$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a313438303a3a2f34312d3431203d3e2034383337.roa File: 323030313a343531303a313438303a3a2f34312d3431203d3e2034383337.roa (raw, json) Hash identifier: 2xlR8DC+CnGDkXFbWkakgPL6crJqsReLvCdY5lQs55Y= Subject key identifier: D2:4B:E7:A3:62:26:71:00:E0:B9:03:F9:69:FE:34:0E:F0:EB:07:53 Certificate issuer: /CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Certificate serial: 2AD1C7D14E3C2D22F08EFEC2CD02EE220D7F639F Authority key identifier: 38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a313438303a3a2f34312d3431203d3e2034383337.roa Signing time: Fri 08 May 2026 03:24:26 +0000 ROA not before: Fri 08 May 2026 03:19:26 +0000 ROA not after: Fri 07 May 2027 03:24:26 +0000 asID: 4837 IP address blocks: 2001:4510:1480::/41 maxlen: 41 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 07:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:d1:c7:d1:4e:3c:2d:22:f0:8e:fe:c2:cd:02:ee:22:0d:7f:63:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38E427977484F36F3F0A45288D6DF64F3A7FCB09 Validity Not Before: May 8 03:19:26 2026 GMT Not After : May 7 03:24:26 2027 GMT Subject: CN=D24BE7A362267100E0B903F969FE340EF0EB0753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:f8:b6:95:c7:44:85:7f:35:cf:a0:9d:9f: 51:2e:3a:70:fe:be:25:25:46:56:c7:19:dc:8f:5a: c6:51:0d:88:c3:18:83:63:d8:79:1e:33:07:74:4b: cd:b8:4c:3c:8d:ed:30:76:b8:c3:fa:06:ef:3f:bc: e1:23:06:c0:cf:33:6d:ff:6c:9b:8b:ad:3b:d9:12: 0c:4d:d5:3a:24:f6:65:df:9d:e2:e7:0b:2c:34:cc: 8b:38:57:93:9e:79:f9:55:3b:de:7f:d4:ae:12:39: 17:51:71:78:a4:94:ce:cf:f0:ae:73:bc:7e:73:fd: 8e:83:9a:20:d5:58:ad:4f:42:3c:22:5e:ac:e2:96: 76:52:d0:ab:96:e7:f2:45:b3:d3:52:06:47:90:6f: 60:d7:65:b1:c2:ec:88:d4:8c:c0:35:48:18:d2:d4: 10:f1:c3:be:29:a6:02:b6:a9:06:f8:c5:eb:bb:74: d9:99:56:75:8f:bd:0e:1c:28:e2:22:1c:0c:58:dd: 03:2e:76:57:93:bd:29:9e:13:2f:71:89:68:57:c3: 03:63:b3:a2:e2:5f:f6:48:f2:54:1b:6c:e0:ff:12: dc:4b:5b:b1:15:98:38:f5:bf:10:b4:a1:e1:91:76: 15:9d:f6:c8:7e:58:a2:8b:16:43:56:f9:c4:c1:3b: bb:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:4B:E7:A3:62:26:71:00:E0:B9:03:F9:69:FE:34:0E:F0:EB:07:53 X509v3 Authority Key Identifier: keyid:38:E4:27:97:74:84:F3:6F:3F:0A:45:28:8D:6D:F6:4F:3A:7F:CB:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/38E427977484F36F3F0A45288D6DF64F3A7FCB09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/38E427977484F36F3F0A45288D6DF64F3A7FCB09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104586358095085577/0/323030313a343531303a313438303a3a2f34312d3431203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2001:4510:1480::/41 Signature Algorithm: sha256WithRSAEncryption 71:72:1d:6f:22:40:0a:e4:e3:36:d1:8e:2b:c3:f5:56:57:5b: 82:e7:7f:55:60:3e:94:dd:e6:f8:35:1e:ed:c8:2c:47:ac:98: 9a:6e:9e:07:31:51:3e:49:fc:1f:e1:29:f1:99:c0:e1:91:25: a8:8d:36:d1:db:35:db:96:40:3e:32:af:f2:d1:7b:86:6f:89: 18:ab:f9:0d:8b:80:87:28:08:a2:80:63:09:2a:78:f2:3c:cf: bd:1e:9c:3f:e2:b9:83:96:ba:60:0b:f8:70:22:b6:c6:be:1d: 12:f5:6b:07:d2:8e:13:15:8c:b4:d3:3a:61:1c:13:f6:ef:d4: 05:5b:a4:5f:ac:cf:14:b9:b2:62:cf:2f:ab:1c:50:53:b1:05: 02:5c:80:3a:06:f6:40:14:4d:37:0c:a5:9f:a9:45:5f:14:d8: df:0d:25:22:49:d7:92:b4:a5:d9:f7:e2:92:2c:c1:02:54:a5: 67:ac:9a:35:60:e1:0b:e6:27:3d:06:03:c1:76:ec:f9:4e:70: a1:d0:02:dc:e6:33:98:fc:59:d0:c6:5b:c6:5c:3d:f2:54:d6: aa:55:d3:09:6d:c2:37:53:3d:cd:b3:86:3c:6b:05:68:0e:76: d9:39:77:fc:4e:7b:43:86:fa:80:7e:36:93:bf:83:40:60:ec: 81:fb:bc:20 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgIUKtHH0U48LSLwjv7CzQLuIg1/Y58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYz QTdGQ0IwOTAeFw0yNjA1MDgwMzE5MjZaFw0yNzA1MDcwMzI0MjZaMDMxMTAvBgNV BAMTKEQyNEJFN0EzNjIyNjcxMDBFMEI5MDNGOTY5RkUzNDBFRjBFQjA3NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVvi2lcdEhX81z6Cdn1EuOnD+ viUlRlbHGdyPWsZRDYjDGINj2HkeMwd0S824TDyN7TB2uMP6Bu8/vOEjBsDPM23/ bJuLrTvZEgxN1Tok9mXfneLnCyw0zIs4V5OeeflVO95/1K4SORdRcXiklM7P8K5z vH5z/Y6DmiDVWK1PQjwiXqzilnZS0KuW5/JFs9NSBkeQb2DXZbHC7IjUjMA1SBjS 1BDxw74ppgK2qQb4xeu7dNmZVnWPvQ4cKOIiHAxY3QMudleTvSmeEy9xiWhXwwNj s6LiX/ZI8lQbbOD/EtxLW7EVmDj1vxC0oeGRdhWd9sh+WKKLFkNW+cTBO7sbAgMB AAGjggIfMIICGzAdBgNVHQ4EFgQU0kvno2ImcQDguQP5af40DvDrB1MwHwYDVR0j BBgwFoAUOOQnl3SE828/CkUojW32Tzp/ywkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NDU4NjM1ODA5NTA4NTU3Ny8wLzM4RTQyNzk3NzQ4NEYzNkYzRjBBNDUyODhENkRG NjRGM0E3RkNCMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzhFNDI3OTc3NDg0RjM2RjNGMEE0NTI4OEQ2REY2NEYzQTdGQ0IwOS5jZXIw gZUGCCsGAQUFBwELBIGIMIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJw cy5jbm5pYy5jbi9yZXBvL0ExMTA0NTg2MzU4MDk1MDg1NTc3LzAvMzIzMDMwMzEz YTM0MzUzMTMwM2EzMTM0MzgzMDNhM2EyZjM0MzEyZDM0MzEyMDNkM2UyMDM0Mzgz MzM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/ BBMwETAPBAIAAjAJAwcHIAFFEBSAMA0GCSqGSIb3DQEBCwUAA4IBAQBxch1vIkAK 5OM20Y4rw/VWV1uC539VYD6U3eb4NR7tyCxHrJiabp4HMVE+Sfwf4SnxmcDhkSWo jTbR2zXblkA+Mq/y0XuGb4kYq/kNi4CHKAiigGMJKnjyPM+9Hpw/4rmDlrpgC/hw IrbGvh0S9WsH0o4TFYy00zphHBP279QFW6RfrM8UubJizy+rHFBTsQUCXIA6BvZA FE03DKWfqUVfFNjfDSUiSdeStKXZ9+KSLMECVKVnrJo1YOEL5ic9BgPBduz5TnCh 0ALc5jOY/FnQxlvGXD3yVNaqVdMJbcI3Uz3Ns4Y8awVoDnbZOXf8TntDhvqAfjaT v4NAYOyB+7wg -----END CERTIFICATE-----Generated at Wed May 13 14:59:38 2026 by rpki-client