$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3a2f34302d3430203d3e20313337373438.roa File: 323430363a636163303a3a2f34302d3430203d3e20313337373438.roa (raw, json) Hash identifier: aRLvXYoRtvP7clHuuxr1krpZ56utFOKI5wmAeoYmk/w= Subject key identifier: 84:D0:C7:6A:59:37:20:32:5E:24:B2:9E:14:A4:1A:2C:F4:6D:24:E7 Certificate issuer: /CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Certificate serial: 3B872C4BDE5B85047637B062E95492AA43463975 Authority key identifier: 5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3a2f34302d3430203d3e20313337373438.roa Signing time: Fri 24 Apr 2026 04:51:34 +0000 ROA not before: Fri 24 Apr 2026 04:46:34 +0000 ROA not after: Fri 23 Apr 2027 04:51:34 +0000 asID: 137748 IP address blocks: 2406:cac0::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:87:2c:4b:de:5b:85:04:76:37:b0:62:e9:54:92:aa:43:46:39:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF Validity Not Before: Apr 24 04:46:34 2026 GMT Not After : Apr 23 04:51:34 2027 GMT Subject: CN=84D0C76A593720325E24B29E14A41A2CF46D24E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:18:54:99:de:97:3f:e5:d6:dc:40:fe:4d:53: 45:19:fa:68:8e:6b:f8:63:d6:76:09:ec:c0:eb:cf: 43:7f:13:b6:f4:b5:1c:59:90:02:2d:ba:52:a2:55: 0a:18:20:f2:35:91:38:2b:2c:4c:6f:34:07:b5:46: e5:31:0a:c6:74:ef:81:c0:7d:4b:18:2b:60:a4:94: 9f:b8:15:cb:93:90:a8:dd:35:02:40:df:c3:c5:66: 2f:13:6f:71:01:36:55:0b:43:a1:23:05:2b:e0:6a: 7a:13:9a:9b:d2:5b:31:69:89:ab:76:e3:21:d1:5c: 4c:a2:16:ef:07:59:e1:dc:a6:3e:6a:87:4d:5b:f0: 72:9d:5a:c5:9b:f8:34:11:a5:15:c8:60:c4:e0:29: 98:68:66:d7:d3:ea:b2:14:55:e3:13:a7:7c:c6:15: eb:d8:eb:0a:b7:d9:3c:62:c5:69:19:f6:e9:5f:49: c2:71:fa:9d:5d:11:6d:38:2c:8d:16:4e:17:aa:e1: 56:0c:74:0b:14:a8:17:ed:dd:11:fd:dc:6f:4e:5b: ef:b5:1e:ba:f1:d4:ab:a9:60:92:ec:ae:d5:3b:30: 5c:b3:88:b0:89:81:72:f8:11:fb:45:83:14:c8:a7: 3d:3b:6a:84:e8:84:ef:9b:48:6b:4c:be:b0:2d:b3: 94:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:C7:6A:59:37:20:32:5E:24:B2:9E:14:A4:1A:2C:F4:6D:24:E7 X509v3 Authority Key Identifier: keyid:5D:2D:CB:B6:D8:24:01:B5:E0:E5:80:25:42:BB:53:E5:61:C1:F8:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5D2DCBB6D82401B5E0E5802542BB53E561C1F8EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099919334379094017/0/323430363a636163303a3a2f34302d3430203d3e20313337373438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:cac0::/40 Signature Algorithm: sha256WithRSAEncryption 33:5e:cc:df:40:0a:59:33:ab:66:6d:71:dd:57:36:8a:70:7d: b9:3f:73:17:77:f2:f8:32:b6:57:3b:0d:f7:77:4d:5c:ab:4f: 2c:ff:b8:d8:d9:16:85:ea:4b:53:59:b7:bd:37:a6:ed:a3:ad: 7f:b6:aa:2a:7b:32:95:06:19:73:02:36:56:72:42:d6:6f:ff: 3b:95:bf:1a:c3:ce:64:34:c2:84:67:73:f6:4a:ff:d8:8f:6e: 00:6e:f3:8a:c0:4c:2a:f3:0c:6b:10:6d:97:fe:f9:d5:39:45: 54:c2:98:15:d5:50:5d:ac:cd:dc:de:1b:cf:83:85:01:85:8e: 51:94:64:49:24:41:2c:27:1e:16:4e:09:ba:64:f1:cf:70:1e: 88:2d:da:f7:3e:c5:8c:22:b8:cb:ae:85:cc:94:07:b7:56:1e: d5:fa:34:41:07:a0:dd:e3:b2:9b:29:6f:e0:9c:3f:00:2b:7a: 99:96:bd:8d:9a:18:fb:d9:f6:5e:2d:fe:a5:a4:1b:00:05:79: e1:3a:e8:a6:47:ab:73:c1:d2:ec:59:de:33:56:f1:b3:de:e7: ce:a1:4a:01:ee:c9:c6:44:e6:bb:78:80:7f:91:10:62:01:d0: c1:b4:d5:41:91:50:e9:6c:05:50:f0:3b:44:cd:ef:68:10:d7: 76:8a:5a:98 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIUO4csS95bhQR2N7Bi6VSSqkNGOXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2 MUMxRjhFRjAeFw0yNjA0MjQwNDQ2MzRaFw0yNzA0MjMwNDUxMzRaMDMxMTAvBgNV BAMTKDg0RDBDNzZBNTkzNzIwMzI1RTI0QjI5RTE0QTQxQTJDRjQ2RDI0RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7GFSZ3pc/5dbcQP5NU0UZ+miO a/hj1nYJ7MDrz0N/E7b0tRxZkAItulKiVQoYIPI1kTgrLExvNAe1RuUxCsZ074HA fUsYK2CklJ+4FcuTkKjdNQJA38PFZi8Tb3EBNlULQ6EjBSvganoTmpvSWzFpiat2 4yHRXEyiFu8HWeHcpj5qh01b8HKdWsWb+DQRpRXIYMTgKZhoZtfT6rIUVeMTp3zG FevY6wq32TxixWkZ9ulfScJx+p1dEW04LI0WTheq4VYMdAsUqBft3RH93G9OW++1 Hrrx1KupYJLsrtU7MFyziLCJgXL4EftFgxTIpz07aoTohO+bSGtMvrAts5QTAgMB AAGjggIWMIICEjAdBgNVHQ4EFgQUhNDHalk3IDJeJLKeFKQaLPRtJOcwHwYDVR0j BBgwFoAUXS3LttgkAbXg5YAlQrtT5WHB+O8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 OTkxOTMzNDM3OTA5NDAxNy8wLzVEMkRDQkI2RDgyNDAxQjVFMEU1ODAyNTQyQkI1 M0U1NjFDMUY4RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUQyRENCQjZEODI0MDFCNUUwRTU4MDI1NDJCQjUzRTU2MUMxRjhFRi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5OTkxOTMzNDM3OTA5NDAxNy8wLzMyMzQzMDM2M2E2 MzYxNjMzMDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDMxMzMzNzM3MzQzOC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwDgQC AAIwCAMGACQGysAAMA0GCSqGSIb3DQEBCwUAA4IBAQAzXszfQApZM6tmbXHdVzaK cH25P3MXd/L4MrZXOw33d01cq08s/7jY2RaF6ktTWbe9N6bto61/tqoqezKVBhlz AjZWckLWb/87lb8aw85kNMKEZ3P2Sv/Yj24AbvOKwEwq8wxrEG2X/vnVOUVUwpgV 1VBdrM3c3hvPg4UBhY5RlGRJJEEsJx4WTgm6ZPHPcB6ILdr3PsWMIrjLroXMlAe3 Vh7V+jRBB6Dd47KbKW/gnD8AK3qZlr2Nmhj72fZeLf6lpBsABXnhOuimR6tzwdLs Wd4zVvGz3ufOoUoB7snGROa7eIB/kRBiAdDBtNVBkVDpbAVQ8DtEze9oENd2ilqY -----END CERTIFICATE-----Generated at Wed May 13 20:55:20 2026 by rpki-client