$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS0.roa File: AS0.roa (raw, json) Hash identifier: Tnh8WMSLJSGCaAxb/VZeyXb0gUX1GKQVaIvE4qh0adg= Subject key identifier: B3:DF:0F:7E:ED:CD:FF:9B:0B:E9:16:62:9E:6B:6A:A7:60:77:9B:07 Certificate issuer: /CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Certificate serial: 6EEA3D9EB89AAEAC320AB3FC25D6CF5EFC19E177 Authority key identifier: AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS0.roa Signing time: Sat 30 May 2026 16:14:42 +0000 ROA not before: Sat 30 May 2026 16:09:42 +0000 ROA not after: Sat 29 May 2027 16:14:42 +0000 asID: 0 IP address blocks: 2401:8380::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 18:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ea:3d:9e:b8:9a:ae:ac:32:0a:b3:fc:25:d6:cf:5e:fc:19:e1:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE053C2402CB47FCF6E875C30756E16C9742BFE3 Validity Not Before: May 30 16:09:42 2026 GMT Not After : May 29 16:14:42 2027 GMT Subject: CN=B3DF0F7EEDCDFF9B0BE916629E6B6AA760779B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3c:6e:58:69:d8:b3:49:b3:20:c0:f9:55:57: 2e:5c:15:94:cd:c3:b9:6a:83:e4:52:75:a4:cf:00: 3d:d1:c6:ae:00:a2:06:d7:34:48:38:8c:4a:06:bc: 2e:93:87:a8:1b:f6:98:ce:52:24:a5:23:2f:c1:a3: 9e:ac:a5:b2:63:ac:1e:37:36:10:c4:a8:1b:79:83: 6a:4e:43:74:56:3e:a2:38:fb:d8:4a:85:af:67:c1: 72:c9:6b:3a:11:c0:af:88:2a:0a:70:d1:ad:fc:1c: 37:cd:85:10:72:00:43:3b:01:12:99:c3:7c:4a:8f: bb:1d:56:c1:dc:ed:c1:f5:8f:de:4e:d1:2b:78:d8: 0d:fd:a1:ac:61:8e:75:9f:07:82:05:8f:7c:38:15: 6a:ba:89:69:83:5e:4c:aa:25:b2:2b:10:ce:c7:bb: 17:13:fe:21:a1:35:cf:cb:d3:74:77:b6:00:36:f2: d8:5c:8c:b8:0a:07:06:bb:4a:ca:77:89:a7:f8:e4: a3:35:4f:f2:8e:f1:d8:f9:da:4b:18:b5:60:02:3c: f3:89:bc:1b:7b:ce:a1:41:94:4f:f1:d0:fd:e7:65: 96:9e:8d:a7:e3:18:18:1c:6a:e7:d8:43:97:4b:cd: cb:ef:dd:5d:4b:4f:fd:5c:5f:db:80:17:b6:30:33: ff:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:DF:0F:7E:ED:CD:FF:9B:0B:E9:16:62:9E:6B:6A:A7:60:77:9B:07 X509v3 Authority Key Identifier: keyid:AE:05:3C:24:02:CB:47:FC:F6:E8:75:C3:07:56:E1:6C:97:42:BF:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AE053C2402CB47FCF6E875C30756E16C9742BFE3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE053C2402CB47FCF6E875C30756E16C9742BFE3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1110934764212191253/0/AS0.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8380::/32 Signature Algorithm: sha256WithRSAEncryption 59:59:33:20:7d:54:f7:7b:96:c0:e6:a0:b5:16:a1:8b:8a:aa: 0e:86:ad:98:49:26:ee:82:60:f7:4b:0f:f8:72:01:9b:c6:5d: 9d:89:df:a6:4f:da:05:15:29:ce:c2:55:32:67:f8:14:66:6d: ff:68:28:01:18:7a:3f:e5:dd:2f:6c:4d:98:a9:f6:8d:2d:6a: d9:fc:41:c3:55:d5:2d:45:25:a4:90:63:53:4a:98:c9:5f:5e: af:45:6d:2e:58:e7:82:e2:1c:3d:5c:f4:61:c5:07:1e:d1:5b: 2f:3b:5b:b2:95:2d:d7:fc:c9:5e:4a:c3:e5:44:d3:e3:95:16: d0:17:a6:3d:52:b1:31:74:e1:0b:87:fb:b7:c0:89:7e:d0:96: bc:3a:9f:46:9c:23:80:f5:12:c6:0c:0e:c2:54:2d:18:2c:38: fb:1b:65:27:1c:d3:78:73:63:d4:6f:05:6b:40:cf:08:84:89: 7a:b8:f0:c9:79:b2:c8:e8:3c:94:20:e9:b2:2c:3e:49:a3:f0: 7d:2f:b2:a5:c2:6c:ac:a7:fc:cc:d9:aa:26:17:d4:36:a3:71: 34:d9:53:3e:7c:fb:31:c1:bb:94:06:12:5b:e4:7e:72:ac:9c: 3b:c6:31:22:84:60:73:f4:19:42:44:f0:4b:2f:93:03:5d:e3: f3:eb:c0:7e -----BEGIN CERTIFICATE----- MIIE1jCCA76gAwIBAgIUbuo9nriarqwyCrP8JdbPXvwZ4XcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5 NzQyQkZFMzAeFw0yNjA1MzAxNjA5NDJaFw0yNzA1MjkxNjE0NDJaMDMxMTAvBgNV BAMTKEIzREYwRjdFRURDREZGOUIwQkU5MTY2MjlFNkI2QUE3NjA3NzlCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0PG5YadizSbMgwPlVVy5cFZTN w7lqg+RSdaTPAD3Rxq4AogbXNEg4jEoGvC6Th6gb9pjOUiSlIy/Bo56spbJjrB43 NhDEqBt5g2pOQ3RWPqI4+9hKha9nwXLJazoRwK+IKgpw0a38HDfNhRByAEM7ARKZ w3xKj7sdVsHc7cH1j95O0St42A39oaxhjnWfB4IFj3w4FWq6iWmDXkyqJbIrEM7H uxcT/iGhNc/L03R3tgA28thcjLgKBwa7Ssp3iaf45KM1T/KO8dj52ksYtWACPPOJ vBt7zqFBlE/x0P3nZZaejafjGBgcaufYQ5dLzcvv3V1LT/1cX9uAF7YwM//lAgMB AAGjggHgMIIB3DAdBgNVHQ4EFgQUs98Pfu3N/5sL6RZinmtqp2B3mwcwHwYDVR0j BBgwFoAUrgU8JALLR/z26HXDB1bhbJdCv+MwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx MDkzNDc2NDIxMjE5MTI1My8wL0FFMDUzQzI0MDJDQjQ3RkNGNkU4NzVDMzA3NTZF MTZDOTc0MkJGRTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwNTNDMjQwMkNCNDdGQ0Y2RTg3NUMzMDc1NkUxNkM5NzQyQkZFMy5jZXIw WQYIKwYBBQUHAQsETTBLMEkGCCsGAQUFBzALhj1yc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTExMTA5MzQ3NjQyMTIxOTEyNTMvMC9BUzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAYOAMA0GCSqGSIb3DQEBCwUAA4IBAQBZWTMgfVT3e5bA5qC1FqGLiqoOhq2Y SSbugmD3Sw/4cgGbxl2did+mT9oFFSnOwlUyZ/gUZm3/aCgBGHo/5d0vbE2YqfaN LWrZ/EHDVdUtRSWkkGNTSpjJX16vRW0uWOeC4hw9XPRhxQce0VsvO1uylS3X/Mle SsPlRNPjlRbQF6Y9UrExdOELh/u3wIl+0Ja8Op9GnCOA9RLGDA7CVC0YLDj7G2Un HNN4c2PUbwVrQM8IhIl6uPDJebLI6DyUIOmyLD5Jo/B9L7Klwmysp/zM2aomF9Q2 o3E02VM+fPsxwbuUBhJb5H5yrJw7xjEihGBz9BlCRPBLL5MDXePz68B+ -----END CERTIFICATE-----Generated at Sat Jun 13 10:49:19 2026 by rpki-client