$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6234303a3a2f33322d3332203d3e203633353930.roa File: 323430313a6234303a3a2f33322d3332203d3e203633353930.roa (raw, json) Hash identifier: weJSvtD3oxhkA6PeZsrs25FeeBX7z9vT4TlLLSRwKZA= Subject key identifier: 2C:0F:8F:02:C6:F4:3E:27:45:74:AE:EF:A0:C3:FF:03:02:55:0E:8D Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 5140A41B263AF7E37F365D67A4E0A6ECBE547A2E Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6234303a3a2f33322d3332203d3e203633353930.roa Signing time: Thu 23 Apr 2026 07:33:07 +0000 ROA not before: Thu 23 Apr 2026 07:28:07 +0000 ROA not after: Thu 22 Apr 2027 07:33:07 +0000 asID: 63590 IP address blocks: 2401:b40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:40:a4:1b:26:3a:f7:e3:7f:36:5d:67:a4:e0:a6:ec:be:54:7a:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 23 07:28:07 2026 GMT Not After : Apr 22 07:33:07 2027 GMT Subject: CN=2C0F8F02C6F43E274574AEEFA0C3FF0302550E8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c4:55:8b:f3:9f:6b:4d:64:2d:a0:ea:a9:0c: fc:2d:9e:ca:c1:ff:98:8a:50:50:75:c2:e7:e5:bd: 42:3e:51:f9:b6:94:f5:24:2d:f6:a5:bb:ab:b3:c0: 32:f3:22:97:9e:c1:a6:e9:2f:04:45:a7:7b:07:ad: 17:d4:46:d5:e8:b0:03:cc:5c:c9:ad:fd:bb:4d:c0: 3b:ca:2f:f1:b5:9d:ef:da:b6:08:6a:38:1d:16:1f: 87:54:57:8d:b5:82:a9:3a:5e:47:42:a8:71:ac:c6: a9:c3:77:dd:85:16:58:3b:b0:c5:e5:7d:f8:6f:4a: be:ac:48:b2:04:8a:0b:88:0d:c9:03:25:63:46:99: ba:f0:9a:cd:e8:8f:3a:b2:2c:5b:4d:ba:a7:13:0d: 84:6b:c7:57:d1:41:a6:61:ba:54:10:fb:6a:af:fc: d9:be:bd:e1:29:1b:35:c8:6c:9a:95:cc:95:d6:fd: 5a:cf:15:5e:42:e6:b4:87:b8:2a:af:35:d4:f9:8f: 4e:b4:34:ae:ca:03:5b:7d:27:9d:67:bd:08:5f:73: eb:bd:2f:88:16:aa:32:6c:15:5f:bc:ad:e4:1f:9a: 19:39:dd:b0:ef:3e:cf:76:61:f4:04:f2:68:f3:a6: 6c:df:d1:e4:47:55:30:c1:00:25:b0:95:54:c3:e2: 9f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0F:8F:02:C6:F4:3E:27:45:74:AE:EF:A0:C3:FF:03:02:55:0E:8D X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6234303a3a2f33322d3332203d3e203633353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:b40::/32 Signature Algorithm: sha256WithRSAEncryption 35:52:4d:74:30:46:18:a1:7a:de:c3:5e:c9:91:78:87:e9:cc: 4f:fa:ea:a4:f9:b9:99:71:7e:98:cb:ba:e8:07:3e:13:a1:57: 17:72:cf:a1:65:92:29:b4:8c:fb:3b:63:2e:7d:e7:74:fe:d3: e6:5a:9a:35:d2:de:54:3b:d7:26:dd:eb:bc:64:6d:ff:b5:e1: d2:c0:7c:9a:6f:bb:e0:62:f3:c6:36:3e:27:08:05:69:73:f7: b3:f1:86:cc:5f:14:b7:8f:0d:b5:b5:26:c9:3b:83:f1:63:f7: 31:2a:92:fb:dd:86:d1:fe:3a:dd:80:d1:8e:be:66:06:78:97: 27:ef:b6:2f:cd:81:09:35:8d:44:21:c8:03:ec:d4:10:99:e1: 83:cc:4e:cd:8d:c4:5e:fa:b5:28:a9:45:6b:08:d2:25:7a:16: 09:e2:19:3f:95:5b:5a:8a:28:96:4b:3f:8f:34:ae:52:e3:3e: 9f:f5:6f:21:01:87:fc:c0:0e:74:7c:d4:7b:47:99:24:c2:14: 83:87:bf:ba:1d:42:13:32:1b:6d:40:09:e7:ba:c5:11:73:08: 7d:e4:be:06:6d:f9:4b:6d:bd:db:ec:ff:1c:b5:fc:26:0e:0a: 5d:57:2f:6a:8d:f9:09:51:1c:ad:17:12:1a:b4:60:74:79:3e: 80:03:8f:f2 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUUUCkGyY69+N/Nl1npOCm7L5Uei4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MjMwNzI4MDdaFw0yNzA0MjIwNzMzMDdaMDMxMTAvBgNV BAMTKDJDMEY4RjAyQzZGNDNFMjc0NTc0QUVFRkEwQzNGRjAzMDI1NTBFOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5xFWL859rTWQtoOqpDPwtnsrB /5iKUFB1wuflvUI+Ufm2lPUkLfalu6uzwDLzIpeewabpLwRFp3sHrRfURtXosAPM XMmt/btNwDvKL/G1ne/atghqOB0WH4dUV421gqk6XkdCqHGsxqnDd92FFlg7sMXl ffhvSr6sSLIEiguIDckDJWNGmbrwms3ojzqyLFtNuqcTDYRrx1fRQaZhulQQ+2qv /Nm+veEpGzXIbJqVzJXW/VrPFV5C5rSHuCqvNdT5j060NK7KA1t9J51nvQhfc+u9 L4gWqjJsFV+8reQfmhk53bDvPs92YfQE8mjzpmzf0eRHVTDBACWwlVTD4p/7AgMB AAGjggIQMIICDDAdBgNVHQ4EFgQULA+PAsb0PidFdK7voMP/AwJVDo0wHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg5MDYyMTQwOTIyMjk4MzcwLzAvMzIzNDMwMzEzYTYy MzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzMzNTM5MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAQtAMA0GCSqGSIb3DQEBCwUAA4IBAQA1Uk10MEYYoXrew17JkXiH6cxP+uqk +bmZcX6Yy7roBz4ToVcXcs+hZZIptIz7O2Mufed0/tPmWpo10t5UO9cm3eu8ZG3/ teHSwHyab7vgYvPGNj4nCAVpc/ez8YbMXxS3jw21tSbJO4PxY/cxKpL73YbR/jrd gNGOvmYGeJcn77YvzYEJNY1EIcgD7NQQmeGDzE7NjcRe+rUoqUVrCNIlehYJ4hk/ lVtaiiiWSz+PNK5S4z6f9W8hAYf8wA50fNR7R5kkwhSDh7+6HUITMhttQAnnusUR cwh95L4GbflLbb3b7P8ctfwmDgpdVy9qjfkJURytFxIatGB0eT6AA4/y -----END CERTIFICATE-----Generated at Wed May 13 20:20:25 2026 by rpki-client