$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/323430383a383736633a313730303a3a2f34342d3434203d3e2034383337.roa File: 323430383a383736633a313730303a3a2f34342d3434203d3e2034383337.roa (raw, json) Hash identifier: 7wvLVXvIKE8cQ8zVM3n5P7h6OFOD61A5PKddO+erzZM= Subject key identifier: 86:45:9E:1B:9F:C2:7A:92:60:5F:31:C4:51:D0:4F:06:9A:03:0A:55 Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 3375ADE14909CCCDB9BCCEA98EF4427250FC01D6 Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/323430383a383736633a313730303a3a2f34342d3434203d3e2034383337.roa Signing time: Wed 13 May 2026 02:50:07 +0000 ROA not before: Wed 13 May 2026 02:45:07 +0000 ROA not after: Wed 12 May 2027 02:50:07 +0000 asID: 4837 IP address blocks: 2408:876c:1700::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:75:ad:e1:49:09:cc:cd:b9:bc:ce:a9:8e:f4:42:72:50:fc:01:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: May 13 02:45:07 2026 GMT Not After : May 12 02:50:07 2027 GMT Subject: CN=86459E1B9FC27A92605F31C451D04F069A030A55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:69:7a:f6:13:e5:bf:bf:ec:dc:49:46:72: bf:c0:4e:6e:50:5d:4b:2e:41:18:fd:58:fc:c3:55: c5:c5:8c:87:ed:55:03:2f:78:82:d9:0b:cc:66:39: 10:72:6f:9a:4f:c7:7c:20:21:24:b4:ca:68:2e:4d: 2f:20:64:bd:be:a8:6f:6a:1c:f2:b2:e9:4c:33:54: 66:e0:d5:fe:08:67:65:a9:99:e9:78:89:a2:8b:21: 15:15:35:eb:98:90:0f:cd:b4:c7:6e:73:81:05:65: 86:fe:9b:a8:65:0b:00:64:ec:66:a5:98:c8:08:21: 69:b1:96:87:2e:a2:42:2b:c8:bf:a2:4e:8c:10:c8: f8:a6:a9:04:dd:fd:f3:cd:5a:b7:7b:44:dc:83:93: e5:bc:70:23:91:d2:87:8f:9a:ee:87:bb:19:ab:cd: 12:2a:48:77:fc:85:b8:ed:34:c2:28:ff:95:db:ba: e1:71:ae:3d:6c:09:68:d0:2d:b9:4f:0f:0f:bf:bd: 21:f9:f8:af:a8:d6:d2:53:7f:ff:72:2f:29:11:02: 6e:3c:ec:0d:2b:ac:83:49:e9:6d:c5:51:b4:a5:2d: 66:cb:29:8c:64:41:0d:45:7e:95:22:5b:ec:76:34: 3e:93:6e:c1:17:01:ae:fa:b5:87:a1:f0:28:98:28: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:45:9E:1B:9F:C2:7A:92:60:5F:31:C4:51:D0:4F:06:9A:03:0A:55 X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/323430383a383736633a313730303a3a2f34342d3434203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2408:876c:1700::/44 Signature Algorithm: sha256WithRSAEncryption 51:ef:45:db:1d:fb:a7:93:f9:2c:23:25:f7:af:c2:b7:d7:fe: d7:14:55:0d:d8:e6:fd:cc:f9:cf:1b:ba:70:b1:4d:17:2f:c8: 59:f4:3b:c7:bf:b1:c6:f5:16:09:a1:39:d4:a5:73:95:7e:ec: 24:0a:4f:de:9a:c5:22:aa:b3:b1:21:87:ae:dc:2c:0e:cd:29: db:a8:61:c0:5c:ab:5b:51:3e:17:a0:cf:b1:8e:0c:8d:04:df: a9:73:b2:58:46:2f:f6:76:08:97:59:8f:df:f4:d7:d9:82:40: 09:69:a3:76:58:4c:46:c7:d4:7c:bf:61:22:13:28:4c:a7:cd: e3:47:4f:6a:08:b4:59:d3:98:98:66:a9:f0:dd:1a:8f:1a:ad: f4:bb:57:00:e5:48:bb:98:74:1a:c3:14:b5:a3:dd:ac:4b:cc: d3:cf:e7:14:5b:cd:05:41:b8:67:ef:22:3e:ba:e1:37:b4:23: c4:97:92:89:2a:9a:b1:23:8b:fd:f6:86:e4:7e:3f:cf:d3:45: 66:ed:80:16:a0:27:4d:db:ba:b6:3e:57:92:5c:fd:ec:49:c6: 3b:0d:b9:90:3f:2f:97:e2:2b:cb:f2:19:d4:b1:67:6e:e4:29: 08:81:31:54:02:d6:2a:2e:36:d1:19:dd:18:6a:d2:37:01:dd: 46:7d:7b:dd -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUM3Wt4UkJzM25vM6pjvRCclD8AdYwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUxMzAyNDUwN1oX DTI3MDUxMjAyNTAwN1owMzExMC8GA1UEAxMoODY0NTlFMUI5RkMyN0E5MjYwNUYz MUM0NTFEMDRGMDY5QTAzMEE1NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALQhaXr2E+W/v+zcSUZyv8BOblBdSy5BGP1Y/MNVxcWMh+1VAy94gtkLzGY5 EHJvmk/HfCAhJLTKaC5NLyBkvb6ob2oc8rLpTDNUZuDV/ghnZamZ6XiJooshFRU1 65iQD820x25zgQVlhv6bqGULAGTsZqWYyAghabGWhy6iQivIv6JOjBDI+KapBN39 881at3tE3IOT5bxwI5HSh4+a7oe7GavNEipId/yFuO00wij/ldu64XGuPWwJaNAt uU8PD7+9Ifn4r6jW0lN//3IvKRECbjzsDSusg0npbcVRtKUtZsspjGRBDUV+lSJb 7HY0PpNuwRcBrvq1h6HwKJgoe/UCAwEAAaOCAh8wggIbMB0GA1UdDgQWBBSGRZ4b n8J6kmBfMcRR0E8GmgMKVTAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsG AQUFBzALhnZyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTY3MDQ1 OTM2OTUzNDI1OTMvMS8zMjM0MzAzODNhMzgzNzM2NjMzYTMxMzczMDMwM2EzYTJm MzQzNDJkMzQzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkCIdsFwAwDQYJ KoZIhvcNAQELBQADggEBAFHvRdsd+6eT+SwjJfevwrfX/tcUVQ3Y5v3M+c8bunCx TRcvyFn0O8e/scb1FgmhOdSlc5V+7CQKT96axSKqs7Ehh67cLA7NKduoYcBcq1tR Phegz7GODI0E36lzslhGL/Z2CJdZj9/019mCQAlpo3ZYTEbH1Hy/YSITKEynzeNH T2oItFnTmJhmqfDdGo8arfS7VwDlSLuYdBrDFLWj3axLzNPP5xRbzQVBuGfvIj66 4Te0I8SXkokqmrEji/32huR+P8/TRWbtgBagJ03burY+V5Jc/exJxjsNuZA/L5fi K8vyGdSxZ27kKQiBMVQC1iouNtEZ3Rhq0jcB3UZ9e90= -----END CERTIFICATE-----Generated at Wed May 13 14:27:30 2026 by rpki-client