$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6263303a3a2f33322d3332203d3e203633353930.roa File: 323430313a6263303a3a2f33322d3332203d3e203633353930.roa (raw, json) Hash identifier: TPSszVN+8Pbz1TsiHiEjxy5VChSSHol8CjHoOEGJOTg= Subject key identifier: E8:B2:2A:A3:AB:8C:06:E0:95:89:F0:4E:C7:13:BC:6E:4D:57:6B:FE Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 5CB2F2A8B7C5572EF011B1B24A5BE74B88D8C6BE Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6263303a3a2f33322d3332203d3e203633353930.roa Signing time: Thu 23 Apr 2026 07:33:07 +0000 ROA not before: Thu 23 Apr 2026 07:28:07 +0000 ROA not after: Thu 22 Apr 2027 07:33:07 +0000 asID: 63590 IP address blocks: 2401:bc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b2:f2:a8:b7:c5:57:2e:f0:11:b1:b2:4a:5b:e7:4b:88:d8:c6:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 23 07:28:07 2026 GMT Not After : Apr 22 07:33:07 2027 GMT Subject: CN=E8B22AA3AB8C06E09589F04EC713BC6E4D576BFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:08:91:38:cf:f0:f1:15:76:9f:29:fd:bc: 88:5c:73:e8:e7:cf:97:e9:06:d9:06:7d:a5:bc:4f: b8:9a:93:78:2d:9b:c2:ab:de:7c:a2:45:bc:d1:f0: cb:a8:8d:e8:46:5a:75:ee:fd:a2:42:e3:0c:58:b4: 9b:5f:96:b5:d4:62:71:34:14:cc:dc:33:19:d3:7e: 14:03:17:89:0d:a2:43:66:be:d0:f2:ad:ba:b8:e6: e7:26:36:72:12:8e:17:67:d5:80:7d:e6:b7:04:d3: 04:a4:30:8a:09:89:25:0e:ce:b3:4b:cb:7d:89:04: 12:1c:5c:d2:35:22:aa:8f:88:e8:d5:bf:82:c8:ba: cd:be:62:92:13:ae:72:86:ef:da:e8:ef:a0:bb:e8: 98:df:bd:26:d7:f2:7a:3d:d2:85:ce:5a:58:af:8d: ff:e5:05:fd:54:62:a7:35:52:80:b8:43:bb:29:52: c0:a3:58:32:92:87:4d:e2:9c:6f:30:cb:34:17:9d: dd:6a:51:14:65:27:21:67:e5:b8:47:1d:de:1e:d2: 2b:27:41:2d:77:c1:02:43:bb:fe:bb:12:eb:27:09: 6a:a4:9c:2f:59:02:91:58:ee:41:f4:ff:c0:2a:d3: 6b:66:69:52:3f:59:69:63:95:4a:5a:95:bc:ae:9c: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B2:2A:A3:AB:8C:06:E0:95:89:F0:4E:C7:13:BC:6E:4D:57:6B:FE X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6263303a3a2f33322d3332203d3e203633353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:bc0::/32 Signature Algorithm: sha256WithRSAEncryption 53:73:77:20:84:96:75:d3:f1:d5:e8:4f:2a:99:87:6b:7e:f6: 92:2a:7e:68:a1:e7:63:f6:31:d2:80:e1:59:91:18:25:c9:db: d4:b1:7b:dc:4d:84:57:a2:f4:db:da:46:2d:f7:67:0a:93:86: 53:5b:95:ec:5a:36:c4:8d:86:61:87:2a:7a:0d:ca:07:22:0f: 34:27:65:fa:db:a5:2f:6f:de:01:ed:d2:e7:bd:d8:88:90:43: 65:fd:bd:4e:b2:7c:de:d0:da:65:bc:8c:16:f4:fc:a6:c8:67: b6:c9:5e:95:e5:81:df:fe:79:ce:a9:28:9c:29:5f:9e:9d:bb: a7:81:fd:7c:fa:a5:71:c2:b5:b7:0d:3e:cf:b3:a6:2b:89:06: e9:45:78:c1:54:09:1e:f2:24:2c:77:5a:23:11:36:d4:8c:23: 01:a4:2e:69:64:92:88:aa:68:55:13:f8:07:03:33:df:07:43: b6:cb:9c:ad:31:86:9f:42:9e:de:4e:e6:45:0b:d9:cf:9a:06: d4:99:c6:7b:1b:e2:3a:fb:47:ba:49:8b:6b:74:f5:a7:c3:9b: b6:7a:ef:5a:a1:95:eb:e1:16:d6:3b:5c:c4:e4:70:5a:e7:4d: 77:bf:5f:c2:7d:d5:14:c7:c8:c7:eb:75:9e:cc:be:0c:fc:50: 74:67:3f:32 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUXLLyqLfFVy7wEbGySlvnS4jYxr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MjMwNzI4MDdaFw0yNzA0MjIwNzMzMDdaMDMxMTAvBgNV BAMTKEU4QjIyQUEzQUI4QzA2RTA5NTg5RjA0RUM3MTNCQzZFNEQ1NzZCRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MAiROM/w8RV2nyn9vIhcc+jn z5fpBtkGfaW8T7iak3gtm8Kr3nyiRbzR8MuojehGWnXu/aJC4wxYtJtflrXUYnE0 FMzcMxnTfhQDF4kNokNmvtDyrbq45ucmNnISjhdn1YB95rcE0wSkMIoJiSUOzrNL y32JBBIcXNI1IqqPiOjVv4LIus2+YpITrnKG79ro76C76JjfvSbX8no90oXOWliv jf/lBf1UYqc1UoC4Q7spUsCjWDKSh03inG8wyzQXnd1qURRlJyFn5bhHHd4e0isn QS13wQJDu/67EusnCWqknC9ZApFY7kH0/8Aq02tmaVI/WWljlUpalbyunKWHAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU6LIqo6uMBuCVifBOxxO8bk1Xa/4wHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg5MDYyMTQwOTIyMjk4MzcwLzAvMzIzNDMwMzEzYTYy NjMzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzMzNTM5MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAQvAMA0GCSqGSIb3DQEBCwUAA4IBAQBTc3cghJZ10/HV6E8qmYdrfvaSKn5o oedj9jHSgOFZkRglydvUsXvcTYRXovTb2kYt92cKk4ZTW5XsWjbEjYZhhyp6DcoH Ig80J2X626Uvb94B7dLnvdiIkENl/b1Osnze0NplvIwW9PymyGe2yV6V5YHf/nnO qSicKV+enbungf18+qVxwrW3DT7Ps6YriQbpRXjBVAke8iQsd1ojETbUjCMBpC5p ZJKIqmhVE/gHAzPfB0O2y5ytMYafQp7eTuZFC9nPmgbUmcZ7G+I6+0e6SYtrdPWn w5u2eu9aoZXr4RbWO1zE5HBa5013v1/CfdUUx8jH63WezL4M/FB0Zz8y -----END CERTIFICATE-----Generated at Wed May 13 20:20:27 2026 by rpki-client