$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa File: 323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa (raw, json) Hash identifier: DVuPQTG2a1xKHc1YeJUvNKLGhHsYAEkYceKnBGxz1Mo= Subject key identifier: 4C:F6:F0:A4:92:DF:FE:63:6D:F3:11:28:87:C4:34:16:C6:4C:80:B5 Certificate issuer: /CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Certificate serial: 667374BA9AC9EBF874C44492B3A3CD0FEAE4EB12 Authority key identifier: 3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa Signing time: Fri 05 Jun 2026 07:22:56 +0000 ROA not before: Fri 05 Jun 2026 07:17:56 +0000 ROA not after: Fri 04 Jun 2027 07:22:56 +0000 asID: 37936 IP address blocks: 2400:89c0:6100::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 16:02:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:73:74:ba:9a:c9:eb:f8:74:c4:44:92:b3:a3:cd:0f:ea:e4:eb:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3E5989F72DCA1979D1DD9663C575ED15BFA198D5 Validity Not Before: Jun 5 07:17:56 2026 GMT Not After : Jun 4 07:22:56 2027 GMT Subject: CN=4CF6F0A492DFFE636DF3112887C43416C64C80B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:53:de:c8:8a:53:b6:7a:90:53:79:26:b8:b4: af:44:95:9d:74:1e:22:b5:a8:78:db:b6:de:49:5d: 64:ce:fb:9f:93:fd:47:9f:bb:9f:23:96:9f:d3:d5: 1e:52:7c:c8:0d:f4:52:22:5d:77:c3:c2:d9:ec:5e: 63:be:53:14:72:a3:8c:96:70:7c:11:2c:4f:2b:ac: ab:42:e3:65:da:01:1f:fd:dc:81:10:ed:04:da:61: ac:d5:3e:3d:2d:06:c9:b3:32:6d:f4:be:b9:15:83: c2:07:7f:49:8f:96:3d:df:61:f2:5c:b1:ab:80:ba: ed:ea:4d:2e:12:bc:e1:21:31:53:dc:cb:ea:a9:aa: 0c:c4:0c:3f:08:ef:c3:06:98:5f:af:09:c8:f3:2e: 5f:9e:c9:b9:91:a9:0c:1b:59:01:12:53:65:f8:a8: e0:21:b9:1d:8f:6c:0a:0d:ea:e9:c2:7d:29:81:29: 02:f9:87:d0:b4:87:22:99:47:85:de:dd:d9:5f:f4: 2c:60:e6:64:28:65:05:59:2c:05:d4:7a:bf:61:2a: 4d:36:e1:8a:8a:06:80:b1:53:65:09:88:d5:e6:30: 44:b3:c2:68:ed:5a:01:b9:52:89:ad:f5:f2:5e:5c: 59:5e:72:4c:33:80:a5:e7:15:57:4d:d4:3a:df:5b: 9a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F6:F0:A4:92:DF:FE:63:6D:F3:11:28:87:C4:34:16:C6:4C:80:B5 X509v3 Authority Key Identifier: keyid:3E:59:89:F7:2D:CA:19:79:D1:DD:96:63:C5:75:ED:15:BF:A1:98:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3E5989F72DCA1979D1DD9663C575ED15BFA198D5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107564169642639379/0/323430303a383963303a363130303a3a2f34382d3438203d3e203337393336.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:89c0:6100::/48 Signature Algorithm: sha256WithRSAEncryption 5d:6f:3d:fb:42:8c:fc:af:7d:14:bd:65:07:89:22:d3:99:d0: f7:89:8d:ba:90:e5:d7:4a:df:6e:34:67:07:ee:f9:06:9b:ec: f0:69:24:7a:58:dc:6d:91:42:bd:aa:c6:dc:4a:46:be:83:78: d0:30:8e:83:b5:aa:39:24:6f:20:57:da:e3:04:96:f6:74:30: 2a:52:aa:d4:93:26:09:9c:f2:3c:f6:de:d6:54:b0:3f:28:9d: c1:89:50:91:2b:92:10:bc:37:73:f6:ec:c8:40:21:d4:e7:ca: 7b:29:db:40:c5:ee:e8:5c:5b:3c:97:46:9b:c8:e1:b4:c6:7f: 1b:74:0f:67:35:1e:f3:1d:e4:ca:36:cc:07:93:ba:2b:68:93: 80:3c:db:ef:2e:30:13:e8:fe:77:f1:c6:2f:c6:49:77:d0:3d: 96:0a:49:d3:7e:9d:b3:58:2a:01:38:fd:a7:cc:b1:29:73:7d: fb:dc:14:24:52:c0:b7:98:ce:0d:95:ad:b6:d1:dc:04:3e:cc: fa:8b:84:02:ad:61:c8:de:92:da:9c:53:6a:9f:40:dd:14:1d: 33:56:49:32:71:0e:9e:d8:13:b6:d8:05:4c:98:8d:95:b6:17: 65:e9:6a:96:d7:5d:c7:5b:fc:78:52:ea:bf:ed:07:9a:9c:5e: c4:dd:fb:1c -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgIUZnN0uprJ6/h0xESSs6PND+rk6xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVC RkExOThENTAeFw0yNjA2MDUwNzE3NTZaFw0yNzA2MDQwNzIyNTZaMDMxMTAvBgNV BAMTKDRDRjZGMEE0OTJERkZFNjM2REYzMTEyODg3QzQzNDE2QzY0QzgwQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+U97IilO2epBTeSa4tK9ElZ10 HiK1qHjbtt5JXWTO+5+T/Uefu58jlp/T1R5SfMgN9FIiXXfDwtnsXmO+UxRyo4yW cHwRLE8rrKtC42XaAR/93IEQ7QTaYazVPj0tBsmzMm30vrkVg8IHf0mPlj3fYfJc sauAuu3qTS4SvOEhMVPcy+qpqgzEDD8I78MGmF+vCcjzLl+eybmRqQwbWQESU2X4 qOAhuR2PbAoN6unCfSmBKQL5h9C0hyKZR4Xe3dlf9Cxg5mQoZQVZLAXUer9hKk02 4YqKBoCxU2UJiNXmMESzwmjtWgG5Uomt9fJeXFleckwzgKXnFVdN1DrfW5r1AgMB AAGjggIhMIICHTAdBgNVHQ4EFgQUTPbwpJLf/mNt8xEoh8Q0FsZMgLUwHwYDVR0j BBgwFoAUPlmJ9y3KGXnR3ZZjxXXtFb+hmNUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NzU2NDE2OTY0MjYzOTM3OS8wLzNFNTk4OUY3MkRDQTE5NzlEMUREOTY2M0M1NzVF RDE1QkZBMTk4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvM0U1OTg5RjcyRENBMTk3OUQxREQ5NjYzQzU3NUVEMTVCRkExOThENS5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA3NTY0MTY5NjQyNjM5Mzc5LzAvMzIzNDMwMzAz YTM4Mzk2MzMwM2EzNjMxMzAzMDNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMzMzcz OTMzMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcB Af8EEzARMA8EAgACMAkDBwAkAInAYQAwDQYJKoZIhvcNAQELBQADggEBAF1vPftC jPyvfRS9ZQeJItOZ0PeJjbqQ5ddK3240Zwfu+Qab7PBpJHpY3G2RQr2qxtxKRr6D eNAwjoO1qjkkbyBX2uMElvZ0MCpSqtSTJgmc8jz23tZUsD8oncGJUJErkhC8N3P2 7MhAIdTnynsp20DF7uhcWzyXRpvI4bTGfxt0D2c1HvMd5Mo2zAeTuitok4A82+8u MBPo/nfxxi/GSXfQPZYKSdN+nbNYKgE4/afMsSlzffvcFCRSwLeYzg2VrbbR3AQ+ zPqLhAKtYcjektqcU2qfQN0UHTNWSTJxDp7YE7bYBUyYjZW2F2XpapbXXcdb/HhS 6r/tB5qcXsTd+xw= -----END CERTIFICATE-----Generated at Sun Jun 14 04:57:53 2026 by rpki-client