$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d313238203d3e20313331343930.roa File: 323430323a653734303a3a2f33322d313238203d3e20313331343930.roa (raw, json) Hash identifier: piAYDv5bavK6nG+EpntkC7UhaP+bxhD5oR85/uJHKPY= Subject key identifier: 11:A8:29:EE:64:C0:57:1F:C8:DB:A6:25:54:D4:AE:E2:79:C0:64:30 Certificate issuer: /CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145 Certificate serial: 792CC79CBA156166835294E8D601D548494C6229 Authority key identifier: C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d313238203d3e20313331343930.roa Signing time: Mon 27 Apr 2026 01:08:35 +0000 ROA not before: Mon 27 Apr 2026 01:03:35 +0000 ROA not after: Mon 26 Apr 2027 01:08:35 +0000 asID: 131490 IP address blocks: 2402:e740::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:2c:c7:9c:ba:15:61:66:83:52:94:e8:d6:01:d5:48:49:4c:62:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145 Validity Not Before: Apr 27 01:03:35 2026 GMT Not After : Apr 26 01:08:35 2027 GMT Subject: CN=11A829EE64C0571FC8DBA62554D4AEE279C06430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:6c:1b:80:e8:84:6d:cb:1d:e3:ce:9b:b2:5e: 17:76:a7:60:6c:cd:a3:bd:6f:aa:5b:94:a5:f0:19: 8c:75:cc:75:0f:d6:1d:d9:7e:b4:0c:1f:72:cd:29: 23:c9:26:ee:4c:e7:5c:21:a9:76:3b:e1:ea:bf:f8: 51:e0:68:a1:96:ef:e0:a9:6e:db:78:33:37:83:12: 84:aa:c5:14:57:86:37:fa:47:50:2e:0c:32:ec:fb: b9:9d:9a:aa:8e:0a:0e:a8:36:fd:e5:ef:50:03:24: 80:0c:49:9a:e1:0d:d8:b8:fc:23:ad:bd:67:51:a1: 37:5b:84:18:ef:75:1d:1b:2f:e8:74:db:36:25:6d: da:99:0e:88:d5:1b:02:ca:78:d9:b4:a8:3c:21:ca: 7f:e8:fb:a5:aa:81:85:c7:03:c7:1a:45:19:f8:52: a9:45:10:22:79:b1:d9:cf:7b:4d:0e:84:e6:5e:47: a5:5d:b8:42:e9:5f:d5:08:e5:79:a6:5e:56:56:aa: 6d:5d:c5:30:2c:ac:27:1b:69:53:e6:3f:a4:d5:bf: df:64:63:e6:af:ff:65:ef:b2:76:f4:5b:4f:e1:52: a8:73:5e:21:ca:52:ec:f6:17:a1:30:b9:e9:a2:11: d2:8a:fe:1d:31:0b:7c:43:37:cd:d1:4b:3d:dc:c6: ca:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:A8:29:EE:64:C0:57:1F:C8:DB:A6:25:54:D4:AE:E2:79:C0:64:30 X509v3 Authority Key Identifier: keyid:C5:F7:3D:AC:C5:F6:56:C0:8D:8D:2C:5D:EC:72:56:CF:A6:F4:11:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C5F73DACC5F656C08D8D2C5DEC7256CFA6F41145.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100948885649555457/0/323430323a653734303a3a2f33322d313238203d3e20313331343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2402:e740::/32 Signature Algorithm: sha256WithRSAEncryption 5a:bc:eb:e6:13:22:32:44:a0:c9:5f:ba:f3:1d:9e:e2:ef:dd: a4:a2:47:38:3c:c3:59:8e:c7:c4:1e:25:40:74:ec:3e:06:09: 55:c3:71:ad:28:f2:0a:38:f2:05:f3:a1:78:8c:18:97:08:49: a1:e9:71:ec:4a:0e:bc:60:4e:8c:20:a9:ba:84:80:3a:37:d7: 3a:f1:e1:df:34:d2:b1:ff:71:31:69:4f:89:dd:9a:26:ee:cf: d8:67:55:0d:e3:f6:19:4a:1d:7d:63:23:3d:06:fc:0d:17:3e: a6:90:e2:27:e5:ea:8a:80:fb:8e:e1:e2:23:65:1c:a2:b1:35: 28:41:ef:3e:84:a4:36:1c:3a:08:dd:44:5d:6b:94:78:55:25: 8b:b7:0d:f7:5d:e5:a6:99:a7:d3:3a:5c:82:5d:d6:05:e1:3b: 8e:0a:9b:ea:76:ae:70:c0:7a:80:50:62:48:e9:dd:51:92:4b: 4e:aa:5a:91:8f:04:24:60:61:22:03:f1:b7:69:32:3e:49:d6: a4:82:78:ff:70:af:11:70:d6:ca:f1:a0:f6:91:63:90:bc:05: ca:40:72:0d:ae:89:40:85:40:53:e4:11:1a:b9:04:fa:40:99: ee:6b:56:f9:c6:71:d9:75:6c:81:62:bd:6c:2e:6d:35:23:d8: e8:5d:a9:d4 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgIUeSzHnLoVYWaDUpTo1gHVSElMYikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZB NkY0MTE0NTAeFw0yNjA0MjcwMTAzMzVaFw0yNzA0MjYwMTA4MzVaMDMxMTAvBgNV BAMTKDExQTgyOUVFNjRDMDU3MUZDOERCQTYyNTU0RDRBRUUyNzlDMDY0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCubBuA6IRtyx3jzpuyXhd2p2Bs zaO9b6pblKXwGYx1zHUP1h3ZfrQMH3LNKSPJJu5M51whqXY74eq/+FHgaKGW7+Cp btt4MzeDEoSqxRRXhjf6R1AuDDLs+7mdmqqOCg6oNv3l71ADJIAMSZrhDdi4/COt vWdRoTdbhBjvdR0bL+h02zYlbdqZDojVGwLKeNm0qDwhyn/o+6WqgYXHA8caRRn4 UqlFECJ5sdnPe00OhOZeR6VduELpX9UI5XmmXlZWqm1dxTAsrCcbaVPmP6TVv99k Y+av/2Xvsnb0W0/hUqhzXiHKUuz2F6EwuemiEdKK/h0xC3xDN83RSz3cxsqlAgMB AAGjggIYMIICFDAdBgNVHQ4EFgQUEagp7mTAVx/I26YlVNSu4nnAZDAwHwYDVR0j BBgwFoAUxfc9rMX2VsCNjSxd7HJWz6b0EUUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk0ODg4NTY0OTU1NTQ1Ny8wL0M1RjczREFDQzVGNjU2QzA4RDhEMkM1REVDNzI1 NkNGQTZGNDExNDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzVGNzNEQUNDNUY2NTZDMDhEOEQyQzVERUM3MjU2Q0ZBNkY0MTE0NS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTExMDA5NDg4ODU2NDk1NTU0NTcvMC8zMjM0MzAzMjNh NjUzNzM0MzAzYTNhMmYzMzMyMmQzMTMyMzgyMDNkM2UyMDMxMzMzMTM0MzkzMC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8w DQQCAAIwBwMFACQC50AwDQYJKoZIhvcNAQELBQADggEBAFq86+YTIjJEoMlfuvMd nuLv3aSiRzg8w1mOx8QeJUB07D4GCVXDca0o8go48gXzoXiMGJcISaHpcexKDrxg TowgqbqEgDo31zrx4d800rH/cTFpT4ndmibuz9hnVQ3j9hlKHX1jIz0G/A0XPqaQ 4ifl6oqA+47h4iNlHKKxNShB7z6EpDYcOgjdRF1rlHhVJYu3Dfdd5aaZp9M6XIJd 1gXhO44Km+p2rnDAeoBQYkjp3VGSS06qWpGPBCRgYSID8bdpMj5J1qSCeP9wrxFw 1srxoPaRY5C8BcpAcg2uiUCFQFPkERq5BPpAme5rVvnGcdl1bIFivWwubTUj2Ohd qdQ= -----END CERTIFICATE-----Generated at Wed May 13 21:32:16 2026 by rpki-client