$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636434303a3a2f33322d3332203d3e2030.roa File: 323430303a636434303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: VnTgNmMpvqHqEYLsqh2NmL5mpQlt6i/G9O4jd9liVB4= Subject key identifier: D0:36:0D:16:69:8D:A1:48:A4:5F:BA:FE:23:D3:D7:4B:65:14:48:A5 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 2F49323FAA2944239B399FBCA82D73DDA399535E Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636434303a3a2f33322d3332203d3e2030.roa Signing time: Thu 23 Apr 2026 07:51:43 +0000 ROA not before: Thu 23 Apr 2026 07:46:43 +0000 ROA not after: Thu 22 Apr 2027 07:51:43 +0000 asID: 0 IP address blocks: 2400:cd40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:49:32:3f:aa:29:44:23:9b:39:9f:bc:a8:2d:73:dd:a3:99:53:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Apr 23 07:46:43 2026 GMT Not After : Apr 22 07:51:43 2027 GMT Subject: CN=D0360D16698DA148A45FBAFE23D3D74B651448A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ac:2f:1e:83:56:ca:a2:11:13:e4:86:a9:ed: 56:62:22:f6:52:56:b7:5f:55:8c:2c:79:05:24:ea: 06:84:c0:de:cf:3b:0f:f6:ac:44:1b:ae:a3:c7:01: 65:62:52:ed:37:bd:1f:53:cf:3d:9b:54:22:df:c5: d1:d1:68:f4:df:89:ae:eb:a7:f5:bc:48:14:90:9d: 26:93:25:20:23:5f:a4:67:fb:8c:aa:ba:f6:9e:3f: 36:ea:cd:d4:c5:77:db:fe:7c:57:b7:ea:1c:29:f4: e8:f0:75:c9:de:de:2b:55:a3:2e:11:8d:d8:64:09: 5a:fb:1b:36:0e:3e:00:ab:53:1b:f1:3d:8d:b6:5f: 84:5a:94:78:83:0e:c8:f9:c2:7c:6c:b2:2a:93:e8: 29:89:7f:5b:e7:6d:0c:44:cb:ae:7a:07:aa:86:23: dc:95:81:62:7c:f7:ef:c6:4e:85:ea:1e:c5:be:f9: c9:5a:d4:39:e1:be:22:ff:d7:af:09:92:17:c6:9a: 93:e3:4f:34:31:49:78:a8:52:b1:5b:e2:6f:49:33: 2a:23:04:8f:49:64:b1:27:af:54:57:65:05:83:b4: fb:c3:99:f7:78:98:6b:aa:be:f8:ae:95:5f:ef:2e: 4a:c3:87:e5:15:82:55:5b:3c:f8:9a:1a:67:af:47: c1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:36:0D:16:69:8D:A1:48:A4:5F:BA:FE:23:D3:D7:4B:65:14:48:A5 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636434303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:cd40::/32 Signature Algorithm: sha256WithRSAEncryption 83:bc:f8:01:1d:4a:78:4e:43:d7:ee:79:92:42:c3:84:56:54: 1b:1c:af:4d:d1:5e:46:fc:c8:6c:ea:ad:4a:15:69:7e:ef:8e: a8:8b:c9:50:56:87:4d:dc:80:30:c4:66:d4:db:b3:73:66:72: 27:cf:04:53:a6:42:5d:f9:9f:78:21:2c:80:61:72:ff:01:20: 2f:92:a5:41:3a:4f:a7:4e:b0:85:cb:32:1e:6f:5b:89:38:94: 76:25:4a:31:d7:36:7b:be:69:15:c8:5d:3e:b2:6b:55:3d:3f: fd:1f:77:35:fe:5c:a0:b7:9e:0c:c4:f3:34:f3:c4:2e:c1:3b: 79:39:ce:6a:37:a8:27:d7:4a:44:5c:ec:34:19:93:a2:80:c3: 53:2d:08:2b:12:42:31:c3:52:2a:18:31:fa:a7:92:ab:a3:22: f7:75:82:d3:40:62:92:19:34:cf:62:9f:b7:16:35:a6:49:9c: ff:42:a5:be:36:02:f6:34:83:fa:c2:96:32:c5:37:63:cb:48: 66:17:18:87:7a:7f:34:43:ef:f3:3a:1a:73:82:ab:fc:61:a4: 20:e4:a4:0c:5c:38:e1:89:7c:39:14:aa:82:2a:43:be:6a:b2: 50:2d:56:0d:2e:b3:cd:aa:18:3a:58:a8:3f:5d:83:79:b0:b1: 6b:f1:41:f5 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUL0kyP6opRCObOZ+8qC1z3aOZU14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDNaFw0yNzA0MjIwNzUxNDNaMDMxMTAvBgNV BAMTKEQwMzYwRDE2Njk4REExNDhBNDVGQkFGRTIzRDNENzRCNjUxNDQ4QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClrC8eg1bKohET5Iap7VZiIvZS VrdfVYwseQUk6gaEwN7POw/2rEQbrqPHAWViUu03vR9Tzz2bVCLfxdHRaPTfia7r p/W8SBSQnSaTJSAjX6Rn+4yquvaePzbqzdTFd9v+fFe36hwp9Ojwdcne3itVoy4R jdhkCVr7GzYOPgCrUxvxPY22X4RalHiDDsj5wnxssiqT6CmJf1vnbQxEy656B6qG I9yVgWJ89+/GToXqHsW++cla1DnhviL/168JkhfGmpPjTzQxSXioUrFb4m9JMyoj BI9JZLEnr1RXZQWDtPvDmfd4mGuqvviulV/vLkrDh+UVglVbPPiaGmevR8GfAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQU0DYNFmmNoUikX7r+I9PXS2UUSKUwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz NjQzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAM1A MA0GCSqGSIb3DQEBCwUAA4IBAQCDvPgBHUp4TkPX7nmSQsOEVlQbHK9N0V5G/Mhs 6q1KFWl+746oi8lQVodN3IAwxGbU27NzZnInzwRTpkJd+Z94ISyAYXL/ASAvkqVB Ok+nTrCFyzIeb1uJOJR2JUox1zZ7vmkVyF0+smtVPT/9H3c1/lygt54MxPM088Qu wTt5Oc5qN6gn10pEXOw0GZOigMNTLQgrEkIxw1IqGDH6p5KroyL3dYLTQGKSGTTP Yp+3FjWmSZz/QqW+NgL2NIP6wpYyxTdjy0hmFxiHen80Q+/zOhpzgqv8YaQg5KQM XDjhiXw5FKqCKkO+arJQLVYNLrPNqhg6WKg/XYN5sLFr8UH1 -----END CERTIFICATE-----Generated at Wed May 13 14:57:33 2026 by rpki-client