$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a666263303a3a2f33322d3332203d3e203633353930.roa File: 323430303a666263303a3a2f33322d3332203d3e203633353930.roa (raw, json) Hash identifier: scTA2LtM4ynnak7FPLhO7wrTqigefLDDFqW4WeMlIvw= Subject key identifier: 1B:70:25:5B:57:F9:21:F4:8E:B5:AD:C6:22:46:06:2E:F7:46:B6:6E Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 3B23C27B89E547F68C4FA7466CA978AB96487628 Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a666263303a3a2f33322d3332203d3e203633353930.roa Signing time: Thu 23 Apr 2026 07:33:08 +0000 ROA not before: Thu 23 Apr 2026 07:28:08 +0000 ROA not after: Thu 22 Apr 2027 07:33:08 +0000 asID: 63590 IP address blocks: 2400:fbc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:23:c2:7b:89:e5:47:f6:8c:4f:a7:46:6c:a9:78:ab:96:48:76:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 23 07:28:08 2026 GMT Not After : Apr 22 07:33:08 2027 GMT Subject: CN=1B70255B57F921F48EB5ADC62246062EF746B66E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cb:0d:80:41:e8:66:73:d9:ae:06:62:be:32: e5:f3:af:3a:3f:e1:69:9a:22:da:f0:2b:ce:a7:d5: d0:9c:4c:74:59:f6:7e:44:2f:0a:58:6e:01:36:3d: fb:29:1b:38:61:01:71:22:cf:b4:03:f6:bc:cf:c7: 59:10:9f:2c:1c:b5:79:91:95:49:54:92:8d:93:aa: f6:28:b6:63:d4:d6:8d:1b:4b:02:d8:be:b3:80:0a: 48:dc:7c:05:78:76:11:29:0f:58:75:ec:fd:19:0e: c6:b6:d6:f5:13:7d:da:e8:8e:03:c8:58:64:89:4d: a4:ea:84:d6:34:f9:e3:91:7e:df:8f:20:36:58:d5: 02:f2:0a:48:14:95:35:53:f9:4e:e5:de:76:49:5b: 76:39:76:d6:00:43:b9:89:00:d9:bf:85:ae:06:58: e0:4f:15:68:03:9a:e3:2d:5c:4c:3e:9f:cc:e5:14: 91:34:92:8e:e5:72:74:1a:ec:14:58:f1:2d:13:e8: 31:4e:80:1e:cf:19:3f:f0:c7:a2:38:55:5d:28:0d: 47:d6:02:8f:31:e5:f6:d6:d1:97:de:c6:e2:5f:28: cf:7a:e2:0e:a2:94:64:39:8f:7d:b6:63:ef:bc:7b: ef:a2:52:51:95:63:3d:75:f7:ae:0d:f7:68:90:b9: ad:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:70:25:5B:57:F9:21:F4:8E:B5:AD:C6:22:46:06:2E:F7:46:B6:6E X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430303a666263303a3a2f33322d3332203d3e203633353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:fbc0::/32 Signature Algorithm: sha256WithRSAEncryption 8e:4e:08:4e:29:ac:8d:f7:41:84:f9:bd:07:19:c2:4c:9e:4c: 46:49:2a:c3:f0:4b:17:8d:59:fd:f2:8f:13:bd:a5:02:f4:27: 3b:2c:7e:4a:a1:35:f2:2f:26:29:2b:1c:fb:a8:20:36:b5:fa: 79:f2:9d:f2:3d:12:2e:0d:96:b5:34:b5:49:27:2a:00:67:f7: 5b:87:fc:5f:f5:6b:a3:2d:30:6a:2d:e8:28:b5:93:48:59:93: 72:98:59:5a:e4:19:d9:f1:32:0b:69:6c:27:8b:50:f9:cc:cf: 61:8f:f7:25:0b:d5:dd:9f:e1:5a:07:37:6b:46:41:23:bf:ba: 66:20:35:58:6b:99:11:bb:9a:ef:8c:3e:0c:4c:97:b9:e6:2c: 83:43:91:9c:bc:4c:93:11:6b:8e:b0:6a:2b:e0:8d:83:50:0f: df:66:65:72:ff:fb:55:8d:c9:67:4c:e6:bb:c5:62:b2:e1:10: b2:5d:e7:3e:34:d6:45:a0:5d:7f:dd:b1:63:97:de:39:f2:43: 94:f7:2b:5f:56:d1:b8:93:76:bc:3c:a5:76:05:29:5b:4e:66: a1:f0:4b:8b:c5:ec:df:e9:db:96:18:f0:fe:91:ba:23:65:56: 94:85:25:42:bd:b1:f5:d1:3f:7d:61:9d:08:57:87:22:cb:bc: 2e:08:2d:a1 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUOyPCe4nlR/aMT6dGbKl4q5ZIdigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MjMwNzI4MDhaFw0yNzA0MjIwNzMzMDhaMDMxMTAvBgNV BAMTKDFCNzAyNTVCNTdGOTIxRjQ4RUI1QURDNjIyNDYwNjJFRjc0NkI2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyyw2AQehmc9muBmK+MuXzrzo/ 4WmaItrwK86n1dCcTHRZ9n5ELwpYbgE2PfspGzhhAXEiz7QD9rzPx1kQnywctXmR lUlUko2TqvYotmPU1o0bSwLYvrOACkjcfAV4dhEpD1h17P0ZDsa21vUTfdrojgPI WGSJTaTqhNY0+eORft+PIDZY1QLyCkgUlTVT+U7l3nZJW3Y5dtYAQ7mJANm/ha4G WOBPFWgDmuMtXEw+n8zlFJE0ko7lcnQa7BRY8S0T6DFOgB7PGT/wx6I4VV0oDUfW Ao8x5fbW0ZfexuJfKM964g6ilGQ5j322Y++8e++iUlGVYz11964N92iQua1vAgMB AAGjggISMIICDjAdBgNVHQ4EFgQUG3AlW1f5IfSOta3GIkYGLvdGtm4wHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg5MDYyMTQwOTIyMjk4MzcwLzAvMzIzNDMwMzAzYTY2 NjI2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzYzMzM1MzkzMC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQA+8AwDQYJKoZIhvcNAQELBQADggEBAI5OCE4prI33QYT5vQcZwkyeTEZJ KsPwSxeNWf3yjxO9pQL0JzssfkqhNfIvJikrHPuoIDa1+nnynfI9Ei4NlrU0tUkn KgBn91uH/F/1a6MtMGot6Ci1k0hZk3KYWVrkGdnxMgtpbCeLUPnMz2GP9yUL1d2f 4VoHN2tGQSO/umYgNVhrmRG7mu+MPgxMl7nmLINDkZy8TJMRa46waivgjYNQD99m ZXL/+1WNyWdM5rvFYrLhELJd5z401kWgXX/dsWOX3jnyQ5T3K19W0biTdrw8pXYF KVtOZqHwS4vF7N/p25YY8P6RuiNlVpSFJUK9sfXRP31hnQhXhyLLvC4ILaE= -----END CERTIFICATE-----Generated at Wed May 13 20:20:27 2026 by rpki-client