$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e20313338343231.roa File: 323430313a613134303a313a3a2f34382d3634203d3e20313338343231.roa (raw, json) Hash identifier: riYlo73ro1UBuX1d92nbs3O3ZPMpf+I2Nt6nZxNPDng= Subject key identifier: ED:DC:BB:B1:C4:06:7A:45:5C:32:89:7C:D5:43:35:C4:D5:07:2C:91 Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 7E9B7B4C1BE00AFF74D7F2F7305235EE5D41969A Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e20313338343231.roa Signing time: Mon 11 May 2026 07:05:29 +0000 ROA not before: Mon 11 May 2026 07:00:29 +0000 ROA not after: Mon 10 May 2027 07:05:29 +0000 asID: 138421 IP address blocks: 2401:a140:1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:9b:7b:4c:1b:e0:0a:ff:74:d7:f2:f7:30:52:35:ee:5d:41:96:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 07:00:29 2026 GMT Not After : May 10 07:05:29 2027 GMT Subject: CN=EDDCBBB1C4067A455C32897CD54335C4D5072C91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:22:53:7e:17:9f:8b:42:4a:72:c0:9e:1c:b3: bf:72:0b:52:39:ea:37:92:e8:c1:7c:9b:60:91:61: 9f:39:80:86:4c:f0:da:f4:c9:24:65:c6:e1:fb:ec: 98:1c:85:0e:c6:ba:5a:fc:0c:43:dc:6f:81:6e:c1: 7b:69:f7:19:14:9e:09:7a:86:ad:ee:40:d4:61:7b: f3:71:f5:3f:c8:be:e2:9f:11:31:35:0c:75:18:82: 4b:5e:7b:47:d4:0f:4d:d1:d5:e5:22:9c:e5:68:e5: 07:f4:2d:a5:7c:2d:cf:1c:df:ee:6c:e6:27:c5:96: b1:48:5a:dd:2d:4f:53:f8:5e:7d:07:6b:b9:7d:c6: 14:42:78:64:82:a4:a1:9f:53:83:86:ee:1f:c7:98: a5:f9:45:40:ff:5d:bc:6b:a9:44:09:e7:a7:1d:19: 6e:96:bb:fe:af:0f:38:5c:38:79:cd:82:94:1d:73: ab:55:30:cb:a7:eb:35:3c:aa:37:7a:c8:36:c2:bd: f0:b6:93:1e:9e:ed:8b:39:2a:e7:bb:80:7d:33:08: 09:fb:c0:d7:1d:de:0f:ef:39:e1:09:28:3c:27:b4: 43:2e:f7:ea:b2:73:cb:91:18:0c:4b:bb:4b:d3:ad: e0:e2:14:be:85:ec:81:19:79:10:7a:e7:74:bc:34: 61:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DC:BB:B1:C4:06:7A:45:5C:32:89:7C:D5:43:35:C4:D5:07:2C:91 X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e20313338343231.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:a140:1::/48 Signature Algorithm: sha256WithRSAEncryption 4d:55:6e:a9:3c:31:39:7c:6f:3c:96:17:d2:1d:d7:ba:aa:6a: 23:02:5b:d7:a3:52:e2:a4:eb:6e:29:4f:43:68:7e:b2:65:aa: 00:32:df:2e:a2:98:fe:30:4d:cf:dd:74:be:50:49:c2:a9:a8: f7:bd:f2:2a:7e:a5:a6:a9:b0:f4:82:d8:8c:45:7d:22:c0:45: 94:ae:7b:2a:5b:03:9f:9b:4f:9b:21:0a:22:f2:e8:51:4d:c4: 24:3c:ac:46:a4:92:d2:5e:a4:a6:a2:fe:c7:78:48:8c:0f:c3: c8:61:0e:f6:10:20:38:4d:d2:9b:ef:d8:5d:9a:a1:f5:67:d4: 91:52:97:eb:e5:08:19:36:24:ce:a6:6f:e5:f7:1c:a6:54:6e: 1f:d5:13:68:89:05:ea:bd:5e:39:30:89:cf:11:c6:8f:a9:5d: 8c:5f:aa:e1:ad:8e:b2:fa:83:80:27:50:6d:98:c9:c8:c7:08: 52:58:93:6d:a5:da:5e:a4:b2:c4:63:76:7f:58:4e:dd:d7:9e: 0d:42:0a:f0:18:dc:b3:0e:a2:aa:dd:a8:f5:bb:e7:2e:26:17: 13:01:40:67:9c:92:11:de:14:e4:71:8e:90:57:6d:85:a4:c8: 08:e8:36:78:1d:05:f4:85:b6:5f:dd:32:42:8b:7a:ea:55:1b: 2a:1f:79:26 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUfpt7TBvgCv901/L3MFI17l1BlpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNzAwMjlaFw0yNzA1MTAwNzA1MjlaMDMxMTAvBgNV BAMTKEVERENCQkIxQzQwNjdBNDU1QzMyODk3Q0Q1NDMzNUM0RDUwNzJDOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaIlN+F5+LQkpywJ4cs79yC1I5 6jeS6MF8m2CRYZ85gIZM8Nr0ySRlxuH77JgchQ7Gulr8DEPcb4FuwXtp9xkUngl6 hq3uQNRhe/Nx9T/IvuKfETE1DHUYgktee0fUD03R1eUinOVo5Qf0LaV8Lc8c3+5s 5ifFlrFIWt0tT1P4Xn0Ha7l9xhRCeGSCpKGfU4OG7h/HmKX5RUD/XbxrqUQJ56cd GW6Wu/6vDzhcOHnNgpQdc6tVMMun6zU8qjd6yDbCvfC2kx6e7Ys5Kue7gH0zCAn7 wNcd3g/vOeEJKDwntEMu9+qyc8uRGAxLu0vTreDiFL6F7IEZeRB653S8NGHLAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU7dy7scQGekVcMol81UM1xNUHLJEwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcxLzAvMzIzNDMwMzEz YTYxMzEzNDMwM2EzMTNhM2EyZjM0MzgyZDM2MzQyMDNkM2UyMDMxMzMzODM0MzIz MS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQT MBEwDwQCAAIwCQMHACQBoUAAATANBgkqhkiG9w0BAQsFAAOCAQEATVVuqTwxOXxv PJYX0h3XuqpqIwJb16NS4qTrbilPQ2h+smWqADLfLqKY/jBNz910vlBJwqmo973y Kn6lpqmw9ILYjEV9IsBFlK57KlsDn5tPmyEKIvLoUU3EJDysRqSS0l6kpqL+x3hI jA/DyGEO9hAgOE3Sm+/YXZqh9WfUkVKX6+UIGTYkzqZv5fccplRuH9UTaIkF6r1e OTCJzxHGj6ldjF+q4a2OsvqDgCdQbZjJyMcIUliTbaXaXqSyxGN2f1hO3deeDUIK 8Bjcsw6iqt2o9bvnLiYXEwFAZ5ySEd4U5HGOkFdthaTICOg2eB0F9IW2X90yQot6 6lUbKh95Jg== -----END CERTIFICATE-----Generated at Wed May 13 18:04:09 2026 by rpki-client