$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636463303a3a2f33322d3332203d3e2030.roa File: 323430303a636463303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: AJWfUJO/Ih1yo2immlnv9sZLlifL+zoTVvP6BWZa9Pk= Subject key identifier: 14:7E:2D:16:4A:F6:CD:C4:79:F1:04:42:AF:A4:A6:E7:D6:09:4F:68 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 257C2CBC3298B4B435323DC0193EAEC27017984E Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636463303a3a2f33322d3332203d3e2030.roa Signing time: Thu 23 Apr 2026 07:51:44 +0000 ROA not before: Thu 23 Apr 2026 07:46:44 +0000 ROA not after: Thu 22 Apr 2027 07:51:44 +0000 asID: 0 IP address blocks: 2400:cdc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:7c:2c:bc:32:98:b4:b4:35:32:3d:c0:19:3e:ae:c2:70:17:98:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Apr 23 07:46:44 2026 GMT Not After : Apr 22 07:51:44 2027 GMT Subject: CN=147E2D164AF6CDC479F10442AFA4A6E7D6094F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ec:d2:5b:e4:f3:22:7a:bc:6b:2e:78:90:61: 7b:4e:d5:aa:e3:f0:df:d3:65:98:ea:91:a3:1f:18: 4e:4e:2c:e7:d2:bc:5f:ba:1f:31:76:2f:52:88:d9: c1:f2:59:cd:08:02:79:5a:07:b8:a4:79:1c:1e:f3: 57:d5:6b:a0:e9:59:41:10:97:35:e9:8d:56:68:52: 3c:83:8d:eb:50:3d:b0:71:0b:48:c9:dc:5c:5b:5d: 05:c4:7d:27:b0:de:98:08:40:fc:50:4d:0e:1a:bc: 7b:2b:92:5f:5d:76:fa:f1:6c:a1:29:9b:51:8e:07: 71:e5:7b:e4:cb:0b:33:1c:f0:31:9f:73:35:1c:b6: 6e:8e:45:23:3f:13:9a:7c:d0:1c:d6:c2:fa:ed:65: 63:90:87:ce:a9:1f:40:12:56:82:cd:6f:e8:b5:80: b1:2d:71:06:96:a1:d3:a2:27:a6:13:39:d3:02:2a: 11:d8:c3:7f:1d:0a:eb:1d:dc:ae:1f:28:19:02:7a: f3:be:5a:45:04:0e:37:e6:da:32:9f:45:84:2c:ee: 00:0a:2e:61:1e:2a:4d:a1:dc:6c:d2:ae:a4:b6:e9: f7:9f:70:30:c1:7b:82:cc:42:63:00:ad:67:8a:6b: 88:e7:0e:5d:11:4a:8c:dd:ca:49:b4:46:b7:10:cd: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:7E:2D:16:4A:F6:CD:C4:79:F1:04:42:AF:A4:A6:E7:D6:09:4F:68 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636463303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:cdc0::/32 Signature Algorithm: sha256WithRSAEncryption 06:c5:92:5e:2b:89:a9:40:36:6f:a1:ae:1d:d1:9a:bd:29:9f: 9f:01:e8:be:6c:ee:dd:58:3c:8d:75:d8:df:da:b8:1a:17:68: d2:bb:26:8f:24:d8:03:ef:d5:02:70:f1:1f:69:3c:b8:8e:e7: 3f:5e:1a:c0:6e:29:30:91:3b:43:85:5d:8f:db:7f:6e:5d:b3: ac:a2:69:5b:11:37:aa:4a:49:42:f1:66:f4:69:ba:24:cf:d1: 28:d5:f6:e5:75:25:13:9c:f6:72:34:6f:55:9a:82:4b:5d:24: 3d:27:3c:e7:eb:dd:5f:68:d9:84:e8:c7:18:da:c8:54:ab:41: 9f:64:28:8f:3b:90:f0:d6:61:cb:9c:c1:82:3e:21:7e:2c:3f: 0b:7f:d7:4e:13:b0:ca:69:38:20:a0:25:9c:59:7a:9b:c3:cc: 9a:d2:78:63:e1:48:8e:40:ee:0d:f6:6e:eb:0d:e0:be:f3:90: d3:a1:42:43:2b:25:e3:c8:a5:3b:45:40:94:7c:aa:ec:b4:9b: 8c:eb:86:e8:41:5d:2d:b8:a5:3a:60:80:88:2a:55:35:cb:c5: a6:e7:8a:ce:e3:d4:a1:99:4b:ba:dc:df:e7:22:48:3f:f5:9b: 54:cd:f2:24:31:55:a8:d6:3c:de:c8:b8:8e:f3:9e:e9:36:e3: 64:a2:3a:92 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUJXwsvDKYtLQ1Mj3AGT6uwnAXmE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDRaFw0yNzA0MjIwNzUxNDRaMDMxMTAvBgNV BAMTKDE0N0UyRDE2NEFGNkNEQzQ3OUYxMDQ0MkFGQTRBNkU3RDYwOTRGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7NJb5PMierxrLniQYXtO1arj 8N/TZZjqkaMfGE5OLOfSvF+6HzF2L1KI2cHyWc0IAnlaB7ikeRwe81fVa6DpWUEQ lzXpjVZoUjyDjetQPbBxC0jJ3FxbXQXEfSew3pgIQPxQTQ4avHsrkl9ddvrxbKEp m1GOB3Hle+TLCzMc8DGfczUctm6ORSM/E5p80BzWwvrtZWOQh86pH0ASVoLNb+i1 gLEtcQaWodOiJ6YTOdMCKhHYw38dCusd3K4fKBkCevO+WkUEDjfm2jKfRYQs7gAK LmEeKk2h3GzSrqS26fefcDDBe4LMQmMArWeKa4jnDl0RSozdykm0RrcQzfJlAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUFH4tFkr2zcR58QRCr6Sm59YJT2gwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz NjQ2MzMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAM3A MA0GCSqGSIb3DQEBCwUAA4IBAQAGxZJeK4mpQDZvoa4d0Zq9KZ+fAei+bO7dWDyN ddjf2rgaF2jSuyaPJNgD79UCcPEfaTy4juc/XhrAbikwkTtDhV2P239uXbOsomlb ETeqSklC8Wb0abokz9Eo1fbldSUTnPZyNG9VmoJLXSQ9Jzzn691faNmE6McY2shU q0GfZCiPO5Dw1mHLnMGCPiF+LD8Lf9dOE7DKaTggoCWcWXqbw8ya0nhj4UiOQO4N 9m7rDeC+85DToUJDKyXjyKU7RUCUfKrstJuM64boQV0tuKU6YICIKlU1y8Wm54rO 49ShmUu63N/nIkg/9ZtUzfIkMVWo1jzeyLiO857pNuNkojqS -----END CERTIFICATE-----Generated at Wed May 13 14:47:40 2026 by rpki-client