$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636234303a3a2f33322d3332203d3e2030.roa File: 323430303a636234303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: l8mMOFJN89nDNo6DZ7kJB/3Ok0KvHfby6hb1aimeyx8= Subject key identifier: B2:A3:8A:6F:1B:25:85:FF:6F:1D:5B:9B:E7:05:8C:05:AD:94:42:68 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 58E5A467BE6391ACAD585ABBC9C8E18127F7DC99 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636234303a3a2f33322d3332203d3e2030.roa Signing time: Thu 23 Apr 2026 07:51:43 +0000 ROA not before: Thu 23 Apr 2026 07:46:43 +0000 ROA not after: Thu 22 Apr 2027 07:51:43 +0000 asID: 0 IP address blocks: 2400:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:e5:a4:67:be:63:91:ac:ad:58:5a:bb:c9:c8:e1:81:27:f7:dc:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Apr 23 07:46:43 2026 GMT Not After : Apr 22 07:51:43 2027 GMT Subject: CN=B2A38A6F1B2585FF6F1D5B9BE7058C05AD944268 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:92:db:17:a5:09:35:2e:15:7a:39:6d:b3:5f: c5:67:0c:60:ac:8a:59:00:83:18:20:4f:17:10:0a: e4:34:8a:72:49:99:18:08:af:46:39:b7:0e:ce:40: aa:1a:f1:0b:df:f6:16:1a:cd:f5:fe:78:be:f1:9c: b0:3f:fd:81:46:5c:31:f2:8d:a9:0b:a7:5d:1c:c9: eb:3c:7f:b0:8e:fd:7e:a1:75:0b:93:2e:20:d0:a8: 4e:f5:c9:59:fd:37:55:21:d0:0a:3e:da:d8:5c:77: 03:56:d9:9f:68:dc:dc:ab:56:c1:a0:d8:25:35:a4: fb:75:8c:8b:27:b7:c6:78:9e:01:55:a6:4b:11:03: 6b:bd:b6:ca:ec:17:1f:98:d2:f7:91:35:5c:c5:72: 97:2d:a4:33:a4:10:5b:7f:2d:a1:fb:41:76:0f:0f: 00:30:84:1e:58:53:d3:30:36:49:79:48:82:ab:de: 0c:0c:5a:f6:1f:bd:0e:1e:5a:32:8b:e8:54:7c:ef: 14:e0:eb:17:56:28:78:63:91:a6:75:58:7b:15:54: f8:d1:09:d0:12:b8:00:ef:4f:8f:8c:05:70:ec:5c: 4b:9d:f2:8d:8e:6e:ea:e5:35:b0:ac:5e:1b:cf:74: de:1d:36:48:e8:f1:59:02:50:65:0c:6b:26:21:a0: 8b:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A3:8A:6F:1B:25:85:FF:6F:1D:5B:9B:E7:05:8C:05:AD:94:42:68 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636234303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:cb40::/32 Signature Algorithm: sha256WithRSAEncryption 50:62:05:2f:56:cd:64:2e:31:71:ac:f7:99:d9:52:dd:be:68: da:b1:5d:36:e9:03:4f:a7:da:3c:20:ff:2e:df:6c:65:8b:c5: 64:d1:24:de:c6:5a:82:d3:c7:13:28:1d:05:28:c4:35:a1:93: c6:93:14:8d:42:9e:22:71:4e:27:b4:2d:65:e5:ee:75:e5:8f: 25:f0:2f:f1:d5:9c:23:9a:b8:55:1b:7b:4b:9a:81:4f:bb:1b: 5f:9b:6b:d8:02:cb:a1:cb:f2:b3:1c:74:35:4b:98:d1:d3:45: 23:bb:a7:5a:42:0d:50:e4:ad:ad:3d:ec:71:e2:b8:59:16:cf: 60:db:83:71:5d:d8:0d:28:3a:33:d2:ca:ff:3b:21:12:0e:51: b9:82:bd:7a:27:0f:a9:41:16:44:0a:a4:c1:3f:f7:22:63:aa: bf:af:9c:21:d5:81:87:c5:36:89:fd:61:50:dc:df:bd:4d:f0: 15:c0:6a:0c:b9:fc:ce:6f:a5:b5:2b:97:e2:e7:de:f7:95:0d: 3a:25:5d:c0:0d:dd:93:f6:ea:63:60:7c:b0:93:b5:44:67:10: 47:39:d1:48:cd:a6:b8:33:f4:88:e6:1a:ce:1f:a6:d3:42:5e: d1:a2:5a:94:85:a4:fd:b9:bf:b0:fd:cb:e4:8a:2c:7b:56:c5: d0:d2:4e:ed -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUWOWkZ75jkaytWFq7ycjhgSf33JkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDNaFw0yNzA0MjIwNzUxNDNaMDMxMTAvBgNV BAMTKEIyQTM4QTZGMUIyNTg1RkY2RjFENUI5QkU3MDU4QzA1QUQ5NDQyNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDektsXpQk1LhV6OW2zX8VnDGCs ilkAgxggTxcQCuQ0inJJmRgIr0Y5tw7OQKoa8Qvf9hYazfX+eL7xnLA//YFGXDHy jakLp10cyes8f7CO/X6hdQuTLiDQqE71yVn9N1Uh0Ao+2thcdwNW2Z9o3NyrVsGg 2CU1pPt1jIsnt8Z4ngFVpksRA2u9tsrsFx+Y0veRNVzFcpctpDOkEFt/LaH7QXYP DwAwhB5YU9MwNkl5SIKr3gwMWvYfvQ4eWjKL6FR87xTg6xdWKHhjkaZ1WHsVVPjR CdASuADvT4+MBXDsXEud8o2OburlNbCsXhvPdN4dNkjo8VkCUGUMayYhoIuLAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUsqOKbxslhf9vHVub5wWMBa2UQmgwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz NjIzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAMtA MA0GCSqGSIb3DQEBCwUAA4IBAQBQYgUvVs1kLjFxrPeZ2VLdvmjasV026QNPp9o8 IP8u32xli8Vk0STexlqC08cTKB0FKMQ1oZPGkxSNQp4icU4ntC1l5e515Y8l8C/x 1ZwjmrhVG3tLmoFPuxtfm2vYAsuhy/KzHHQ1S5jR00Uju6daQg1Q5K2tPexx4rhZ Fs9g24NxXdgNKDoz0sr/OyESDlG5gr16Jw+pQRZECqTBP/ciY6q/r5wh1YGHxTaJ /WFQ3N+9TfAVwGoMufzOb6W1K5fi5973lQ06JV3ADd2T9upjYHywk7VEZxBHOdFI zaa4M/SI5hrOH6bTQl7RolqUhaT9ub+w/cvkiix7VsXQ0k7t -----END CERTIFICATE-----Generated at Wed May 13 13:27:23 2026 by rpki-client