$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098834824765898754/0/323430363a643263303a3a2f33322d3332203d3e2030.roa File: 323430363a643263303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: FwOErwlAiR3u/ZG967hSx7vY8EONG5MybUZ/8LS5gRE= Subject key identifier: F2:09:6C:41:68:47:A8:62:5E:DB:FE:F1:4A:DF:39:50:44:48:07:75 Certificate issuer: /CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Certificate serial: 7D22EA6EB415C01188229F8DC31A3C2B33B29B28 Authority key identifier: CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/323430363a643263303a3a2f33322d3332203d3e2030.roa Signing time: Tue 21 Apr 2026 05:05:41 +0000 ROA not before: Tue 21 Apr 2026 05:00:41 +0000 ROA not after: Tue 20 Apr 2027 05:05:41 +0000 asID: 0 IP address blocks: 2406:d2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:22:ea:6e:b4:15:c0:11:88:22:9f:8d:c3:1a:3c:2b:33:b2:9b:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFB23E5C25BCDF75B10365741E60EA1870019718 Validity Not Before: Apr 21 05:00:41 2026 GMT Not After : Apr 20 05:05:41 2027 GMT Subject: CN=F2096C416847A8625EDBFEF14ADF395044480775 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:c7:b9:2a:45:9f:5c:cf:24:5e:6c:3b:f5: e5:4c:ca:b2:e4:7f:00:50:11:7d:ca:ba:9c:43:ba: 36:36:62:86:c9:51:b3:bf:56:02:79:01:ee:86:71: 51:66:4a:71:ed:ea:8f:af:95:4c:a6:75:36:90:53: 77:47:c0:17:29:d0:90:2f:b9:2d:e2:e8:af:42:28: 9c:09:df:71:7a:4c:55:2c:ba:62:fa:20:bf:a1:2b: ba:b0:7f:40:c3:e4:76:3e:93:77:da:75:6e:32:1d: 9f:8d:5a:42:9d:88:66:78:f3:32:9a:20:54:bf:c0: 96:11:65:18:0a:e4:89:dc:1b:7a:94:a0:2a:14:3e: 7f:4e:98:a6:a9:cd:70:a4:fd:64:27:63:4a:5b:68: f6:d3:1f:a7:a5:64:b3:38:2d:26:7a:79:27:79:d8: 46:cb:d2:3f:97:6e:3f:1a:cc:30:50:59:66:37:a1: 90:a3:32:9e:bb:d1:b8:a5:e6:a3:07:2c:26:05:9f: ac:a1:4d:f3:fa:20:83:7d:b6:97:b7:60:c0:0b:aa: 22:41:14:1d:99:e7:41:a9:f9:5c:54:ab:bc:ac:e6: 5c:56:bb:8d:06:ba:d4:5d:4f:ae:7c:66:26:17:1c: 43:a3:2c:3e:ef:a4:42:7f:2b:bf:fd:9a:cf:f7:27: 02:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:09:6C:41:68:47:A8:62:5E:DB:FE:F1:4A:DF:39:50:44:48:07:75 X509v3 Authority Key Identifier: keyid:CF:B2:3E:5C:25:BC:DF:75:B1:03:65:74:1E:60:EA:18:70:01:97:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/CFB23E5C25BCDF75B10365741E60EA1870019718.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CFB23E5C25BCDF75B10365741E60EA1870019718.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098834824765898754/0/323430363a643263303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:d2c0::/32 Signature Algorithm: sha256WithRSAEncryption a8:83:cf:f4:65:cc:5e:d7:1b:0c:21:9f:4d:cd:d8:93:12:66: 94:c6:59:fa:ab:7a:9e:5b:e0:b4:2d:56:22:6c:d7:41:22:cf: c9:7b:d1:7a:3b:d1:2d:91:6a:00:10:97:8c:b7:84:05:aa:a2: c3:2e:c0:0c:51:12:12:71:7d:ad:c7:9e:6d:53:53:ba:62:43: e2:a5:60:89:78:0a:a2:f2:29:2a:8f:6d:6a:36:6a:7e:e3:b6: 39:4b:f2:8c:bd:4b:5f:a0:28:0e:f3:9a:b6:b8:62:8b:d5:b0: 4b:40:85:73:6d:eb:94:05:f4:0b:03:43:6c:91:f1:7a:1c:10: 15:7f:94:ed:6a:cc:24:4f:cf:8d:97:3b:7a:f3:4c:c7:d1:55: a9:29:df:d3:a6:ee:db:d1:4b:c2:fe:9d:30:bf:01:f4:3e:92: 97:ac:da:93:aa:f9:27:f6:38:e0:9c:0f:4e:5b:c1:43:b8:af: 80:b4:d6:dc:ce:f2:ce:75:ef:03:78:36:21:00:ae:af:f7:85: 87:47:ca:d6:e5:09:79:00:84:85:37:f0:a6:55:d2:de:e3:9f: 66:51:6e:85:10:06:17:bc:9b:d3:8f:a3:21:d8:e3:8e:88:dd: 8a:d0:5c:58:d1:f7:83:df:bd:05:9a:2c:35:16:23:66:73:ba: 71:24:2c:ff -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUfSLqbrQVwBGIIp+Nwxo8KzOymygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3 MDAxOTcxODAeFw0yNjA0MjEwNTAwNDFaFw0yNzA0MjAwNTA1NDFaMDMxMTAvBgNV BAMTKEYyMDk2QzQxNjg0N0E4NjI1RURCRkVGMTRBREYzOTUwNDQ0ODA3NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+8e5KkWfXM8kXmw79eVMyrLk fwBQEX3KupxDujY2YobJUbO/VgJ5Ae6GcVFmSnHt6o+vlUymdTaQU3dHwBcp0JAv uS3i6K9CKJwJ33F6TFUsumL6IL+hK7qwf0DD5HY+k3fadW4yHZ+NWkKdiGZ48zKa IFS/wJYRZRgK5IncG3qUoCoUPn9OmKapzXCk/WQnY0pbaPbTH6elZLM4LSZ6eSd5 2EbL0j+Xbj8azDBQWWY3oZCjMp670bil5qMHLCYFn6yhTfP6IIN9tpe3YMALqiJB FB2Z50Gp+VxUq7ys5lxWu40GutRdT658ZiYXHEOjLD7vpEJ/K7/9ms/3JwJ5AgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU8glsQWhHqGJe2/7xSt85UERIB3UwHwYDVR0j BBgwFoAUz7I+XCW833WxA2V0HmDqGHABlxgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODgzNDgyNDc2NTg5ODc1NC8wL0NGQjIzRTVDMjVCQ0RGNzVCMTAzNjU3NDFFNjBF QTE4NzAwMTk3MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQ0ZCMjNFNUMyNUJDREY3NUIxMDM2NTc0MUU2MEVBMTg3MDAxOTcxOC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4ODM0ODI0NzY1ODk4NzU0LzAvMzIzNDMwMzYzYTY0 MzI2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkBtLA MA0GCSqGSIb3DQEBCwUAA4IBAQCog8/0Zcxe1xsMIZ9NzdiTEmaUxln6q3qeW+C0 LVYibNdBIs/Je9F6O9EtkWoAEJeMt4QFqqLDLsAMURIScX2tx55tU1O6YkPipWCJ eAqi8ikqj21qNmp+47Y5S/KMvUtfoCgO85q2uGKL1bBLQIVzbeuUBfQLA0NskfF6 HBAVf5TtaswkT8+Nlzt680zH0VWpKd/Tpu7b0UvC/p0wvwH0PpKXrNqTqvkn9jjg nA9OW8FDuK+AtNbczvLOde8DeDYhAK6v94WHR8rW5Ql5AISFN/CmVdLe459mUW6F EAYXvJvTj6Mh2OOOiN2K0FxY0feD370Fmiw1FiNmc7pxJCz/ -----END CERTIFICATE-----Generated at Wed May 13 12:42:01 2026 by rpki-client