$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1117472653142196251/0/323430353a313438303a333030303a3a2f34372d3438203d3e2034383337.roa File: 323430353a313438303a333030303a3a2f34372d3438203d3e2034383337.roa (raw, json) Hash identifier: 4Dw7HRRIgOyHjv4dEuE0xXLSlvoxMkFesbhMqToYmLA= Subject key identifier: 8D:36:92:E5:2D:7C:E1:D0:D3:18:E3:84:4E:50:E4:64:C7:C6:BF:CE Certificate issuer: /CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Certificate serial: 400CD0EB89C2CAA7FE11D41B7FE448DE5E895164 Authority key identifier: 9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/323430353a313438303a333030303a3a2f34372d3438203d3e2034383337.roa Signing time: Mon 15 Jun 2026 15:23:22 +0000 ROA not before: Mon 15 Jun 2026 15:18:22 +0000 ROA not after: Mon 14 Jun 2027 15:23:22 +0000 asID: 4837 IP address blocks: 2405:1480:3000::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:55:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:0c:d0:eb:89:c2:ca:a7:fe:11:d4:1b:7f:e4:48:de:5e:89:51:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9CDD899429A14223F030EC28602F57FC4CAC8F60 Validity Not Before: Jun 15 15:18:22 2026 GMT Not After : Jun 14 15:23:22 2027 GMT Subject: CN=8D3692E52D7CE1D0D318E3844E50E464C7C6BFCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:58:55:d6:20:4c:f8:f9:ba:e8:1a:ef:65:c7: 66:c5:49:4f:bb:83:05:00:b9:82:d4:86:c9:3b:cd: 29:da:0b:e5:bd:62:cc:42:d0:9f:ac:31:72:4f:a7: ea:6f:d5:90:9d:7c:b2:26:a9:02:5e:1b:9c:70:5c: 4f:8b:a8:27:22:61:f4:d8:ff:ef:01:53:8d:4a:db: af:d0:73:25:63:e0:2e:b5:d8:a3:33:1d:93:4d:1c: 83:48:06:a9:d1:0f:96:04:f5:3a:da:0f:8a:d8:85: 0c:fb:fc:58:0d:74:2a:01:42:59:09:fe:ad:86:4a: c3:13:d3:91:cc:f4:36:3d:61:26:09:6e:fd:b8:4a: b6:df:f5:22:94:bf:15:c8:3f:53:70:0e:cd:33:fd: 18:e4:3f:d1:3e:33:c3:42:ed:ea:d7:c0:11:52:8f: c0:6e:32:78:ee:0a:7a:4a:f7:7b:eb:18:69:23:91: b2:02:f3:a8:15:b0:e7:58:f8:a0:84:fd:98:38:21: 06:f4:2b:0f:93:ac:a4:90:39:03:f7:bc:15:93:63: 13:82:88:ce:62:70:47:4b:7b:e3:8a:36:e1:51:a7: 7a:88:91:c4:7a:c7:c2:b0:6d:0d:a7:01:1c:2a:aa: d1:3d:f8:8c:90:ce:76:8b:12:67:bf:07:72:9f:10: 23:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:36:92:E5:2D:7C:E1:D0:D3:18:E3:84:4E:50:E4:64:C7:C6:BF:CE X509v3 Authority Key Identifier: keyid:9C:DD:89:94:29:A1:42:23:F0:30:EC:28:60:2F:57:FC:4C:AC:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/9CDD899429A14223F030EC28602F57FC4CAC8F60.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9CDD899429A14223F030EC28602F57FC4CAC8F60.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1117472653142196251/0/323430353a313438303a333030303a3a2f34372d3438203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2405:1480:3000::/47 Signature Algorithm: sha256WithRSAEncryption 9f:b5:e2:72:0e:10:bf:5e:24:f5:f5:ef:4e:6e:7a:04:16:b4: 80:25:73:d9:3d:80:ad:0c:ed:c7:26:10:85:1c:92:39:5e:aa: 63:ab:1e:1e:6c:7c:d0:1a:e8:6d:04:a5:cd:47:24:6e:10:d0: 87:1b:2f:0d:35:e4:45:6e:97:e4:b4:d8:4d:18:54:ee:15:c4: cd:c6:3b:87:21:fd:b8:aa:ea:de:c3:50:5a:b0:3d:a3:24:14: 4b:8a:d8:d9:e8:6e:e1:af:c2:e0:3f:6e:6d:d1:e8:ff:92:07: 06:27:1b:36:fe:df:03:9e:77:2f:64:a1:38:77:c0:b0:00:41: fd:8f:cf:d6:c3:b6:1c:74:f1:27:16:09:10:41:96:3e:5f:71: 83:f2:ac:66:c3:83:9d:6b:39:fb:1a:77:42:3f:fc:d8:cd:8f: 1a:18:d4:39:08:9d:a3:68:93:a9:18:33:93:a2:d9:e1:67:6c: ab:07:dc:f2:07:b4:11:5c:51:85:23:e0:ee:62:37:6a:80:99: 0d:db:49:10:cd:ac:a1:f5:07:84:c5:a1:e6:2e:60:e5:25:c6: 6c:c6:f3:ec:15:f1:83:78:4b:54:3a:97:5a:84:60:23:f7:9e: 8c:e4:5f:5a:9a:82:ef:1b:26:d7:23:5b:49:01:0e:28:b7:65: 1c:31:d1:11 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUQAzQ64nCyqf+EdQbf+RI3l6JUWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0 Q0FDOEY2MDAeFw0yNjA2MTUxNTE4MjJaFw0yNzA2MTQxNTIzMjJaMDMxMTAvBgNV BAMTKDhEMzY5MkU1MkQ3Q0UxRDBEMzE4RTM4NDRFNTBFNDY0QzdDNkJGQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKWFXWIEz4+broGu9lx2bFSU+7 gwUAuYLUhsk7zSnaC+W9YsxC0J+sMXJPp+pv1ZCdfLImqQJeG5xwXE+LqCciYfTY /+8BU41K26/QcyVj4C612KMzHZNNHINIBqnRD5YE9TraD4rYhQz7/FgNdCoBQlkJ /q2GSsMT05HM9DY9YSYJbv24Srbf9SKUvxXIP1NwDs0z/RjkP9E+M8NC7erXwBFS j8BuMnjuCnpK93vrGGkjkbIC86gVsOdY+KCE/Zg4IQb0Kw+TrKSQOQP3vBWTYxOC iM5icEdLe+OKNuFRp3qIkcR6x8KwbQ2nARwqqtE9+IyQznaLEme/B3KfECMrAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQUjTaS5S184dDTGOOETlDkZMfGv84wHwYDVR0j BBgwFoAUnN2JlCmhQiPwMOwoYC9X/Eysj2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx NzQ3MjY1MzE0MjE5NjI1MS8wLzlDREQ4OTk0MjlBMTQyMjNGMDMwRUMyODYwMkY1 N0ZDNENBQzhGNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOUNERDg5OTQyOUExNDIyM0YwMzBFQzI4NjAyRjU3RkM0Q0FDOEY2MC5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTE3NDcyNjUzMTQyMTk2MjUxLzAvMzIzNDMwMzUz YTMxMzQzODMwM2EzMzMwMzAzMDNhM2EyZjM0MzcyZDM0MzgyMDNkM2UyMDM0Mzgz MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcBJAUUgDAAMA0GCSqGSIb3DQEBCwUAA4IBAQCfteJyDhC/ XiT19e9ObnoEFrSAJXPZPYCtDO3HJhCFHJI5Xqpjqx4ebHzQGuhtBKXNRyRuENCH Gy8NNeRFbpfktNhNGFTuFcTNxjuHIf24qurew1BasD2jJBRLitjZ6G7hr8LgP25t 0ej/kgcGJxs2/t8DnncvZKE4d8CwAEH9j8/Ww7YcdPEnFgkQQZY+X3GD8qxmw4Od azn7GndCP/zYzY8aGNQ5CJ2jaJOpGDOTotnhZ2yrB9zyB7QRXFGFI+DuYjdqgJkN 20kQzayh9QeExaHmLmDlJcZsxvPsFfGDeEtUOpdahGAj956M5F9amoLvGybXI1tJ AQ4ot2UcMdER -----END CERTIFICATE-----Generated at Wed Jun 17 10:04:20 2026 by rpki-client