$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330347061249/0/323430323a663863303a323a3a2f34382d3438203d3e20313334373733.roa File: 323430323a663863303a323a3a2f34382d3438203d3e20313334373733.roa (raw, json) Hash identifier: NC3kwRRIQNcLlxC9N3zlPID4fWIEh99q9pHOhHDD2fc= Subject key identifier: 76:8D:D1:96:B0:CD:19:E3:19:57:48:9B:E4:E1:6C:4D:2B:6A:F5:AE Certificate issuer: /CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Certificate serial: 79BF4A45B5615659115C1154DD0E49CA597CEEEF Authority key identifier: 45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/323430323a663863303a323a3a2f34382d3438203d3e20313334373733.roa Signing time: Mon 27 Apr 2026 08:06:16 +0000 ROA not before: Mon 27 Apr 2026 08:01:16 +0000 ROA not after: Mon 26 Apr 2027 08:06:16 +0000 asID: 134773 IP address blocks: 2402:f8c0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:bf:4a:45:b5:61:56:59:11:5c:11:54:dd:0e:49:ca:59:7c:ee:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6 Validity Not Before: Apr 27 08:01:16 2026 GMT Not After : Apr 26 08:06:16 2027 GMT Subject: CN=768DD196B0CD19E31957489BE4E16C4D2B6AF5AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:f9:76:6f:26:ef:f6:3b:a3:f7:7b:38:b9: 84:1b:76:78:ae:a9:18:7d:05:92:62:63:c8:44:ac: 2d:de:d0:40:3c:86:d0:9e:97:94:09:25:c8:cf:d0: 77:c4:be:e2:5e:2e:0e:80:a5:62:c5:1c:f3:ef:df: 40:60:ac:09:06:33:a7:58:d9:0e:55:87:bf:25:b2: ef:36:48:9e:9a:cd:ee:e2:46:88:a4:85:aa:17:3d: 00:0a:23:65:35:96:36:b2:ab:66:2c:6b:6c:8f:00: 17:cd:1f:ff:71:3d:44:bb:8d:f8:38:5c:c3:32:f1: e6:be:21:c6:dd:84:d3:ca:3f:46:94:99:72:6f:c1: a6:fe:14:03:8d:e3:02:6e:81:9c:0b:fc:75:c7:61: 6d:c8:d4:79:9b:8e:1e:82:79:9f:52:cd:39:21:09: 0d:c6:b8:06:a5:8c:e4:f6:cc:6e:14:1d:5c:90:1d: 13:42:47:c9:c3:0d:d3:28:56:15:d5:c4:32:d1:65: c1:97:97:eb:90:33:5d:61:bc:67:d1:c4:dd:67:e0: c8:a7:c6:11:13:63:71:c3:b6:d4:f4:5c:e7:77:80: 9f:14:41:56:45:9c:1f:65:af:52:26:08:9a:cb:c0: 21:e6:d9:0f:96:28:ab:c0:0a:75:f0:4b:47:f7:45: aa:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8D:D1:96:B0:CD:19:E3:19:57:48:9B:E4:E1:6C:4D:2B:6A:F5:AE X509v3 Authority Key Identifier: keyid:45:AE:51:F3:18:D3:55:32:BE:B6:FF:FC:62:2A:2A:AD:EF:4C:2C:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/45AE51F318D35532BEB6FFFC622A2AADEF4C2CE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330347061249/0/323430323a663863303a323a3a2f34382d3438203d3e20313334373733.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:f8c0:2::/48 Signature Algorithm: sha256WithRSAEncryption 40:7f:fd:5c:87:72:b8:99:a5:cf:c4:98:8a:64:dc:aa:d8:c3: 39:1c:9d:be:de:10:c6:45:9b:f9:f6:24:ba:0b:32:2e:81:0e: 91:26:48:8a:c3:27:9b:66:93:bd:17:7e:1b:56:f4:54:6f:fd: 30:cf:65:31:1e:e7:40:65:1f:c8:d4:87:c7:e6:83:0c:d6:60: a5:0e:bc:a9:15:77:0f:0b:8d:9b:92:05:41:ad:d1:58:3a:cf: e0:8b:15:a2:9d:f6:dd:0d:06:63:4c:3f:4e:e3:d0:d7:12:6b: a1:9a:58:36:ed:2a:f3:b1:4f:22:f4:ca:0b:47:9d:1b:40:d6: cf:df:db:e2:68:23:87:55:7b:c4:94:a1:12:37:24:8c:cc:28: 12:24:45:21:8f:2b:63:aa:cd:d7:c6:2c:fa:aa:72:3a:9b:65: 10:82:de:e7:61:a3:f9:89:87:ec:72:77:17:95:5c:75:8d:e5: 25:48:62:08:2a:6a:7d:93:4f:be:68:81:a9:a7:c8:f9:b6:5b: 79:66:84:34:99:c8:66:8f:61:9f:0e:be:d6:0d:ac:52:e1:ef: bb:10:b3:79:8e:f0:f3:ff:e4:5f:6d:f3:3e:ef:12:e4:96:65: d5:10:51:81:85:59:16:6a:2f:e1:d7:1e:83:85:20:4f:cc:0c: b1:ae:27:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUeb9KRbVhVlkRXBFU3Q5Jyll87u8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURF RjRDMkNFNjAeFw0yNjA0MjcwODAxMTZaFw0yNzA0MjYwODA2MTZaMDMxMTAvBgNV BAMTKDc2OEREMTk2QjBDRDE5RTMxOTU3NDg5QkU0RTE2QzREMkI2QUY1QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsvl2bybv9juj93s4uYQbdniu qRh9BZJiY8hErC3e0EA8htCel5QJJcjP0HfEvuJeLg6ApWLFHPPv30BgrAkGM6dY 2Q5Vh78lsu82SJ6aze7iRoikhaoXPQAKI2U1ljayq2Ysa2yPABfNH/9xPUS7jfg4 XMMy8ea+IcbdhNPKP0aUmXJvwab+FAON4wJugZwL/HXHYW3I1Hmbjh6CeZ9SzTkh CQ3GuAaljOT2zG4UHVyQHRNCR8nDDdMoVhXVxDLRZcGXl+uQM11hvGfRxN1n4Min xhETY3HDttT0XOd3gJ8UQVZFnB9lr1ImCJrLwCHm2Q+WKKvACnXwS0f3RaphAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUdo3RlrDNGeMZV0ib5OFsTStq9a4wHwYDVR0j BBgwFoAURa5R8xjTVTK+tv/8Yioqre9MLOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MjMzMDM0NzA2MTI0OS8wLzQ1QUU1MUYzMThEMzU1MzJCRUI2RkZGQzYyMkEy QUFERUY0QzJDRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDVBRTUxRjMxOEQzNTUzMkJFQjZGRkZDNjIyQTJBQURFRjRDMkNFNi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDY1NTgyMzMwMzQ3MDYxMjQ5LzAvMzIzNDMwMzIz YTY2Mzg2MzMwM2EzMjNhM2EyZjM0MzgyZDM0MzgyMDNkM2UyMDMxMzMzNDM3Mzcz My5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQC+MAAAjANBgkqhkiG9w0BAQsFAAOCAQEAQH/9XIdyuJml z8SYimTcqtjDORydvt4QxkWb+fYkugsyLoEOkSZIisMnm2aTvRd+G1b0VG/9MM9l MR7nQGUfyNSHx+aDDNZgpQ68qRV3DwuNm5IFQa3RWDrP4IsVop323Q0GY0w/TuPQ 1xJroZpYNu0q87FPIvTKC0edG0DWz9/b4mgjh1V7xJShEjckjMwoEiRFIY8rY6rN 18Ys+qpyOptlEILe52Gj+YmH7HJ3F5VcdY3lJUhiCCpqfZNPvmiBqafI+bZbeWaE NJnIZo9hnw6+1g2sUuHvuxCzeY7w8//kX23zPu8S5JZl1RBRgYVZFmov4dceg4Ug T8wMsa4nIw== -----END CERTIFICATE-----Generated at Wed May 13 13:46:05 2026 by rpki-client