:1f:23: 2c:f3:35:66:37:72:3e:51:d6:b8:5f:13:67:20:f2:d1:48:c4: 60:9f:1f:50:4e:26:59:9b:f0:30:9b:6b:9d:ff:5d:7e:3b:aa: 57:a8:b9:1a:61:7b:67:68:49:41:74:f3:70:ba:94:52:bd:0c: b6:70:3a:d6:f6:cc:87:76:57:bf:b1:f2:19:c7:8f:ee:83:ba: ca:b6:1c:7e:9b:7d:a3:c0:fd:7c:d2:02:24:71:c3:b8:75:dd: 3f:c3:25:17:2f:9d:25:5f:72:2b:80:b0:fe:8c:e2:01:53:5f: 37:54:52:7f -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUHt34q6aUuRtcz+m9YYxDdram+F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjA2MDUwNzE4MTdaFw0yNzA2MDQwNzIzMTdaMDMxMTAvBgNV BAMTKDI5QjQ3MTNBODg5OUJENUE2MDJCNTM3RTFDQTZCREYwRTIxRUFGMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9/Rvws0E0IC+1W9dxgSZdfsEj VbxcRS/d9lowpTbzsyZyAVRM0kpM4TCCUUAFlTs8N0NOFIRQP8gN/EO3nt7z/BWH /kJ8rIwgl1kiMdxiM/ibVrV30fr4f5YX9678k1W+RlmtD7hny0GwWlyClBNrp8q9 VI4oNP6Hd4XXkfE8GCgGOux5pxGPVT4NV9hqoJP8KJGvBqK0RjyjoVoVntAZdftb 08eaxaoHTemRdn3cki6khiBokY9x8dWcPy3nmZFiaZeAElfajhCPX0L1PGRQiaWm tjqilGuRvOJZPlTdUAeSexItwEetE9IZ5wo0G4aHL4WahrEQy/k7d9+Zia0nAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUKbRxOoiZvVpgK1N+HKa98OIerwIwHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA3NTY0MTY5NjQyNjM5Mzc5LzAvMzIzNDMwMzAz YTM4Mzk2MzMwM2EzMTMxMzMzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMzMzcz OTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwQkAInAETAwDQYJKoZIhvcNAQELBQADggEBALMYuO2L VaetzRw3OJq1psSje6fAtaWkFRo6HO8gcnDix11B55lzHRjCBzzH8tdxJdVWKq3O QGvNTDLQsZAyb17JQtL84I04rNyQ74AKnvX8VgPLeHw6GDDSytnCpd/a7TNrUvxs +DthwuQkmHdZGQF2sIP5VDfSEvNsva888eopvQup91N0KMZWGLfq9QMfIyzzNWY3 cj5R1rhfE2cg8tFIxGCfH1BOJlmb8DCba53/XX47qleouRphe2doSUF083C6lFK9 DLZwOtb2zId2V7+x8hnHj+6Dusq2HH6bfaPA/XzSAiRxw7h13T/DJRcvnSVfciuA sP6M4gFTXzdUUn8= -----END CERTIFICATE-----Generated at Sun Jun 14 04:58:02 2026 by rpki-client