$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a333030303a3a2f33362d3336203d3e203130323132.roa File: 323430333a623430303a333030303a3a2f33362d3336203d3e203130323132.roa (raw, json) Hash identifier: lh13O3TxwjqCSqKsKyVR3+UBXSTSXi2ImjszycgGkmM= Subject key identifier: 51:1E:7E:D5:FF:DD:16:83:7B:B9:65:6B:B9:06:A1:10:01:05:D2:88 Certificate issuer: /CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Certificate serial: 6C6B8D67FD1CACFBF036E951BF8A286B2C801143 Authority key identifier: 93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a333030303a3a2f33362d3336203d3e203130323132.roa Signing time: Tue 28 Apr 2026 01:16:43 +0000 ROA not before: Tue 28 Apr 2026 01:11:43 +0000 ROA not after: Tue 27 Apr 2027 01:16:43 +0000 asID: 10212 IP address blocks: 2403:b400:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6b:8d:67:fd:1c:ac:fb:f0:36:e9:51:bf:8a:28:6b:2c:80:11:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF Validity Not Before: Apr 28 01:11:43 2026 GMT Not After : Apr 27 01:16:43 2027 GMT Subject: CN=511E7ED5FFDD16837BB9656BB906A1100105D288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:a4:fc:15:4b:41:f6:00:5b:b0:a4:97:a7:d0: 33:2a:30:ac:f3:e0:05:f9:13:13:8b:0a:71:78:bd: f8:02:d5:9b:68:ae:76:da:05:6e:79:cc:d8:a0:41: d5:5f:20:a4:b8:cc:6b:1c:1c:e1:08:85:14:71:06: b2:8d:a8:fc:e8:2d:a4:19:8d:5f:49:2f:58:b1:76: b0:f0:76:7d:dd:a0:25:d3:00:79:6a:c2:7b:93:0f: 0c:17:5a:47:2e:bf:9e:66:10:2d:0c:e4:45:5f:cc: fe:25:92:33:db:35:6b:dd:40:4d:ac:16:7c:3a:91: 49:0b:c4:a3:e6:94:a8:72:30:a4:79:58:64:a9:89: d9:86:2d:44:af:5d:d3:a9:c0:6f:8d:dc:7d:ec:fd: e7:1d:16:13:fd:88:42:c1:e8:03:49:6e:da:c0:31: f0:34:ea:5c:31:30:ad:29:ac:84:68:f5:09:12:ec: d3:01:00:f0:2a:5f:4e:e7:89:df:de:4f:08:4a:24: 5a:e1:0d:bd:69:fa:f6:fd:4a:ac:90:a2:7e:86:17: 17:c0:3b:0b:c1:2a:ac:01:3e:6a:d4:79:6b:43:4d: a3:d8:40:3f:c0:2f:cf:3c:b7:0e:91:ee:11:b3:a6: ad:48:9c:ae:6c:27:00:42:34:01:fd:73:4e:eb:47: 6e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:1E:7E:D5:FF:DD:16:83:7B:B9:65:6B:B9:06:A1:10:01:05:D2:88 X509v3 Authority Key Identifier: keyid:93:13:66:50:20:BD:F9:5D:FA:4A:AC:0E:1E:4A:9A:8E:16:F3:A7:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9313665020BDF95DFA4AAC0E1E4A9A8E16F3A7EF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100968758509305858/0/323430333a623430303a333030303a3a2f33362d3336203d3e203130323132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2403:b400:3000::/36 Signature Algorithm: sha256WithRSAEncryption 74:0b:36:6e:f2:e7:34:5c:0b:89:ac:32:50:91:65:45:66:7f: c6:5b:d7:4e:ed:ba:38:06:17:fd:16:82:6e:0b:ff:68:7c:3e: 9b:b0:16:1f:33:43:2e:07:da:34:a8:1f:cd:00:c7:96:b7:bb: 49:06:5d:bf:97:b2:3b:4d:5f:53:ce:78:1d:4f:ef:ad:3a:ca: 63:87:3c:b2:f9:90:1d:8a:6b:f1:4b:8b:2a:1f:11:92:4f:24: 5c:9f:3e:63:60:23:8a:00:51:34:e9:99:c1:c1:ae:77:7e:26: 2a:f5:65:40:ef:ce:6b:fd:f0:23:d8:86:6a:e8:b2:41:7d:9a: 0f:d4:06:97:f3:6d:35:50:e7:91:2c:85:16:fa:11:a0:a1:49: 1c:53:bd:d3:c7:3f:3e:1b:e1:ee:c9:14:9e:d9:8f:1b:ff:4f: 20:8a:a1:91:03:f2:84:c1:f8:f0:54:ce:a9:2d:d3:80:52:be: 89:5b:0f:5b:d4:a6:0c:97:32:7a:cd:e5:40:f9:e7:3b:4c:2f: 41:a2:d2:da:a4:20:2f:37:d0:87:35:13:5b:8b:ef:07:cb:29: 04:2e:7f:89:b6:32:a2:7e:31:5a:c4:f5:1c:f1:98:6d:3b:2e: 96:23:b1:1a:f7:b5:f1:38:9f:6b:96:85:12:5a:bf:88:f3:66: d5:b8:9b:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgIUbGuNZ/0crPvwNulRv4ooayyAEUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUx NkYzQTdFRjAeFw0yNjA0MjgwMTExNDNaFw0yNzA0MjcwMTE2NDNaMDMxMTAvBgNV BAMTKDUxMUU3RUQ1RkZERDE2ODM3QkI5NjU2QkI5MDZBMTEwMDEwNUQyODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGpPwVS0H2AFuwpJen0DMqMKzz 4AX5ExOLCnF4vfgC1ZtornbaBW55zNigQdVfIKS4zGscHOEIhRRxBrKNqPzoLaQZ jV9JL1ixdrDwdn3doCXTAHlqwnuTDwwXWkcuv55mEC0M5EVfzP4lkjPbNWvdQE2s Fnw6kUkLxKPmlKhyMKR5WGSpidmGLUSvXdOpwG+N3H3s/ecdFhP9iELB6ANJbtrA MfA06lwxMK0prIRo9QkS7NMBAPAqX07nid/eTwhKJFrhDb1p+vb9SqyQon6GFxfA OwvBKqwBPmrUeWtDTaPYQD/AL888tw6R7hGzpq1InK5sJwBCNAH9c07rR26tAgMB AAGjggIgMIICHDAdBgNVHQ4EFgQUUR5+1f/dFoN7uWVruQahEAEF0ogwHwYDVR0j BBgwFoAUkxNmUCC9+V36SqwOHkqajhbzp+8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MDk2ODc1ODUwOTMwNTg1OC8wLzkzMTM2NjUwMjBCREY5NURGQTRBQUMwRTFFNEE5 QThFMTZGM0E3RUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTMxMzY2NTAyMEJERjk1REZBNEFBQzBFMUU0QTlBOEUxNkYzQTdFRi5jZXIw gZcGCCsGAQUFBwELBIGKMIGHMIGEBggrBgEFBQcwC4Z4cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTAwOTY4NzU4NTA5MzA1ODU4LzAvMzIzNDMwMzMz YTYyMzQzMDMwM2EzMzMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNkM2UyMDMxMzAz MjMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMA4EAgACMAgDBgQkA7QAMDANBgkqhkiG9w0BAQsFAAOCAQEAdAs2bvLn NFwLiawyUJFlRWZ/xlvXTu26OAYX/RaCbgv/aHw+m7AWHzNDLgfaNKgfzQDHlre7 SQZdv5eyO01fU854HU/vrTrKY4c8svmQHYpr8UuLKh8Rkk8kXJ8+Y2AjigBRNOmZ wcGud34mKvVlQO/Oa/3wI9iGauiyQX2aD9QGl/NtNVDnkSyFFvoRoKFJHFO908c/ Phvh7skUntmPG/9PIIqhkQPyhMH48FTOqS3TgFK+iVsPW9SmDJcyes3lQPnnO0wv QaLS2qQgLzfQhzUTW4vvB8spBC5/ibYyon4xWsT1HPGYbTsuliOxGve18Tifa5aF Elq/iPNm1bib1Q== -----END CERTIFICATE-----Generated at Wed May 13 17:49:26 2026 by rpki-client