$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6434303a3a2f33322d3332203d3e203633353930.roa File: 323430313a6434303a3a2f33322d3332203d3e203633353930.roa (raw, json) Hash identifier: iGmA7MzBUalSs5I5h/yDaZantBoDdFYyGVmhaTz7kv4= Subject key identifier: 41:FA:21:0B:E9:CC:72:7D:79:B4:E9:55:03:1A:6F:CC:09:25:6F:B6 Certificate issuer: /CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Certificate serial: 50F4875350BD0DE7F508F0D6FB2ECB6AA87D58BB Authority key identifier: 22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6434303a3a2f33322d3332203d3e203633353930.roa Signing time: Thu 23 Apr 2026 07:33:07 +0000 ROA not before: Thu 23 Apr 2026 07:28:07 +0000 ROA not after: Thu 22 Apr 2027 07:33:07 +0000 asID: 63590 IP address blocks: 2401:d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f4:87:53:50:bd:0d:e7:f5:08:f0:d6:fb:2e:cb:6a:a8:7d:58:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2265C2E81BCCCC4E922AB11C581ADE31BF27B202 Validity Not Before: Apr 23 07:28:07 2026 GMT Not After : Apr 22 07:33:07 2027 GMT Subject: CN=41FA210BE9CC727D79B4E955031A6FCC09256FB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ae:0b:9f:00:2a:03:f1:fd:0c:40:e3:8d:8a: cc:f8:67:3d:a1:0d:e2:44:98:cd:99:b0:40:39:40: 9c:89:6f:6d:81:c8:3e:c1:a9:f1:7a:c6:a1:7c:b4: cf:cf:2a:66:11:77:a0:31:2a:7b:d8:b2:48:a3:20: d6:13:2a:52:e0:7c:2f:4d:fb:ea:d4:ae:f7:7c:a2: 09:df:5a:d9:2e:14:2d:32:d5:57:21:b0:6e:38:e0: 8f:06:fe:1d:79:9d:0a:fa:bf:33:89:fe:4a:e6:e0: 3c:0b:95:34:08:7c:8c:d0:92:8c:90:92:33:1c:a7: 3a:ef:e2:e9:47:8b:9d:27:2c:6b:01:14:7f:1e:aa: 22:d3:d4:5f:29:98:77:8c:c0:a9:5c:11:66:ee:60: 03:20:5d:e8:85:55:0c:d0:be:b7:99:ea:46:82:06: a8:17:b6:18:8f:ce:25:e1:67:be:ab:99:4c:56:06: 54:6d:8e:57:6f:75:c3:7c:ee:d8:49:26:5d:0d:80: ef:04:e4:02:31:9d:4c:ae:74:b0:76:8b:60:f7:63: d8:eb:3d:80:eb:f6:ae:67:7c:94:c0:71:9f:5f:95: 72:d8:81:3e:87:cc:33:44:d2:2b:ea:61:fa:fe:27: 2c:18:20:0c:32:11:8a:63:f0:a9:db:e4:6c:ce:f6: 74:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FA:21:0B:E9:CC:72:7D:79:B4:E9:55:03:1A:6F:CC:09:25:6F:B6 X509v3 Authority Key Identifier: keyid:22:65:C2:E8:1B:CC:CC:4E:92:2A:B1:1C:58:1A:DE:31:BF:27:B2:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2265C2E81BCCCC4E922AB11C581ADE31BF27B202.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1089062140922298370/0/323430313a6434303a3a2f33322d3332203d3e203633353930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:d40::/32 Signature Algorithm: sha256WithRSAEncryption 0c:67:1e:ae:e3:25:0c:a5:b1:be:f7:92:14:81:c6:54:32:70: 47:3d:90:44:93:b3:9e:2c:8a:10:63:31:9c:ac:56:9a:46:09: 3f:ab:bb:bb:dd:b7:24:ba:22:e2:b9:c5:5e:86:95:9b:23:94: 8f:bb:ff:25:13:33:ba:51:a9:2e:65:45:81:bd:9d:e2:59:42: 0f:ed:3f:86:54:00:6a:4c:a0:ba:e9:84:5f:6f:16:46:c4:d6: 03:6c:74:3d:3c:39:11:b2:dd:8e:14:2c:ce:34:9b:15:58:5b: cb:00:ea:27:73:ff:29:67:b6:3a:00:7b:e1:52:a3:da:6d:d6: d4:37:9e:b6:84:f5:b8:ed:17:97:20:ab:f0:69:d0:81:b8:f5: 5e:95:30:84:4d:05:09:26:3a:0d:18:2f:d5:39:f0:d8:87:ab: 42:32:bf:dc:82:a0:ed:90:fe:e4:70:ee:44:31:b9:2f:80:51: fe:6c:e6:a8:ab:d7:7e:b6:21:5d:d1:3e:19:43:d6:04:77:bf: 22:82:ec:fe:47:42:8d:a5:ec:3b:dd:a8:b4:40:9e:32:36:d6: 8d:4c:bc:54:de:e2:a4:f9:b8:a0:f6:36:28:3a:8c:61:14:5e: f6:d0:53:b5:24:67:a6:9c:e1:f8:21:cc:7b:6c:7a:23:2a:18: b1:33:1d:74 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUUPSHU1C9Def1CPDW+y7Laqh9WLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFC RjI3QjIwMjAeFw0yNjA0MjMwNzI4MDdaFw0yNzA0MjIwNzMzMDdaMDMxMTAvBgNV BAMTKDQxRkEyMTBCRTlDQzcyN0Q3OUI0RTk1NTAzMUE2RkNDMDkyNTZGQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCCrgufACoD8f0MQOONisz4Zz2h DeJEmM2ZsEA5QJyJb22ByD7BqfF6xqF8tM/PKmYRd6AxKnvYskijINYTKlLgfC9N ++rUrvd8ognfWtkuFC0y1VchsG444I8G/h15nQr6vzOJ/krm4DwLlTQIfIzQkoyQ kjMcpzrv4ulHi50nLGsBFH8eqiLT1F8pmHeMwKlcEWbuYAMgXeiFVQzQvreZ6kaC BqgXthiPziXhZ76rmUxWBlRtjldvdcN87thJJl0NgO8E5AIxnUyudLB2i2D3Y9jr PYDr9q5nfJTAcZ9flXLYgT6HzDNE0ivqYfr+JywYIAwyEYpj8Knb5GzO9nTTAgMB AAGjggIQMIICDDAdBgNVHQ4EFgQUQfohC+nMcn15tOlVAxpvzAklb7YwHwYDVR0j BBgwFoAUImXC6BvMzE6SKrEcWBreMb8nsgIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA4 OTA2MjE0MDkyMjI5ODM3MC8wLzIyNjVDMkU4MUJDQ0NDNEU5MjJBQjExQzU4MUFE RTMxQkYyN0IyMDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjI2NUMyRTgxQkNDQ0M0RTkyMkFCMTFDNTgxQURFMzFCRjI3QjIwMi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDg5MDYyMTQwOTIyMjk4MzcwLzAvMzIzNDMwMzEzYTY0 MzQzMDNhM2EyZjMzMzIyZDMzMzIyMDNkM2UyMDM2MzMzNTM5MzAucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcD BQAkAQ1AMA0GCSqGSIb3DQEBCwUAA4IBAQAMZx6u4yUMpbG+95IUgcZUMnBHPZBE k7OeLIoQYzGcrFaaRgk/q7u73bckuiLiucVehpWbI5SPu/8lEzO6UakuZUWBvZ3i WUIP7T+GVABqTKC66YRfbxZGxNYDbHQ9PDkRst2OFCzONJsVWFvLAOonc/8pZ7Y6 AHvhUqPabdbUN562hPW47ReXIKvwadCBuPVelTCETQUJJjoNGC/VOfDYh6tCMr/c gqDtkP7kcO5EMbkvgFH+bOaoq9d+tiFd0T4ZQ9YEd78iguz+R0KNpew73ai0QJ4y NtaNTLxU3uKk+big9jYoOoxhFF720FO1JGemnOH4Icx7bHojKhixMx10 -----END CERTIFICATE-----Generated at Wed May 13 20:20:27 2026 by rpki-client