$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36382e37392e302e302f31382d3234203d3e20313335363239.roa File: 36382e37392e302e302f31382d3234203d3e20313335363239.roa (raw, json) Hash identifier: xBimZBgddQkxVZ4hekblEfEIhExEpMzz0u8+4zAsM8o= Subject key identifier: 9E:A9:AC:0A:EE:DF:F7:35:7A:F0:CC:D6:60:83:0C:C2:55:8A:51:3B Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Certificate serial: 2C3DF83C844BA917F4682F8B9BD584FA824EF10B Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36382e37392e302e302f31382d3234203d3e20313335363239.roa Signing time: Wed 18 Mar 2026 07:49:42 +0000 ROA not before: Wed 18 Mar 2026 07:44:42 +0000 ROA not after: Wed 17 Mar 2027 07:49:42 +0000 asID: 135629 IP address blocks: 68.79.0.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 22:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:3d:f8:3c:84:4b:a9:17:f4:68:2f:8b:9b:d5:84:fa:82:4e:f1:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D Validity Not Before: Mar 18 07:44:42 2026 GMT Not After : Mar 17 07:49:42 2027 GMT Subject: CN=9EA9AC0AEEDFF7357AF0CCD660830CC2558A513B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:04:1f:28:68:ac:6c:28:85:3d:27:5c:76: 7d:7c:9f:81:ca:46:68:26:ad:63:0b:9a:21:31:96: aa:f4:d4:f8:c4:23:f3:d3:a4:6d:53:a1:6d:fb:49: 6d:20:18:87:c5:f8:39:37:cc:85:2e:89:a1:b1:ee: 98:7b:f6:11:79:e0:e7:fb:a1:16:c0:a6:4d:c1:91: c6:c0:7e:3a:e2:90:28:eb:3f:21:53:3a:f4:c5:8d: 19:5c:bf:87:57:15:56:17:25:4c:be:d2:b5:93:50: 8c:e2:aa:ce:46:2e:b8:30:8a:de:d8:ba:55:d0:4b: 65:2d:76:5b:4a:10:19:6c:0e:b6:06:e3:ed:80:91: 75:77:80:98:45:58:de:41:cb:f5:46:00:d8:e7:a3: e4:00:ac:f3:29:ba:a9:e6:82:ac:d7:50:f1:f7:88: 57:6a:61:15:4e:cf:7c:8b:58:de:e0:58:32:cf:3f: 1f:7d:b4:31:1a:f4:fe:84:3d:5a:78:e9:ce:82:0f: 74:00:a0:57:51:bc:1a:2b:d3:6f:1e:f5:29:23:7a: 4a:2a:3e:72:40:27:d4:02:79:55:3f:92:5d:23:eb: ee:14:10:0b:cb:a1:b6:f5:b3:af:c9:e0:b3:53:12: f7:82:b1:cc:46:2d:30:46:7b:3a:f7:69:da:81:6e: ca:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A9:AC:0A:EE:DF:F7:35:7A:F0:CC:D6:60:83:0C:C2:55:8A:51:3B X509v3 Authority Key Identifier: keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36382e37392e302e302f31382d3234203d3e20313335363239.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 68.79.0.0/18 Signature Algorithm: sha256WithRSAEncryption 02:5e:df:7d:81:c2:89:e3:9e:d4:1a:53:43:f3:4c:42:de:18: 47:df:1e:e2:fb:a4:6b:ff:78:65:5b:27:a1:25:fd:9f:4c:95: 6a:b7:fc:ea:2d:70:94:2e:0b:df:37:39:92:24:50:98:96:40: 5e:25:3b:28:ad:05:2f:59:d7:47:f7:a5:8f:8c:19:9f:d7:e8: 60:b7:a3:dd:4b:c9:65:f4:0f:ee:43:38:c6:d1:9e:1b:90:66: e0:8a:ba:67:c8:d4:09:da:13:b5:3e:58:70:a7:98:4d:49:7b: c0:96:6f:be:88:28:33:08:f5:e8:54:9e:c6:5d:e8:49:ac:9d: f8:55:97:46:59:e3:3c:ac:3f:25:5f:a8:1d:2d:fe:ad:1b:95: e9:17:56:de:56:a4:f4:af:cb:23:4e:22:b6:ba:86:69:87:3b: 86:ca:9a:7d:02:13:4e:cc:98:b9:c0:c7:f9:8d:88:b5:35:15: db:e6:d7:eb:e5:26:13:8b:3e:7c:87:d9:6f:b2:91:60:47:af: 51:d5:91:9f:77:31:fa:84:82:03:42:29:68:1b:da:de:ea:4b: fc:28:10:a1:ff:de:2b:b6:bc:eb:74:36:5e:84:9a:b5:45:ec: 9d:25:84:e0:50:47:71:3a:b2:04:f4:d8:b3:6d:ab:97:32:4f: 6d:dd:c6:6a -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIULD34PIRLqRf0aC+Lm9WE+oJO8QswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0 NkE3REY2RDAeFw0yNjAzMTgwNzQ0NDJaFw0yNzAzMTcwNzQ5NDJaMDMxMTAvBgNV BAMTKDlFQTlBQzBBRUVERkY3MzU3QUYwQ0NENjYwODMwQ0MyNTU4QTUxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWgQfKGisbCiFPSdcdn18n4HK RmgmrWMLmiExlqr01PjEI/PTpG1ToW37SW0gGIfF+Dk3zIUuiaGx7ph79hF54Of7 oRbApk3BkcbAfjrikCjrPyFTOvTFjRlcv4dXFVYXJUy+0rWTUIziqs5GLrgwit7Y ulXQS2UtdltKEBlsDrYG4+2AkXV3gJhFWN5By/VGANjno+QArPMpuqnmgqzXUPH3 iFdqYRVOz3yLWN7gWDLPPx99tDEa9P6EPVp46c6CD3QAoFdRvBor028e9Skjekoq PnJAJ9QCeVU/kl0j6+4UEAvLobb1s6/J4LNTEveCscxGLTBGezr3adqBbsppAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUnqmsCu7f9zV68MzWYIMMwlWKUTswHwYDVR0j BBgwFoAUukQ8/aQDc+PyehS0FOwkikan320wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDk4MjQwMy8xL0JBNDQzQ0ZEQTQwMzczRTNGMjdBMTRCNDE0RUMy NDhBNDZBN0RGNkQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQkE0NDNDRkRBNDAzNzNFM0YyN0ExNEI0MTRFQzI0OEE0NkE3REY2RC5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0OTgyNDAzLzEvMzYzODJlMzczOTJl MzAyZTMwMmYzMTM4MmQzMjM0MjAzZDNlMjAzMTMzMzUzNjMyMzkucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAZETwAwDQYJKoZIhvcNAQELBQADggEBAAJe332BwonjntQaU0PzTELeGEffHuL7 pGv/eGVbJ6El/Z9MlWq3/OotcJQuC983OZIkUJiWQF4lOyitBS9Z10f3pY+MGZ/X 6GC3o91LyWX0D+5DOMbRnhuQZuCKumfI1AnaE7U+WHCnmE1Je8CWb76IKDMI9ehU nsZd6EmsnfhVl0ZZ4zysPyVfqB0t/q0blekXVt5WpPSvyyNOIra6hmmHO4bKmn0C E07MmLnAx/mNiLU1Fdvm1+vlJhOLPnyH2W+ykWBHr1HVkZ93MfqEggNCKWgb2t7q S/woEKH/3iu2vOt0Nl6EmrVF7J0lhOBQR3E6sgT02LNtq5cyT23dxmo= -----END CERTIFICATE-----Generated at Thu Mar 26 15:09:06 2026 by rpki-client