$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a633863303a3a2f33322d3332203d3e2030.roa File: 323430303a633863303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: 0MFjGoom3NtWCp9cFxgvKF8JfLNYef0l1D9CLCEMDXs= Subject key identifier: 32:4E:D2:88:89:F0:AD:34:36:63:FB:98:E9:E3:1C:1B:D2:04:D4:09 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 30FBFE611ACB07EE32BAD789CBE378A3773A46C7 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a633863303a3a2f33322d3332203d3e2030.roa Signing time: Thu 23 Apr 2026 07:51:42 +0000 ROA not before: Thu 23 Apr 2026 07:46:42 +0000 ROA not after: Thu 22 Apr 2027 07:51:42 +0000 asID: 0 IP address blocks: 2400:c8c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:fb:fe:61:1a:cb:07:ee:32:ba:d7:89:cb:e3:78:a3:77:3a:46:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Apr 23 07:46:42 2026 GMT Not After : Apr 22 07:51:42 2027 GMT Subject: CN=324ED28889F0AD343663FB98E9E31C1BD204D409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c5:31:82:12:79:d7:2e:30:e2:f9:aa:13:87: 15:87:73:6e:75:ac:9e:39:ab:06:68:74:91:a3:56: 04:ff:5d:39:66:22:6a:6a:ea:53:ec:bd:37:6d:00: e3:04:8e:89:b6:3e:d8:40:37:49:68:e3:b4:fe:6b: 3f:2d:97:f8:dd:e9:46:d9:e8:92:77:95:26:06:81: 1b:e6:7c:56:ab:6b:72:b6:35:5f:41:4f:b0:e1:37: 67:b1:f2:7f:f1:71:5f:b4:fa:a9:a0:2b:47:6a:b6: 74:f5:0b:a8:9e:f7:52:b3:23:e8:75:fc:98:e7:c8: 08:23:2e:77:18:ee:f4:31:74:db:2b:19:d7:44:02: 55:0e:9e:7c:82:3a:d9:c8:7a:19:c7:fe:b3:9f:67: 8a:b4:3e:2a:34:f1:af:86:14:1b:64:23:c3:25:5b: 5b:1d:fb:71:0b:3f:dc:c6:9c:36:f6:e1:6d:f8:63: ee:df:75:e8:95:a0:7c:d9:15:26:0e:d0:5d:ad:ff: 36:a9:a5:a7:30:cc:4c:df:61:6d:6d:7d:db:f3:f2: fe:43:c6:77:14:40:48:70:99:e7:17:2e:3d:5f:a2: 44:f7:d0:48:f2:6d:18:e8:d1:5c:1c:1b:78:1e:59: 7f:09:00:36:55:31:f5:ca:9e:70:3e:66:ed:15:b0: 62:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4E:D2:88:89:F0:AD:34:36:63:FB:98:E9:E3:1C:1B:D2:04:D4:09 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a633863303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:c8c0::/32 Signature Algorithm: sha256WithRSAEncryption ec:92:73:cd:16:cd:80:55:1f:b7:75:20:b8:d6:ba:5f:74:00: dd:3d:f7:28:16:21:87:b7:2d:dd:e7:2f:e1:76:da:38:de:7a: c5:60:f3:c9:70:f5:92:7f:42:95:e3:b9:9d:ae:cf:97:f4:4c: 2a:db:b8:90:be:7d:99:34:b7:54:cd:02:01:8c:9a:27:e7:e8: 7a:c7:5f:55:6c:ba:16:14:d2:8a:9e:46:6b:b6:1e:48:0b:ad: 44:fe:78:44:a1:f6:d2:aa:a8:14:8c:eb:79:d8:33:98:d6:21: 7e:f8:d8:72:1d:4a:07:50:e4:13:7d:bc:70:5b:62:ca:e7:1f: f4:b5:42:47:33:d0:bd:1a:91:9f:aa:df:6e:7d:50:75:98:0c: 9b:7d:22:d2:56:49:06:9a:3f:f7:c8:0e:00:3f:2d:6c:3b:c6: 58:14:16:ad:78:3b:72:90:38:d0:68:b3:f3:54:cb:11:00:04: c2:48:51:53:f6:ea:7e:13:bf:f8:b7:80:68:72:24:66:73:78: a3:e4:b9:a9:d1:25:42:c8:5a:ca:b6:53:a8:f8:d7:00:a3:d0: 14:14:3d:ef:04:ac:69:44:79:48:aa:fe:67:e6:5b:ba:e0:0c: 4b:e4:16:41:08:e5:76:93:dc:2d:9c:c9:18:8d:63:b5:3d:45: 3f:a0:ea:d1 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUMPv+YRrLB+4yuteJy+N4o3c6RscwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDJaFw0yNzA0MjIwNzUxNDJaMDMxMTAvBgNV BAMTKDMyNEVEMjg4ODlGMEFEMzQzNjYzRkI5OEU5RTMxQzFCRDIwNEQ0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1xTGCEnnXLjDi+aoThxWHc251 rJ45qwZodJGjVgT/XTlmImpq6lPsvTdtAOMEjom2PthAN0lo47T+az8tl/jd6UbZ 6JJ3lSYGgRvmfFara3K2NV9BT7DhN2ex8n/xcV+0+qmgK0dqtnT1C6ie91KzI+h1 /JjnyAgjLncY7vQxdNsrGddEAlUOnnyCOtnIehnH/rOfZ4q0Pio08a+GFBtkI8Ml W1sd+3ELP9zGnDb24W34Y+7fdeiVoHzZFSYO0F2t/zappacwzEzfYW1tfdvz8v5D xncUQEhwmecXLj1fokT30EjybRjo0VwcG3geWX8JADZVMfXKnnA+Zu0VsGKFAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUMk7SiInwrTQ2Y/uY6eMcG9IE1AkwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz Mzg2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAMjA MA0GCSqGSIb3DQEBCwUAA4IBAQDsknPNFs2AVR+3dSC41rpfdADdPfcoFiGHty3d 5y/hdto43nrFYPPJcPWSf0KV47mdrs+X9Ewq27iQvn2ZNLdUzQIBjJon5+h6x19V bLoWFNKKnkZrth5IC61E/nhEofbSqqgUjOt52DOY1iF++NhyHUoHUOQTfbxwW2LK 5x/0tUJHM9C9GpGfqt9ufVB1mAybfSLSVkkGmj/3yA4APy1sO8ZYFBateDtykDjQ aLPzVMsRAATCSFFT9up+E7/4t4BociRmc3ij5Lmp0SVCyFrKtlOo+NcAo9AUFD3v BKxpRHlIqv5n5lu64AxL5BZBCOV2k9wtnMkYjWO1PUU/oOrR -----END CERTIFICATE-----Generated at Wed May 13 13:05:38 2026 by rpki-client