$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e20313531333030.roa File: 323430333a346563303a3a2f33322d313238203d3e20313531333030.roa (raw, json) Hash identifier: iRw2UFtaa/yuLpD/0N/uAzewEYnOeV1zI1MMbaXH7ao= Subject key identifier: A2:6E:B8:98:37:18:42:D8:C6:55:7D:D7:DB:19:C9:E8:C1:77:93:33 Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 72FCB4D5975749E0D6D34DC0F863C49C76966159 Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e20313531333030.roa Signing time: Wed 22 Jul 2026 06:15:44 +0000 ROA not before: Wed 22 Jul 2026 06:10:44 +0000 ROA not after: Wed 21 Jul 2027 06:15:44 +0000 asID: 151300 IP address blocks: 2403:4ec0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:fc:b4:d5:97:57:49:e0:d6:d3:4d:c0:f8:63:c4:9c:76:96:61:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Jul 22 06:10:44 2026 GMT Not After : Jul 21 06:15:44 2027 GMT Subject: CN=A26EB898371842D8C6557DD7DB19C9E8C1779333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d1:8e:7e:5d:fe:3e:8c:38:ac:6b:9c:cf:cc: 65:72:79:72:c5:d9:98:5e:ff:3f:c5:f8:13:e7:65: 25:4c:4f:a4:bb:81:aa:06:78:67:19:d3:c1:e3:79: d7:8b:15:85:a0:51:2b:e0:7a:dc:29:fb:7d:63:70: 94:65:ea:51:80:1b:4d:2b:b9:17:f8:06:e1:99:cb: 8c:8d:d1:eb:dc:61:a9:69:3b:34:29:a6:90:3d:ab: 1e:ec:05:78:3d:53:ce:9c:df:dd:e0:dc:06:75:fe: bb:44:ef:9f:32:2b:0a:37:cc:08:69:46:65:5b:27: 05:b6:b4:13:bc:5a:0e:01:cb:a0:f8:2e:4d:6e:4f: c7:67:54:07:b4:83:34:d2:96:91:54:72:0d:62:ba: a1:6d:67:33:e2:2a:ef:39:24:6a:1e:40:37:53:8f: 82:5c:6e:61:f9:b0:de:c0:bd:ce:c6:af:f5:bb:ac: 44:e4:6a:c4:34:5f:38:2a:b2:6d:42:01:ea:00:c0: 9e:88:b2:3c:9b:00:40:51:03:2f:15:8d:ab:d2:4c: 06:ba:ce:06:e5:4f:3a:98:d1:8b:ff:8b:9e:c2:f2: c2:9c:e5:6c:dc:53:a7:c0:34:f8:ba:ba:68:e0:93: c1:fb:5e:bc:3a:ac:a1:19:b5:45:e4:78:4e:9a:2a: b9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:6E:B8:98:37:18:42:D8:C6:55:7D:D7:DB:19:C9:E8:C1:77:93:33 X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/323430333a346563303a3a2f33322d313238203d3e20313531333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:4ec0::/32 Signature Algorithm: sha256WithRSAEncryption 68:f5:c5:42:dc:67:17:4a:25:7d:35:36:94:e0:af:63:30:2c: 4f:fa:e7:f3:78:d8:28:00:49:a4:5b:fc:26:88:b3:67:4d:0f: 09:08:1f:37:94:8b:f9:db:9b:b5:42:fd:d9:3f:57:59:c2:25: 60:62:9e:3f:ae:e6:81:e7:dc:97:71:96:9b:bf:64:57:f5:b4: 47:da:e3:e0:36:8b:c4:f5:07:3b:8e:94:14:ed:4d:8f:08:23: 0b:43:d6:7a:06:ec:e5:2a:53:f7:47:fb:0e:35:49:83:91:4d: 5b:64:96:f9:ad:d4:da:85:be:57:5a:ca:fd:ef:3a:dd:aa:38: 61:c4:43:99:c8:b4:fc:d2:41:7a:70:37:3b:5e:cf:54:f7:bc: f4:95:24:47:2c:0c:62:ca:e0:39:15:e8:31:32:20:d4:50:c5: 3a:ae:a8:79:18:12:79:d8:73:dd:a6:7e:39:be:94:d1:0b:dd: 6e:2b:4f:32:bb:c9:ac:28:94:69:99:60:c9:fa:1d:bd:0b:73: c3:85:9c:d8:ea:b6:50:05:34:f8:5c:03:fc:e6:3e:15:67:74: 6b:91:2a:db:b0:b9:fe:d0:c3:d6:08:1c:51:ec:1e:59:f5:fa: 26:1a:9a:a9:a8:ff:24:be:e9:8c:d0:35:a1:ac:8d:10:0d:10: 65:fd:a3:35 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUcvy01ZdXSeDW003A+GPEnHaWYVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG RUJCQkJCNjAeFw0yNjA3MjIwNjEwNDRaFw0yNzA3MjEwNjE1NDRaMDMxMTAvBgNV BAMTKEEyNkVCODk4MzcxODQyRDhDNjU1N0REN0RCMTlDOUU4QzE3NzkzMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ0Y5+Xf4+jDisa5zPzGVyeXLF 2Zhe/z/F+BPnZSVMT6S7gaoGeGcZ08HjedeLFYWgUSvgetwp+31jcJRl6lGAG00r uRf4BuGZy4yN0evcYalpOzQpppA9qx7sBXg9U86c393g3AZ1/rtE758yKwo3zAhp RmVbJwW2tBO8Wg4By6D4Lk1uT8dnVAe0gzTSlpFUcg1iuqFtZzPiKu85JGoeQDdT j4JcbmH5sN7Avc7Gr/W7rETkasQ0Xzgqsm1CAeoAwJ6IsjybAEBRAy8VjavSTAa6 zgblTzqY0Yv/i57C8sKc5WzcU6fANPi6umjgk8H7Xrw6rKEZtUXkeE6aKrnxAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQUom64mDcYQtjGVX3X2xnJ6MF3kzMwHwYDVR0j BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5 ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTc0MzM3ODk3ODY3NTA5NzcvMC8zMjM0MzAzMzNh MzQ2NTYzMzAzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMxMzUzMTMzMzAzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQDTsAwDQYJKoZIhvcNAQELBQADggEBAGj1xULcZxdKJX01NpTg r2MwLE/65/N42CgASaRb/CaIs2dNDwkIHzeUi/nbm7VC/dk/V1nCJWBinj+u5oHn 3Jdxlpu/ZFf1tEfa4+A2i8T1BzuOlBTtTY8IIwtD1noG7OUqU/dH+w41SYORTVtk lvmt1NqFvldayv3vOt2qOGHEQ5nItPzSQXpwNztez1T3vPSVJEcsDGLK4DkV6DEy INRQxTquqHkYEnnYc92mfjm+lNEL3W4rTzK7yawolGmZYMn6Hb0Lc8OFnNjqtlAF NPhcA/zmPhVndGuRKtuwuf7Qw9YIHFHsHln1+iYamqmo/yS+6YzQNaGsjRANEGX9 ozU= -----END CERTIFICATE-----Generated at Fri Jul 24 18:06:20 2026 by rpki-client