$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a31363a3a2f34382d3438203d3e203234313439.roa File: 323430313a386430303a31363a3a2f34382d3438203d3e203234313439.roa (raw, json) Hash identifier: ErBcWMqZ5s+wIbRKaVusAwV9JlpbW+rCeizC3yRtTEE= Subject key identifier: 4A:02:F4:9A:D1:BE:0A:1E:59:CD:43:B1:3D:A8:A7:BD:0F:B5:11:F6 Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Certificate serial: 033C21D0FFD0DE81A31D222F0E9D16DD5F034653 Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a31363a3a2f34382d3438203d3e203234313439.roa Signing time: Fri 08 May 2026 10:24:21 +0000 ROA not before: Fri 08 May 2026 10:19:21 +0000 ROA not after: Fri 07 May 2027 10:24:21 +0000 asID: 24149 IP address blocks: 2401:8d00:16::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3c:21:d0:ff:d0:de:81:a3:1d:22:2f:0e:9d:16:dd:5f:03:46:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86 Validity Not Before: May 8 10:19:21 2026 GMT Not After : May 7 10:24:21 2027 GMT Subject: CN=4A02F49AD1BE0A1E59CD43B13DA8A7BD0FB511F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e2:63:5e:85:e6:6b:14:f4:32:c6:49:ae:de: b1:a0:83:69:8b:0a:7b:3f:30:a4:08:44:81:a3:c9: aa:79:7b:1b:23:43:82:dc:b6:63:93:8a:62:96:3c: 86:47:3b:91:fc:19:2a:ef:a6:9b:75:e0:05:a9:4f: 97:f9:cf:fd:f8:73:53:e3:a5:09:4b:bb:2c:fa:c6: 55:de:2d:34:a1:57:dc:a0:4b:b2:a5:82:2c:d2:22: ac:63:c9:28:e1:f9:f0:5a:70:9c:6a:5d:c6:6b:e0: b4:34:2c:11:ae:a4:6f:54:8f:23:61:a5:93:0f:1e: c3:d7:7b:72:10:a8:f1:f0:c1:cb:c0:4d:60:2c:d8: 35:b7:53:1b:4a:ff:08:21:99:30:85:3a:01:94:ff: f2:8c:a9:aa:5e:48:a4:58:60:d2:f1:06:0d:95:0f: 47:23:09:0a:b4:11:3a:7f:7a:97:a7:7e:fa:77:18: 8f:7f:2e:a6:30:af:c0:ae:2d:35:38:14:92:8b:04: d0:98:29:db:98:e3:75:07:31:01:c4:21:74:fa:e6: cf:0c:4f:0d:da:5b:53:38:05:62:3b:58:fa:c3:bd: 3d:2d:b1:20:38:45:05:55:1d:da:ad:25:a2:2b:86: f5:69:e8:35:75:97:a4:d1:eb:87:fd:49:24:43:c3: fc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:02:F4:9A:D1:BE:0A:1E:59:CD:43:B1:3D:A8:A7:BD:0F:B5:11:F6 X509v3 Authority Key Identifier: keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/323430313a386430303a31363a3a2f34382d3438203d3e203234313439.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:8d00:16::/48 Signature Algorithm: sha256WithRSAEncryption 04:71:72:95:5d:e9:e6:90:0c:53:6e:f4:19:3b:6f:0d:b2:5f: 56:40:cc:ac:31:de:1b:98:66:32:36:3a:e9:9f:30:75:8d:5e: 81:09:b4:04:56:b2:e3:50:ab:51:80:e6:b5:be:69:86:05:a2: f4:a5:7b:01:a2:3d:ed:dc:7b:69:6c:a3:00:48:b4:86:6d:c5: f5:4d:17:a9:7b:6a:f2:11:8d:bd:0d:5c:4b:24:88:d9:57:ac: 20:8a:f9:30:3b:f2:d8:ad:86:dd:44:59:63:21:31:07:ad:84: 57:3b:d0:9c:66:c5:b1:ea:ff:73:df:bd:c5:cd:fd:3e:eb:09: c7:43:52:8b:87:f1:90:c1:cd:dd:2f:90:c6:3d:71:75:ac:10: e7:6c:ca:8f:33:69:0a:39:8d:f2:9c:c3:da:fe:13:3c:76:58: 93:61:54:56:c2:7b:5c:93:c9:34:f5:4e:97:b3:16:36:a0:7c: 2c:76:5e:bf:ad:49:00:61:ac:93:7d:13:7b:49:ec:69:1f:8a: a9:30:ea:d0:18:d7:f9:ad:10:81:8c:9b:4d:99:d9:1d:04:0f: 8d:69:c7:29:7c:76:a8:cf:aa:a3:b8:6a:a9:a0:1b:c3:16:5d: fe:f6:c1:72:c9:17:48:0e:e2:85:d9:03:62:9a:74:7b:af:0c: a1:79:24:23 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUAzwh0P/Q3oGjHSIvDp0W3V8DRlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0 MzYwQUU4NjAeFw0yNjA1MDgxMDE5MjFaFw0yNzA1MDcxMDI0MjFaMDMxMTAvBgNV BAMTKDRBMDJGNDlBRDFCRTBBMUU1OUNENDNCMTNEQThBN0JEMEZCNTExRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc4mNeheZrFPQyxkmu3rGgg2mL Cns/MKQIRIGjyap5exsjQ4LctmOTimKWPIZHO5H8GSrvppt14AWpT5f5z/34c1Pj pQlLuyz6xlXeLTShV9ygS7KlgizSIqxjySjh+fBacJxqXcZr4LQ0LBGupG9UjyNh pZMPHsPXe3IQqPHwwcvATWAs2DW3UxtK/wghmTCFOgGU//KMqapeSKRYYNLxBg2V D0cjCQq0ETp/epenfvp3GI9/LqYwr8CuLTU4FJKLBNCYKduY43UHMQHEIXT65s8M Tw3aW1M4BWI7WPrDvT0tsSA4RQVVHdqtJaIrhvVp6DV1l6TR64f9SSRDw/yhAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQUSgL0mtG+Ch5ZzUOxPainvQ+1EfYwHwYDVR0j BBgwFoAUpIKQt7RENULQRg/Um98bRENgroYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg4NDcyNzI1NDQ4Mjk0Ny8wL0E0ODI5MEI3QjQ0NDM1NDJEMDQ2MEZENDlCREYx QjQ0NDM2MEFFODYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTQ4MjkwQjdCNDQ0MzU0MkQwNDYwRkQ0OUJERjFCNDQ0MzYwQUU4Ni5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk0ODg0NzI3MjU0NDgyOTQ3LzAvMzIzNDMwMzEz YTM4NjQzMDMwM2EzMTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzIzNDMxMzQz OS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQBjQAAFjANBgkqhkiG9w0BAQsFAAOCAQEABHFylV3p5pAM U270GTtvDbJfVkDMrDHeG5hmMjY66Z8wdY1egQm0BFay41CrUYDmtb5phgWi9KV7 AaI97dx7aWyjAEi0hm3F9U0XqXtq8hGNvQ1cSySI2VesIIr5MDvy2K2G3URZYyEx B62EVzvQnGbFser/c9+9xc39PusJx0NSi4fxkMHN3S+Qxj1xdawQ52zKjzNpCjmN 8pzD2v4TPHZYk2FUVsJ7XJPJNPVOl7MWNqB8LHZev61JAGGsk30Te0nsaR+KqTDq 0BjX+a0QgYybTZnZHQQPjWnHKXx2qM+qo7hqqaAbwxZd/vbBcskXSA7ihdkDYpp0 e68MoXkkIw== -----END CERTIFICATE-----Generated at Wed May 13 21:32:15 2026 by rpki-client