$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa File: 323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa (raw, json) Hash identifier: w50XoZCG8gAt2gnABtJHuYcASAm8HlMg8e0ZdXH3wP0= Subject key identifier: 14:CF:00:70:CA:3B:6B:4A:08:BC:5E:16:8F:CD:F3:D4:AF:20:7B:F8 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 1B0B9F4C8C3B3B45A6B4D1EF224789D4F0738574 Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa Signing time: Fri 05 Jun 2026 07:20:02 +0000 ROA not before: Fri 05 Jun 2026 07:15:02 +0000 ROA not after: Fri 04 Jun 2027 07:20:02 +0000 asID: 37936 IP address blocks: 2400:89c0:3010::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:0b:9f:4c:8c:3b:3b:45:a6:b4:d1:ef:22:47:89:d4:f0:73:85:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Jun 5 07:15:02 2026 GMT Not After : Jun 4 07:20:02 2027 GMT Subject: CN=14CF0070CA3B6B4A08BC5E168FCDF3D4AF207BF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6e:e5:4d:58:cd:ee:d3:ab:15:bb:ad:d0:ec: 64:68:9e:92:8c:af:47:c4:02:a3:9c:72:d0:90:6d: c4:f9:9c:82:6b:ba:9a:39:ff:44:9b:df:29:85:28: c7:d6:33:9d:e8:2c:8e:1c:68:c9:71:31:f1:b6:05: 17:de:0f:91:20:c6:c3:94:b4:24:1d:7c:b5:e0:5f: 8a:f9:d4:bd:18:3b:a5:ee:56:81:d5:0d:46:aa:11: e6:c1:d1:7c:11:bd:73:25:b7:8d:1e:66:e9:eb:dc: c6:b2:e3:84:01:4d:80:b7:09:61:c2:73:ce:5a:6b: 3f:fe:be:b2:08:02:7b:2a:55:29:b3:71:a9:7f:65: a1:c9:d2:0b:03:34:2a:1b:a0:21:e5:d9:f6:9a:83: ea:87:71:d7:8e:99:c7:85:b6:9b:0a:9e:1a:0d:c0: 63:1e:9a:0f:b2:6a:31:f9:e3:67:29:76:b0:9c:31: ee:4a:7e:e6:b7:41:21:b3:bc:76:e1:c4:b9:0a:6a: 13:fc:ab:f5:42:e2:a2:76:26:03:35:68:06:2b:22: 08:17:26:ab:8e:53:53:53:45:33:b1:29:1b:b2:d8: 64:0a:55:64:e0:39:f2:ce:ac:60:19:4d:8e:89:8d: 88:9b:58:f1:c4:d3:7a:b3:b2:34:e8:f5:24:1e:33: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:CF:00:70:CA:3B:6B:4A:08:BC:5E:16:8F:CD:F3:D4:AF:20:7B:F8 X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a333031303a3a2f34342d3434203d3e203337393336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:89c0:3010::/44 Signature Algorithm: sha256WithRSAEncryption 14:12:be:ca:01:18:ee:7f:c5:27:58:a9:90:08:d8:ee:45:8f: 83:69:5b:5c:c0:d6:bd:42:ed:2f:28:c2:76:d8:36:69:10:59: 65:4d:88:a7:18:d9:57:d8:91:e8:7b:ee:57:a4:ce:16:e2:0a: ac:57:66:3f:48:06:91:f8:eb:98:16:60:76:35:c6:c8:e4:b6: 20:15:4e:fa:12:4f:6b:70:b9:f4:09:cb:c9:f7:cb:68:12:f5: a1:52:1a:ee:9e:51:93:b0:2e:19:83:26:34:79:ab:2f:2b:72: 09:cd:da:12:e1:85:1e:64:58:f3:cc:9d:12:f9:45:10:cb:92: 27:5d:10:a0:03:d7:0c:7d:2a:bd:08:2a:66:7d:2a:a9:91:8b: 3f:10:ea:11:aa:11:1a:c5:a0:12:94:8d:16:ae:29:99:33:49: 95:2b:df:26:aa:1e:cf:d7:e0:45:4b:5d:8a:48:56:4a:de:37: de:53:19:6d:e7:de:9a:6b:68:cf:56:4a:c6:9e:b8:e1:5c:75: 3f:8b:9e:b8:c5:e0:4a:a2:60:66:ef:9a:80:b6:39:8f:dd:00: be:40:18:07:4a:2f:e9:a2:49:62:c5:a7:60:9e:01:b7:ad:1a: e4:35:35:ff:ab:3f:aa:30:0a:ba:e8:94:90:2d:6c:bc:13:8c: 84:be:24:48 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUGwufTIw7O0WmtNHvIkeJ1PBzhXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjA2MDUwNzE1MDJaFw0yNzA2MDQwNzIwMDJaMDMxMTAvBgNV BAMTKDE0Q0YwMDcwQ0EzQjZCNEEwOEJDNUUxNjhGQ0RGM0Q0QUYyMDdCRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbuVNWM3u06sVu63Q7GRonpKM r0fEAqOcctCQbcT5nIJrupo5/0Sb3ymFKMfWM53oLI4caMlxMfG2BRfeD5EgxsOU tCQdfLXgX4r51L0YO6XuVoHVDUaqEebB0XwRvXMlt40eZunr3May44QBTYC3CWHC c85aaz/+vrIIAnsqVSmzcal/ZaHJ0gsDNCoboCHl2faag+qHcdeOmceFtpsKnhoN wGMemg+yajH542cpdrCcMe5Kfua3QSGzvHbhxLkKahP8q/VC4qJ2JgM1aAYrIggX JquOU1NTRTOxKRuy2GQKVWTgOfLOrGAZTY6JjYibWPHE03qzsjTo9SQeMzLHAgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUFM8AcMo7a0oIvF4Wj83z1K8ge/gwHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA3NTY0MTY5NjQyNjM5Mzc5LzAvMzIzNDMwMzAz YTM4Mzk2MzMwM2EzMzMwMzEzMDNhM2EyZjM0MzQyZDM0MzQyMDNkM2UyMDMzMzcz OTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwQkAInAMBAwDQYJKoZIhvcNAQELBQADggEBABQSvsoB GO5/xSdYqZAI2O5Fj4NpW1zA1r1C7S8ownbYNmkQWWVNiKcY2VfYkeh77lekzhbi CqxXZj9IBpH465gWYHY1xsjktiAVTvoST2twufQJy8n3y2gS9aFSGu6eUZOwLhmD JjR5qy8rcgnN2hLhhR5kWPPMnRL5RRDLkiddEKAD1wx9Kr0IKmZ9KqmRiz8Q6hGq ERrFoBKUjRauKZkzSZUr3yaqHs/X4EVLXYpIVkreN95TGW3n3ppraM9WSsaeuOFc dT+LnrjF4EqiYGbvmoC2OY/dAL5AGAdKL+miSWLFp2CeAbetGuQ1Nf+rP6owCrro lJAtbLwTjIS+JEg= -----END CERTIFICATE-----Generated at Sun Jun 14 04:57:28 2026 by rpki-client