$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/323430383a383736633a313763303a3a2f34342d3434203d3e2034383337.roa File: 323430383a383736633a313763303a3a2f34342d3434203d3e2034383337.roa (raw, json) Hash identifier: PpnxDLQSDIrOKz091YwUrEOGO7s8eE4uzBinMWD3fEU= Subject key identifier: E8:AD:2F:83:1B:91:BF:FE:F8:BB:76:9A:35:F5:3A:E6:53:B0:E6:83 Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Certificate serial: 6F7D14E2E7EA061FF414BDB4ED03F2AE3F276F1A Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/323430383a383736633a313763303a3a2f34342d3434203d3e2034383337.roa Signing time: Wed 13 May 2026 02:50:08 +0000 ROA not before: Wed 13 May 2026 02:45:08 +0000 ROA not after: Wed 12 May 2027 02:50:08 +0000 asID: 4837 IP address blocks: 2408:876c:17c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:7d:14:e2:e7:ea:06:1f:f4:14:bd:b4:ed:03:f2:ae:3f:27:6f:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925 Validity Not Before: May 13 02:45:08 2026 GMT Not After : May 12 02:50:08 2027 GMT Subject: CN=E8AD2F831B91BFFEF8BB769A35F53AE653B0E683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:49:55:d5:2b:9e:0e:7c:52:66:65:46:ed:b1: 1a:29:31:08:26:80:d3:fc:29:01:39:01:e3:67:e7: 7e:96:5e:da:d1:81:48:c7:4e:f8:f8:9e:41:37:61: dc:68:3d:ae:6c:df:e4:4d:e0:4c:26:2c:bc:b2:05: 9b:93:fb:ee:9f:f9:96:f3:c0:ab:51:81:5f:14:56: 0d:c4:66:c1:15:fd:65:93:ec:66:10:17:56:50:1c: ba:1b:5f:35:eb:7f:cd:c6:3f:9a:32:a6:eb:c1:d5: 19:74:bc:a7:36:92:31:18:f5:db:52:93:77:0c:32: 35:4d:8c:48:7c:8f:34:30:37:70:72:b7:ab:ff:bc: 26:fa:03:90:40:18:2a:07:38:3d:9f:d7:ca:e9:70: 93:82:ba:c0:f5:ff:2d:41:fd:f2:8e:72:86:84:38: 60:95:67:3a:c1:7a:c7:58:85:51:16:33:a3:e8:4f: 4b:a9:64:5c:72:fc:0e:ce:a5:28:6c:f2:15:61:74: 20:f7:0d:39:99:2a:de:19:5f:81:23:60:02:0e:07: aa:5c:df:bf:02:7b:24:b0:5b:de:d7:bb:e1:f7:32: 43:da:20:82:ff:13:f8:52:d3:95:1e:8e:81:de:74: 55:2f:4f:68:a5:d6:20:80:0d:a1:08:97:e5:e3:f3: e1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AD:2F:83:1B:91:BF:FE:F8:BB:76:9A:35:F5:3A:E6:53:B0:E6:83 X509v3 Authority Key Identifier: keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/323430383a383736633a313763303a3a2f34342d3434203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2408:876c:17c0::/44 Signature Algorithm: sha256WithRSAEncryption bf:56:1d:96:9b:ff:2a:1a:70:0a:ec:af:45:76:92:58:ae:f3: 20:94:36:3f:9b:8b:8e:2b:03:58:4c:fe:ab:50:37:75:72:82: 76:8f:86:a3:68:25:96:2c:e3:9d:4b:ec:48:e2:da:fb:82:62: f0:99:40:53:c6:cd:a0:d2:a7:73:e3:9c:53:3a:e2:45:fc:bb: 2b:17:b7:31:f4:88:7f:95:1c:00:cc:44:6d:85:7f:b4:8c:02: 1b:06:87:2e:d2:c8:db:c6:da:77:fb:f6:76:94:ca:05:0f:0d: 10:dc:9f:7d:62:30:d4:97:43:92:e5:47:41:99:24:39:90:0b: 02:9a:c4:b2:39:f9:4b:52:77:a7:7c:5b:85:66:6c:30:07:44: 90:05:5f:86:7d:fb:18:f3:7e:0f:20:27:43:45:31:6b:a2:80: 72:56:1d:56:aa:f1:b8:72:73:6d:b3:cd:fb:43:f3:46:74:a2: cb:c2:e9:6d:44:27:04:d7:07:60:fc:05:2e:ec:c3:9d:b8:2c: c5:f5:f2:a3:2f:1b:c3:f3:57:8f:c8:6d:8c:01:cc:d2:e6:22: 4b:b6:ed:f5:52:9a:af:9c:8b:79:94:6f:d6:ac:32:97:d9:4e: d4:77:05:9e:a9:7e:4c:b7:0d:bf:ad:77:41:fc:a1:64:98:56: 3e:7e:60:b5 -----BEGIN CERTIFICATE----- MIIFLDCCBBSgAwIBAgIUb30U4ufqBh/0FL207QPyrj8nbxowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxNDNDQjMwMDAwMTEwLwYDVQQFEyg4QTFCNEU0QTYz Mjk1RjE4QjRGMDZGRkY2QUQwMkMzMTY1QkY5OTI1MB4XDTI2MDUxMzAyNDUwOFoX DTI3MDUxMjAyNTAwOFowMzExMC8GA1UEAxMoRThBRDJGODMxQjkxQkZGRUY4QkI3 NjlBMzVGNTNBRTY1M0IwRTY4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBANpJVdUrng58UmZlRu2xGikxCCaA0/wpATkB42fnfpZe2tGBSMdO+PieQTdh 3Gg9rmzf5E3gTCYsvLIFm5P77p/5lvPAq1GBXxRWDcRmwRX9ZZPsZhAXVlAcuhtf Net/zcY/mjKm68HVGXS8pzaSMRj121KTdwwyNU2MSHyPNDA3cHK3q/+8JvoDkEAY Kgc4PZ/Xyulwk4K6wPX/LUH98o5yhoQ4YJVnOsF6x1iFURYzo+hPS6lkXHL8Ds6l KGzyFWF0IPcNOZkq3hlfgSNgAg4HqlzfvwJ7JLBb3te74fcyQ9oggv8T+FLTlR6O gd50VS9PaKXWIIANoQiX5ePz4dMCAwEAAaOCAh8wggIbMB0GA1UdDgQWBBTorS+D G5G//vi7dpo19TrmU7DmgzAfBgNVHSMEGDAWgBSKG05KYylfGLTwb/9q0CwxZb+Z JTAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0fBGwwajBooGagZIZicnN5bmM6Ly9ycGtp LXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk2NzA0NTkzNjk1MzQyNTkzLzEvOEExQjRF NEE2MzI5NUYxOEI0RjA2RkZGNkFEMDJDMzE2NUJGOTkyNS5jcmwwfgYIKwYBBQUH AQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9z aXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJGRDFGRjIvaWh0T1NtTXBY eGkwOEdfX2F0QXNNV1dfbVNVLmNlcjCBlQYIKwYBBQUHAQsEgYgwgYUwgYIGCCsG AQUFBzALhnZyc3luYzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwOTY3MDQ1 OTM2OTUzNDI1OTMvMS8zMjM0MzAzODNhMzgzNzM2NjMzYTMxMzc2MzMwM2EzYTJm MzQzNDJkMzQzNDIwM2QzZTIwMzQzODMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQkCIdsF8AwDQYJ KoZIhvcNAQELBQADggEBAL9WHZab/yoacArsr0V2kliu8yCUNj+bi44rA1hM/qtQ N3VygnaPhqNoJZYs451L7Eji2vuCYvCZQFPGzaDSp3PjnFM64kX8uysXtzH0iH+V HADMRG2Ff7SMAhsGhy7SyNvG2nf79naUygUPDRDcn31iMNSXQ5LlR0GZJDmQCwKa xLI5+UtSd6d8W4VmbDAHRJAFX4Z9+xjzfg8gJ0NFMWuigHJWHVaq8bhyc22zzftD 80Z0osvC6W1EJwTXB2D8BS7sw524LMX18qMvG8PzV4/IbYwBzNLmIku27fVSmq+c i3mUb9asMpfZTtR3BZ6pfky3Db+td0H8oWSYVj5+YLU= -----END CERTIFICATE-----Generated at Wed May 13 14:27:51 2026 by rpki-client