$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/323430303a626530303a3a2f33322d313238203d3e2034383437.roa File: 323430303a626530303a3a2f33322d313238203d3e2034383437.roa (raw, json) Hash identifier: QmBPisJ5O5FH8VMdbgbPHXyum6+p5/36x4Eg0VtnVI4= Subject key identifier: E1:20:80:60:AE:43:9E:9C:5E:2D:52:F8:10:5E:BC:96:85:25:9D:98 Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Certificate serial: 12468DCAB33940634F1AB0501A1BDE3D591D1C01 Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/323430303a626530303a3a2f33322d313238203d3e2034383437.roa Signing time: Tue 28 Apr 2026 06:36:08 +0000 ROA not before: Tue 28 Apr 2026 06:31:08 +0000 ROA not after: Tue 27 Apr 2027 06:36:08 +0000 asID: 4847 IP address blocks: 2400:be00::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:46:8d:ca:b3:39:40:63:4f:1a:b0:50:1a:1b:de:3d:59:1d:1c:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Validity Not Before: Apr 28 06:31:08 2026 GMT Not After : Apr 27 06:36:08 2027 GMT Subject: CN=E1208060AE439E9C5E2D52F8105EBC9685259D98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:37:8a:58:cb:de:e2:b6:7f:2e:31:b5:84:0a: 47:5a:74:0f:8d:6e:71:7f:ec:f5:64:5e:53:95:78: 42:7b:80:bf:f8:d1:6d:23:b3:c1:59:b9:46:c7:ef: 77:81:ca:02:a8:9f:cc:4c:c4:89:a3:5e:cb:7b:4f: f4:b3:3b:2a:fd:b3:33:86:23:8b:9f:35:99:86:02: a0:a5:db:82:d6:10:cf:8e:8e:87:61:d1:69:b2:81: 4f:e6:cb:22:90:8e:58:ec:08:2b:a7:1d:ad:a9:bf: be:a3:14:d8:88:3d:2d:e5:fc:b5:8c:0a:fc:ff:ad: ba:4f:c5:d7:59:48:82:90:f5:40:03:e2:38:47:48: 03:d0:03:0c:63:93:7c:e1:8d:1e:01:fb:69:d4:5e: 88:20:91:bf:b8:c6:91:63:9f:1d:52:ed:c2:12:17: fe:a6:93:97:06:68:35:6a:c4:e3:20:37:d2:cb:ab: d7:0c:b5:91:f1:23:4e:bf:db:c3:91:95:0e:83:1c: 3c:51:6a:34:56:44:2f:ed:3e:d7:1b:75:80:e8:1c: 89:d4:28:e0:74:6f:c6:6c:f9:ec:62:e7:5c:8d:c5: 13:ed:0a:5f:2f:7c:33:85:2d:ee:86:55:66:63:9a: f7:87:2a:a7:6b:18:08:ef:aa:ca:45:d1:f3:ce:c7: 71:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:20:80:60:AE:43:9E:9C:5E:2D:52:F8:10:5E:BC:96:85:25:9D:98 X509v3 Authority Key Identifier: keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/323430303a626530303a3a2f33322d313238203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2400:be00::/32 Signature Algorithm: sha256WithRSAEncryption 07:61:a7:87:ec:96:25:76:b8:98:83:51:92:c9:de:5d:3e:a0: 3e:f2:cb:5a:df:b1:b2:f6:f9:4f:90:c3:6b:f6:d2:a4:2d:1d: d3:fa:bf:a2:41:d0:ae:a0:88:9a:45:57:55:6d:38:1e:80:c0: 58:98:84:50:70:41:a5:79:45:ef:d2:43:15:a2:10:bb:02:48: ba:5e:85:a7:34:13:19:5c:9d:31:3a:6f:be:d7:29:38:ee:ef: 1f:a9:02:80:cd:8f:5f:58:f0:c6:92:f7:fe:a3:14:68:5f:bb: 81:c1:ac:17:a0:f4:41:6d:69:f4:79:e8:e1:e5:99:92:1f:18: cf:49:d6:f1:6a:4c:32:54:5e:88:f4:f1:08:5a:ee:2b:4f:af: b8:27:00:65:9f:6a:67:e7:6d:d7:07:0b:0b:19:4b:93:b5:93: eb:10:ad:4d:b7:bb:04:e0:7f:b4:57:ec:f4:03:a6:b4:4a:46: 2d:5f:a3:e1:76:de:49:c6:d4:33:27:d2:e1:a3:24:ba:ac:f0: b6:c6:f2:c9:08:7a:20:78:f4:ad:b6:5f:07:40:1a:17:97:76: 1f:5f:0a:d3:e9:a4:ca:26:10:87:3b:5b:cc:c3:bc:8c:d3:76: 41:49:8a:e0:7e:4e:4c:da:79:af:8e:9f:5a:2f:d6:d7:09:39: e6:04:24:60 -----BEGIN CERTIFICATE----- MIIFCDCCA/CgAwIBAgIUEkaNyrM5QGNPGrBQGhvePVkdHAEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBB NjFDRTA2MTAeFw0yNjA0MjgwNjMxMDhaFw0yNzA0MjcwNjM2MDhaMDMxMTAvBgNV BAMTKEUxMjA4MDYwQUU0MzlFOUM1RTJENTJGODEwNUVCQzk2ODUyNTlEOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8N4pYy97itn8uMbWECkdadA+N bnF/7PVkXlOVeEJ7gL/40W0js8FZuUbH73eBygKon8xMxImjXst7T/SzOyr9szOG I4ufNZmGAqCl24LWEM+Ojodh0WmygU/myyKQjljsCCunHa2pv76jFNiIPS3l/LWM Cvz/rbpPxddZSIKQ9UAD4jhHSAPQAwxjk3zhjR4B+2nUXoggkb+4xpFjnx1S7cIS F/6mk5cGaDVqxOMgN9LLq9cMtZHxI06/28ORlQ6DHDxRajRWRC/tPtcbdYDoHInU KOB0b8Zs+exi51yNxRPtCl8vfDOFLe6GVWZjmveHKqdrGAjvqspF0fPOx3H/AgMB AAGjggISMIICDjAdBgNVHQ4EFgQU4SCAYK5DnpxeLVL4EF68loUlnZgwHwYDVR0j BBgwFoAUM0uT929byqogMOW92M7yIKYc4GEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTM5NDIwNzEzOTk1NDY5My8wLzMzNEI5M0Y3NkY1QkNBQUEyMDMwRTVCREQ4Q0VG MjIwQTYxQ0UwNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBBNjFDRTA2MS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAxMzk0MjA3MTM5OTU0NjkzLzAvMzIzNDMwMzAzYTYy NjUzMDMwM2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIw BwMFACQAvgAwDQYJKoZIhvcNAQELBQADggEBAAdhp4fsliV2uJiDUZLJ3l0+oD7y y1rfsbL2+U+Qw2v20qQtHdP6v6JB0K6giJpFV1VtOB6AwFiYhFBwQaV5Re/SQxWi ELsCSLpehac0ExlcnTE6b77XKTju7x+pAoDNj19Y8MaS9/6jFGhfu4HBrBeg9EFt afR56OHlmZIfGM9J1vFqTDJUXoj08Qha7itPr7gnAGWfamfnbdcHCwsZS5O1k+sQ rU23uwTgf7RX7PQDprRKRi1fo+F23knG1DMn0uGjJLqs8LbG8skIeiB49K22XwdA GheXdh9fCtPppMomEIc7W8zDvIzTdkFJiuB+Tkzaea+On1ov1tcJOeYEJGA= -----END CERTIFICATE-----Generated at Wed May 13 17:25:19 2026 by rpki-client