$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6334303a3a2f33322d3332203d3e203633353930.roa File: 323430313a6334303a3a2f33322d3332203d3e203633353930.roa (raw, json) Hash identifier: CuXgWm0Nqe9AYnqUxSwmShC4YVfJqgkVyMfy068ZT9E= Subject key identifier: DE:24:CC:7A:EF:FB:1A:1E:74:3A:6D:A3:5F:84:BE:5E:B1:C5:C3:F3 Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 554FF8094D03261DEEBD1A391047C2DF470A40DB Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6334303a3a2f33322d3332203d3e203633353930.roa Signing time: Thu 23 Apr 2026 07:33:07 +0000 ROA not before: Thu 23 Apr 2026 07:28:07 +0000 ROA not after: Thu 22 Apr 2027 07:33:07 +0000 asID: 63590 IP address blocks: 2401:c40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:4f:f8:09:4d:03:26:1d:ee:bd:1a:39:10:47:c2:df:47:0a:40:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 23 07:28:07 2026 GMT Not After : Apr 22 07:33:07 2027 GMT Subject: CN=DE24CC7AEFFB1A1E743A6DA35F84BE5EB1C5C3F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:99:52:44:d7:42:d4:e4:2b:21:0f:a1:9a:11: 00:3f:c6:2e:17:4b:31:21:82:21:48:ac:6e:38:ad: e7:6e:e9:4c:b9:bc:78:9c:86:00:97:e5:50:2a:98: 30:14:53:c9:24:89:7c:53:8e:58:b4:41:b8:34:33: 66:05:89:11:05:83:e3:7e:9c:a3:66:8c:10:77:23: 7d:6c:6c:2f:f3:bb:b9:4c:00:81:6a:cd:72:ab:65: fc:34:39:f5:ec:68:14:75:59:01:85:e7:8e:6d:4d: a9:2a:bc:ac:a3:67:a7:b0:d8:1f:b4:ba:ec:5b:77: a9:68:a7:f7:03:0c:f1:af:df:8a:dc:c1:17:5e:f0: 09:87:df:4b:a4:9f:77:be:92:c9:6c:f6:51:85:8d: 1d:90:7f:8a:12:21:b5:bf:be:61:1c:ed:73:a7:57: 7b:a8:97:e6:8e:f3:18:6e:3c:62:fc:a5:bd:49:69: 24:bf:4a:81:aa:35:7e:bd:05:90:d1:4c:a7:85:e5: 1d:83:fe:fb:f6:51:26:ad:01:fd:ce:7b:72:29:c8: a1:bc:0d:f1:92:fc:10:e2:fd:3f:7a:8e:6a:e9:d6: f6:81:5a:ab:22:72:44:98:0e:76:78:31:7e:17:ce: b9:0d:2e:3b:bd:e9:26:2c:c7:0e:4d:44:6b:a1:3c: 0e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:24:CC:7A:EF:FB:1A:1E:74:3A:6D:A3:5F:84:BE:5E:B1:C5:C3:F3 X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6334303a3a2f33322d3332203d3e203633353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:c40::/32 Signature Algorithm: sha256WithRSAEncryption 67:e5:26:7d:71:80:22:ae:af:e9:6d:c8:c6:0c:15:60:83:c9: bf:69:9a:06:ee:f2:aa:24:67:e3:11:c3:1f:b0:95:2d:09:de: 97:d9:5f:d5:05:1e:af:1d:92:21:ca:b3:b3:46:20:5f:d3:c4: d6:d7:8a:c8:d9:9a:96:14:21:04:fc:87:b8:1f:43:c4:9b:9a: 9a:70:9c:dc:b4:57:3c:90:d4:de:69:f6:28:5a:ff:29:fb:dd: 5a:f3:f4:24:23:da:4c:86:1c:c0:bb:5c:b4:6f:b7:fb:5f:aa: 83:9f:b8:b0:b6:dc:a2:02:02:f7:7c:ba:8e:17:03:bc:77:d8: 5f:72:24:e8:2c:32:0e:49:9c:55:b4:38:04:b3:5a:22:9b:49: ef:56:8c:f9:29:1e:fc:dd:be:9b:a3:df:4b:ef:de:88:cf:8b: ea:79:0b:74:e5:04:14:10:07:74:da:07:ed:09:a4:25:3f:10: 64:95:4a:a7:45:aa:9e:dc:c8:88:2e:df:f3:f3:0d:47:4c:3f: 4b:ce:b5:47:dc:22:7c:d8:8a:bd:13:57:74:d6:8e:6b:5e:82: fe:ea:10:55:5c:e9:59:40:cd:04:da:8b:f6:bd:27:34:d1:09: b2:c9:79:85:76:5e:64:e6:a9:5f:10:ba:2d:29:06:36:67:ab: cb:a8:b1:fd -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUVU/4CU0DJh3uvRo5EEfC30cKQNswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MjMwNzI4MDdaFw0yNzA0MjIwNzMzMDdaMDMxMTAvBgNV BAMTKERFMjRDQzdBRUZGQjFBMUU3NDNBNkRBMzVGODRCRTVFQjFDNUMzRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRmVJE10LU5CshD6GaEQA/xi4X SzEhgiFIrG44redu6Uy5vHichgCX5VAqmDAUU8kkiXxTjli0Qbg0M2YFiREFg+N+ nKNmjBB3I31sbC/zu7lMAIFqzXKrZfw0OfXsaBR1WQGF545tTakqvKyjZ6ew2B+0 uuxbd6lop/cDDPGv34rcwRde8AmH30ukn3e+ksls9lGFjR2Qf4oSIbW/vmEc7XOn V3uol+aO8xhuPGL8pb1JaSS/SoGqNX69BZDRTKeF5R2D/vv2USatAf3Oe3IpyKG8 DfGS/BDi/T96jmrp1vaBWqsickSYDnZ4MX4XzrkNLju96SYsxw5NRGuhPA4rAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQU3iTMeu/7Gh50Om2jX4S+XrHFw/MwHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg5MDYyMTQwOTIyMjk4MzcwLzAvMzIzNDMwMzEzYTYz MzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzMzNTM5MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAQxAMA0GCSqGSIb3DQEBCwUAA4IBAQBn5SZ9cYAirq/pbcjGDBVgg8m/aZoG 7vKqJGfjEcMfsJUtCd6X2V/VBR6vHZIhyrOzRiBf08TW14rI2ZqWFCEE/Ie4H0PE m5qacJzctFc8kNTeafYoWv8p+91a8/QkI9pMhhzAu1y0b7f7X6qDn7iwttyiAgL3 fLqOFwO8d9hfciToLDIOSZxVtDgEs1oim0nvVoz5KR783b6bo99L796Iz4vqeQt0 5QQUEAd02gftCaQlPxBklUqnRaqe3MiILt/z8w1HTD9LzrVH3CJ82Iq9E1d01o5r XoL+6hBVXOlZQM0E2ov2vSc00QmyyXmFdl5k5qlfELotKQY2Z6vLqLH9 -----END CERTIFICATE-----Generated at Wed May 13 20:20:27 2026 by rpki-client