$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e203539303438.roa File: 323430313a613134303a313a3a2f34382d3634203d3e203539303438.roa (raw, json) Hash identifier: tbxaJzm+vwNqB4SFcmmdkJ3MDsVeszrT5pWzm6IOP90= Subject key identifier: 15:D7:3E:C4:0D:F4:55:64:35:4C:B3:86:0F:36:40:90:95:02:52:32 Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 1AFAE75CD11D96FDBFE3D2592D6C462FB063C628 Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e203539303438.roa Signing time: Mon 11 May 2026 07:05:29 +0000 ROA not before: Mon 11 May 2026 07:00:29 +0000 ROA not after: Mon 10 May 2027 07:05:29 +0000 asID: 59048 IP address blocks: 2401:a140:1::/48 maxlen: 64 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fa:e7:5c:d1:1d:96:fd:bf:e3:d2:59:2d:6c:46:2f:b0:63:c6:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 07:00:29 2026 GMT Not After : May 10 07:05:29 2027 GMT Subject: CN=15D73EC40DF45564354CB3860F36409095025232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:80:7e:07:4d:76:88:d8:b4:0a:47:bf:8f:49: 92:ae:d8:57:5f:8d:b8:e1:ec:b7:4d:94:9a:4e:bb: d8:bd:70:18:6d:f0:59:3e:83:86:c6:a8:40:df:5d: d6:2d:0b:79:96:74:f6:7c:90:e2:6e:a7:5b:e0:d5: 13:0e:34:3d:e0:43:b5:4b:20:3e:90:b9:39:49:c5: 3e:de:22:59:86:f9:52:74:5f:0d:c7:25:ff:ef:b0: 15:6e:09:af:81:d5:69:95:9e:33:47:2a:e9:26:b9: 90:9e:47:dd:dd:8d:c0:55:07:d2:c2:7a:2f:3b:2f: ee:6a:49:6e:fd:62:49:8e:06:51:90:3d:a5:6d:7b: f8:bf:c9:da:93:72:3e:c9:69:07:c0:7b:12:51:51: ae:a2:c9:a7:89:ab:4e:de:67:e5:20:0c:14:bc:59: 59:cb:51:f2:72:46:e4:a4:a0:2d:50:49:ce:3e:5f: e9:22:33:47:5b:28:6f:74:f2:73:f1:c1:c0:9c:b2: 94:24:92:be:74:b0:9d:c4:12:30:d4:a5:48:b8:79: 61:7e:11:42:ca:a6:2b:3e:7f:a6:ce:37:d5:f1:1b: 08:4e:ce:1a:ba:3b:d4:c7:54:1f:ef:55:a7:ca:50: 40:ff:4f:76:7c:30:fe:ce:59:94:d4:56:b5:20:1a: be:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:D7:3E:C4:0D:F4:55:64:35:4C:B3:86:0F:36:40:90:95:02:52:32 X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/323430313a613134303a313a3a2f34382d3634203d3e203539303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2401:a140:1::/48 Signature Algorithm: sha256WithRSAEncryption 46:b5:82:09:d3:17:a9:5a:b5:bb:93:dd:43:08:aa:91:a7:fb: c3:52:46:20:51:84:54:67:2f:c3:9c:15:98:c0:95:72:3d:aa: c3:3f:0a:38:be:18:a9:46:11:15:45:03:26:30:af:cc:a6:9d: e1:f7:f7:89:b1:6f:5f:26:d9:59:86:b1:4a:cc:21:df:3c:8a: 27:34:76:68:8a:2d:7e:c5:8f:34:3c:70:07:e9:4f:cf:2f:72: 3f:ce:ac:45:90:d0:9b:41:3f:1e:50:6f:ff:9f:ab:ad:95:2b: 4a:16:15:3d:2c:24:37:79:eb:62:c0:30:56:42:66:0b:18:12: d0:3b:9b:4e:34:6d:bd:54:6f:24:5e:d3:c9:a2:61:53:c7:45: 0f:e1:c9:8b:f5:42:52:df:0a:b8:10:a2:1a:5c:f8:60:bc:85: cb:db:39:96:71:cc:cd:76:64:c8:6e:e0:3d:bf:9a:46:37:e0: 78:99:35:61:54:ec:10:74:71:3c:74:5d:07:ad:5c:b2:69:c2: 8d:bf:53:8e:55:e4:77:b4:05:d3:ec:d2:1f:2d:dc:f3:f8:f1: b2:11:6c:c1:7a:50:06:26:e8:85:3b:15:54:86:1c:76:d3:d5: 00:b8:0b:3d:6a:ed:c2:e8:7a:b6:31:e3:62:3e:2c:3e:b5:ea: ea:cf:38:0b -----BEGIN CERTIFICATE----- MIIFEDCCA/igAwIBAgIUGvrnXNEdlv2/49JZLWxGL7BjxigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNzAwMjlaFw0yNzA1MTAwNzA1MjlaMDMxMTAvBgNV BAMTKDE1RDczRUM0MERGNDU1NjQzNTRDQjM4NjBGMzY0MDkwOTUwMjUyMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcgH4HTXaI2LQKR7+PSZKu2Fdf jbjh7LdNlJpOu9i9cBht8Fk+g4bGqEDfXdYtC3mWdPZ8kOJup1vg1RMOND3gQ7VL ID6QuTlJxT7eIlmG+VJ0Xw3HJf/vsBVuCa+B1WmVnjNHKukmuZCeR93djcBVB9LC ei87L+5qSW79YkmOBlGQPaVte/i/ydqTcj7JaQfAexJRUa6iyaeJq07eZ+UgDBS8 WVnLUfJyRuSkoC1QSc4+X+kiM0dbKG908nPxwcCcspQkkr50sJ3EEjDUpUi4eWF+ EULKpis+f6bON9XxGwhOzhq6O9THVB/vVafKUED/T3Z8MP7OWZTUVrUgGr55AgMB AAGjggIaMIICFjAdBgNVHQ4EFgQUFdc+xA30VWQ1TLOGDzZAkJUCUjIwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTU5MTI0MTA4NTk5NjIzNzEvMC8zMjM0MzAzMTNh NjEzMTM0MzAzYTMxM2EzYTJmMzQzODJkMzYzNDIwM2QzZTIwMzUzOTMwMzQzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEw DwQCAAIwCQMHACQBoUAAATANBgkqhkiG9w0BAQsFAAOCAQEARrWCCdMXqVq1u5Pd Qwiqkaf7w1JGIFGEVGcvw5wVmMCVcj2qwz8KOL4YqUYRFUUDJjCvzKad4ff3ibFv XybZWYaxSswh3zyKJzR2aIotfsWPNDxwB+lPzy9yP86sRZDQm0E/HlBv/5+rrZUr ShYVPSwkN3nrYsAwVkJmCxgS0DubTjRtvVRvJF7TyaJhU8dFD+HJi/VCUt8KuBCi Glz4YLyFy9s5lnHMzXZkyG7gPb+aRjfgeJk1YVTsEHRxPHRdB61csmnCjb9TjlXk d7QF0+zSHy3c8/jxshFswXpQBibohTsVVIYcdtPVALgLPWrtwuh6tjHjYj4sPrXq 6s84Cw== -----END CERTIFICATE-----Generated at Wed May 13 16:36:33 2026 by rpki-client