$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636534303a3a2f33322d3332203d3e2030.roa File: 323430303a636534303a3a2f33322d3332203d3e2030.roa (raw, json) Hash identifier: RBUy5LB25DyKqxNQSq9r+4idWLjgQqcEfEKwzGzQqyU= Subject key identifier: 11:18:66:18:CC:5A:77:13:EC:52:2C:10:25:48:B5:63:2E:FD:91:D5 Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Certificate serial: 4D88C838D420EDD736708A706CC35C76E1766012 Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636534303a3a2f33322d3332203d3e2030.roa Signing time: Thu 23 Apr 2026 07:51:44 +0000 ROA not before: Thu 23 Apr 2026 07:46:44 +0000 ROA not after: Thu 22 Apr 2027 07:51:44 +0000 asID: 0 IP address blocks: 2400:ce40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:31:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:88:c8:38:d4:20:ed:d7:36:70:8a:70:6c:c3:5c:76:e1:76:60:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40 Validity Not Before: Apr 23 07:46:44 2026 GMT Not After : Apr 22 07:51:44 2027 GMT Subject: CN=11186618CC5A7713EC522C102548B5632EFD91D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:12:77:e0:b6:8b:91:88:c7:c8:c4:ce:4c:94: 86:a4:ab:d7:9a:89:c0:77:4c:12:a2:64:21:7f:91: 37:cd:45:4c:7f:2e:5e:f7:ef:7a:4b:d6:2e:0c:1c: 41:6c:f5:c2:be:60:8e:0a:8a:3f:db:ea:34:af:86: 7a:34:67:e2:1d:cc:05:3a:51:b6:4b:a6:10:f7:58: 6e:a0:91:d4:e8:2c:80:d1:29:26:a2:3d:b2:05:93: d9:91:ce:7c:25:95:26:87:3a:1e:d6:9f:26:76:ce: 28:e5:e2:5e:42:90:4a:78:11:a8:2c:cb:63:bc:c9: 60:8c:8c:0f:5c:e7:5f:4f:b3:df:0e:c7:98:eb:36: 98:8a:7e:e7:30:f7:fb:cc:08:5a:ce:ea:2a:f0:95: 7e:f6:d8:e8:25:84:39:34:76:d4:03:ee:b0:e2:55: 50:d5:02:6c:96:bc:12:87:4e:22:29:a2:74:e3:e3: b0:76:37:ca:72:53:11:d1:3a:11:75:52:1a:25:4f: 92:ec:69:06:ea:0c:c6:44:32:d0:c6:68:5a:da:93: ca:ca:5b:62:7f:97:e4:56:a7:86:09:2a:5c:ee:97: 91:38:ab:e8:4e:4b:be:03:08:b1:2a:ae:23:da:3a: e0:2d:28:fc:4e:b8:a3:a6:8e:58:23:af:89:99:11: ec:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:18:66:18:CC:5A:77:13:EC:52:2C:10:25:48:B5:63:2E:FD:91:D5 X509v3 Authority Key Identifier: keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/323430303a636534303a3a2f33322d3332203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:ce40::/32 Signature Algorithm: sha256WithRSAEncryption 20:f0:c7:30:a3:0d:6c:6e:73:a7:39:0c:cf:b1:f9:b6:61:dc: 54:92:12:4b:83:99:d9:49:8c:b2:97:78:2f:d5:20:5a:7b:db: 28:ff:64:45:4d:8b:9a:b0:f4:be:01:07:f6:4d:f8:30:bc:e1: 53:20:0c:94:22:8a:55:39:18:23:67:74:64:91:1e:2a:c1:8f: 05:a2:18:6f:54:51:69:4c:c8:8a:9a:46:25:d4:46:eb:9b:6e: 96:6e:b6:db:7b:30:db:d5:fe:ab:63:11:a2:1d:14:17:45:1e: ba:41:09:93:b0:d0:fc:7d:f9:a1:51:ff:2a:97:c3:cb:53:43: 60:4c:dc:e5:a4:88:62:af:c7:35:6a:b4:60:cf:8a:61:98:f9: 63:42:2d:dc:bb:3f:06:61:26:dc:1d:2f:c9:89:5e:33:14:a1: 38:e1:6f:8e:38:bf:41:9f:15:d3:a0:05:8a:40:b3:f7:50:d9: a1:77:41:f0:af:0b:5c:3d:68:24:be:d9:5b:b3:8f:0f:d9:64: 98:f7:8e:3b:a1:e4:ab:a6:7d:20:a5:1f:4f:c6:f8:99:db:19: 06:c4:b7:29:bf:c5:0f:4b:4a:46:c0:b0:d9:d0:8c:42:12:63: c9:67:7f:b0:7b:ce:19:2b:ec:70:b3:40:37:ba:28:a0:4b:31: e9:9a:db:82 -----BEGIN CERTIFICATE----- MIIFADCCA+igAwIBAgIUTYjIONQg7dc2cIpwbMNcduF2YBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB N0QxNEI0MDAeFw0yNjA0MjMwNzQ2NDRaFw0yNzA0MjIwNzUxNDRaMDMxMTAvBgNV BAMTKDExMTg2NjE4Q0M1QTc3MTNFQzUyMkMxMDI1NDhCNTYzMkVGRDkxRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4EnfgtouRiMfIxM5MlIakq9ea icB3TBKiZCF/kTfNRUx/Ll7373pL1i4MHEFs9cK+YI4Kij/b6jSvhno0Z+IdzAU6 UbZLphD3WG6gkdToLIDRKSaiPbIFk9mRznwllSaHOh7WnyZ2zijl4l5CkEp4Eags y2O8yWCMjA9c519Ps98Ox5jrNpiKfucw9/vMCFrO6irwlX722OglhDk0dtQD7rDi VVDVAmyWvBKHTiIponTj47B2N8pyUxHROhF1UholT5LsaQbqDMZEMtDGaFrak8rK W2J/l+RWp4YJKlzul5E4q+hOS74DCLEqriPaOuAtKPxOuKOmjlgjr4mZEewLAgMB AAGjggIKMIICBjAdBgNVHQ4EFgQUERhmGMxadxPsUiwQJUi1Yy79kdUwHwYDVR0j BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk5NjAyNjM2MzY3MjAwMjU5LzAvMzIzNDMwMzAzYTYz NjUzNDMwM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAkAM5A MA0GCSqGSIb3DQEBCwUAA4IBAQAg8Mcwow1sbnOnOQzPsfm2YdxUkhJLg5nZSYyy l3gv1SBae9so/2RFTYuasPS+AQf2TfgwvOFTIAyUIopVORgjZ3RkkR4qwY8Fohhv VFFpTMiKmkYl1Ebrm26WbrbbezDb1f6rYxGiHRQXRR66QQmTsND8ffmhUf8ql8PL U0NgTNzlpIhir8c1arRgz4phmPljQi3cuz8GYSbcHS/JiV4zFKE44W+OOL9BnxXT oAWKQLP3UNmhd0HwrwtcPWgkvtlbs48P2WSY9447oeSrpn0gpR9PxviZ2xkGxLcp v8UPS0pGwLDZ0IxCEmPJZ3+we84ZK+xws0A3uiigSzHpmtuC -----END CERTIFICATE-----Generated at Wed May 13 13:45:59 2026 by rpki-client