$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065583221972008963/0/323430323a326536303a3a2f33322d3438203d3e20313531323331.roa File: 323430323a326536303a3a2f33322d3438203d3e20313531323331.roa (raw, json) Hash identifier: bgR/NVrBsnz+F/Uqm+DFCd1LSczUrvNifQljXjBX0Cw= Subject key identifier: 54:32:8A:94:C9:07:BB:70:E9:9E:96:DE:0F:EB:DE:A4:01:E0:E6:D5 Certificate issuer: /CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Certificate serial: 797F04F7B85935F9F898DDDE85E3AB98CCD1910D Authority key identifier: B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/323430323a326536303a3a2f33322d3438203d3e20313531323331.roa Signing time: Tue 10 Mar 2026 02:01:20 +0000 ROA not before: Tue 10 Mar 2026 01:56:20 +0000 ROA not after: Tue 09 Mar 2027 02:01:20 +0000 asID: 151231 IP address blocks: 2402:2e60::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:15:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7f:04:f7:b8:59:35:f9:f8:98:dd:de:85:e3:ab:98:cc:d1:91:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B361C757B6D70C317FD018CE921CC13F568B00D8 Validity Not Before: Mar 10 01:56:20 2026 GMT Not After : Mar 9 02:01:20 2027 GMT Subject: CN=54328A94C907BB70E99E96DE0FEBDEA401E0E6D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5f:f2:97:86:dd:33:83:f0:48:60:3b:81:57: ec:cf:47:0f:d9:8e:9f:a9:0e:aa:5a:4b:87:4e:67: ef:ca:d3:1f:8e:0e:58:b0:77:85:64:f6:79:b1:c6: 1d:df:f8:cb:8d:07:ae:b1:f1:09:45:d0:af:5b:13: 76:0a:fc:41:a5:bd:70:e2:5e:e9:92:df:67:81:62: 25:f4:7b:05:29:fd:84:9a:da:02:39:d2:61:71:b8: cf:8f:86:98:a1:65:03:a9:08:41:01:83:49:2d:7e: d4:9e:3e:b1:e4:ab:fb:d6:53:97:0a:99:e3:b4:45: 7a:56:4a:1d:6d:4d:ab:bf:93:bf:b5:c3:52:19:d5: 7c:86:e1:01:26:54:3d:e7:d5:f8:3e:a7:ec:f0:8d: 48:19:44:51:f7:ea:70:20:09:c8:c5:31:29:c0:ab: 46:72:c1:11:05:9c:fc:67:7f:c8:2c:5b:b8:16:50: dd:12:3d:72:0b:a1:89:83:92:aa:01:83:b3:13:19: 7c:93:77:ba:f2:e8:39:3b:1c:6b:50:1f:27:87:00: f0:b3:9a:db:19:46:6d:d5:36:40:10:54:bf:02:ba: 7e:d7:8a:1c:98:3b:d3:c0:94:21:89:3b:23:3d:28: 33:92:21:ee:c8:3c:09:5d:f0:79:f8:e8:ee:9c:37: 7e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:32:8A:94:C9:07:BB:70:E9:9E:96:DE:0F:EB:DE:A4:01:E0:E6:D5 X509v3 Authority Key Identifier: keyid:B3:61:C7:57:B6:D7:0C:31:7F:D0:18:CE:92:1C:C1:3F:56:8B:00:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/B361C757B6D70C317FD018CE921CC13F568B00D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B361C757B6D70C317FD018CE921CC13F568B00D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065583221972008963/0/323430323a326536303a3a2f33322d3438203d3e20313531323331.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:2e60::/32 Signature Algorithm: sha256WithRSAEncryption 58:b1:c7:35:5f:a2:2d:64:be:fb:1a:1d:d1:ea:50:8f:31:c9: 1c:4a:aa:0c:16:97:6a:38:b5:de:82:b0:a3:56:88:a4:fb:cf: 38:11:a4:7b:f9:6e:f6:48:e7:c1:0b:4e:82:d3:b6:a5:dd:47: 1d:63:ec:35:9e:80:11:d2:ed:98:8a:36:e7:6a:ca:6c:5c:20: 75:33:a3:d1:ad:16:cd:e4:f5:6b:70:42:30:c1:cb:a5:18:71: fe:27:59:2a:49:da:cd:9b:75:30:30:a8:84:01:d8:11:cc:44: 39:e0:3b:b9:81:fa:1d:76:0e:02:54:77:4f:98:cc:bd:b2:e9: 3d:d1:b7:94:93:09:ec:d6:0e:56:7b:6e:58:be:d1:87:1b:bd: 8f:5a:af:06:8c:09:91:69:21:78:30:8b:dc:2c:9e:10:05:b0: 35:92:71:9b:7a:6d:0f:f0:e7:35:70:64:2b:a3:41:d0:f7:42: 5e:bd:12:07:f0:bc:d4:1a:73:ee:71:51:18:08:f2:b4:ef:54: 89:b8:7d:77:6b:5e:4d:44:09:e9:ba:bc:c2:f7:80:5d:93:0d: 26:b0:be:cb:b7:24:90:19:dc:b8:f2:97:68:08:d0:4d:15:8b: 1a:90:90:b6:e1:80:a7:1c:f2:4c:bb:ec:37:1f:86:39:c7:f6: 84:65:55:20 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgIUeX8E97hZNfn4mN3eheOrmMzRkQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1 NjhCMDBEODAeFw0yNjAzMTAwMTU2MjBaFw0yNzAzMDkwMjAxMjBaMDMxMTAvBgNV BAMTKDU0MzI4QTk0QzkwN0JCNzBFOTlFOTZERTBGRUJERUE0MDFFMEU2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5X/KXht0zg/BIYDuBV+zPRw/Z jp+pDqpaS4dOZ+/K0x+ODliwd4Vk9nmxxh3f+MuNB66x8QlF0K9bE3YK/EGlvXDi XumS32eBYiX0ewUp/YSa2gI50mFxuM+PhpihZQOpCEEBg0ktftSePrHkq/vWU5cK meO0RXpWSh1tTau/k7+1w1IZ1XyG4QEmVD3n1fg+p+zwjUgZRFH36nAgCcjFMSnA q0ZywREFnPxnf8gsW7gWUN0SPXILoYmDkqoBg7MTGXyTd7ry6Dk7HGtQHyeHAPCz mtsZRm3VNkAQVL8Cun7XihyYO9PAlCGJOyM9KDOSIe7IPAld8Hn46O6cN35bAgMB AAGjggIVMIICETAdBgNVHQ4EFgQUVDKKlMkHu3DpnpbeD+vepAHg5tUwHwYDVR0j BBgwFoAUs2HHV7bXDDF/0BjOkhzBP1aLANgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MzIyMTk3MjAwODk2My8wL0IzNjFDNzU3QjZENzBDMzE3RkQwMThDRTkyMUND MTNGNTY4QjAwRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjM2MUM3NTdCNkQ3MEMzMTdGRDAxOENFOTIxQ0MxM0Y1NjhCMDBEOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4MzIyMTk3MjAwODk2My8wLzMyMzQzMDMyM2Ez MjY1MzYzMDNhM2EyZjMzMzIyZDM0MzgyMDNkM2UyMDMxMzUzMTMyMzMzMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQC AAIwBwMFACQCLmAwDQYJKoZIhvcNAQELBQADggEBAFixxzVfoi1kvvsaHdHqUI8x yRxKqgwWl2o4td6CsKNWiKT7zzgRpHv5bvZI58ELToLTtqXdRx1j7DWegBHS7ZiK NudqymxcIHUzo9GtFs3k9WtwQjDBy6UYcf4nWSpJ2s2bdTAwqIQB2BHMRDngO7mB +h12DgJUd0+YzL2y6T3Rt5STCezWDlZ7bli+0YcbvY9arwaMCZFpIXgwi9wsnhAF sDWScZt6bQ/w5zVwZCujQdD3Ql69EgfwvNQac+5xURgI8rTvVIm4fXdrXk1ECem6 vML3gF2TDSawvsu3JJAZ3Ljyl2gI0E0VixqQkLbhgKcc8ky77DcfhjnH9oRlVSA= -----END CERTIFICATE-----Generated at Fri Mar 27 01:47:22 2026 by rpki-client